This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer File: uSEnfz55VKSvVSCpkEL7CJOvgE0.cer (raw, json) Hash identifier: nsHghPSYMRg7SJ1mHAnctDjSe4yjlylCdve74YmDePs= Subject key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385BA598C500E864B6DA15B8A71F58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205107 IP: 91.212.170.0/24 IP: 185.230.156.0/22 IP: 193.34.198.128/25 IP: 195.88.232.0/23 IP: 2001:678:570::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5b:a5:98:c5:00:e8:64:b6:da:15:b8:a7:1f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b921277f3e7954a4af5520a99042fb0893af804d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:c3:f1:a3:fa:ad:1f:45:71:ec:84:66:d3: 17:18:2d:54:71:d1:2d:6d:3b:de:35:fc:91:81:7a: bb:50:a9:0d:f3:3f:eb:1b:48:2e:17:17:f6:54:c7: 8c:18:04:fc:2d:98:27:20:ce:61:5e:c9:0e:50:4c: 2b:c5:54:6b:31:b3:35:8a:22:fb:2a:bc:83:1b:cd: 34:c0:60:db:b8:ba:95:32:47:35:83:2e:be:67:3c: 96:db:d1:f6:48:5d:98:1e:98:dc:de:3a:79:0b:2e: dd:c6:3d:7f:8d:79:59:d6:c5:47:56:17:a3:55:72: 49:2d:56:99:80:6f:dd:2d:c1:69:37:0b:b9:83:cb: 84:7b:20:ac:b1:d9:88:4a:b9:bf:26:a3:44:3e:da: b2:f0:de:83:12:a0:80:a1:ed:44:11:27:ef:1a:c5: b0:d7:69:bd:0b:07:0a:2e:dc:31:b5:e9:30:00:39: 4b:63:97:04:66:fc:2c:a6:91:3b:d1:cc:f3:3c:4c: 71:1a:51:d1:a0:48:c9:37:78:e2:bb:c9:3b:77:b8: 1f:70:b2:86:fb:d3:af:42:dd:f7:6c:84:fe:7e:2e: 08:07:b9:bd:12:50:00:37:c2:66:fa:06:b7:ea:e1: c7:d8:92:01:30:28:11:2e:16:d6:34:ac:88:fb:5c: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.170.0/24 185.230.156.0/22 193.34.198.128/25 195.88.232.0/23 IPv6: 2001:678:570::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205107 Signature Algorithm: sha256WithRSAEncryption ae:52:ab:8b:4d:60:8b:94:66:47:4a:68:b0:19:10:d7:3f:e6: 86:90:21:8d:c7:c8:ee:c9:53:44:43:6b:59:44:7a:f6:83:d5: fa:4d:68:ee:de:6e:f8:67:0b:3f:00:c3:ce:f8:ee:e4:88:b3: a3:0b:32:7a:0e:ad:3e:f9:39:e6:80:69:7c:97:21:e8:bb:3f: bf:d9:06:6f:6a:23:3c:ab:5c:9a:b8:26:b8:0b:c5:07:fa:2c: 39:19:10:d2:7e:d8:d3:dd:33:24:ae:37:b6:e0:80:d1:16:a2: fa:de:50:7d:5e:9f:94:29:31:8b:28:24:16:d8:b2:27:88:a5: 49:0e:d1:8c:03:9a:0e:6a:87:eb:3c:1c:47:17:bc:02:e8:35: bf:05:86:b3:ed:37:23:1f:d4:f6:71:fa:b2:3f:12:24:3c:db: d6:09:34:37:76:27:fc:9e:8d:df:ae:67:d2:5a:1a:70:5d:34: 9a:c9:da:81:7f:5c:1e:38:40:13:47:d1:08:44:10:54:e5:c6: db:71:65:f9:39:9c:70:a9:9c:c3:33:43:a6:b3:69:65:b2:af: a9:44:2a:f5:85:f5:e5:ba:15:5c:88:1c:f4:49:c3:fd:a1:df: 90:af:c8:16:2e:64:68:41:0e:b2:3d:02:10:25:9a:b5:5b:41: 60:34:3a:fd -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt+OFulmMUA6GS22hW4px9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTIxMjc3ZjNlNzk1NGE0YWY1NTIwYTk5MDQyZmIwODkzYWY4MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiozD8aP6rR9FceyEZtMXGC1UcdEt bTveNfyRgXq7UKkN8z/rG0guFxf2VMeMGAT8LZgnIM5hXskOUEwrxVRrMbM1iiL7 KryDG800wGDbuLqVMkc1gy6+ZzyW29H2SF2YHpjc3jp5Cy7dxj1/jXlZ1sVHVhej VXJJLVaZgG/dLcFpNwu5g8uEeyCssdmISrm/JqNEPtqy8N6DEqCAoe1EESfvGsWw 12m9CwcKLtwxtekwADlLY5cEZvwsppE70czzPExxGlHRoEjJN3jiu8k7d7gfcLKG +9OvQt33bIT+fi4IB7m9ElAAN8Jm+ga36uHH2JIBMCgRLhbWNKyI+1xMRwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFLkhJ38+eVSkr1UgqZBC+wiTr4BNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzhjY2Jj Yy1jZDUxLTQ0YWUtOGYwNS0zNmZkMjMzNTE0ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvOGNjYmNj LWNkNTEtNDRhZS04ZjA1LTM2ZmQyMzM1MTRmOS8xL3VTRW5mejU1VktTdlZTQ3Br RUw3Q0pPdmdFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAfBAIAATAZAwQAW9SqAwQCueacAwUHwSLGgAMEAcNY6DAPBAIA AjAJAwcAIAEGeAVwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhMzANBgkqhkiG 9w0BAQsFAAOCAQEArlKri01gi5RmR0posBkQ1z/mhpAhjcfI7slTRENrWUR69oPV +k1o7t5u+GcLPwDDzvju5Iizowsyeg6tPvk55oBpfJch6Ls/v9kGb2ojPKtcmrgm uAvFB/osORkQ0n7Y090zJK43tuCA0Rai+t5QfV6flCkxiygkFtiyJ4ilSQ7RjAOa DmqH6zwcRxe8Aug1vwWGs+03Ix/U9nH6sj8SJDzb1gk0N3Yn/J6N365n0loacF00 msnagX9cHjhAE0fRCEQQVOXG23Fl+TmccKmcwzNDprNpZbKvqUQq9YX15boVXIgc 9EnD/aHfkK/IFi5kaEEOsj0CECWatVtBYDQ6/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:42 2026 by rpki-client