This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer File: u1KMEmrtDX9aBpUOssIDNIaFahU.cer (raw, json) Hash identifier: /5PGCSe63a8K3xmQ7nnwjRpNnGvu9L1m8THGZjUnjyY= Subject key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FF943C3A3700F2D683FFAD58ADA51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211073 IP: 91.207.176.0/23 IP: 2001:67c:414::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f9:43:c3:a3:70:0f:2d:68:3f:fa:d5:8a:da:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:ae:d7:67:ff:c1:f8:f1:be:c2:03:68:53: e4:de:48:54:b0:4f:54:cc:b1:5a:33:4c:f8:33:6e: 12:2a:cd:ac:e6:ba:49:f9:0f:7e:86:d7:35:fc:5f: 24:cf:56:a5:6b:55:e8:b1:77:15:a2:de:7b:78:ac: 53:df:33:5c:a5:1e:d0:b7:43:2e:6f:13:d1:30:57: 9c:a6:f8:7f:cd:2d:ee:45:12:bc:9d:78:8a:31:0f: 89:9b:ca:ba:21:7d:c7:1b:76:f6:ba:0a:6e:1a:bc: 1d:a2:d7:cb:b2:04:b3:d4:9e:65:73:9c:a1:14:cf: 3d:04:87:12:72:20:35:a5:2b:1c:02:b5:7b:78:95: 7b:8e:3f:dc:80:27:70:e1:98:ca:7a:e1:50:dd:56: 66:78:7e:d0:8f:e7:03:32:ca:e5:9e:e7:d9:65:b4: b0:d3:dd:65:6b:b8:7e:1b:71:91:b0:30:7e:dc:d0: 8f:da:87:72:3e:38:fd:84:e5:fc:8b:16:43:e8:af: 71:8c:e0:d8:2c:ca:21:d1:5c:0c:c0:87:a3:2d:02: ff:c8:b4:9b:84:e8:a8:42:0e:03:7b:0d:97:3d:69: 3f:db:19:7b:a3:23:b6:2b:7f:3a:32:be:8e:4a:f4: fc:81:0b:94:00:5e:cd:15:14:79:cb:32:1d:79:99: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.176.0/23 IPv6: 2001:67c:414::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211073 Signature Algorithm: sha256WithRSAEncryption 26:fe:35:bb:64:dd:e6:df:89:fe:9e:09:05:80:97:15:42:d3: 08:e9:5b:b6:2f:87:43:22:85:98:3c:d4:79:a5:f5:87:d1:3f: 17:db:0c:a9:23:58:47:ce:9b:59:28:cd:51:23:90:99:f3:bd: 0b:cf:0e:c8:e3:36:56:63:cb:c1:66:7c:31:e6:be:a2:e7:16: 59:be:20:ee:cc:42:a0:32:04:0c:ee:af:22:d5:26:86:cc:ef: b8:58:e1:26:25:31:c5:d1:df:39:e3:f2:91:59:50:37:53:36: ea:0d:29:a6:f6:a7:3f:11:25:8b:ce:22:b7:1d:13:ba:77:d5: 81:cc:7d:94:3f:ed:10:2c:66:e2:2f:a8:77:f7:9c:d6:07:36: 64:08:7a:3b:3a:41:ad:0c:a0:21:d6:36:c9:34:67:09:cf:f3: 0d:0f:fd:b7:d5:80:50:b8:dd:d2:ee:45:84:15:46:4b:87:03: ad:4b:6b:af:40:0f:10:0d:a9:87:e7:5a:2c:b4:27:fe:cb:ec: 15:69:54:52:3b:5b:e0:5d:d8:b0:13:fc:d7:7e:da:31:52:bf: b2:50:07:be:5e:4e:ab:e1:1a:c8:7c:f6:04:e8:97:b2:92:93: d6:66:4a:10:c2:45:60:91:ff:b1:45:96:83:34:e3:70:f5:cd: 58:54:92:52 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5D/lDw6NwDy1oP/rVitpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjUyOGMxMjZhZWQwZDdmNWEwNjk1MGViMmMyMDMzNDg2ODU2YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwyu12f/wfjxvsIDaFPk3khUsE9U zLFaM0z4M24SKs2s5rpJ+Q9+htc1/F8kz1ala1XosXcVot57eKxT3zNcpR7Qt0Mu bxPRMFecpvh/zS3uRRK8nXiKMQ+Jm8q6IX3HG3b2ugpuGrwdotfLsgSz1J5lc5yh FM89BIcSciA1pSscArV7eJV7jj/cgCdw4ZjKeuFQ3VZmeH7Qj+cDMsrlnufZZbSw 091la7h+G3GRsDB+3NCP2odyPjj9hOX8ixZD6K9xjODYLMoh0VwMwIejLQL/yLSb hOioQg4Dew2XPWk/2xl7oyO2K386Mr6OSvT8gQuUAF7NFRR5yzIdeZkkcwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzczZTFl MC0zZDQ2LTQyOGMtYWIzYi0yMTU5ZWZlZTZhMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvNzNlMWUw LTNkNDYtNDI4Yy1hYjNiLTIxNTllZmVlNmEwNy8xL3UxS01FbXJ0RFg5YUJwVU9z c0lETklhRmFoVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW8+wMA8EAgACMAkDBwAgAQZ8BBQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAziBMA0GCSqGSIb3DQEBCwUAA4IBAQAm/jW7ZN3m 34n+ngkFgJcVQtMI6Vu2L4dDIoWYPNR5pfWH0T8X2wypI1hHzptZKM1RI5CZ870L zw7I4zZWY8vBZnwx5r6i5xZZviDuzEKgMgQM7q8i1SaGzO+4WOEmJTHF0d854/KR WVA3UzbqDSmm9qc/ESWLziK3HRO6d9WBzH2UP+0QLGbiL6h395zWBzZkCHo7OkGt DKAh1jbJNGcJz/MND/231YBQuN3S7kWEFUZLhwOtS2uvQA8QDamH51ostCf+y+wV aVRSO1vgXdiwE/zXftoxUr+yUAe+Xk6r4RrIfPYE6JeykpPWZkoQwkVgkf+xRZaD NONw9c1YVJJS -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:07 2026 by rpki-client