This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer File: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer (raw, json) Hash identifier: hPn6FVyhcvKVuV38qgKYsO9uGApZrUttO0tdt+GWjCc= Subject key identifier: FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21E341B57ED38CA22DF871E6AE30E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213549 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1e:34:1b:57:ed:38:ca:22:df:87:1e:6a:e3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4d6f06bb1237e26907e6402d2bd0d889372505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:e8:0f:79:04:ca:dc:76:cf:62:cf:6f:6c: 8d:0a:10:0b:f7:14:6d:dc:34:7e:61:dd:cb:50:bb: 92:a6:66:ce:36:07:e1:fe:3a:39:28:83:47:06:bd: 86:73:a4:dc:d9:97:bc:24:94:6a:05:b1:6a:91:62: 91:3b:07:82:48:03:db:5f:21:d1:f5:ee:54:ea:ac: 5a:63:c1:a6:ca:dc:52:b4:4b:b0:13:d0:b2:ea:af: c1:7b:62:0e:db:49:8d:ac:ae:3e:e4:26:99:fd:13: e8:78:c6:b5:76:b3:11:f7:7c:4f:de:cc:ca:6e:17: 06:f9:b5:8b:87:34:f0:64:76:5f:bb:a8:98:b9:26: b6:8e:46:96:a1:18:78:d5:55:4d:d8:fe:8f:57:a2: cf:53:ea:44:29:c0:85:4f:cd:94:d1:78:e9:56:f7: ed:2c:da:c5:9d:a5:e7:3a:31:07:bb:c0:22:78:ff: 26:54:43:46:bb:23:7e:c3:7b:74:36:fe:5f:0f:85: f2:42:0d:a1:bd:41:dc:f7:7c:e7:d4:9c:e7:42:9d: 81:2f:94:85:58:ec:29:b7:94:0a:96:ed:9a:3d:54: 69:eb:e1:a6:aa:68:d4:96:a9:4b:b4:4c:37:af:6d: 39:a0:1d:e4:00:32:1a:80:84:d8:8f:62:84:ef:a7: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213549 Signature Algorithm: sha256WithRSAEncryption 8e:6a:c8:a4:68:32:f2:ac:87:4c:ab:92:43:44:8a:1a:52:42: ad:a7:45:ff:1a:56:2b:32:37:6c:dd:a5:18:f5:11:68:29:d6: 64:90:9d:bb:09:e0:ef:f0:10:c8:9b:3e:0a:bf:5d:63:a3:35: 87:62:ce:58:4d:06:8c:46:56:f6:e3:4b:90:f6:a0:a9:e7:cb: 38:82:58:19:73:f2:38:a1:33:42:8f:72:3a:c2:14:9c:12:bc: 39:99:88:d8:0f:92:40:a2:d2:4c:7d:48:b1:c4:f0:0e:28:1b: ac:1b:86:16:b7:31:97:ea:00:7c:d6:34:f8:3d:41:a2:e0:23: 9e:4a:c3:c3:e8:01:bd:94:ab:5f:9a:4b:55:c6:8d:f2:3f:31: 19:33:9a:a1:7a:75:3f:42:79:20:90:98:01:d4:47:f3:14:8d: ab:9f:9b:24:04:34:91:38:30:53:36:bb:25:18:15:f7:cc:68: 4a:e8:f2:e3:ec:4e:2d:f2:71:c2:52:e8:6a:c9:28:ae:fc:00: 00:75:90:44:bf:b5:5b:81:95:a9:bd:fa:da:ce:77:86:51:24: 47:0d:38:16:06:1a:55:00:f3:66:bd:6e:41:09:a0:37:ac:b1: d9:43:fa:bb:8b:a8:56:8b:41:ca:db:37:ce:af:b6:e3:c9:0a: f5:b2:63:3c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8h40G1ftOMoi34ceauMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDRkNmYwNmJiMTIzN2UyNjkwN2U2NDAyZDJiZDBkODg5MzcyNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvoD3kEytx2z2LPb2yNChAL9xRt 3DR+Yd3LULuSpmbONgfh/jo5KINHBr2Gc6Tc2Ze8JJRqBbFqkWKROweCSAPbXyHR 9e5U6qxaY8GmytxStEuwE9Cy6q/Be2IO20mNrK4+5CaZ/RPoeMa1drMR93xP3szK bhcG+bWLhzTwZHZfu6iYuSa2jkaWoRh41VVN2P6PV6LPU+pEKcCFT82U0XjpVvft LNrFnaXnOjEHu8AieP8mVENGuyN+w3t0Nv5fD4XyQg2hvUHc93zn1JznQp2BL5SF WOwpt5QKlu2aPVRp6+GmqmjUlqlLtEw3r205oB3kADIagITYj2KE76dASwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP1Nbwa7EjfiaQfmQC0r0NiJNyUFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2U1MzVl Yy04MDUyLTQzZjUtODhkZC1jYjI1YTMxZGI3ZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZTUzNWVj LTgwNTItNDNmNS04OGRkLWNiMjVhMzFkYjdmYi8xL19VMXZCcnNTTi1KcEItWkFM U3ZRMklrM0pRVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCLTANBgkqhkiG9w0BAQsFAAOCAQEAjmrIpGgy8qyH TKuSQ0SKGlJCradF/xpWKzI3bN2lGPURaCnWZJCduwng7/AQyJs+Cr9dY6M1h2LO WE0GjEZW9uNLkPagqefLOIJYGXPyOKEzQo9yOsIUnBK8OZmI2A+SQKLSTH1IscTw DigbrBuGFrcxl+oAfNY0+D1BouAjnkrDw+gBvZSrX5pLVcaN8j8xGTOaoXp1P0J5 IJCYAdRH8xSNq5+bJAQ0kTgwUza7JRgV98xoSujy4+xOLfJxwlLoaskorvwAAHWQ RL+1W4GVqb362s53hlEkRw04FgYaVQDzZr1uQQmgN6yx2UP6u4uoVotByts3zq+2 48kK9bJjPA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:36 2026 by rpki-client