This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer File: r-us3hVZeiga4rspMG3E2m3Pt14.cer (raw, json) Hash identifier: vVCDEe82Lc3gMIUnlevp0HjDk/AcMecYQPu4pNe2wcc= Subject key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFEEA7733B8B46F1D3DF057FB7717B64A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 10:05:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209067 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:ea:77:33:b8:b4:6f:1d:3d:f0:57:fb:77:17:b6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 10:05:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:cb:50:51:ce:4a:0e:1d:21:df:46:4e:65: 15:14:8e:d1:f1:87:5d:41:92:14:0b:96:29:a7:de: 7a:af:57:de:10:00:5b:b5:a4:11:06:3b:9a:48:87: 91:30:8b:35:5a:70:4b:a0:8f:30:10:7a:0c:18:31: b9:57:bd:13:da:b5:0a:3a:d8:f1:e1:ec:72:ca:1f: 33:3a:a1:a5:67:a1:12:3a:b5:9f:33:c9:87:75:5d: c8:60:6c:a0:f7:e2:58:d6:8b:b8:9b:90:f0:6a:c9: d7:ab:1c:36:db:67:15:4a:25:86:29:a8:8f:51:95: 08:dd:4d:15:d7:d6:81:15:9a:b8:78:7a:aa:58:59: ea:ee:88:70:f8:c5:70:c5:9e:02:65:82:83:83:6f: c8:0d:aa:fb:11:dc:17:e0:34:f6:f0:d3:79:65:93: 7a:ad:20:08:bb:78:87:a2:fa:2a:26:76:26:5d:1c: f4:49:e4:7f:09:a5:e8:c1:23:28:e3:7b:dc:94:f7: 13:46:d2:cc:ca:19:e3:fd:7d:a9:6f:37:be:c4:c7: 23:c5:66:0b:dc:46:79:97:09:ff:08:c3:e6:66:bb: 7e:28:5e:12:ad:69:ee:48:43:a6:b8:1f:fb:29:27: 70:a1:bd:63:8f:a0:b1:27:a7:36:e6:fd:1f:41:1a: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209067 Signature Algorithm: sha256WithRSAEncryption a7:8b:ea:14:98:5d:c0:1e:22:02:a5:d4:27:d9:2e:3b:e0:39: 10:66:69:53:09:90:ce:bb:95:c9:bd:35:7f:ef:1b:b2:34:28: f3:9d:b9:c7:45:d2:87:6b:42:03:37:35:cb:89:bc:fc:99:b6: 4d:3f:5b:4c:14:d1:d8:88:a9:5a:e7:33:88:5e:c5:7f:22:ee: 2c:8c:52:97:06:30:a2:a2:fc:4b:be:4b:6a:e1:3b:c3:a8:7c: 0d:f1:76:4e:04:86:8f:a6:16:5e:50:4e:c2:2b:10:85:0b:b6: 48:ae:da:a1:c6:66:f6:f5:a7:8c:ad:31:ca:4d:3d:08:0e:09: 71:eb:34:4a:94:34:a4:d0:41:48:ed:8c:69:8a:20:f3:55:d7: 13:fb:44:19:89:54:8a:71:7e:64:30:fd:b2:aa:d7:85:bb:1e: f9:06:91:97:27:37:2d:b7:d3:71:1b:d9:80:1f:85:db:d3:c6: d3:c2:bd:73:81:c6:b5:dc:81:6d:b6:69:33:09:e8:7d:92:20: f8:cb:fa:77:0a:c6:05:70:9c:2b:6c:69:f4:a5:70:07:b5:e7: d3:13:79:aa:34:1b:90:ff:f2:b3:16:ef:86:2b:70:7a:1d:27: ad:fb:b3:04:2d:6f:e0:97:86:f5:7a:8d:f1:6f:7d:d7:0b:5a: d5:cf:54:43 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZv+6nczuLRvHT3wV/t3F7ZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MTAwNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmViYWNkZTE1NTk3YTI4MWFlMmJiMjkzMDZkYzRkYTZkY2ZiNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTDLUFHOSg4dId9GTmUVFI7R8Ydd QZIUC5Ypp956r1feEABbtaQRBjuaSIeRMIs1WnBLoI8wEHoMGDG5V70T2rUKOtjx 4exyyh8zOqGlZ6ESOrWfM8mHdV3IYGyg9+JY1ou4m5DwasnXqxw222cVSiWGKaiP UZUI3U0V19aBFZq4eHqqWFnq7ohw+MVwxZ4CZYKDg2/IDar7EdwX4DT28NN5ZZN6 rSAIu3iHovoqJnYmXRz0SeR/CaXowSMo43vclPcTRtLMyhnj/X2pbze+xMcjxWYL 3EZ5lwn/CMPmZrt+KF4SrWnuSEOmuB/7KSdwob1jj6CxJ6c25v0fQRo4eQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFK/rrN4VWXooGuK7KTBtxNptz7deMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2QyMTFj Mi02Y2E5LTQ4MDMtOTZiMy0yZTE5NGFjMWFkNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDIxMWMy LTZjYTktNDgwMy05NmIzLTJlMTk0YWMxYWQ2Zi8xL3ItdXMzaFZaZWlnYTRyc3BN RzNFMm0zUHQxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwqzANBgkqhkiG9w0BAQsFAAOCAQEAp4vqFJhdwB4i AqXUJ9kuO+A5EGZpUwmQzruVyb01f+8bsjQo8525x0XSh2tCAzc1y4m8/Jm2TT9b TBTR2IipWucziF7FfyLuLIxSlwYwoqL8S75LauE7w6h8DfF2TgSGj6YWXlBOwisQ hQu2SK7aocZm9vWnjK0xyk09CA4Jces0SpQ0pNBBSO2MaYog81XXE/tEGYlUinF+ ZDD9sqrXhbse+QaRlyc3LbfTcRvZgB+F29PG08K9c4HGtdyBbbZpMwnofZIg+Mv6 dwrGBXCcK2xp9KVwB7Xn0xN5qjQbkP/ysxbvhitweh0nrfuzBC1v4JeG9XqN8W99 1wta1c9UQw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:52 2026 by rpki-client