This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer File: u2L-a389NkMyvNbg2veSJsz4CeI.cer (raw, json) Hash identifier: 0GnpNaz5YQAYDquBDuA0JVOWvyGy8J7KfuqVNmlwNuQ= Subject key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33DAC0FB11EB415171352F28A5C98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42466 IP: 91.189.144.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:ac:0f:b1:1e:b4:15:17:13:52:f2:8a:5c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:89:cc:44:36:ec:45:b0:3c:8e:2c:a1:cc: 80:91:4a:65:58:b3:9f:91:9c:4f:fa:5e:08:ff:1c: 21:01:2a:0c:ee:64:bc:1e:1e:c0:e2:f7:25:e9:c2: 3c:36:bc:c3:87:68:7d:a5:9e:cf:7c:3b:09:50:25: 9d:00:89:ee:85:7a:e4:86:59:03:15:07:f6:bb:df: 2c:cf:18:fa:e0:4d:bc:4f:db:48:b2:7e:31:e9:f3: 24:3a:10:d6:0b:04:e6:62:fe:ed:2c:e0:2c:84:fc: 25:c4:e2:77:7c:bc:75:ba:df:fa:4a:74:b9:a6:2f: 32:67:33:b5:21:a8:bc:cc:89:53:41:ca:ab:83:6c: 1b:30:5e:3c:07:0a:66:a4:73:9e:41:03:88:67:3c: d4:cb:d3:63:56:35:00:3f:c3:a6:fa:69:7c:15:b4: 08:03:6a:e3:ee:fd:e7:23:2d:b2:ce:db:08:a3:9d: a1:37:16:f4:4b:6c:e1:6c:ff:f4:99:0b:a7:cf:e7: 8b:f0:21:27:91:89:9c:ac:57:93:bc:10:40:3b:87: 88:0a:17:1d:35:1d:a9:49:dd:37:aa:9e:0b:5d:a7: b3:bd:51:fa:2e:6a:fa:7b:22:66:a2:1e:5e:09:68: 90:74:49:aa:1d:5d:59:dc:fb:44:d5:6c:7b:a5:26: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.144.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42466 Signature Algorithm: sha256WithRSAEncryption 8a:7a:e2:f4:a1:9e:94:a6:38:cb:06:5b:5d:a8:1f:b3:69:e0: a2:a6:c3:f6:27:5a:0d:e6:2c:c4:ab:55:39:72:aa:50:9a:d5: d3:a4:8a:66:39:84:38:4d:d9:18:73:44:9d:f2:f2:8d:d4:ed: 25:64:91:88:9d:02:3e:db:61:5a:b9:9e:b4:56:56:9b:44:fd: fa:c6:4a:3a:7f:14:ac:55:e6:3a:69:e8:8d:6a:96:7d:d7:b8: 19:f1:47:7f:73:d3:42:11:a7:ea:15:55:4b:8b:c9:db:4e:dd: 2e:7e:23:de:1b:2f:88:68:07:38:71:4a:2c:22:33:56:8f:f1: b5:2f:3b:c7:86:13:dd:33:8b:11:c7:19:62:67:3b:e2:6c:60: 27:9e:6f:e4:66:f1:82:25:1c:cc:a7:14:c2:d6:e0:a3:14:00: b9:d2:aa:fc:7c:18:68:a0:aa:85:6b:88:1c:52:3f:73:67:b6: 99:fc:43:8e:2b:d8:92:ed:26:f5:3f:e1:96:d1:e2:81:7d:02: 09:fe:1b:fc:89:f0:72:cf:d3:ab:d5:46:f2:84:43:84:c2:45: da:7a:e2:31:53:28:21:5a:75:f3:e7:0a:ef:b9:ea:4f:17:07: 84:0a:a4:e2:58:8c:db:ed:8e:ec:85:66:c5:9a:0e:ef:23:ca: 57:26:8b:1b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oz2sD7EetBUXE1LyilyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjYyZmU2YjdmM2QzNjQzMzJiY2Q2ZTBkYWY3OTIyNmNjZjgwOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuouJzEQ27EWwPI4socyAkUplWLOf kZxP+l4I/xwhASoM7mS8Hh7A4vcl6cI8NrzDh2h9pZ7PfDsJUCWdAInuhXrkhlkD FQf2u98szxj64E28T9tIsn4x6fMkOhDWCwTmYv7tLOAshPwlxOJ3fLx1ut/6SnS5 pi8yZzO1Iai8zIlTQcqrg2wbMF48BwpmpHOeQQOIZzzUy9NjVjUAP8Om+ml8FbQI A2rj7v3nIy2yztsIo52hNxb0S2zhbP/0mQunz+eL8CEnkYmcrFeTvBBAO4eIChcd NR2pSd03qp4LXaezvVH6Lmr6eyJmoh5eCWiQdEmqHV1Z3PtE1Wx7pSanLwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLti/mt/PTZDMrzW4Nr3kibM+AniMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2ZmYmYx OC1hYTAzLTQzNGMtOGJiZC0xNDE0NTBmMTBhODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZmZiZjE4 LWFhMDMtNDM0Yy04YmJkLTE0MTQ1MGYxMGE4NS8xL3UyTC1hMzg5TmtNeXZOYmcy dmVTSnN6NENlSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDW72QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCl4jANBgkqhkiG9w0BAQsFAAOCAQEAinri9KGelKY4ywZbXagfs2ngoqbD9ida DeYsxKtVOXKqUJrV06SKZjmEOE3ZGHNEnfLyjdTtJWSRiJ0CPtthWrmetFZWm0T9 +sZKOn8UrFXmOmnojWqWfde4GfFHf3PTQhGn6hVVS4vJ207dLn4j3hsviGgHOHFK LCIzVo/xtS87x4YT3TOLEccZYmc74mxgJ55v5GbxgiUczKcUwtbgoxQAudKq/HwY aKCqhWuIHFI/c2e2mfxDjivYku0m9T/hltHigX0CCf4b/Inwcs/Tq9VG8oRDhMJF 2nriMVMoIVp18+cK77nqTxcHhAqk4liM2+2O7IVmxZoO7yPKVyaLGw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:48 2026 by rpki-client