This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/US7HYztuWDv6P6f_eEjxqp8oAIU.cer File: US7HYztuWDv6P6f_eEjxqp8oAIU.cer (raw, json) Hash identifier: VFgIZW7x6KnpFHHq5IvSLN8WbCvgOKrMJENjyT9n/go= Subject key identifier: 51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB4F265FA4E2889DE01F67AE440559F77 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 08:19:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 9111 IP: 193.228.231.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:f2:65:fa:4e:28:89:de:01:f6:7a:e4:40:55:9f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 08:19:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=512ec7633b6e583bfa3fa7ff7848f1aa9f280085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:ad:d2:fa:4f:ab:3f:ff:40:59:6d:8b:de: b0:d3:60:1b:48:95:fa:a9:e9:82:a2:35:69:ee:84: 5d:12:1c:a1:37:85:3c:94:30:84:f6:30:e5:21:a9: 56:74:24:6b:c5:30:e0:a3:f1:4e:9f:3a:20:f8:c1: f3:32:b5:9a:9a:f2:fb:1f:e1:0e:08:71:19:6a:08: 92:bc:71:0e:4c:00:25:a5:37:3e:e4:f0:5f:79:1e: 1b:5e:45:4e:b7:30:ad:c2:f0:12:d5:61:a5:e8:80: 25:6c:2b:d6:1a:2d:99:30:02:54:53:a8:cd:5a:73: 84:fc:fe:29:25:19:79:98:af:d5:10:8d:1b:ce:b0: 00:0d:37:7a:89:90:75:19:f6:6e:d8:a2:9d:42:9c: 9f:1a:66:b2:d5:b4:e7:b0:28:95:0d:65:b2:94:4e: b4:0b:85:06:d2:94:6b:4a:c9:3c:26:e8:e3:80:40: be:d4:1f:4c:ef:ca:71:31:db:73:da:68:65:d7:e0: 1e:ef:1f:85:1a:4c:3e:3c:55:29:23:88:53:a4:25: 98:42:95:f5:fc:ed:2f:76:7a:d7:87:b0:f8:9c:b3: 84:9e:6d:87:c8:16:7b:5c:ad:76:cf:14:0e:e3:42: 29:8f:4e:e3:48:18:0f:5a:9f:1e:9b:de:6f:86:7d: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2E:C7:63:3B:6E:58:3B:FA:3F:A7:FF:78:48:F1:AA:9F:28:00:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5224cc-e743-4a6e-98b5-41d3a84abccb/1/US7HYztuWDv6P6f_eEjxqp8oAIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.231.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9111 Signature Algorithm: sha256WithRSAEncryption 11:23:24:0c:ad:93:f2:d4:94:a8:4b:f8:ce:a9:e1:02:ea:eb: 76:5c:bf:2d:47:c7:7d:40:19:75:d6:b2:07:f7:3b:21:b1:a2: 8d:f4:9c:f9:68:18:09:f2:2f:03:bc:ed:a2:98:53:7c:4d:e5: 51:6e:83:8e:90:d2:92:a3:54:f1:28:ef:80:42:99:cb:34:8c: 2e:72:09:de:57:dd:80:21:14:55:0b:7b:7e:4b:56:c7:9e:cd: 53:0e:68:08:fd:22:e4:43:57:a1:b8:9a:c5:25:8e:a4:dd:3f: 88:b9:41:a6:df:24:49:e2:39:70:a2:97:d3:cd:42:8a:d7:d0: c0:7e:a6:e9:0d:46:9b:a1:99:65:32:4d:ee:6d:37:c1:6e:3a: 5d:8a:fa:b6:e9:8b:1e:16:b5:67:d8:ba:8d:83:d1:3f:fb:f1: a3:90:19:8f:80:3f:03:1a:39:cb:33:b2:80:f3:ae:56:8a:a7: 00:13:76:7d:d9:73:ed:1a:80:8e:ee:8c:61:23:63:90:2b:04: 06:33:f9:cb:f4:90:31:47:86:8a:01:7a:e7:76:28:e9:9f:4f: 61:4d:da:15:1a:29:39:9f:76:de:ba:15:12:98:cf:be:50:44: 2a:da:e3:a3:b9:68:e3:03:75:8c:39:f6:97:2d:a2:b9:65:19: b0:72:be:4b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZq08mX6TiiJ3gH2euRAVZ93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MDgxOTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTJlYzc2MzNiNmU1ODNiZmEzZmE3ZmY3ODQ4ZjFhYTlmMjgwMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Kt0vpPqz//QFlti96w02AbSJX6 qemCojVp7oRdEhyhN4U8lDCE9jDlIalWdCRrxTDgo/FOnzog+MHzMrWamvL7H+EO CHEZagiSvHEOTAAlpTc+5PBfeR4bXkVOtzCtwvAS1WGl6IAlbCvWGi2ZMAJUU6jN WnOE/P4pJRl5mK/VEI0bzrAADTd6iZB1GfZu2KKdQpyfGmay1bTnsCiVDWWylE60 C4UG0pRrSsk8JujjgEC+1B9M78pxMdtz2mhl1+Ae7x+FGkw+PFUpI4hTpCWYQpX1 /O0vdnrXh7D4nLOEnm2HyBZ7XK12zxQO40Ipj07jSBgPWp8em95vhn1mswIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFEux2M7blg7+j+n/3hI8aqfKACFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzUyMjRj Yy1lNzQzLTRhNmUtOThiNS00MWQzYTg0YWJjY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNTIyNGNj LWU3NDMtNGE2ZS05OGI1LTQxZDNhODRhYmNjYi8xL1VTN0hZenR1V0R2NlA2Zl9l RWp4cXA4b0FJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAweTnMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiOXMA0GCSqGSIb3DQEBCwUAA4IBAQARIyQMrZPy1JSoS/jOqeEC6ut2XL8tR8d9 QBl11rIH9zshsaKN9Jz5aBgJ8i8DvO2imFN8TeVRboOOkNKSo1TxKO+AQpnLNIwu cgneV92AIRRVC3t+S1bHns1TDmgI/SLkQ1ehuJrFJY6k3T+IuUGm3yRJ4jlwopfT zUKK19DAfqbpDUaboZllMk3ubTfBbjpdivq26YseFrVn2LqNg9E/+/GjkBmPgD8D GjnLM7KA865WiqcAE3Z92XPtGoCO7oxhI2OQKwQGM/nL9JAxR4aKAXrndijpn09h TdoVGik5n3beuhUSmM++UEQq2uOjuWjjA3WMOfaXLaK5ZRmwcr5L -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:23 2025 by rpki-client