This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer File: u3HLFRNewAaxNjWzaqWjBEa1IxA.cer (raw, json) Hash identifier: BXbsiohrjSvv33fhMsL+bMJmkMlR/7X5+4SVJxImsOQ= Subject key identifier: BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B85BB20FF036FAEDC23BD524281E5450D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 03 Jan 2026 21:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211066 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:85:bb:20:ff:03:6f:ae:dc:23:bd:52:42:81:e5:45:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 3 21:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb71cb15135ec006b13635b36aa5a30446b52310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:ad:ee:90:ac:44:6b:31:de:07:34:55:ab: f4:dc:de:1d:32:ed:12:2a:71:e6:b8:17:e7:9e:2b: 74:f6:c2:b9:60:32:34:53:f1:be:4b:2a:24:f1:a1: 10:77:69:84:7c:b1:f5:c0:38:64:01:a9:67:8f:dc: 64:43:52:33:d5:ea:3e:fa:17:21:75:97:23:16:18: e3:96:11:6f:c3:5c:62:de:a7:06:36:40:3d:f0:4e: ec:55:5c:bb:a4:34:54:7c:27:22:62:bd:78:fa:a4: 68:18:4d:02:c9:43:76:62:4f:56:eb:27:5b:4f:59: 69:1f:13:1f:7d:02:71:fd:4b:a3:03:09:8f:ad:bf: 11:68:c0:db:64:c9:1c:26:be:70:b8:28:9b:dd:e7: df:76:de:c7:da:72:23:83:c3:03:7c:42:2e:28:61: 65:dd:6c:9c:c1:ac:ee:37:40:5d:28:a7:c4:6b:f5: de:58:82:e8:c2:45:d1:f0:8d:4c:cc:f5:bf:49:fa: b1:7f:eb:23:59:bb:86:2d:2d:6a:5c:0d:c4:d3:b8: 8e:fd:73:18:82:f6:9a:fe:8f:22:8d:16:ce:c1:2e: 05:57:79:af:69:47:7b:24:82:af:b1:30:ef:6c:83: f2:b9:06:4e:62:93:a5:b6:ac:76:f9:e2:42:41:68: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211066 Signature Algorithm: sha256WithRSAEncryption 94:5d:95:c6:82:61:bd:97:1c:ce:c2:ba:64:d0:3b:44:48:da: a2:fa:84:98:4e:fb:96:62:1e:e0:33:0d:00:f7:1f:ec:75:7d: 99:45:d5:50:c1:fa:75:bd:3a:71:b0:c0:ba:66:cb:8f:82:36: e8:bf:a1:59:f4:79:19:f9:48:bb:56:b5:98:1b:b9:42:4f:2a: 50:0c:64:a6:8f:14:3b:70:27:b7:69:23:d0:28:5c:ee:2f:f9: 37:08:0f:56:32:9e:b4:23:5a:ca:1b:a3:00:0d:ac:3f:76:cf: a7:2f:d7:0e:01:ca:64:08:51:4d:ca:ee:fd:79:6b:30:9e:87: 32:67:70:f7:94:ee:e6:62:db:3d:93:a6:3d:39:00:ee:b8:56: 0a:41:23:89:70:97:96:83:c3:6d:90:31:4d:56:42:c7:ed:2e: c8:9e:f4:90:66:cc:34:78:68:75:dc:b6:5c:83:44:8f:b4:13: 92:4f:f9:91:40:fe:dd:26:0a:0c:83:5a:93:60:a6:35:06:59: 1d:f9:5f:ae:57:c2:81:86:ce:96:5e:27:e3:b3:38:1b:75:e1: df:e2:d8:6a:31:df:86:77:79:1e:11:13:7a:b6:0b:37:cf:aa: 8f:b0:6a:d9:25:83:ff:79:2f:6f:5f:1f:86:42:80:4e:dd:ba: 7c:7e:82:f2 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZuFuyD/A2+u3CO9UkKB5UUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAzMjExOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjcxY2IxNTEzNWVjMDA2YjEzNjM1YjM2YWE1YTMwNDQ2YjUyMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMyt7pCsRGsx3gc0Vav03N4dMu0S KnHmuBfnnit09sK5YDI0U/G+Syok8aEQd2mEfLH1wDhkAalnj9xkQ1Iz1eo++hch dZcjFhjjlhFvw1xi3qcGNkA98E7sVVy7pDRUfCciYr14+qRoGE0CyUN2Yk9W6ydb T1lpHxMffQJx/UujAwmPrb8RaMDbZMkcJr5wuCib3effdt7H2nIjg8MDfEIuKGFl 3WycwazuN0BdKKfEa/XeWILowkXR8I1MzPW/Sfqxf+sjWbuGLS1qXA3E07iO/XMY gvaa/o8ijRbOwS4FV3mvaUd7JIKvsTDvbIPyuQZOYpOltqx2+eJCQWh6mQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLtxyxUTXsAGsTY1s2qlowRGtSMQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzc3OWE3 OTAzLTJlZGItNDhhZC1hYmViLWVlMzlhNzlmODUwNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzc5 YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4NTA3LzAvQkI3MUNCMTUxMzVF QzAwNkIxMzYzNUIzNkFBNUEzMDQ0NkI1MjMxMC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOHow DQYJKoZIhvcNAQELBQADggEBAJRdlcaCYb2XHM7CumTQO0RI2qL6hJhO+5ZiHuAz DQD3H+x1fZlF1VDB+nW9OnGwwLpmy4+CNui/oVn0eRn5SLtWtZgbuUJPKlAMZKaP FDtwJ7dpI9AoXO4v+TcID1YynrQjWsobowANrD92z6cv1w4BymQIUU3K7v15azCe hzJncPeU7uZi2z2Tpj05AO64VgpBI4lwl5aDw22QMU1WQsftLsie9JBmzDR4aHXc tlyDRI+0E5JP+ZFA/t0mCgyDWpNgpjUGWR35X65XwoGGzpZeJ+OzOBt14d/i2Gox 34Z3eR4RE3q2CzfPqo+watklg/95L29fH4ZCgE7dunx+gvI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:26 2026 by rpki-client