This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer File: U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer (raw, json) Hash identifier: kBFIhVEtBJXuMQGcshMhUuau3/ZFx29H1ZYzX28DDYI= Subject key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB93C3B0650D045B3B59812DC70696 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215171 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:93:c3:b0:65:0d:04:5b:3b:59:81:2d:c7:06:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:c8:75:18:2b:d6:cb:e0:a9:1b:78:e5:e3: 2e:28:22:1d:04:42:fc:6b:bd:79:5d:a9:89:99:b7: 93:fc:07:c1:29:b1:11:c5:79:31:97:20:63:2e:6d: 1c:32:e1:6e:ae:f8:ec:3a:b0:fb:c8:52:25:fc:97: ae:03:97:c4:e3:18:fc:95:93:8d:2c:4f:d7:d0:33: fb:56:77:7b:46:99:c8:3b:19:4f:a3:98:5f:52:4c: 1c:9f:bd:14:63:ee:0b:62:79:1c:22:49:49:b3:04: ff:fa:54:53:2f:db:40:b5:ac:cf:18:14:f2:9a:a1: 9e:8e:64:8d:bc:82:28:7c:74:dd:88:71:a3:c5:cd: ee:10:8b:61:ac:cc:2e:01:72:aa:2e:0d:a4:7c:c0: 7e:99:60:58:8a:52:0c:97:57:cb:46:0d:0b:f9:1b: ca:6a:c9:43:09:3e:dd:a4:60:b9:d4:8a:17:65:f7: 7f:2b:67:fd:f6:d2:84:37:4d:20:84:95:8c:38:cc: c9:20:e4:58:f5:e5:51:a7:91:97:54:3b:da:26:4d: 1b:38:2c:6b:fa:5c:0e:2e:cb:50:f5:58:73:7c:89: d6:23:8e:e3:6f:0d:80:24:b6:35:aa:3c:0f:ee:9e: 55:f2:10:5f:83:4b:ce:ee:f8:a0:d0:e0:bd:69:51: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215171 Signature Algorithm: sha256WithRSAEncryption 46:cd:b6:64:97:8c:09:d9:9f:51:c9:79:f8:9d:f2:9e:69:a3: c2:64:b0:64:0a:d2:29:06:80:2b:55:8e:d6:b9:d7:a7:1a:14: a8:0b:ff:45:61:26:6b:53:84:a2:6a:6b:70:96:8e:61:5a:ba: d4:f8:d3:c9:94:d9:fd:ac:92:54:70:ff:4d:29:a9:78:46:ac: 35:cd:21:c1:a2:15:34:ff:af:09:d9:37:d3:4f:b0:c9:8a:fd: 43:f7:2e:ea:cf:a3:3e:ce:13:6e:cd:7f:ac:24:a2:67:59:01: 05:92:46:12:6b:93:06:fa:29:f1:ae:c0:fb:eb:41:55:54:77: 11:8f:92:50:5c:2e:b4:9c:0f:02:37:1d:cf:48:81:53:23:1d: 7e:bb:10:30:aa:df:22:67:6e:6f:0a:b2:00:8a:07:29:b7:b5: 40:06:4e:20:a2:de:5b:1e:e2:10:a9:c9:6c:55:75:a4:b2:ec: fa:f1:8c:9c:87:f0:2c:16:52:e5:8c:4b:92:b1:37:ed:29:5a: 04:7b:1e:20:a1:01:ab:39:cb:c5:5d:7f:6e:4e:1d:cd:55:ad: 71:df:99:b0:a1:f6:63:08:d7:44:e4:c0:ed:50:b8:6e:20:cc: a2:68:0a:6e:36:37:91:a6:4b:3d:50:f4:3e:63:84:f0:19:ed: f9:b7:8a:ff -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt265PDsGUNBFs7WYEtxwaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2EyYWExNjAxY2MwOTIxNDQ2MWQwM2NhNzcxZWQ1MGVjMWQ2MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHbIdRgr1svgqRt45eMuKCIdBEL8 a715XamJmbeT/AfBKbERxXkxlyBjLm0cMuFurvjsOrD7yFIl/JeuA5fE4xj8lZON LE/X0DP7Vnd7RpnIOxlPo5hfUkwcn70UY+4LYnkcIklJswT/+lRTL9tAtazPGBTy mqGejmSNvIIofHTdiHGjxc3uEIthrMwuAXKqLg2kfMB+mWBYilIMl1fLRg0L+RvK aslDCT7dpGC51IoXZfd/K2f99tKEN00ghJWMOMzJIORY9eVRp5GXVDvaJk0bOCxr +lwOLstQ9VhzfInWI47jbw2AJLY1qjwP7p5V8hBfg0vO7vig0OC9aVHjeQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFFOiqhYBzAkhRGHQPKdx7VDsHWMlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMxMWU0 N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS81LzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzEx ZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4NzU1LzUvNTNBMkFBMTYwMUND MDkyMTQ0NjFEMDNDQTc3MUVENTBFQzFENjMyNS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSIMw DQYJKoZIhvcNAQELBQADggEBAEbNtmSXjAnZn1HJefid8p5po8JksGQK0ikGgCtV jta516caFKgL/0VhJmtThKJqa3CWjmFautT408mU2f2sklRw/00pqXhGrDXNIcGi FTT/rwnZN9NPsMmK/UP3LurPoz7OE27Nf6wkomdZAQWSRhJrkwb6KfGuwPvrQVVU dxGPklBcLrScDwI3Hc9IgVMjHX67EDCq3yJnbm8KsgCKBym3tUAGTiCi3lse4hCp yWxVdaSy7PrxjJyH8CwWUuWMS5KxN+0pWgR7HiChAas5y8Vdf25OHc1VrXHfmbCh 9mMI10TkwO1QuG4gzKJoCm42N5GmSz1Q9D5jhPAZ7fm3iv8= -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:03 2026 by rpki-client