This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer (raw, json) Hash identifier: UuJOjuKq9tNGvlNqAjtBvRpFsHGMA32Kl0zDneLB+ow= Subject key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3648932655CF4CCF24611DE97D9FE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16181 AS: 44379 AS: 51250 IP: 193.41.218.0/23 IP: 2a0b:480::/29 IP: 2a12:300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:48:93:26:55:cf:4c:cf:24:61:1d:e9:7d:9f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:a5:08:c7:4c:88:89:56:3c:18:25:c8:12: f6:78:69:15:c0:17:0c:d8:e0:e5:b0:70:49:8e:72: 02:91:06:eb:61:61:0e:9d:58:7b:3c:2e:78:8c:a4: 6b:fb:6a:1c:6d:c7:81:98:bb:cb:4c:27:9f:cc:f8: 8c:34:33:48:a5:b5:40:88:9d:0b:cc:f0:92:10:13: 10:07:9f:b3:c3:78:43:69:2d:51:a2:8c:a7:36:b9: 64:36:d8:26:e0:1b:ef:df:a3:6f:38:07:29:71:bf: 8c:ed:f4:1e:71:e7:e5:20:e9:43:bb:d2:9b:ad:bc: 8d:d0:51:e5:bc:ac:45:1f:6d:04:7a:26:9f:b9:98: 82:be:86:f7:bd:ec:ce:5d:a3:41:23:98:28:b4:04: 5c:39:3d:3b:8d:62:3b:c5:89:5c:a0:54:a5:ff:dc: 79:15:07:43:fc:d7:66:ef:27:2c:3b:2c:f0:db:6d: e3:92:e6:10:0b:4d:4e:b8:99:e1:64:3a:8d:f6:5a: 14:85:a8:17:8a:5b:7a:95:02:e1:1b:d4:59:36:ce: f9:7b:81:2e:ab:e4:59:f1:14:8b:28:94:91:a6:66: 56:0a:e7:bb:7b:4e:58:d7:d9:7e:2b:42:ad:c4:b0: 28:8b:52:01:8d:07:7f:e7:4f:3c:31:df:09:dd:b2: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.218.0/23 IPv6: 2a0b:480::/29 2a12:300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16181 44379 51250 Signature Algorithm: sha256WithRSAEncryption 80:87:aa:48:73:f8:a2:d4:d1:29:cf:e2:5b:9c:28:5c:f9:1a: 51:e3:0d:c4:33:97:01:6d:30:66:ec:a7:3f:54:e3:33:88:ab: af:d8:5c:ca:11:e1:c5:9c:3e:93:98:c5:ac:17:bc:13:f0:1a: cf:9d:27:fe:57:da:d2:03:da:fa:a9:fb:42:f3:8d:a3:1e:64: 70:18:ee:4f:a7:d7:66:75:27:1b:2a:5e:b3:0a:81:90:52:e1: d8:96:93:02:ce:e3:a6:61:60:e7:ff:d1:2a:dd:36:d2:0c:9e: bd:8e:a5:da:06:7d:f4:42:55:92:04:7c:fc:45:eb:c8:3e:9a: 5d:40:3a:b7:00:45:18:4f:41:2c:fc:ec:a4:bf:29:4e:b5:59: 64:33:f2:99:a8:dd:e1:2b:71:92:01:64:4d:b7:ca:a5:fa:32: e8:f3:b8:68:3b:b4:59:1f:1a:02:4e:27:25:f9:1f:cb:05:0a: a1:82:88:21:5b:b5:26:a2:41:1e:8b:bc:60:30:47:bb:5f:9a: 7a:80:db:05:0c:38:f7:c2:e8:59:78:00:3f:3b:e5:ef:30:18: e7:33:67:ee:a9:47:dd:b2:11:b7:8e:19:9d:7e:be:ae:a6:c8: 0b:09:65:18:0f:b2:c0:10:c5:6d:ac:f4:b1:6f:3e:95:bb:b0: 2d:b5:41:98 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt7NkiTJlXPTM8kYR3pfZ/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzc2NDY3ZWYwOTIxYzUxMTkwZTJlYTYwZjJhYmIzYmQ2ZTljMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH6lCMdMiIlWPBglyBL2eGkVwBcM 2ODlsHBJjnICkQbrYWEOnVh7PC54jKRr+2ocbceBmLvLTCefzPiMNDNIpbVAiJ0L zPCSEBMQB5+zw3hDaS1RooynNrlkNtgm4Bvv36NvOAcpcb+M7fQeceflIOlDu9Kb rbyN0FHlvKxFH20EeiafuZiCvob3vezOXaNBI5gotARcOT07jWI7xYlcoFSl/9x5 FQdD/Ndm7ycsOyzw223jkuYQC01OuJnhZDqN9loUhagXilt6lQLhG9RZNs75e4Eu q+RZ8RSLKJSRpmZWCue7e05Y19l+K0KtxLAoi1IBjQd/5088Md8J3bKQmQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFFN2Rn7wkhxRGQ4upg8quzvW6cGfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2M5ZGIw ZS05MDNlLTQ4NWUtYjY3Zi0yYzdhMmE3NDYyNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYzlkYjBl LTkwM2UtNDg1ZS1iNjdmLTJjN2EyYTc0NjI3OS8xL1UzWkdmdkNTSEZFWkRpNm1E eXE3TzlicHdaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQBwSnaMBQEAgACMA4DBQMqCwSAAwUDKhIDADAj BggrBgEFBQcBCAEB/wQUMBKgEDAOAgI/NQIDAK1bAgMAyDIwDQYJKoZIhvcNAQEL BQADggEBAICHqkhz+KLU0SnP4lucKFz5GlHjDcQzlwFtMGbspz9U4zOIq6/YXMoR 4cWcPpOYxawXvBPwGs+dJ/5X2tID2vqp+0LzjaMeZHAY7k+n12Z1JxsqXrMKgZBS 4diWkwLO46ZhYOf/0SrdNtIMnr2OpdoGffRCVZIEfPxF68g+ml1AOrcARRhPQSz8 7KS/KU61WWQz8pmo3eErcZIBZE23yqX6MujzuGg7tFkfGgJOJyX5H8sFCqGCiCFb tSaiQR6LvGAwR7tfmnqA2wUMOPfC6Fl4AD875e8wGOczZ+6pR92yEbeOGZ1+vq6m yAsJZRgPssAQxW2s9LFvPpW7sC21QZg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:36:57 2026 by rpki-client