This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer File: _utSjKSLH0R1gsVMz27XgHUbUdU.cer (raw, json) Hash identifier: GtHgkphU5mbXjxfts7+QJVSVZy91acC0tyDJy7lVpEM= Subject key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A0697FF58C227AF4AB003B99BA3F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215708 IP: 95.128.194.0/24 IP: 2a14:7f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:06:97:ff:58:c2:27:af:4a:b0:03:b9:9b:a3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:c0:90:85:4a:a4:55:87:de:6d:0e:aa:83: 18:9d:2f:e5:64:d3:8f:eb:d7:50:5d:30:8b:f4:39: 0a:34:97:b1:bd:31:99:36:af:93:80:4e:6d:06:49: 41:32:48:c7:9e:9f:1d:88:87:8c:2a:8b:cb:60:c4: 50:27:1f:6a:1c:b8:df:40:bb:ec:79:ff:f9:5a:96: 0d:57:be:3d:4e:26:0b:59:8d:5b:44:a9:02:c3:28: b8:f6:3e:0c:11:60:2a:88:e3:e1:b6:f4:5a:81:33: fb:2d:c8:82:ce:fa:88:d1:72:4b:86:58:ec:46:5c: 6d:a4:00:3d:73:29:f1:34:00:cc:f0:92:c4:0e:d9: 5e:ec:df:1d:ee:ad:32:fb:00:a2:47:9f:d6:f5:ea: 38:fb:4b:8d:21:74:c4:ae:41:aa:04:e0:68:54:c0: e1:a8:c6:17:1c:5f:91:ec:73:33:65:c0:8f:23:8c: a3:98:2d:4c:73:60:33:e6:46:d4:bc:7a:65:3d:16: 7d:9c:6a:86:18:54:20:a4:56:84:2a:92:44:91:44: c6:27:aa:cf:31:c3:8e:fd:08:c3:3a:15:06:72:79: 5c:68:dd:59:5e:3b:e5:a2:dc:a8:fc:fa:6f:8e:b6: 05:81:2f:46:e3:2c:d7:60:52:d5:17:e6:ad:ca:bc: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.194.0/24 IPv6: 2a14:7f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215708 Signature Algorithm: sha256WithRSAEncryption 50:00:ce:de:fd:1d:71:6d:43:0e:8e:c9:a6:0b:ef:58:66:d1: 36:ba:c7:32:ac:4b:a5:d3:c1:25:8a:1f:68:a4:d7:56:0e:62: 3d:b1:97:d3:34:68:4e:4b:a0:b5:22:73:55:11:52:70:0b:17: 41:52:ce:98:1c:31:5c:e4:a0:ed:de:f1:79:18:ca:57:61:8c: d3:60:d6:73:e8:8b:62:10:19:08:f6:d7:5e:e7:a8:6d:e1:94: 41:e9:47:45:28:e2:c5:43:cc:60:9b:f1:77:a3:52:2d:75:0f: fc:f1:ab:b6:55:be:28:00:ec:c3:4e:f6:f0:85:58:e4:e7:76: 86:f6:8a:78:0f:de:19:a6:a8:ab:e7:3d:71:65:7d:e3:c0:3b: aa:03:03:e0:2e:fa:9b:5e:16:38:bc:8d:73:41:d9:11:c8:d8: 05:b2:ec:61:72:23:c8:21:b4:30:91:45:66:6c:51:bb:73:40: 61:20:49:a6:44:f0:cb:26:8f:39:94:f3:a3:de:be:57:18:76: 1f:b6:c8:39:60:66:41:b3:74:4b:6f:35:e5:56:f9:69:61:73: 12:37:e4:d2:9a:43:cb:cb:88:b4:cd:20:22:37:bc:53:18:03: b3:6e:e5:85:91:b7:b3:4c:b1:f2:d0:5d:0c:df:e0:64:ba:e1: 60:ef:46:06 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WgaX/1jCJ69KsAO5m6P2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWViNTI4Y2E0OGIxZjQ0NzU4MmM1NGNjZjZlZDc4MDc1MWI1MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPjAkIVKpFWH3m0OqoMYnS/lZNOP 69dQXTCL9DkKNJexvTGZNq+TgE5tBklBMkjHnp8diIeMKovLYMRQJx9qHLjfQLvs ef/5WpYNV749TiYLWY1bRKkCwyi49j4MEWAqiOPhtvRagTP7LciCzvqI0XJLhljs RlxtpAA9cynxNADM8JLEDtle7N8d7q0y+wCiR5/W9eo4+0uNIXTErkGqBOBoVMDh qMYXHF+R7HMzZcCPI4yjmC1Mc2Az5kbUvHplPRZ9nGqGGFQgpFaEKpJEkUTGJ6rP McOO/QjDOhUGcnlcaN1ZXjvlotyo/PpvjrYFgS9G4yzXYFLVF+atyrxshQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP7rUoykix9EdYLFTM9u14B1G1HVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2M1Zjlk NS03ZjRhLTRlMmYtYmE0ZS03Mzg4ODZmZDRlZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYzVmOWQ1 LTdmNGEtNGUyZi1iYTRlLTczODg4NmZkNGVkZC8xL191dFNqS1NMSDBSMWdzVk16 MjdYZ0hVYlVkVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAX4DCMA0EAgACMAcDBQMqFH+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKnDANBgkqhkiG9w0BAQsFAAOCAQEAUADO3v0dcW1D Do7JpgvvWGbRNrrHMqxLpdPBJYofaKTXVg5iPbGX0zRoTkugtSJzVRFScAsXQVLO mBwxXOSg7d7xeRjKV2GM02DWc+iLYhAZCPbXXueobeGUQelHRSjixUPMYJvxd6NS LXUP/PGrtlW+KADsw0728IVY5Od2hvaKeA/eGaaoq+c9cWV948A7qgMD4C76m14W OLyNc0HZEcjYBbLsYXIjyCG0MJFFZmxRu3NAYSBJpkTwyyaPOZTzo96+Vxh2H7bI OWBmQbN0S2815Vb5aWFzEjfk0ppDy8uItM0gIje8UxgDs27lhZG3s0yx8tBdDN/g ZLrhYO9GBg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:05 2026 by rpki-client