This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer (raw, json) Hash identifier: TcNhn9j/DcR1yX/4QXRU6fdlP03mTfI46U76ND1KW8w= Subject key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6730E214BEB77A63E00E7236EE81C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31708 IP: 31.193.168.0/21 IP: 62.197.40.0/23 IP: 62.197.44.0/24 IP: 62.197.50.0/23 IP: 83.142.24.0/22 IP: 83.142.29.0/24 IP: 85.13.192.0/18 IP: 89.187.64.0/22 IP: 89.187.70.0 -- 89.187.72.255 IP: 89.187.74.0 -- 89.187.76.255 IP: 89.187.78.0 -- 89.187.92.255 IP: 89.187.94.0/23 IP: 109.70.136.0/21 IP: 193.26.222.0/24 IP: 2a01:c0::/32 IP: 2a06:1bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:73:0e:21:4b:eb:77:a6:3e:00:e7:23:6e:e8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b62ace615b906b42ab27f4fb1d203df36d5436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:ab:f6:a9:b0:d1:e0:65:05:e9:95:a6:2e: 4b:59:d4:40:a8:69:7e:ec:bc:e9:57:f0:6a:02:8d: e1:34:3e:da:4e:5f:e6:9b:71:e8:b6:94:6b:fb:e9: ad:e3:c1:a7:cd:47:a6:cc:b1:32:a5:8f:c5:86:3b: 80:36:0b:81:4c:5a:d1:a3:5f:c0:c2:84:d6:44:3c: 31:75:93:e7:44:c7:0b:05:93:a1:f2:9d:a6:ae:cd: 67:46:d9:f3:26:03:24:0a:b5:26:2e:a5:71:9a:f8: 21:b3:f7:ba:51:6d:3b:35:02:a2:1d:b6:38:7f:91: ba:d9:d5:15:d2:9c:8f:0e:a4:57:d3:c9:b7:64:8b: ae:7b:8e:4d:2a:24:66:61:ab:f4:38:89:fb:ae:9e: 28:4c:c5:df:76:fb:cb:91:a1:61:b4:16:7b:52:ae: 7f:0a:ff:c7:44:87:9c:1f:75:12:74:b6:ce:ad:5a: ea:69:99:b7:c5:46:93:d8:bb:21:08:1f:e6:a8:61: ab:66:6e:5e:a7:94:a2:e5:80:15:e5:cd:74:0c:18: 60:4d:b8:d3:1d:29:6c:97:f4:e5:e4:b4:fd:3e:45: 6f:c0:f4:a1:17:7d:1a:b9:7a:db:e7:17:53:1c:c0: 4b:b5:79:6c:48:f1:61:87:df:e9:5d:34:00:28:82: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.168.0/21 62.197.40.0/23 62.197.44.0/24 62.197.50.0/23 83.142.24.0/22 83.142.29.0/24 85.13.192.0/18 89.187.64.0/22 89.187.70.0-89.187.72.255 89.187.74.0-89.187.76.255 89.187.78.0-89.187.92.255 89.187.94.0/23 109.70.136.0/21 193.26.222.0/24 IPv6: 2a01:c0::/32 2a06:1bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31708 Signature Algorithm: sha256WithRSAEncryption 5d:c7:79:cd:99:ca:10:64:64:81:33:f6:9b:a6:cb:77:f0:00: 3a:0b:a9:88:a3:d1:c8:a7:6f:a3:8e:7b:75:59:e7:7c:49:a6: c8:5e:5a:1c:32:84:db:98:4b:a8:a4:8b:1d:cc:24:7b:18:a5: