This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer File: UsSOG7ZyzaaEZADov41taWg1178.cer (raw, json) Hash identifier: +eiQVRbb2FCUWQQAuNpswYOD57EmjS4D+iFR5h2Qzcg= Subject key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A103AF3410F85CAA11CF00C828F4E7219 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 23 Oct 2025 08:41:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209378 IP: 45.86.172.0/22 IP: 85.208.0.0/22 IP: 89.28.208.0/21 IP: 2a09:7f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:10:3a:f3:41:0f:85:ca:a1:1c:f0:0c:82:8f:4e:72:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 23 08:41:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:b1:e9:b9:24:67:5a:de:ce:49:09:81:8d: f1:21:a1:85:99:b6:b7:48:62:75:55:92:f6:d0:56: 1b:42:1d:b2:6f:f6:55:23:15:bc:56:fa:3f:5e:b6: 73:d9:b6:2d:25:a8:09:0c:9a:eb:0c:d4:88:cc:07: 02:26:93:e5:05:8a:6e:f3:4b:e0:e1:2d:9f:49:fd: 58:35:bf:12:9b:e9:b7:e2:58:12:06:65:de:a5:cb: 38:0d:5d:1e:de:72:37:53:35:58:27:dc:90:3d:c8: 55:0d:c5:ef:7d:18:57:ca:ba:84:47:76:39:2d:ad: c2:5c:d7:ba:66:be:b0:b4:14:46:d9:d4:4f:a5:86: 23:84:c4:aa:b6:a2:1a:af:78:a0:fa:46:de:a8:39: 12:c2:4b:0f:ee:ba:52:6a:bd:b0:7e:40:bf:dc:1c: 6a:f4:6a:e6:8a:f6:6b:b3:a7:ae:f6:04:d3:e8:32: 5c:bb:ec:d1:a1:1d:ab:90:bc:d5:f4:1a:fa:67:56: d0:67:95:c8:8c:cb:96:40:3f:a2:2a:fa:41:af:ff: 9c:60:3d:0a:a2:d1:c4:97:65:a3:1c:8a:9d:c5:62: d7:28:ff:fd:bf:4a:6b:1f:aa:4c:4e:b2:8a:86:40: 70:67:ab:53:84:1e:29:e7:fc:fe:4a:d4:91:c0:ab: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.172.0/22 85.208.0.0/22 89.28.208.0/21 IPv6: 2a09:7f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209378 Signature Algorithm: sha256WithRSAEncryption 30:b1:97:19:7c:94:22:04:01:0f:13:3d:3b:f8:d6:cb:50:3b: 62:23:3f:e7:2d:dd:fc:b6:80:2f:3e:d5:74:2a:35:a7:97:72: 46:ca:45:66:b8:88:6f:a3:ce:33:d8:9d:45:f9:d8:cc:ec:57: f5:df:e1:b6:15:df:58:f7:4f:c1:5b:6e:8e:3f:10:32:3b:29: cb:de:7e:16:b6:e7:10:7a:71:ae:d7:10:f8:2f:15:40:a4:be: 06:3e:8b:ab:0d:49:92:a4:fe:0f:bd:87:a4:20:e8:62:6e:68: 7c:b9:9a:c9:b4:75:55:05:0c:44:aa:ed:dd:d7:e5:17:f9:34: 47:9e:7b:c3:c9:ea:35:35:ca:8f:db:f6:1c:b4:31:b7:fd:22: 8b:f9:30:40:ae:da:97:21:e8:8a:56:89:44:1b:40:98:0e:e6: ee:5b:2d:d7:ee:7b:1b:34:53:63:2a:61:f5:b4:0f:19:f0:20: 59:4c:ec:81:08:84:fd:0c:d9:b4:0a:f1:e3:1f:01:86:ba:52: c1:e1:75:18:e4:85:2f:e6:12:00:e9:08:fd:0d:82:12:4b:ae: 2f:22:b2:58:3f:a0:ca:21:1b:8f:e2:fa:5f:a0:e8:f2:a5:8f: 50:5f:ec:a5:36:2d:94:97:0a:a5:b8:24:f2:87:18:62:45:86: 64:31:ac:e3 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZoQOvNBD4XKoRzwDIKPTnIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDIzMDg0MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmM0OGUxYmI2NzJjZGE2ODQ2NDAwZThiZjhkNmQ2OTY4MzVkN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKSx6bkkZ1rezkkJgY3xIaGFmba3 SGJ1VZL20FYbQh2yb/ZVIxW8Vvo/XrZz2bYtJagJDJrrDNSIzAcCJpPlBYpu80vg 4S2fSf1YNb8Sm+m34lgSBmXepcs4DV0e3nI3UzVYJ9yQPchVDcXvfRhXyrqER3Y5 La3CXNe6Zr6wtBRG2dRPpYYjhMSqtqIar3ig+kbeqDkSwksP7rpSar2wfkC/3Bxq 9GrmivZrs6eu9gTT6DJcu+zRoR2rkLzV9Br6Z1bQZ5XIjMuWQD+iKvpBr/+cYD0K otHEl2WjHIqdxWLXKP/9v0prH6pMTrKKhkBwZ6tThB4p5/z+StSRwKuEwQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFFLEjhu2cs2mhGQA6L+NbWloNde/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2E1ZTk0 Yy0wOGJlLTRmY2UtOGVjOS0xOGVjZTM2ODI2NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYTVlOTRj LTA4YmUtNGZjZS04ZWM5LTE4ZWNlMzY4MjY2Zi8xL1VzU09HN1p5emFhRVpBRG92 NDF0YVdnMTE3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLVasAwQCVdAAAwQDWRzQMA0EAgACMAcDBQMq CX9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMx4jANBgkqhkiG9w0BAQsFAAOC AQEAMLGXGXyUIgQBDxM9O/jWy1A7YiM/5y3d/LaALz7VdCo1p5dyRspFZriIb6PO M9idRfnYzOxX9d/hthXfWPdPwVtujj8QMjspy95+FrbnEHpxrtcQ+C8VQKS+Bj6L qw1JkqT+D72HpCDoYm5ofLmaybR1VQUMRKrt3dflF/k0R557w8nqNTXKj9v2HLQx t/0ii/kwQK7alyHoilaJRBtAmA7m7lst1+57GzRTYyph9bQPGfAgWUzsgQiE/QzZ tArx4x8BhrpSweF1GOSFL+YSAOkI/Q2CEkuuLyKyWD+gyiEbj+L6X6Do8qWPUF/s pTYtlJcKpbgk8ocYYkWGZDGs4w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:19 2025 by rpki-client