This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer File: Zr5SEJO7idx2JQsif39_umbiKNg.cer (raw, json) Hash identifier: DQeNXVt8+bvOmonthsE7sRNPlQlHmCh9R9U0dU2brgk= Subject key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38DF0B529DCB31D852C75E03F3471B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215439 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:df:0b:52:9d:cb:31:d8:52:c7:5e:03:f3:47:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66be521093bb89dc76250b227f7f7fba66e228d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:13:32:eb:fa:44:c4:64:a1:53:9c:79:12: bb:0b:dd:4a:02:09:a0:9f:57:ac:12:9f:32:23:06: b6:f4:17:fa:c2:ba:48:df:48:16:76:46:5e:e9:fe: 4d:11:9c:ea:d4:8a:91:6d:a3:91:8e:c5:9d:a3:ff: ef:cc:ec:d5:87:dc:2c:5c:04:8d:13:5a:f2:a1:ab: 32:c0:75:13:6d:30:d7:82:2b:08:c3:0a:74:3f:2a: d1:7e:df:6f:8b:c6:ed:4c:46:3f:9f:5b:81:78:39: 70:ec:d5:0b:f6:72:28:c9:12:41:86:8d:ed:89:a3: 4b:1a:30:21:6a:38:8f:f3:4d:3e:a0:5b:0d:81:ba: 4b:77:2d:ca:32:90:1b:0e:bc:5e:5e:c5:8e:00:4f: ed:4e:2f:36:ae:15:6d:08:64:38:78:8c:d8:1e:dc: 2b:23:5f:d4:94:de:42:6d:92:f6:b0:8d:31:87:a1: 76:0c:90:00:1b:ab:4a:85:ba:38:54:8e:d1:8b:43: 28:7f:15:25:27:b0:44:ac:b5:5d:57:4e:63:51:84: a6:9b:a4:ed:a3:c4:61:7e:53:47:52:28:0e:11:17: 7b:22:c3:87:91:bb:cd:40:1d:2b:61:c7:0f:0a:69: 11:39:7f:f2:61:df:37:f0:82:15:14:f2:db:aa:b3: 0c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215439 Signature Algorithm: sha256WithRSAEncryption 0b:1b:2d:58:78:49:68:a4:63:b9:2a:32:9b:27:a0:0d:3f:d6: 65:2b:8e:2f:ce:62:3a:9d:fc:5e:0b:e1:a4:ec:65:78:ee:d6: 21:76:c1:34:f2:eb:80:27:fb:25:64:dd:71:06:ae:4c:cb:14: e4:aa:db:c4:b3:5d:6b:81:30:68:64:1d:bc:28:67:61:69:6d: dd:7d:25:22:16:08:8a:e3:ab:2b:ef:22:5c:d5:68:42:dc:2a: 22:12:9c:6c:3d:3f:0f:c3:97:ee:8d:97:c0:da:aa:ad:03:52: 98:23:40:c3:75:a3:6e:40:74:57:13:b3:1e:50:56:66:11:7d: d4:c6:d4:4b:38:fc:b6:8c:e0:dc:22:83:33:ba:c4:b1:b7:04: 64:7c:b7:7f:6c:9d:d6:b6:50:88:dc:ec:2e:08:22:1d:d4:a4: 95:91:64:ff:71:5e:32:ee:e6:f0:80:39:10:b5:94:da:17:1a: 17:44:37:f6:67:cc:98:01:4e:35:10:3e:8a:e7:0d:87:ad:89: 1b:a3:8a:d7:42:df:ed:0c:ec:6c:96:74:48:ba:24:90:45:6f: 28:a8:ea:89:9a:9f:bd:55:c9:5c:f2:92:e5:f2:bd:5a:6f:1e: dd:68:3d:73:36:a7:ee:e2:e2:45:f0:de:65:9a:7c:05:6f:fe: 8c:99:d6:b1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+ON8LUp3LMdhSx14D80cbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmJlNTIxMDkzYmI4OWRjNzYyNTBiMjI3ZjdmN2ZiYTY2ZTIyOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIcTMuv6RMRkoVOceRK7C91KAgmg n1esEp8yIwa29Bf6wrpI30gWdkZe6f5NEZzq1IqRbaORjsWdo//vzOzVh9wsXASN E1ryoasywHUTbTDXgisIwwp0PyrRft9vi8btTEY/n1uBeDlw7NUL9nIoyRJBho3t iaNLGjAhajiP800+oFsNgbpLdy3KMpAbDrxeXsWOAE/tTi82rhVtCGQ4eIzYHtwr I1/UlN5CbZL2sI0xh6F2DJAAG6tKhbo4VI7Ri0MofxUlJ7BErLVdV05jUYSmm6Tt o8RhflNHUigOERd7IsOHkbvNQB0rYccPCmkROX/yYd838IIVFPLbqrMMowIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGa+UhCTu4ncdiULIn9/f7pm4ijYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzMyZjli My1kZTJiLTQxZjUtYTk0OS05MDAzMGQwNDBmZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMzJmOWIz LWRlMmItNDFmNS1hOTQ5LTkwMDMwZDA0MGZmNy8xL1pyNVNFSk83aWR4MkpRc2lm MzlfdW1iaUtOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJjzANBgkqhkiG9w0BAQsFAAOCAQEACxstWHhJaKRj uSoymyegDT/WZSuOL85iOp38XgvhpOxleO7WIXbBNPLrgCf7JWTdcQauTMsU5Krb xLNda4EwaGQdvChnYWlt3X0lIhYIiuOrK+8iXNVoQtwqIhKcbD0/D8OX7o2XwNqq rQNSmCNAw3WjbkB0VxOzHlBWZhF91MbUSzj8tozg3CKDM7rEsbcEZHy3f2yd1rZQ iNzsLggiHdSklZFk/3FeMu7m8IA5ELWU2hcaF0Q39mfMmAFONRA+iucNh62JG6OK 10Lf7QzsbJZ0SLokkEVvKKjqiZqfvVXJXPKS5fK9Wm8e3Wg9czan7uLiRfDeZZp8 BW/+jJnWsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:49 2026 by rpki-client