This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer File: U8kSoEEbsBdFBwktDKNaka15kFw.cer (raw, json) Hash identifier: Wh2As6FCCl1oIagN5sR9xyClYdCk6fwFzfvT1Pdi4ls= Subject key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E392734B92A7F4297B247BD1A5C06CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.59.136.0/22 IP: 2a07:cb80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:34:b9:2a:7f:42:97:b2:47:bd:1a:5c:06:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c912a0411bb0174507092d0ca35a91ad79905c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:36:14:7e:b1:7c:61:46:de:0f:5d:fa:04: a5:e5:82:7a:ee:b6:b4:ac:f9:88:f5:35:31:ff:4d: cf:9c:4b:b6:55:3b:b4:15:98:14:30:2a:22:44:a8: 83:d6:0d:e3:8d:64:14:dc:dc:1a:22:41:9e:4f:da: 50:83:44:02:e6:42:4c:8f:80:1b:81:74:84:f9:1e: ab:4f:a2:a3:cd:02:c1:03:16:fd:27:a0:df:7b:e9: dc:b8:3e:5f:8e:9e:9b:f1:6f:3d:63:90:a8:6c:53: ca:55:09:e7:f6:0b:0a:7c:4b:47:ef:1b:4d:26:8a: 6e:0d:a6:68:a8:df:48:48:83:20:f9:a1:c0:94:70: 52:0a:7b:1e:6d:3a:8c:6d:80:7e:6d:10:39:08:c3: 8e:8b:ac:ad:37:1f:d9:9e:8f:79:a8:f7:a2:32:5b: 84:e8:24:67:02:99:47:e6:b2:f8:94:2c:4a:7f:83: 00:58:7a:78:5c:ee:95:26:44:a1:38:e5:e1:37:c5: b2:ba:ed:75:c8:78:7e:bc:2a:a7:f6:66:d0:e1:f2: 16:cb:d2:36:03:ca:b8:ff:fe:5e:6b:a1:63:54:f2: ff:c1:cc:5f:6e:2e:69:be:aa:9d:4a:cb:1a:c6:79: 57:13:9e:93:c9:0c:fd:90:6f:1f:81:b8:2a:68:67: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.136.0/22 IPv6: 2a07:cb80::/29 Signature Algorithm: sha256WithRSAEncryption 47:d1:d8:82:bd:28:84:03:32:ec:95:57:c7:0a:ce:bf:99:b9: 23:97:dc:dc:89:c0:97:54:cd:0b:8d:79:08:db:49:8e:e0:1f: 98:05:45:34:35:c1:c1:cb:9e:ea:f3:c0:19:58:34:df:0e:9e: 12:17:8a:d6:6c:35:84:37:f3:8d:01:c8:db:1f:b1:fa:d2:7d: c4:51:56:54:cf:b9:6b:06:58:de:17:08:02:4f:af:81:e6:5c: a9:c3:90:ec:e9:57:53:03:84:54:bf:1e:11:b5:12:1a:1d:e0: cb:21:3b:07:57:28:65:45:0b:a0:6f:21:3b:ea:4b:fe:56:1a: cb:24:75:ec:fc:98:49:3e:13:7f:c4:f4:f3:44:96:bf:c4:b5: 6b:5d:a9:c3:db:da:5a:37:29:a1:61:65:5e:81:72:dc:06:a8: 1d:ed:c7:c9:cd:f8:b1:41:4e:3a:b0:4b:9d:85:a1:65:2a:bd: 32:42:39:10:78:d8:08:16:f3:cf:d4:97:47:3d:21:5a:a1:bb: e8:f9:af:33:2f:96:78:c3:03:11:6d:78:5e:76:3e:29:c9:d9: ab:ff:aa:a3:c6:54:3d:d4:d9:4f:06:c0:2c:d4:1c:6d:e7:25: 32:47:0d:bf:18:10:ab:a7:10:35:b5:91:9d:7e:91:1d:98:b7: a8:47:32:57 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OSc0uSp/QpeyR70aXAbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2M5MTJhMDQxMWJiMDE3NDUwNzA5MmQwY2EzNWE5MWFkNzk5MDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi802FH6xfGFG3g9d+gSl5YJ67ra0 rPmI9TUx/03PnEu2VTu0FZgUMCoiRKiD1g3jjWQU3NwaIkGeT9pQg0QC5kJMj4Ab gXSE+R6rT6KjzQLBAxb9J6Dfe+ncuD5fjp6b8W89Y5CobFPKVQnn9gsKfEtH7xtN JopuDaZoqN9ISIMg+aHAlHBSCnsebTqMbYB+bRA5CMOOi6ytNx/Zno95qPeiMluE 6CRnAplH5rL4lCxKf4MAWHp4XO6VJkShOOXhN8Wyuu11yHh+vCqn9mbQ4fIWy9I2 A8q4//5ea6FjVPL/wcxfbi5pvqqdSssaxnlXE56TyQz9kG8fgbgqaGcrEQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFPJEqBBG7AXRQcJLQyjWpGteZBcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2Q3N2U2 MC04OTE2LTRmOTYtOGVkMC1lMjFjNDM2YjYyZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvZDc3ZTYw LTg5MTYtNGY5Ni04ZWQwLWUyMWM0MzZiNjJlZi8xL1U4a1NvRUVic0JkRkJ3a3RE S05ha2ExNWtGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwjuIMA0EAgACMAcDBQMqB8uAMA0GCSqGSIb3 DQEBCwUAA4IBAQBH0diCvSiEAzLslVfHCs6/mbkjl9zcicCXVM0LjXkI20mO4B+Y BUU0NcHBy57q88AZWDTfDp4SF4rWbDWEN/ONAcjbH7H60n3EUVZUz7lrBljeFwgC T6+B5lypw5Ds6VdTA4RUvx4RtRIaHeDLITsHVyhlRQugbyE76kv+VhrLJHXs/JhJ PhN/xPTzRJa/xLVrXanD29paNymhYWVegXLcBqgd7cfJzfixQU46sEudhaFlKr0y QjkQeNgIFvPP1JdHPSFaobvo+a8zL5Z4wwMRbXhedj4pydmr/6qjxlQ91NlPBsAs 1Bxt5yUyRw2/GBCrpxA1tZGdfpEdmLeoRzJX -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:56 2026 by rpki-client