This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-BbYYon9sEO-Zm8ltmqDL0UraU.cer File: u-BbYYon9sEO-Zm8ltmqDL0UraU.cer (raw, json) Hash identifier: KsTyV19A6zvdC8TJaYMhw/yhRtO3+NJ8hZWWYdQiM7k= Subject key identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA522F7C62FEA3ECBA4FFC268D347C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212370 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:f7:c6:2f:ea:3e:cb:a4:ff:c2:68:d3:47:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbe05b618a27f6c10ef999bc96d9aa0cbd14ada5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:9a:40:89:9e:4e:ad:bf:e1:8d:d7:01:39: 46:73:12:e5:d6:15:55:7d:21:97:94:e5:af:b1:29: 00:23:ae:c0:a4:b7:aa:9b:c0:09:02:0b:8a:cf:e2: fb:85:9f:e2:8c:6c:b2:0d:14:69:5b:cb:d8:34:f4: 03:3b:04:4d:02:e2:c5:5d:34:ab:d4:6a:a5:ca:da: 23:77:b2:2e:36:8d:c7:80:32:6d:76:00:fa:52:b1: b8:dd:99:69:76:92:c7:3d:9a:ba:1b:31:be:44:c9: d6:ce:34:ad:57:58:35:c4:78:83:15:b4:0d:8d:9e: 45:69:82:18:9c:9c:dc:8c:ce:f1:da:91:0c:0a:7f: a7:20:cc:9f:51:65:a6:74:ee:1b:17:63:aa:50:ef: d0:ab:62:60:9d:8d:af:61:ef:c4:5b:12:0b:d2:65: 33:54:7f:4e:d3:ae:b9:b3:87:5b:ca:9e:8b:84:bf: 96:86:6a:16:1a:1a:d5:40:7d:c8:a8:52:0e:02:ba: a3:e9:b4:50:67:f5:3a:44:bc:f0:f3:0f:38:65:1a: 43:68:50:70:d2:90:53:3d:63:c7:50:e3:6c:ab:37: a6:6a:eb:90:a6:5e:7b:09:b3:5e:6e:c0:41:ad:3c: 74:e5:de:bb:66:62:5f:16:c3:34:16:aa:59:f5:d5: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:5B:61:8A:27:F6:C1:0E:F9:99:BC:96:D9:AA:0C:BD:14:AD:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6e02a9-08ad-4743-b538-f3029c39b66e/1/u-BbYYon9sEO-Zm8ltmqDL0UraU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212370 Signature Algorithm: sha256WithRSAEncryption 93:29:26:4e:13:76:a3:18:e1:3c:76:7d:fb:d1:b4:75:9d:1c: f9:fb:3a:c2:34:63:7d:69:b8:1b:56:fb:39:78:91:e1:cd:c7: 59:87:d4:b9:18:f1:68:d5:c9:57:a6:5a:08:b5:ce:e9:79:10: 1b:08:08:37:68:a6:dd:f2:f6:8d:5b:47:b5:5c:f4:82:b5:60: 2a:2c:99:70:9c:ea:1f:c8:09:3d:a9:eb:fa:17:5c:07:50:8b: f9:41:b4:41:23:43:8e:ea:76:3d:67:54:f9:7a:21:82:be:5a: a2:26:8a:ba:ec:28:a2:69:3a:14:c7:af:64:05:b0:33:e8:54: c7:37:d1:cc:0f:a7:7c:43:3a:58:ee:de:29:59:76:94:9f:31: 0f:82:3f:17:62:3e:e7:a8:0a:57:47:de:19:dd:5a:10:f5:75: e3:c4:21:7c:1e:09:86:b7:02:a4:af:99:fd:68:5f:7b:8c:58: dd:86:2f:76:ac:89:8b:03:30:7c:33:69:cc:42:e4:47:05:73: 46:eb:02:4d:4f:cc:54:f4:c3:07:3c:86:b2:56:a1:2d:d7:ee: 2a:87:56:ae:83:0c:5c:d1:0b:c3:df:89:8e:91:64:71:9d:f1: 20:6d:ad:d6:85:c7:3f:87:59:85:2a:ca:0c:1f:f5:66:a6:74: 61:ab:af:9d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7pSL3xi/qPsuk/8Jo00fEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmUwNWI2MThhMjdmNmMxMGVmOTk5YmM5NmQ5YWEwY2JkMTRhZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUOaQImeTq2/4Y3XATlGcxLl1hVV fSGXlOWvsSkAI67ApLeqm8AJAguKz+L7hZ/ijGyyDRRpW8vYNPQDOwRNAuLFXTSr 1Gqlytojd7IuNo3HgDJtdgD6UrG43ZlpdpLHPZq6GzG+RMnWzjStV1g1xHiDFbQN jZ5FaYIYnJzcjM7x2pEMCn+nIMyfUWWmdO4bF2OqUO/Qq2JgnY2vYe/EWxIL0mUz VH9O0665s4dbyp6LhL+WhmoWGhrVQH3IqFIOArqj6bRQZ/U6RLzw8w84ZRpDaFBw 0pBTPWPHUONsqzemauuQpl57CbNebsBBrTx05d67ZmJfFsM0FqpZ9dVoIwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLvgW2GKJ/bBDvmZvJbZqgy9FK2lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzZlMDJh OS0wOGFkLTQ3NDMtYjUzOC1mMzAyOWMzOWI2NmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvNmUwMmE5 LTA4YWQtNDc0My1iNTM4LWYzMDI5YzM5YjY2ZS8xL3UtQmJZWW9uOXNFTy1abThs dG1xREwwVXJhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9kjANBgkqhkiG9w0BAQsFAAOCAQEAkykmThN2oxjh PHZ9+9G0dZ0c+fs6wjRjfWm4G1b7OXiR4c3HWYfUuRjxaNXJV6ZaCLXO6XkQGwgI N2im3fL2jVtHtVz0grVgKiyZcJzqH8gJPanr+hdcB1CL+UG0QSNDjup2PWdU+Xoh gr5aoiaKuuwoomk6FMevZAWwM+hUxzfRzA+nfEM6WO7eKVl2lJ8xD4I/F2I+56gK V0feGd1aEPV148QhfB4JhrcCpK+Z/Whfe4xY3YYvdqyJiwMwfDNpzELkRwVzRusC TU/MVPTDBzyGslahLdfuKodWroMMXNELw9+JjpFkcZ3xIG2t1oXHP4dZhSrKDB/1 ZqZ0YauvnQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:12 2026 by rpki-client