This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer File: U8NcqD_N9xskTtgDrEaOFFPYJo8.cer (raw, json) Hash identifier: CXuTMNVNJdJTlVbtqjl3rfja88FjOpA1VhfCjntJ2Lk= Subject key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC3F6DBAA9F2D52B1F43F2F612707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201575 AS: 203647 AS: 215594 IP: 193.228.1.0/24 IP: 2a12:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c3:f6:db:aa:9f:2d:52:b1:f4:3f:2f:61:27:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:55:06:3b:7b:c2:7f:e5:dd:55:45:cf:20: 45:f0:89:34:fa:bd:39:bb:74:41:0e:98:26:8c:e5: 91:3b:f6:a3:5f:db:3d:fe:59:76:44:74:09:b2:07: 36:b1:d1:5c:c1:b8:99:c8:89:39:81:5f:0f:02:44: 30:64:30:84:17:00:1d:81:ac:bf:c7:10:d5:b0:db: 58:ee:ce:df:b3:63:bb:39:88:cd:7a:bb:f6:01:b3: bc:b9:bb:d8:93:c3:8f:e0:25:cc:49:f3:0a:51:5a: b2:e6:2c:95:27:d1:d4:72:e3:38:79:8f:8f:6b:a6: bb:23:33:66:1d:0f:e4:e7:88:98:d1:b7:28:ab:bd: da:42:4e:35:ae:8e:2d:a2:0f:0b:ce:44:d8:c4:ee: 61:48:50:f3:ce:7d:5a:67:cd:71:1e:f8:5b:78:dd: 24:b2:1c:f7:03:c6:76:56:ca:61:be:e7:4e:98:24: 1d:1a:11:25:03:9b:ea:6a:9d:e6:67:27:8d:98:70: 7d:45:94:f5:1f:bd:aa:57:3b:56:93:5f:ed:27:02: 49:f4:04:2b:f3:db:3f:7c:b5:f9:1f:08:8e:84:b3: 37:b9:d8:2c:34:d2:b3:d8:da:10:d5:6b:c5:22:5b: c1:cc:e3:2c:4f:a1:00:1c:ca:4c:64:bc:2b:10:72: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.1.0/24 IPv6: 2a12:e340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201575 203647 215594 Signature Algorithm: sha256WithRSAEncryption 54:0a:73:1e:a8:da:e5:ca:a3:5d:0e:48:cd:2b:ef:7d:a3:9c: 1e:a6:72:fb:50:52:4b:e1:f5:ce:23:1a:bd:5c:af:e1:87:30: 4d:08:5b:0a:90:7f:35:01:be:a1:7f:7a:74:29:a8:5d:aa:15: ec:43:e9:5b:a9:6c:06:e7:f7:d0:0b:12:8d:71:05:9e:11:0b: a9:09:11:2c:97:40:78:59:4c:ed:85:03:79:fb:81:68:a4:20: 01:31:cf:f6:f3:c0:a9:ba:73:a5:41:d4:a0:fa:6f:45:f8:c1: 45:15:e4:f7:6f:f1:a2:cd:5f:6f:ff:49:20:06:e7:43:aa:40: fb:17:d2:fb:7c:8d:d6:b0:35:91:b8:a7:73:fe:6b:d0:35:6f: 5f:ab:29:2c:ed:3e:da:ae:ac:ed:51:6a:2a:8a:74:0b:c4:f7: 08:b3:01:69:e9:f9:dd:22:c1:94:5b:0e:54:d6:fc:af:23:26: 89:ec:71:c1:c7:eb:a1:3e:49:23:79:70:49:6e:48:a1:f8:c2: e7:5c:68:75:13:4e:4f:80:35:94:0e:4b:ce:2a:c7:41:97:c7: 9e:67:03:1b:50:6d:eb:fe:59:e5:e6:eb:33:98:f0:9c:d6:81: 79:8c:b1:af:a5:48:e1:31:42:d5:3f:39:7f:99:37:89:bd:73: 3d:76:a7:2f -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt87cP226qfLVKx9D8vYScHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2MzNWNhODNmY2RmNzFiMjQ0ZWQ4MDNhYzQ2OGUxNDUzZDgyNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrRVBjt7wn/l3VVFzyBF8Ik0+r05 u3RBDpgmjOWRO/ajX9s9/ll2RHQJsgc2sdFcwbiZyIk5gV8PAkQwZDCEFwAdgay/ xxDVsNtY7s7fs2O7OYjNerv2AbO8ubvYk8OP4CXMSfMKUVqy5iyVJ9HUcuM4eY+P a6a7IzNmHQ/k54iY0bcoq73aQk41ro4tog8LzkTYxO5hSFDzzn1aZ81xHvhbeN0k shz3A8Z2VsphvudOmCQdGhElA5vqap3mZyeNmHB9RZT1H72qVztWk1/tJwJJ9AQr 89s/fLX5HwiOhLM3udgsNNKz2NoQ1WvFIlvBzOMsT6EAHMpMZLwrEHKqYwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFFPDXKg/zfcbJE7YA6xGjhRT2CaPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2ZlZjJl MC1iYTM3LTQ4MTItOTVhZC00MTFhMjcxMjE2NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZmVmMmUw LWJhMzctNDgxMi05NWFkLTQxMWEyNzEyMTY0ZC8xL1U4TmNxRF9OOXhza1R0Z0Ry RWFPRkZQWUpvOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAweQBMA0EAgACMAcDBQMqEuNAMCQGCCsGAQUF BwEIAQH/BBUwE6ARMA8CAwMTZwIDAxt/AgMDSiowDQYJKoZIhvcNAQELBQADggEB AFQKcx6o2uXKo10OSM0r732jnB6mcvtQUkvh9c4jGr1cr+GHME0IWwqQfzUBvqF/ enQpqF2qFexD6VupbAbn99ALEo1xBZ4RC6kJESyXQHhZTO2FA3n7gWikIAExz/bz wKm6c6VB1KD6b0X4wUUV5Pdv8aLNX2//SSAG50OqQPsX0vt8jdawNZG4p3P+a9A1 b1+rKSztPtqurO1RaiqKdAvE9wizAWnp+d0iwZRbDlTW/K8jJonsccHH66E+SSN5 cEluSKH4wudcaHUTTk+ANZQOS84qx0GXx55nAxtQbev+WeXm6zOY8JzWgXmMsa+l SOExQtU/OX+ZN4m9cz12py8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:42 2026 by rpki-client