This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer File: 8UHWZGmLcP-yom9oS0fetsjVmlM.cer (raw, json) Hash identifier: z8beCz3MMaXSMl76NaebCrc7b9ROx5a/aS6bY3pYpHY= Subject key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15CBC0F66D868AE327099B3566BBCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201336 IP: 109.71.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:c0:f6:6d:86:8a:e3:27:09:9b:35:66:bb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:6c:54:c1:97:59:c8:7f:25:6e:85:3e:b0: d8:77:57:6e:5f:89:83:f3:8b:34:fd:4b:d0:d9:ed: 0f:d0:16:b9:fb:4a:b0:fe:c8:d9:f6:6b:d4:9a:75: 89:3b:df:78:80:aa:ee:03:36:95:60:d8:9b:c6:bd: a0:19:c3:9d:b3:ed:1a:97:69:93:0c:05:f8:97:6d: e1:ef:fa:58:96:81:d7:fe:a7:0b:19:30:91:bf:76: ce:41:a1:ba:5b:12:bf:12:52:70:bd:45:d6:23:fe: fd:02:c3:4c:93:52:6e:ba:33:06:b9:c1:1d:9c:20: 13:30:d2:e1:c5:ba:ab:be:49:aa:e8:45:b2:c9:23: f3:cf:4a:da:dd:9b:e4:21:51:95:44:ae:30:0d:fa: db:ac:11:f7:3c:5c:c1:46:72:8c:8d:2b:d5:c6:e9: a4:ab:f1:be:78:3a:eb:e6:2b:8f:db:4f:ec:f5:fc: d1:e3:39:3b:f7:f8:0c:02:3f:de:b9:42:76:2e:d7: c3:3b:05:72:0a:de:58:dd:8f:99:4d:d0:87:3e:aa: 4f:cb:2c:24:13:05:db:db:00:3f:ce:31:8c:46:8e: cf:9a:0d:cb:8d:f8:01:ee:bf:e8:1e:27:ae:f8:7e: a6:50:81:b4:73:20:24:f6:9d:24:58:17:af:dc:bc: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201336 Signature Algorithm: sha256WithRSAEncryption 18:98:27:53:42:36:a5:4f:59:92:0f:5c:cf:f7:74:c3:45:e9: 27:95:4b:e5:41:17:0e:d1:f6:19:6e:b9:2b:dd:f4:9c:00:30: 23:65:84:67:8f:80:d8:f6:91:cc:3c:38:d3:e1:86:cb:3a:71: 7b:3f:2a:24:8b:eb:8a:d9:a5:64:7d:80:fa:d1:cf:c3:d8:bd: 2b:ba:71:5b:fa:db:7f:62:26:12:d6:ee:91:59:1d:f7:cc:dd: ee:ff:41:29:e8:33:53:4e:a2:47:fe:33:31:ac:35:b7:6c:8b: e4:58:e1:d3:b7:23:24:66:84:7a:08:98:03:c6:86:e0:47:52: 4d:01:a4:22:bb:93:dd:47:a8:ef:39:a0:c2:57:21:78:f0:7b: 34:86:4c:49:3b:d9:6e:87:f7:bc:04:1b:de:02:5a:3e:f2:7e: 4f:b2:b8:94:f3:d2:39:ed:fd:9d:e0:02:0a:d1:6b:9e:2c:1c: cd:c4:bf:3f:79:1e:c4:9c:3e:b2:fa:d5:eb:9f:b5:52:39:74: d0:9f:1f:aa:a4:ff:d2:3c:a3:27:e6:a4:ce:f4:22:ea:bf:cc: 9d:77:ff:8e:8e:83:71:e7:d9:3b:9a:e7:1c:69:9d:a7:44:50: a4:3d:97:26:17:15:e1:0d:e5:a5:01:c0:4f:65:5a:1d:ec:7d: 03:2c:7c:1f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FcvA9m2GiuMnCZs1ZrvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTQxZDY2NDY5OGI3MGZmYjJhMjZmNjg0YjQ3ZGViNmM4ZDU5YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdFsVMGXWch/JW6FPrDYd1duX4mD 84s0/UvQ2e0P0Ba5+0qw/sjZ9mvUmnWJO994gKruAzaVYNibxr2gGcOds+0al2mT DAX4l23h7/pYloHX/qcLGTCRv3bOQaG6WxK/ElJwvUXWI/79AsNMk1JuujMGucEd nCATMNLhxbqrvkmq6EWyySPzz0ra3ZvkIVGVRK4wDfrbrBH3PFzBRnKMjSvVxumk q/G+eDrr5iuP20/s9fzR4zk79/gMAj/euUJ2LtfDOwVyCt5Y3Y+ZTdCHPqpPyywk EwXb2wA/zjGMRo7Pmg3LjfgB7r/oHieu+H6mUIG0cyAk9p0kWBev3LygYQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPFB1mRpi3D/sqJvaEtH3rbI1ZpTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzJlOGFi ZS04ZTcwLTQ3MTUtOTFhZS05NjNkMTNmZDA5YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMmU4YWJl LThlNzAtNDcxNS05MWFlLTk2M2QxM2ZkMDliYi8xLzhVSFdaR21MY1AteW9tOW9T MGZldHNqVm1sTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCbUf4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMSeDANBgkqhkiG9w0BAQsFAAOCAQEAGJgnU0I2pU9Zkg9cz/d0w0XpJ5VL5UEX DtH2GW65K930nAAwI2WEZ4+A2PaRzDw40+GGyzpxez8qJIvritmlZH2A+tHPw9i9 K7pxW/rbf2ImEtbukVkd98zd7v9BKegzU06iR/4zMaw1t2yL5Fjh07cjJGaEegiY A8aG4EdSTQGkIruT3Ueo7zmgwlchePB7NIZMSTvZbof3vAQb3gJaPvJ+T7K4lPPS Oe39neACCtFrniwczcS/P3kexJw+svrV65+1Ujl00J8fqqT/0jyjJ+akzvQi6r/M nXf/jo6DcefZO5rnHGmdp0RQpD2XJhcV4Q3lpQHAT2VaHex9Ayx8Hw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:47 2026 by rpki-client