cd:da:75:b9:4b:4a:f4:f0:9d:ef:d8:f9:7f:4e:f4:8e:e1:87: 96:7d:e9:f5:17:83:0f:da:51:d3:09:66:9c:9b:01:49:de:30: 51:46:c8:1a:b8:b8:26:7d:a5:47:cf:47:52:2e:17:39:e3:ba: c8:91:82:f9:b3:26:41:06:64:1d:40:4f:6d:df:12:e2:cf:06: 08:17:c3:25:9e:e2:2f:6f:7c:24:33:46:5c:47:7c:75:35:64: c9:03:68:ca:d7:2a:13:7b:80:32:3a:21:d6:4d:eb:75:a8:65: 5e:b3:70:56:55:3e:53:b7:e4:45:15:5b:c3:ae:df:63:6c:78: 9b:71:00:24:65:d7:a9:68:f1:74:f3:dd:67:e2:39:57:98:80: 06:cd:dd:3b:c1:f0:a5:35:51:5c:fa:71:d4:2a:55:da:27:0e: 0e:39:18:8b:e7:5d:5f:3c:b4:e4:a4:34:e0:3a:69:fd:a0:ca: 60:30:b0:a0:db:3c:df:3a:9b:c4:5f:e2:c1:d6:f1:45:71:1f: 09:09:7a:9e -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAZt3xnMOIUvrd6Y+AOcjbugcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I2MmFjZTYxNWI5MDZiNDJhYjI3ZjRmYjFkMjAzZGYzNmQ1NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6Or9qmw0eBlBemVpi5LWdRAqGl+ 7LzpV/BqAo3hND7aTl/mm3HotpRr++mt48GnzUemzLEypY/FhjuANguBTFrRo1/A woTWRDwxdZPnRMcLBZOh8p2mrs1nRtnzJgMkCrUmLqVxmvghs/e6UW07NQKiHbY4 f5G62dUV0pyPDqRX08m3ZIuue45NKiRmYav0OIn7rp4oTMXfdvvLkaFhtBZ7Uq5/ Cv/HRIecH3USdLbOrVrqaZm3xUaT2LshCB/mqGGrZm5ep5Si5YAV5c10DBhgTbjT HSlsl/Tl5LT9PkVvwPShF30auXrb5xdTHMBLtXlsSPFhh9/pXTQAKII9swIDAQAB o4IDHjCCAxowHQYDVR0OBBYEFFO2Ks5hW5BrQqsn9PsdID3zbVQ2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzhiMDdj ZC0wY2VkLTRhZmMtOGQwMi05NzJhNGMzZGMzZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvOGIwN2Nk LTBjZWQtNGFmYy04ZDAyLTk3MmE0YzNkYzNmMy8xL1U3WXF6bUZia0d0Q3F5ZjAt eDBnUGZOdFZEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGdBggrBgEF BQcBBwEB/wSBjTCBijByBAIAATBsAwQDH8GoAwQBPsUoAwQAPsUsAwQBPsUyAwQC U44YAwQAU44dAwQGVQ3AAwQCWbtAMAwDBAFZu0YDBABZu0gwDAMEAVm7SgMEAFm7 TDAMAwQBWbtOAwQAWbtcAwQBWbteAwQDbUaIAwQAwRreMBQEAgACMA4DBQAqAQDA AwUDKgYbwDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ73DANBgkqhkiG9w0BAQsF AAOCAQEAXcd5zZnKEGRkgTP2m6bLd/AAOgupiKPRyKdvo457dVnnfEmmyF5aHDKE 25hLqKSLHcwkexilzdp1uUtK9PCd79j5f070juGHln3p9ReDD9pR0wlmnJsBSd4w UUbIGri4Jn2lR89HUi4XOeO6yJGC+bMmQQZkHUBPbd8S4s8GCBfDJZ7iL298JDNG XEd8dTVkyQNoytcqE3uAMjoh1k3rdahlXrNwVlU+U7fkRRVbw67fY2x4m3EAJGXX qWjxdPPdZ+I5V5iABs3dO8HwpTVRXPpx1CpV2icODjkYi+ddXzy05KQ04Dpp/aDK YDCwoNs83zqbxF/iwdbxRXEfCQl6ng== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:40 2026 by rpki-client