This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer File: ur8nIaXXgzW3uX22OuxDXJyji8c.cer (raw, json) Hash identifier: aDmnEm0FmXIJn0s3KIHzidNtd8qfh65tkbTc2YJG8TE= Subject key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE1AA6613026FD660E3E725042FD7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198005 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e1:aa:66:13:02:6f:d6:60:e3:e7:25:04:2f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:62:91:49:6c:dd:32:9a:81:17:3e:5c:e5: c3:bb:ef:d9:55:84:92:fe:1e:01:08:b4:6f:8e:04: fc:86:68:dc:7d:b1:4d:b9:a8:a2:37:62:32:8b:7a: f4:c2:9e:64:31:f6:b6:da:ef:85:9b:c0:aa:08:02: fe:48:f5:8d:5f:34:c8:04:6f:5f:30:38:15:f2:b7: 2c:72:24:b4:50:60:e4:dd:dd:00:be:35:84:05:89: 9b:49:34:6f:8f:35:3b:54:a9:53:80:7f:c8:9d:06: 41:44:d3:d5:80:61:e4:a1:90:fe:0a:1e:e2:9a:1d: 22:e1:5f:40:e4:12:09:e0:83:b3:7e:35:40:51:95: 62:4a:eb:56:82:a7:8f:ed:54:e7:0e:9a:06:58:89: 49:47:f3:45:82:d5:c9:7d:4a:12:f8:39:b4:36:46: 02:59:d4:c8:82:f7:dc:e8:ff:16:52:36:2f:64:35: f7:b3:cf:0b:c0:71:18:76:93:86:39:da:43:87:1c: f3:d7:b6:64:15:6c:61:aa:01:dc:6c:8b:c7:ae:76: 6f:14:8a:b7:ce:d1:d7:cf:9e:cc:f3:46:aa:2c:1c: c6:57:c0:6d:11:b1:ff:09:e5:ab:7b:f1:47:25:a0: 08:94:38:b9:92:cb:ea:3b:33:cb:1a:4b:90:b7:d1: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198005 Signature Algorithm: sha256WithRSAEncryption 0e:36:a8:ba:f1:c7:35:62:d5:89:a7:51:cf:5e:a0:d5:19:8f: 57:05:cc:ed:2a:fa:f1:f3:22:ce:b2:7d:0e:2c:54:fd:b6:0e: d6:48:e8:f4:e7:12:1f:df:eb:31:5f:fe:9a:0d:6b:c9:78:2e: a3:81:cd:03:8a:1e:a2:59:40:d1:c9:3e:6a:e6:86:92:bf:0e: 57:08:88:91:7b:40:1b:2f:2e:42:cb:cf:49:3f:4e:5b:4d:0f: c3:16:1d:13:b5:bd:f8:97:01:26:df:13:7b:c1:92:33:3f:2a: e5:f9:f9:6f:df:97:6a:77:66:0c:26:ff:b3:22:84:5f:d4:e8: 52:88:33:1b:85:ac:1f:07:5d:ea:56:58:c6:80:49:ec:d5:71: 8a:0c:f0:65:07:18:16:f1:93:e3:49:57:41:74:00:ff:18:56: 46:42:4f:95:f5:87:ed:3a:a8:de:27:eb:1b:5e:de:87:cd:e7: ae:00:e4:49:c3:02:86:1b:fd:63:2a:3f:42:fd:35:47:63:08: 59:d0:04:60:30:44:67:ba:9c:29:bd:b5:ef:ff:fa:f8:9f:38: c1:09:1c:ba:3c:e0:1c:5e:b7:0b:3a:e7:e8:05:4d:be:9e:83: 17:25:31:9a:f8:65:a2:df:5f:ae:08:a3:4f:a6:f1:dc:03:95: 2b:05:4b:b9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9WuGqZhMCb9Zg4+clBC/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWJmMjcyMWE1ZDc4MzM1YjdiOTdkYjYzYWVjNDM1YzljYTM4YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3hikUls3TKagRc+XOXDu+/ZVYSS /h4BCLRvjgT8hmjcfbFNuaiiN2Iyi3r0wp5kMfa22u+Fm8CqCAL+SPWNXzTIBG9f MDgV8rcsciS0UGDk3d0AvjWEBYmbSTRvjzU7VKlTgH/InQZBRNPVgGHkoZD+Ch7i mh0i4V9A5BIJ4IOzfjVAUZViSutWgqeP7VTnDpoGWIlJR/NFgtXJfUoS+Dm0NkYC WdTIgvfc6P8WUjYvZDX3s88LwHEYdpOGOdpDhxzz17ZkFWxhqgHcbIvHrnZvFIq3 ztHXz57M80aqLBzGV8BtEbH/CeWre/FHJaAIlDi5ksvqOzPLGkuQt9EIiQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLq/JyGl14M1t7l9tjrsQ1yco4vHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2NmZDdh My00NjI0LTQwYmUtYmIyMy1kN2JmZjExOWZkNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvY2ZkN2Ez LTQ2MjQtNDBiZS1iYjIzLWQ3YmZmMTE5ZmQ1ZC8xL3VyOG5JYVhYZ3pXM3VYMjJP dXhEWEp5amk4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMFdTANBgkqhkiG9w0BAQsFAAOCAQEADjaouvHHNWLV iadRz16g1RmPVwXM7Sr68fMizrJ9DixU/bYO1kjo9OcSH9/rMV/+mg1ryXguo4HN A4oeollA0ck+auaGkr8OVwiIkXtAGy8uQsvPST9OW00PwxYdE7W9+JcBJt8Te8GS Mz8q5fn5b9+XandmDCb/syKEX9ToUogzG4WsHwdd6lZYxoBJ7NVxigzwZQcYFvGT 40lXQXQA/xhWRkJPlfWH7Tqo3ifrG17eh83nrgDkScMChhv9Yyo/Qv01R2MIWdAE YDBEZ7qcKb217//6+J84wQkcujzgHF63Czrn6AVNvp6DFyUxmvhlot9frgijT6bx 3AOVKwVLuQ== -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:10 2026 by rpki-client