This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer File: pU3VdP7HLUOUwlU2uoUyydOPQLo.cer (raw, json) Hash identifier: 2ubvyqyq+RIvSmwV7Y9hk+f1SLTcHExtTa8zvTqZDf8= Subject key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37BBE177F3CB0675DBD00FC463BEA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209127 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7b:be:17:7f:3c:b0:67:5d:bd:00:fc:46:3b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:26:76:64:e9:eb:12:f4:7b:4a:a6:d4:4f: 7e:bf:35:60:60:a8:40:7e:77:bc:fb:f5:fc:84:c5: f6:49:6d:ff:81:9f:d7:62:0e:b6:89:71:c5:86:31: eb:50:ee:2d:c6:55:bb:be:04:e2:5a:76:5c:fa:20: 54:75:f7:9f:3a:25:30:8c:72:df:b3:2d:38:d6:b1: 10:7e:f0:dc:82:d4:19:e2:26:06:e9:43:c2:7d:13: db:f5:4f:00:a8:c0:d1:6f:d4:a8:c3:7f:27:1c:cc: 27:5f:f8:9e:f0:ab:96:dc:d8:da:3c:a2:66:1f:29: 7e:98:28:d0:31:eb:b6:df:9e:1e:57:39:7e:5f:72: 06:67:9f:38:02:e9:3a:22:30:c6:8e:a9:c4:a0:ee: 23:6c:28:59:4e:91:a6:31:84:c1:f1:ea:3c:52:0e: 83:7d:84:5c:2a:a8:25:40:dd:28:4f:9c:b5:01:90: 9a:0a:ad:f8:73:68:05:6d:81:cd:e2:9a:fa:5e:57: ec:80:02:42:01:c8:02:80:c2:05:cf:5a:3b:f1:7c: f4:87:93:fa:ce:1c:b0:88:d8:f2:20:3e:00:4e:08: bb:5e:b2:86:9c:e3:8f:5f:ea:3c:0e:17:47:d8:19: 77:e6:24:34:3d:53:88:f0:0a:ab:58:ab:49:7e:10: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209127 Signature Algorithm: sha256WithRSAEncryption 2c:f5:0e:bc:f5:dd:d5:95:26:e6:fb:8c:55:70:b0:44:7b:48: 02:23:68:13:76:39:c6:60:31:fa:01:94:c8:93:7c:ce:59:41: 5a:86:45:f6:52:e3:c3:63:bc:ec:51:00:33:13:a1:b3:39:8b: bb:ff:9f:ee:6c:a0:d9:b2:ce:a6:cf:38:80:8b:fc:7f:61:40: 42:42:4b:ca:bc:e3:9e:f5:1c:05:e5:f4:ea:ab:29:95:82:f1: 6d:63:cc:84:7f:58:85:3a:16:95:3c:96:32:06:90:13:12:0a: 75:f6:a6:78:b0:19:95:ad:be:4e:dc:b7:05:a0:fe:a7:06:5c: 4a:5f:db:66:51:bb:96:a3:53:d1:aa:eb:ad:1e:b2:7a:b0:3f: ec:0a:e1:96:ee:bc:61:f1:a9:65:ee:b3:a8:68:3b:8f:3b:e4: f0:d4:14:f7:9e:bf:e3:fd:17:f6:58:bd:db:9b:e3:a6:16:2c: 1c:de:16:6f:d4:6b:aa:bd:64:05:5d:94:6f:32:6f:e6:6b:6a: 9b:56:7e:0b:70:c6:1d:31:69:34:07:4b:fa:57:b4:bd:d4:22: 8e:39:7c:6b:d4:e3:11:86:5d:a0:15:4e:da:63:4b:d5:08:8b: 04:2c:0f:a2:cc:0d:af:8d:07:bf:4b:92:97:5c:fe:b0:66:04: 12:21:e2:49 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o3u+F388sGddvQD8RjvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTRkZDU3NGZlYzcyZDQzOTRjMjU1MzZiYTg1MzJjOWQzOGY0MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSkmdmTp6xL0e0qm1E9+vzVgYKhA fne8+/X8hMX2SW3/gZ/XYg62iXHFhjHrUO4txlW7vgTiWnZc+iBUdfefOiUwjHLf sy041rEQfvDcgtQZ4iYG6UPCfRPb9U8AqMDRb9Sow38nHMwnX/ie8KuW3NjaPKJm Hyl+mCjQMeu2354eVzl+X3IGZ584Auk6IjDGjqnEoO4jbChZTpGmMYTB8eo8Ug6D fYRcKqglQN0oT5y1AZCaCq34c2gFbYHN4pr6XlfsgAJCAcgCgMIFz1o78Xz0h5P6 zhywiNjyID4ATgi7XrKGnOOPX+o8DhdH2Bl35iQ0PVOI8AqrWKtJfhBFrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKVN1XT+xy1DlMJVNrqFMsnTj0C6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzY5MzRi NS05NmMwLTQ3NmQtYmY1NC0yMzdmNjViNjQzMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNjkzNGI1 LTk2YzAtNDc2ZC1iZjU0LTIzN2Y2NWI2NDMyNy8xL3BVM1ZkUDdITFVPVXdsVTJ1 b1V5eWRPUFFMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMw5zANBgkqhkiG9w0BAQsFAAOCAQEALPUOvPXd1ZUm 5vuMVXCwRHtIAiNoE3Y5xmAx+gGUyJN8zllBWoZF9lLjw2O87FEAMxOhszmLu/+f 7myg2bLOps84gIv8f2FAQkJLyrzjnvUcBeX06qsplYLxbWPMhH9YhToWlTyWMgaQ ExIKdfameLAZla2+Tty3BaD+pwZcSl/bZlG7lqNT0arrrR6yerA/7Arhlu68YfGp Ze6zqGg7jzvk8NQU956/4/0X9li925vjphYsHN4Wb9Rrqr1kBV2UbzJv5mtqm1Z+ C3DGHTFpNAdL+le0vdQijjl8a9TjEYZdoBVO2mNL1QiLBCwPoswNr40Hv0uSl1z+ sGYEEiHiSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:40 2026 by rpki-client