This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer File: u8v1S15m1hoXV2yMc2vyZy47mho.cer (raw, json) Hash identifier: +PYMsmOHJ29v+nTavoPlk2rsKTA/QRODRVNZZr84us4= Subject key identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1114FFF93146C91FDC2AFF15479DF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197598 IP: 2001:67c:cc0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:14:ff:f9:31:46:c9:1f:dc:2a:ff:15:47:9d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:dc:e1:8e:e9:0e:42:b4:d6:07:6d:ef:ea: 8b:5e:63:25:ca:b2:a0:a9:67:99:77:7a:d8:95:0c: 74:ae:b1:f8:c7:dc:38:69:57:1c:d3:72:14:e9:9f: 1d:63:e3:19:fd:4c:69:20:54:db:c0:44:df:0d:cb: d0:95:14:7a:16:bd:40:8c:5a:4f:97:9e:77:a1:5e: 7e:64:76:39:f7:9e:37:c4:ac:17:bb:39:92:fb:7b: 2b:f6:bd:5b:d2:39:95:a1:33:8e:fb:10:e0:27:66: a4:77:29:02:7e:f9:35:53:5b:22:c0:68:0f:aa:bc: 90:55:e8:cd:3e:c8:74:60:31:0e:57:9d:3b:46:d5: 04:b8:d7:a9:93:5f:18:8b:57:71:c2:2b:0b:9b:3d: cc:88:4e:b3:83:72:ef:12:6e:e5:84:ea:be:f6:6f: d9:24:30:4f:29:8d:13:c7:62:a2:49:96:a3:6e:90: 6d:ad:26:16:fb:50:f7:09:87:b8:ad:66:0e:8b:cc: e1:89:7b:4f:6d:ba:e9:e2:b3:73:94:91:96:21:f9: fa:63:67:e9:6c:cd:76:be:4b:47:58:01:fc:e7:fa: db:da:b6:34:38:c5:e9:5e:51:14:0f:58:b2:0c:d8: 10:15:f9:d1:d9:55:41:1e:0e:c1:07:39:31:83:84: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:cc0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197598 Signature Algorithm: sha256WithRSAEncryption 95:23:6e:c9:7a:21:9f:db:98:4e:2a:a7:2a:5d:d2:14:55:d7: 2d:bb:30:70:64:8c:ba:98:aa:6a:4b:e7:3a:6a:73:0d:fc:33: cc:30:10:ba:de:04:4c:82:4b:cd:9d:71:d3:6d:36:05:89:4d: 8a:a1:76:35:90:15:44:a2:77:18:72:48:d0:6c:80:35:c5:79: 99:58:2a:60:31:5c:50:49:c9:34:20:85:d1:97:38:71:12:cc: 88:0b:21:fd:f8:c5:de:a8:e1:d9:33:f0:4f:54:9b:1d:86:82: 80:9e:1d:27:24:6f:fe:97:47:f2:69:7f:ba:c3:5e:3a:3a:a7: 26:5b:80:bc:bb:9c:ca:0f:35:e6:96:93:75:ec:2d:e3:99:0a: fc:ef:f1:3d:ec:61:3a:89:9f:16:57:6b:0d:ae:ec:4c:3d:4c: 65:d8:b8:8b:ea:40:86:d8:bf:da:66:4a:c3:6d:48:db:5f:26: 3b:86:a1:23:8d:51:68:eb:78:94:78:1b:e6:93:23:d6:f9:47: 4f:3a:32:79:9c:5e:2d:83:c1:3f:c7:6c:cb:72:2c:e9:b7:b0: 22:d9:c2:c9:34:6a:85:80:c3:1a:ef:3e:91:30:b3:14:5f:aa: b5:eb:e4:e5:f9:7b:06:29:1a:53:cd:59:20:d0:86:ed:a2:da: 59:87:62:76 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8ERT/+TFGyR/cKv8VR532MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmNiZjU0YjVlNjZkNjFhMTc1NzZjOGM3MzZiZjI2NzJlM2I5YTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBTc4Y7pDkK01gdt7+qLXmMlyrKg qWeZd3rYlQx0rrH4x9w4aVcc03IU6Z8dY+MZ/UxpIFTbwETfDcvQlRR6Fr1AjFpP l553oV5+ZHY59543xKwXuzmS+3sr9r1b0jmVoTOO+xDgJ2akdykCfvk1U1siwGgP qryQVejNPsh0YDEOV507RtUEuNepk18Yi1dxwisLmz3MiE6zg3LvEm7lhOq+9m/Z JDBPKY0Tx2KiSZajbpBtrSYW+1D3CYe4rWYOi8zhiXtPbbrp4rNzlJGWIfn6Y2fp bM12vktHWAH85/rb2rY0OMXpXlEUD1iyDNgQFfnR2VVBHg7BBzkxg4QcUwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLvL9UteZtYaF1dsjHNr8mcuO5oaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzkxNjc0 Mi01MWY5LTRlYjQtYTE5NS0yOWZkODBiYTRiZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvOTE2NzQy LTUxZjktNGViNC1hMTk1LTI5ZmQ4MGJhNGJmMS8xL3U4djFTMTVtMWhvWFYyeU1j MnZ5Wnk0N21oby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAzAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMD3jANBgkqhkiG9w0BAQsFAAOCAQEAlSNuyXohn9uYTiqnKl3SFFXXLbsw cGSMupiqakvnOmpzDfwzzDAQut4ETIJLzZ1x0202BYlNiqF2NZAVRKJ3GHJI0GyA NcV5mVgqYDFcUEnJNCCF0Zc4cRLMiAsh/fjF3qjh2TPwT1SbHYaCgJ4dJyRv/pdH 8ml/usNeOjqnJluAvLucyg815paTdewt45kK/O/xPexhOomfFldrDa7sTD1MZdi4 i+pAhti/2mZKw21I218mO4ahI41RaOt4lHgb5pMj1vlHTzoyeZxeLYPBP8dsy3Is 6bewItnCyTRqhYDDGu8+kTCzFF+qtevk5fl7BikaU81ZINCG7aLaWYdidg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:03 2026 by rpki-client