This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer File: u3mEej_o5ceIRAJ8yvC9bp2kYko.cer (raw, json) Hash identifier: cy+RvO5DRGLfpEnAGVaYYWD6CwfUyANh+Do6WEej87Q= Subject key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC36F4E0F0868B319ECD35E9985489 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56648 IP: 89.207.157.0/24 IP: 185.20.5.0/24 IP: 2a13:2900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:36:f4:e0:f0:86:8b:31:9e:cd:35:e9:98:54:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:2f:0a:ac:99:c6:0d:4d:f0:8e:e9:30:19: 1f:a8:e4:41:83:b8:1a:c7:65:df:15:25:a7:ed:0d: f6:82:be:20:29:2e:4f:27:de:82:3b:8a:ff:e0:a2: c0:01:bf:6d:ae:9a:f3:ed:f9:8f:f6:22:98:b9:f6: 62:bf:a1:0b:10:7a:94:b6:ee:e1:02:10:55:ce:6f: 8d:85:75:c9:f0:87:cc:5a:52:fd:ce:67:d5:eb:b6: c5:7d:8a:55:cd:40:00:a3:98:7c:cd:bd:7c:1f:f1: d3:f5:91:6a:22:69:23:d5:65:df:40:8e:9a:aa:22: 3d:3f:98:83:e7:3c:47:4b:6b:e7:9e:6c:ab:91:74: af:c6:6e:16:36:3b:62:7b:47:04:33:39:05:5a:60: 86:13:b4:5d:38:d3:19:61:25:a6:03:29:ef:32:ec: 6f:00:fc:e8:40:fa:57:69:c5:c3:69:89:51:33:87: 44:4c:e8:d6:99:61:32:a4:7d:7a:12:98:0c:bb:33: 0f:a3:82:9d:08:f1:fd:e0:f2:de:da:85:b9:7c:61: e0:0f:38:b5:6b:f8:e7:73:1d:5a:8f:3e:1a:f0:b7: 35:96:a5:dc:c2:08:95:a5:d9:63:8f:fb:31:b3:8e: 5b:93:fa:b8:74:96:12:c9:c9:08:6c:48:91:3c:87: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.157.0/24 185.20.5.0/24 IPv6: 2a13:2900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56648 Signature Algorithm: sha256WithRSAEncryption 5b:2c:bd:87:14:14:77:e4:0e:4b:c6:f2:3d:8a:99:91:2c:d9: 72:17:d1:06:75:46:f4:ce:13:19:43:d1:a6:ed:58:68:3c:3e: 54:13:6d:bf:ef:e2:a4:49:41:e5:dd:f0:ee:a7:ed:0f:c4:f4: c3:9a:df:fa:a6:e0:6f:f0:0e:a0:f9:8b:bd:7b:04:e1:72:42: 7c:ec:98:41:43:72:76:93:f2:16:08:16:5b:39:bb:9e:bc:8d: c4:74:23:07:e4:dc:92:c9:ae:39:7b:45:0f:ea:ab:1a:42:98: 56:c0:51:c4:8f:49:ce:c0:0f:40:7c:75:18:2a:77:31:1e:28: b3:38:28:fe:d2:30:55:af:d5:de:6e:69:a6:7a:41:1e:da:b6: 66:5f:c9:d6:18:87:3e:e6:14:3c:2e:6f:16:1c:a8:74:50:32: 9e:4d:2f:9c:d7:f3:04:87:a9:4d:d6:0a:f6:26:0e:b7:3d:1a: 98:66:c5:e7:43:64:2e:29:e2:b2:2f:7a:0f:26:21:67:a1:e0: 23:fe:00:cf:a8:ac:b7:04:3d:c9:b2:59:78:06:96:14:81:b3: 90:34:33:61:6f:60:8d:d6:83:c3:a3:a9:cf:2c:a2:1f:3b:16: b5:c5:73:c1:a8:1f:a6:84:b8:15:fd:f2:bf:ef:34:ab:f2:80: 24:55:73:2c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57Db04PCGizGezTXpmFSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjc5ODQ3YTNmZThlNWM3ODg0NDAyN2NjYWYwYmQ2ZTlkYTQ2MjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlasvCqyZxg1N8I7pMBkfqORBg7ga x2XfFSWn7Q32gr4gKS5PJ96CO4r/4KLAAb9trprz7fmP9iKYufZiv6ELEHqUtu7h AhBVzm+NhXXJ8IfMWlL9zmfV67bFfYpVzUAAo5h8zb18H/HT9ZFqImkj1WXfQI6a qiI9P5iD5zxHS2vnnmyrkXSvxm4WNjtie0cEMzkFWmCGE7RdONMZYSWmAynvMuxv APzoQPpXacXDaYlRM4dETOjWmWEypH16EpgMuzMPo4KdCPH94PLe2oW5fGHgDzi1 a/jncx1ajz4a8Lc1lqXcwgiVpdljj/sxs45bk/q4dJYSyckIbEiRPIeOvQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLt5hHo/6OXHiEQCfMrwvW6dpGJKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzQ1Y2M5 Zi02NDMyLTQxYzctYjYyZC0xMGU0MGM1ODY0OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNDVjYzlm LTY0MzItNDFjNy1iNjJkLTEwZTQwYzU4NjQ5OC8xL3UzbUVlal9vNWNlSVJBSjh5 dkM5YnAya1lrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAWc+dAwQAuRQFMA0EAgACMAcDBQMqEykAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDdSDANBgkqhkiG9w0BAQsFAAOCAQEAWyy9 hxQUd+QOS8byPYqZkSzZchfRBnVG9M4TGUPRpu1YaDw+VBNtv+/ipElB5d3w7qft D8T0w5rf+qbgb/AOoPmLvXsE4XJCfOyYQUNydpPyFggWWzm7nryNxHQjB+Tcksmu OXtFD+qrGkKYVsBRxI9JzsAPQHx1GCp3MR4oszgo/tIwVa/V3m5ppnpBHtq2Zl/J 1hiHPuYUPC5vFhyodFAynk0vnNfzBIepTdYK9iYOtz0amGbF50NkLinisi96DyYh Z6HgI/4Az6istwQ9ybJZeAaWFIGzkDQzYW9gjdaDw6OpzyyiHzsWtcVzwagfpoS4 Ff3yv+80q/KAJFVzLA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:15 2026 by rpki-client