This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer File: usA65sVFitKAdlulUnmAoG_sI6g.cer (raw, json) Hash identifier: Qkz5cI4voc0a93dVcPazGtlNZCQ+pU+YjSsaJt9eOw8= Subject key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D2AE47D823226E314D33B4A0D7809 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.167.8.0/22 IP: 2a0b:2e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2a:e4:7d:82:32:26:e3:14:d3:3b:4a:0d:78:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bac03ae6c5458ad280765ba5527980a06fec23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:d5:f9:04:47:55:0d:cb:86:4d:9f:4a:02: a9:93:8b:e8:d5:af:4f:90:99:69:ce:48:fa:8c:f8: 64:84:a9:7a:7a:0d:eb:3c:dc:82:79:82:ce:c0:18: 16:5e:77:40:93:5a:03:ed:85:4f:77:40:e4:66:cf: 5b:db:6b:cb:ee:68:ca:f1:66:93:f3:99:6b:35:66: fa:a0:04:d6:1d:ef:47:dc:62:49:1e:92:41:35:c2: 5e:57:e7:07:18:4a:9b:2b:84:e5:52:75:83:99:40: f6:4a:04:1b:b5:cd:56:80:99:27:1a:7d:5e:76:bf: 93:67:43:bb:fd:b7:b3:a5:2f:d2:4b:79:1a:f7:95: 7e:aa:85:3c:49:3d:e3:7e:65:26:89:08:f6:4a:c2: e2:29:22:07:59:29:9f:2c:9f:a7:99:9b:0b:5d:77: f4:a6:9a:8d:71:b4:6c:b4:a5:63:41:3e:7d:8d:4a: 06:9f:6f:b2:78:22:b2:1f:68:99:2a:09:84:76:4a: 22:89:b0:00:0d:81:fd:f9:c9:3a:95:bc:70:b9:75: 88:04:4b:5e:89:20:ad:e5:57:a6:17:ac:f5:2f:22: 52:e9:e5:24:63:3a:4d:7f:6d:0d:a2:a7:4e:01:14: 8f:8d:7f:2f:f5:e0:3f:82:58:5b:ee:8f:82:4c:f4: bb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.8.0/22 IPv6: 2a0b:2e00::/29 Signature Algorithm: sha256WithRSAEncryption 7e:3b:fd:ee:4b:a1:6d:ec:32:f3:29:74:09:85:7b:88:ad:71: af:1c:9a:cf:31:a2:7c:ac:36:6a:89:c8:82:24:f2:83:fa:0d: f0:7d:13:d7:94:44:7c:2f:97:e3:b3:b4:0d:8c:ef:87:7d:49: 7a:05:80:2e:a7:46:4a:73:8e:7a:ea:22:c5:33:2f:82:d4:54: bb:20:e3:97:58:c6:1d:ab:30:84:dc:5b:71:4d:66:67:0d:a6: 43:04:dd:74:d9:4f:34:36:ca:e5:84:76:e5:a4:4a:0a:97:00: 7d:8d:3c:61:af:b7:79:2d:1b:43:93:f4:24:37:f4:fe:1c:7a: da:17:4a:34:68:f5:d3:9d:ab:2f:d6:21:52:47:62:6b:c5:19: 70:54:df:81:f3:8e:bf:3f:89:e7:3e:a5:7e:c2:45:60:59:b6: 6b:53:05:48:10:3c:10:f9:a0:30:7f:4d:8b:37:78:f1:ab:95: b0:9b:e9:f8:8b:7b:fe:4b:ca:6b:73:53:26:dd:c3:cf:0a:7b: 22:62:50:77:41:d2:bd:8b:17:d9:90:52:58:4e:0c:9f:32:15: 59:a8:fe:2f:2f:80:0e:61:88:fc:19:0f:33:f9:78:38:16:11: 39:8d:4d:58:64:18:7f:3e:cf:e7:f3:52:e5:c3:77:e8:4d:19: af:3b:e2:19 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XSrkfYIyJuMU0ztKDXgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWMwM2FlNmM1NDU4YWQyODA3NjViYTU1Mjc5ODBhMDZmZWMyM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs77V+QRHVQ3Lhk2fSgKpk4vo1a9P kJlpzkj6jPhkhKl6eg3rPNyCeYLOwBgWXndAk1oD7YVPd0DkZs9b22vL7mjK8WaT 85lrNWb6oATWHe9H3GJJHpJBNcJeV+cHGEqbK4TlUnWDmUD2SgQbtc1WgJknGn1e dr+TZ0O7/bezpS/SS3ka95V+qoU8ST3jfmUmiQj2SsLiKSIHWSmfLJ+nmZsLXXf0 ppqNcbRstKVjQT59jUoGn2+yeCKyH2iZKgmEdkoiibAADYH9+ck6lbxwuXWIBEte iSCt5VemF6z1LyJS6eUkYzpNf20NoqdOARSPjX8v9eA/glhb7o+CTPS7lQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLrAOubFRYrSgHZbpVJ5gKBv7COoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2U5MzFl Ni1hMTUyLTRhMWEtYjA4YS0xMDgxYWViMTIxYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZTkzMWU2 LWExNTItNGExYS1iMDhhLTEwODFhZWIxMjFiMy8xL3VzQTY1c1ZGaXRLQWRsdWxV bm1Bb0dfc0k2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuacIMA0EAgACMAcDBQMqCy4AMA0GCSqGSIb3 DQEBCwUAA4IBAQB+O/3uS6Ft7DLzKXQJhXuIrXGvHJrPMaJ8rDZqiciCJPKD+g3w fRPXlER8L5fjs7QNjO+HfUl6BYAup0ZKc4566iLFMy+C1FS7IOOXWMYdqzCE3Ftx TWZnDaZDBN102U80NsrlhHblpEoKlwB9jTxhr7d5LRtDk/QkN/T+HHraF0o0aPXT nasv1iFSR2JrxRlwVN+B846/P4nnPqV+wkVgWbZrUwVIEDwQ+aAwf02LN3jxq5Ww m+n4i3v+S8prc1Mm3cPPCnsiYlB3QdK9ixfZkFJYTgyfMhVZqP4vL4AOYYj8GQ8z +Xg4FhE5jU1YZBh/Ps/n81Llw3foTRmvO+IZ -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:06 2026 by rpki-client