This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer File: u0bPvakj-gZmDXLLwPIyBdweG5M.cer (raw, json) Hash identifier: W6ff4F8LpjbVeQWIbDa6TqtoHapfO5ZXm+tK3u6bOsM= Subject key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBD5CA6FD56D57B4D33CEB9B428D1A3F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 16:35:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205280 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:5c:a6:fd:56:d5:7b:4d:33:ce:b9:b4:28:d1:a3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 16:35:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:7a:c3:14:d0:31:f0:8c:ae:ff:bc:58:7d: 60:97:17:63:2a:b5:b0:6b:ef:5b:b0:0b:c3:ba:36: 2c:92:ed:47:7a:6a:95:21:d5:39:8a:47:cc:db:6d: ec:24:33:f6:bf:09:2b:14:16:87:25:82:93:f8:a6: 88:0d:b5:bc:ae:1a:26:e5:e5:4c:2c:1c:a8:ef:fb: af:e1:8c:f4:91:4b:d9:9b:83:66:67:56:51:44:9b: 4a:6b:b1:cf:83:36:ac:7c:0a:7a:e8:f8:7f:d9:dc: ee:3b:e6:7d:69:fb:43:a9:4b:a1:dc:49:b7:dd:61: b6:41:f0:8a:6c:11:31:04:f0:b3:52:e4:6b:25:db: 1e:26:8a:29:27:25:be:3e:67:ed:73:e2:09:23:71: ab:ce:ac:e8:ad:60:86:28:67:90:37:6d:70:fa:e2: 3e:67:db:c7:60:84:c2:7d:88:e6:a4:05:21:71:9f: 81:cd:4e:a2:a0:f8:1d:14:2e:37:35:2f:83:83:6a: 93:00:2e:a3:a6:18:6c:ab:7e:e7:e9:4b:d4:8f:5b: 87:8a:6e:f0:41:75:48:86:49:ce:da:a1:9d:38:ff: 49:e6:f1:9c:97:c8:b4:08:a4:d8:33:c9:eb:c0:28: 0a:50:3c:71:b3:d1:11:03:6b:19:78:e9:d8:3f:ad: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205280 Signature Algorithm: sha256WithRSAEncryption 6b:c2:e9:b9:8c:48:17:84:35:02:73:5e:c8:ea:e7:85:52:1d: 28:8f:37:2e:83:c7:d8:f0:6c:57:79:1c:99:ec:91:ad:5a:14: 4e:3a:b4:96:a6:db:94:e2:7d:f0:49:92:f0:8c:fd:52:4b:33: d5:c6:38:f1:14:6c:b6:32:fe:61:02:aa:b6:78:dc:77:c8:48: 86:00:e4:1b:02:05:cc:a6:98:95:fa:71:11:90:06:96:51:1e: 7c:d5:0a:25:18:de:0e:24:a7:01:48:40:d1:77:38:e1:3d:a6: 53:69:1f:fc:9d:17:cf:d4:aa:0e:98:e5:e8:ae:c8:48:74:aa: 8a:07:66:26:2e:0f:33:c6:ac:ce:8f:0d:10:e5:69:4e:3c:41: 9d:7f:1a:59:d4:16:7c:65:45:8a:0e:eb:c7:80:f8:87:74:f4: 0a:84:7a:c6:29:59:b3:72:55:02:46:0d:d2:62:3a:42:45:23: 13:ad:98:4a:89:04:6e:46:e0:d2:00:e9:2a:8f:dc:b5:e8:bc: af:b5:45:a7:b6:1f:91:05:a1:3e:26:71:c3:2c:dd:93:42:aa: de:40:b0:1c:45:41:db:d2:ff:85:85:62:d3:77:34:05:7d:29: 74:4a:54:ee:16:bb:56:72:a8:ef:84:14:ae:78:af:78:1d:60: fc:6e:af:b1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZu9XKb9VtV7TTPOubQo0aPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MTYzNTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ2Y2ZiZGE5MjNmYTA2NjYwZDcyY2JjMGYyMzIwNWRjMWUxYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYl6wxTQMfCMrv+8WH1glxdjKrWw a+9bsAvDujYsku1HemqVIdU5ikfM223sJDP2vwkrFBaHJYKT+KaIDbW8rhom5eVM LByo7/uv4Yz0kUvZm4NmZ1ZRRJtKa7HPgzasfAp66Ph/2dzuO+Z9aftDqUuh3Em3 3WG2QfCKbBExBPCzUuRrJdseJoopJyW+Pmftc+IJI3GrzqzorWCGKGeQN21w+uI+ Z9vHYITCfYjmpAUhcZ+BzU6ioPgdFC43NS+Dg2qTAC6jphhsq37n6UvUj1uHim7w QXVIhknO2qGdOP9J5vGcl8i0CKTYM8nrwCgKUDxxs9ERA2sZeOnYP60kRQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLtGz72pI/oGZg1yy8DyMgXcHhuTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2FjZjkz ZC1hNDU4LTQyMTktYmNhOS04OWM1ZDZkOGRjYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvYWNmOTNk LWE0NTgtNDIxOS1iY2E5LTg5YzVkNmQ4ZGNjMC8xL3UwYlB2YWtqLWdabURYTEx3 UEl5QmR3ZUc1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMh4DANBgkqhkiG9w0BAQsFAAOCAQEAa8LpuYxIF4Q1 AnNeyOrnhVIdKI83LoPH2PBsV3kcmeyRrVoUTjq0lqbblOJ98EmS8Iz9Uksz1cY4 8RRstjL+YQKqtnjcd8hIhgDkGwIFzKaYlfpxEZAGllEefNUKJRjeDiSnAUhA0Xc4 4T2mU2kf/J0Xz9SqDpjl6K7ISHSqigdmJi4PM8aszo8NEOVpTjxBnX8aWdQWfGVF ig7rx4D4h3T0CoR6xilZs3JVAkYN0mI6QkUjE62YSokEbkbg0gDpKo/ctei8r7VF p7YfkQWhPiZxwyzdk0Kq3kCwHEVB29L/hYVi03c0BX0pdEpU7ha7VnKo74QUrniv eB1g/G6vsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:19 2026 by rpki-client