This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer File: u8VfskrVVuBCAmUfbVqLJ9W-35c.cer (raw, json) Hash identifier: VIV0tbN7SF8pFhFlpzJj+7+AqAj0TMYeabcQU6UV3bs= Subject key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC51FD1AE40B803C69D604E059C79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213319 IP: 185.168.228.0/22 IP: 2a0b:f080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c5:1f:d1:ae:40:b8:03:c6:9d:60:4e:05:9c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:6b:4f:02:98:65:0d:48:31:69:4b:5c:ba: dd:2e:dd:ef:03:ad:c6:c4:25:4e:3f:37:29:99:a4: 03:9f:ee:04:ba:52:b0:51:a0:a1:b6:08:be:e7:fb: 8c:be:31:e8:56:24:72:2f:66:21:b2:e9:61:d4:29: a3:22:27:9f:a8:92:89:0f:a7:b8:11:31:8a:cb:29: 5a:99:a9:7d:34:af:b8:13:de:bf:4e:49:73:03:6f: 5a:41:8f:4d:a4:39:49:30:5b:af:ef:47:39:93:c6: ac:41:5e:5c:17:8b:2e:f6:cc:8c:90:ac:95:05:43: 25:f8:a1:e4:65:1a:d5:93:4d:68:77:f7:c0:7c:e5: a9:8b:1e:d0:ce:28:28:2d:89:10:a3:46:38:a5:dc: 38:54:94:28:26:05:5a:b3:89:04:63:c7:ff:35:1f: ec:05:75:e2:8e:2f:91:e7:9d:19:de:88:a2:2c:2b: 1b:2e:b2:f1:f5:3e:05:e2:04:38:a9:31:f5:62:5a: e6:ab:ee:fe:d5:4a:0e:69:c7:89:01:9d:d1:6d:a8: ee:42:99:86:39:32:bd:0d:12:ee:12:fe:bf:6f:ee: a3:61:da:4b:45:d1:2f:9e:22:31:50:a0:2f:8a:ed: 43:01:e7:4c:8f:48:36:7d:2f:e4:33:fb:17:54:5c: 88:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.228.0/22 IPv6: 2a0b:f080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213319 Signature Algorithm: sha256WithRSAEncryption 10:ad:88:58:9e:8e:3b:76:fd:d4:0a:c3:24:05:47:82:e2:ae: e7:63:55:c6:a5:ee:db:da:45:13:db:09:78:c7:c9:e9:61:c1: 11:18:fd:4b:36:82:93:72:9c:1e:eb:94:03:68:b0:90:48:29: df:a5:1e:a6:70:73:cd:29:37:73:65:c0:43:b9:b4:72:e9:fc: e1:3a:bf:53:16:c3:6f:c4:95:44:d2:19:84:0c:d8:aa:0d:30: 48:5b:8a:58:96:2c:92:a8:7c:13:81:aa:5a:bf:72:c5:1b:81: d9:4a:2b:c9:17:43:2b:07:24:3e:e4:0d:f3:81:b6:07:34:55: 5d:45:dd:08:5d:59:cf:10:b0:6f:b8:c4:a2:00:06:4f:89:23: b5:55:02:1b:17:2b:9b:53:c5:f7:f7:0d:62:44:d9:7e:aa:b3: 45:8c:56:26:72:aa:f0:ee:90:87:ef:b6:2e:64:cc:38:cf:82: 61:90:26:63:25:c5:45:cb:56:da:fa:e7:11:27:70:7b:57:f0: 6a:ea:41:70:8f:2c:93:47:91:f8:22:3c:1d:0e:19:14:10:34: a1:bd:31:47:d5:d4:82:38:4a:5b:db:c8:76:7a:72:d7:ff:e8: 40:fa:91:c8:0a:f3:e1:25:79:33:6f:0f:ee:89:92:c4:d5:8a: ae:36:0e:4c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57MUf0a5AuAPGnWBOBZx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmM1NWZiMjRhZDU1NmUwNDIwMjY1MWY2ZDVhOGIyN2Q1YmVkZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt45rTwKYZQ1IMWlLXLrdLt3vA63G xCVOPzcpmaQDn+4EulKwUaChtgi+5/uMvjHoViRyL2Yhsulh1CmjIiefqJKJD6e4 ETGKyylamal9NK+4E96/TklzA29aQY9NpDlJMFuv70c5k8asQV5cF4su9syMkKyV BUMl+KHkZRrVk01od/fAfOWpix7QzigoLYkQo0Y4pdw4VJQoJgVas4kEY8f/NR/s BXXiji+R550Z3oiiLCsbLrLx9T4F4gQ4qTH1Ylrmq+7+1UoOaceJAZ3RbajuQpmG OTK9DRLuEv6/b+6jYdpLRdEvniIxUKAviu1DAedMj0g2fS/kM/sXVFyIwwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLvFX7JK1VbgQgJlH21aiyfVvt+XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzQ2OTIy Zi01Y2I2LTRkOTgtYjRmYy05M2JkNWU0MDhmOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNDY5MjJm LTVjYjYtNGQ5OC1iNGZjLTkzYmQ1ZTQwOGY5MS8xL3U4VmZza3JWVnVCQ0FtVWZi VnFMSjlXLTM1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuajkMA0EAgACMAcDBQAqC/CAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBRzANBgkqhkiG9w0BAQsFAAOCAQEAEK2IWJ6OO3b9 1ArDJAVHguKu52NVxqXu29pFE9sJeMfJ6WHBERj9SzaCk3KcHuuUA2iwkEgp36Ue pnBzzSk3c2XAQ7m0cun84Tq/UxbDb8SVRNIZhAzYqg0wSFuKWJYskqh8E4GqWr9y xRuB2UoryRdDKwckPuQN84G2BzRVXUXdCF1ZzxCwb7jEogAGT4kjtVUCGxcrm1PF 9/cNYkTZfqqzRYxWJnKq8O6Qh++2LmTMOM+CYZAmYyXFRctW2vrnESdwe1fwaupB cI8sk0eR+CI8HQ4ZFBA0ob0xR9XUgjhKW9vIdnpy1//oQPqRyArz4SV5M28P7omS xNWKrjYOTA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:35 2026 by rpki-client