This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer File: U-8ohOShM1XbZJo0k1J8RCKJc7g.cer (raw, json) Hash identifier: hNMz6ZOTjtaZMuVUtxMDRntoAm65QnhYOOU3sG4kf2w= Subject key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE218E3E2E7D3E498E9655D01F2AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202591 IP: 45.154.164.0/22 IP: 92.119.28.0/22 IP: 185.150.184.0/22 IP: 2a07:7280::/29 IP: 2a09:b340::/29 IP: 2a0f:bd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e2:18:e3:e2:e7:d3:e4:98:e9:65:5d:01:f2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ef2884e4a13355db649a3493527c44228973b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:d4:16:ec:be:4c:02:b7:1e:fa:ce:74:01: 5a:af:16:09:92:44:da:e5:3f:6f:9f:e5:f0:c3:e3: 83:e8:c5:84:61:44:76:06:1c:21:6d:76:b6:51:cd: bf:9f:85:56:ae:ce:17:e8:5a:5d:a7:68:fb:76:00: d7:58:94:2c:5d:79:b9:f7:60:c2:63:65:82:f5:89: f6:96:a1:0e:d6:34:57:3f:e6:8e:38:37:0a:10:c9: cc:1d:e7:2c:51:ef:d3:e8:d5:72:b0:4f:81:32:33: be:4f:5c:e0:90:b9:ee:48:01:5f:ff:05:c3:00:d6: cf:67:88:0c:98:da:c3:3b:2c:1d:34:19:da:e0:50: fd:5c:dd:4d:ec:cb:9a:1e:55:27:e6:d5:d3:21:45: fa:07:33:91:bb:e7:c8:33:fd:24:ac:5a:49:8d:80: 08:d4:f7:f2:d5:c5:83:c6:97:bf:4f:ad:6a:ac:e7: 55:0c:12:14:33:b5:b5:46:2e:af:08:52:1b:aa:f6: a2:13:a6:e5:11:18:82:3b:97:1c:8b:6e:f0:2c:09: 81:aa:e9:4a:79:32:fd:35:d6:27:1f:e1:65:4b:28: 53:36:0f:e7:74:e4:3b:89:1c:37:6d:c5:8d:94:1a: 39:6e:71:9e:64:24:9e:9f:e1:cd:c1:fc:f6:27:d6: 03:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.164.0/22 92.119.28.0/22 185.150.184.0/22 IPv6: 2a07:7280::/29 2a09:b340::/29 2a0f:bd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202591 Signature Algorithm: sha256WithRSAEncryption 39:ed:03:b6:f3:30:7e:2a:fc:aa:b7:72:77:09:73:68:0e:62: d8:9a:2e:f8:32:91:fe:6a:fc:23:e2:df:b6:4b:cb:3d:70:29: 43:d5:10:db:ee:c1:a1:75:34:15:39:79:4a:af:df:f1:f2:6b: ee:1b:e7:b1:42:15:2e:c3:da:20:d1:3a:17:69:aa:64:81:79: e3:4a:e7:ea:1c:6b:03:72:fa:c3:26:56:09:ae:e0:3c:f1:4a: 65:fb:9f:8e:50:7b:b4:ad:c7:94:59:49:c8:3d:77:cc:e3:e5: 2a:c4:41:79:35:28:ae:05:2a:2c:42:05:9b:5a:5a:38:6d:65: 44:b9:e9:45:99:f4:99:d4:98:b5:df:b6:41:f8:4e:7a:6a:e6: bc:24:49:0d:26:af:07:77:7f:d5:44:63:6b:98:94:4c:18:23: f4:d2:f7:3a:d7:3b:08:b0:ce:a0:2c:e7:6a:f7:1e:32:2d:61: f0:7d:94:46:be:51:6c:ef:12:2a:56:7d:70:7a:14:5c:58:67: 52:29:1e:54:4d:7c:d8:33:f1:df:90:c3:19:28:38:9f:24:bc: a4:0c:c4:5e:03:7a:10:4d:88:25:9f:fe:0b:1f:a7:6a:25:3d: be:d3:14:57:58:16:8f:81:a0:ae:f5:d2:cc:4e:67:0d:b1:3e: f6:db:3a:20 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt87OIY4+Ln0+SY6WVdAfKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2VmMjg4NGU0YTEzMzU1ZGI2NDlhMzQ5MzUyN2M0NDIyODk3M2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAzUFuy+TAK3HvrOdAFarxYJkkTa 5T9vn+Xww+OD6MWEYUR2BhwhbXa2Uc2/n4VWrs4X6Fpdp2j7dgDXWJQsXXm592DC Y2WC9Yn2lqEO1jRXP+aOODcKEMnMHecsUe/T6NVysE+BMjO+T1zgkLnuSAFf/wXD ANbPZ4gMmNrDOywdNBna4FD9XN1N7MuaHlUn5tXTIUX6BzORu+fIM/0krFpJjYAI 1Pfy1cWDxpe/T61qrOdVDBIUM7W1Ri6vCFIbqvaiE6blERiCO5cci27wLAmBqulK eTL9NdYnH+FlSyhTNg/ndOQ7iRw3bcWNlBo5bnGeZCSen+HNwfz2J9YDQwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFFPvKITkoTNV22SaNJNSfEQiiXO4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzEzYTU3 Yy1jYzRmLTQ1YmMtYWY5Zi05MzY3ZTQyMzg5ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTNhNTdj LWNjNGYtNDViYy1hZjlmLTkzNjdlNDIzODlkOS8xL1UtOG9oT1NoTTFYYlpKbzBr MUo4UkNLSmM3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCLZqkAwQCXHccAwQCuZa4MBsEAgACMBUDBQMq B3KAAwUDKgmzQAMFAyoPvQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxdfMA0G CSqGSIb3DQEBCwUAA4IBAQA57QO28zB+Kvyqt3J3CXNoDmLYmi74MpH+avwj4t+2 S8s9cClD1RDb7sGhdTQVOXlKr9/x8mvuG+exQhUuw9og0ToXaapkgXnjSufqHGsD cvrDJlYJruA88Upl+5+OUHu0rceUWUnIPXfM4+UqxEF5NSiuBSosQgWbWlo4bWVE uelFmfSZ1Ji137ZB+E56aua8JEkNJq8Hd3/VRGNrmJRMGCP00vc61zsIsM6gLOdq 9x4yLWHwfZRGvlFs7xIqVn1wehRcWGdSKR5UTXzYM/HfkMMZKDifJLykDMReA3oQ TYgln/4LH6dqJT2+0xRXWBaPgaCu9dLMTmcNsT722zog -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:47 2026 by rpki-client