This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer File: u_E0smpfP3zNjK9dLGvnDKwPoks.cer (raw, json) Hash identifier: x8tVIPicIgk9kDoPpZJMEUkKkV5+R1KV5lutx0GIc4o= Subject key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F39A5CE8F39C0C3DDCB60988AA90 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202855 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f3:9a:5c:e8:f3:9c:0c:3d:dc:b6:09:88:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:8e:39:d3:b5:a9:1b:5c:14:61:ce:e0:bd: 12:89:2c:e6:24:32:7d:69:41:00:c3:7f:9e:30:a3: 5d:61:86:8a:be:73:05:64:e6:6d:f1:9e:7b:3a:b5: 13:db:af:95:4b:f6:44:ab:92:0b:b9:09:83:35:b8: 1d:5a:b8:b1:b4:ca:c9:ba:c5:c5:7a:cb:56:0c:9c: 87:bf:19:68:c2:4d:f4:d2:a7:7a:07:90:d3:3a:95: 91:3c:c0:cb:bf:01:d3:7c:75:37:82:a6:38:7d:9d: 75:b1:05:6a:e5:ef:4b:b1:57:0d:72:59:6f:d2:71: 12:ab:e5:40:0e:7b:a9:a2:a3:51:9b:20:cf:68:dc: f5:74:e5:7d:8b:20:df:3d:de:c6:fc:d4:73:09:d4: 25:3d:25:7e:82:3d:cd:a6:40:46:04:57:37:ba:2b: 83:a5:68:0a:43:57:f8:de:b0:6a:33:49:b5:18:0c: a8:11:b5:39:06:b6:dd:cf:ce:ab:49:b3:ce:cf:89: 4c:e4:23:c5:cf:36:28:a9:57:40:a8:81:bf:e0:bc: ee:bf:65:bd:47:99:16:12:cb:e3:36:63:c8:92:a4: ea:64:93:59:d5:75:2a:9f:71:81:3a:93:35:59:2f: 1e:93:58:7e:e8:45:53:d7:a0:7f:e1:31:8d:c3:aa: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202855 Signature Algorithm: sha256WithRSAEncryption 42:d2:17:50:05:fa:86:8e:fd:0d:ca:16:9c:e8:6e:94:38:c0: 43:a5:2b:77:17:6c:2a:1e:88:91:24:d6:c5:8f:69:e2:c7:c4: ba:0c:5c:47:c2:0d:e8:30:5d:d3:6e:c6:8f:08:72:26:7e:06: 83:5d:2a:48:84:4e:96:54:d4:d1:31:7c:0d:90:29:c5:6e:2e: 12:60:ab:f2:33:f2:89:4d:39:c9:b7:89:01:84:c8:05:b1:16: e6:fb:79:e8:3d:c2:86:32:cc:eb:02:a5:bf:59:8c:72:db:aa: 2f:d6:65:8b:f5:ef:cf:26:49:b8:96:1c:d3:08:f2:79:67:5c: 82:ff:84:0d:26:40:32:76:d9:5f:15:35:ba:4c:35:c0:22:ee: 9e:e3:7a:60:f9:c4:47:7c:eb:ed:d5:b2:4d:d5:55:3a:34:de: 6f:9e:0c:20:60:7c:07:0c:0d:ba:10:64:95:14:b7:22:5a:a5: 22:bf:73:ea:56:d9:9c:81:95:4e:2a:48:9f:cd:e5:e3:8f:cb: 90:4f:5f:e3:56:7f:f9:03:a0:3b:99:14:ee:e3:12:72:c8:4e: 33:6d:d0:25:85:9b:cb:66:66:eb:2a:da:dc:e3:24:63:a6:3e: 91:6a:e6:01:77:b9:b6:f9:9c:7f:57:cf:cb:08:23:35:42:7f: c1:32:d2:cc -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FPOaXOjznAw93LYJiKqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmYxMzRiMjZhNWYzZjdjY2Q4Y2FmNWQyYzZiZTcwY2FjMGZhMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5aOOdO1qRtcFGHO4L0SiSzmJDJ9 aUEAw3+eMKNdYYaKvnMFZOZt8Z57OrUT26+VS/ZEq5ILuQmDNbgdWrixtMrJusXF estWDJyHvxlowk300qd6B5DTOpWRPMDLvwHTfHU3gqY4fZ11sQVq5e9LsVcNcllv 0nESq+VADnupoqNRmyDPaNz1dOV9iyDfPd7G/NRzCdQlPSV+gj3NpkBGBFc3uiuD pWgKQ1f43rBqM0m1GAyoEbU5Brbdz86rSbPOz4lM5CPFzzYoqVdAqIG/4Lzuv2W9 R5kWEsvjNmPIkqTqZJNZ1XUqn3GBOpM1WS8ek1h+6EVT16B/4TGNw6odtQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLvxNLJqXz98zYyvXSxr5wysD6JLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzhlNGRl Yi0zMTdkLTQ5NzctOGFhNC05NWJjNjQwZTNjNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvOGU0ZGVi LTMxN2QtNDk3Ny04YWE0LTk1YmM2NDBlM2M1Ni8xL3VfRTBzbXBmUDN6TmpLOWRM R3ZuREt3UG9rcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYZzANBgkqhkiG9w0BAQsFAAOCAQEAQtIXUAX6ho79 DcoWnOhulDjAQ6UrdxdsKh6IkSTWxY9p4sfEugxcR8IN6DBd027GjwhyJn4Gg10q SIROllTU0TF8DZApxW4uEmCr8jPyiU05ybeJAYTIBbEW5vt56D3ChjLM6wKlv1mM ctuqL9Zli/XvzyZJuJYc0wjyeWdcgv+EDSZAMnbZXxU1ukw1wCLunuN6YPnER3zr 7dWyTdVVOjTeb54MIGB8BwwNuhBklRS3IlqlIr9z6lbZnIGVTipIn83l44/LkE9f 41Z/+QOgO5kU7uMScshOM23QJYWby2Zm6yra3OMkY6Y+kWrmAXe5tvmcf1fPywgj NUJ/wTLSzA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:44 2026 by rpki-client