This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer File: g-uiXEochs51okt254VYyS-KA3I.cer (raw, json) Hash identifier: ehNOVPsnVpQw2+6C3p3Dv0gC0IxS0VNwDDnGlQfmPUg= Subject key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910744FDFFE8D8E5B223485FD99F3D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203165 IP: 5.145.104.0/21 IP: 2a01:8b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:4f:df:fe:8d:8e:5b:22:34:85:fd:99:f3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:4c:d3:b8:7f:fe:9a:60:a8:dd:a4:12:25: 00:22:a1:fa:62:8d:d7:7c:d2:6d:3d:14:c9:fe:ae: 18:c6:96:d7:da:1b:cc:e5:51:cb:ce:11:98:b9:f7: 19:32:74:83:73:6b:98:05:ec:ff:43:51:ed:a5:d8: 72:8c:32:4a:e0:8a:17:5a:7d:29:30:c5:e2:46:85: 3f:a3:ad:93:31:ca:c8:4a:ff:09:67:d7:c1:f1:bf: fa:ea:85:8d:9a:62:c3:ce:46:13:05:16:ad:2a:19: 53:ed:bf:f6:59:53:22:43:d9:65:ec:a1:7a:b3:c1: 26:d7:5c:60:77:10:d5:eb:f1:16:12:c8:a2:f9:a6: 41:5d:d8:f5:1e:8b:50:ef:52:e6:96:4e:3b:38:75: fb:b8:36:52:ba:d9:e9:ff:0d:81:bf:ef:e6:eb:a3: 51:db:00:6b:a6:85:92:a6:27:5b:fb:52:90:2a:bd: 53:8b:fa:d2:82:ea:ac:d9:a7:e8:32:38:78:c9:16: c8:95:02:f5:ae:14:e1:e6:22:7f:a5:ff:3c:9f:47: 71:a6:3e:56:16:76:51:bc:1a:07:2c:32:a2:a3:5d: e2:20:1a:af:71:64:88:52:4e:fc:a9:17:17:12:0f: de:de:f2:4a:0d:fe:d8:61:14:c2:03:c8:9f:06:51: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.104.0/21 IPv6: 2a01:8b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203165 Signature Algorithm: sha256WithRSAEncryption a8:56:d5:20:47:b2:70:52:3b:f0:3c:8e:1c:d8:5d:66:de:f3: 8d:db:00:db:f2:1b:4c:5d:b7:83:32:7d:91:4c:1e:77:1a:cc: 82:08:71:2f:46:ef:dc:41:75:db:92:3e:fc:64:dd:31:c9:d6: bd:8a:e8:56:25:7c:59:0c:a8:dd:e5:2b:dd:17:36:fe:9c:de: c8:5a:25:47:54:5a:dd:d7:11:ec:2e:fc:92:29:08:e8:38:2b: fb:da:b8:58:73:e7:13:c2:dd:e9:95:ab:32:f1:d2:4d:58:d9: 8f:f1:0c:95:d8:d1:5d:78:a0:bc:ca:f6:53:aa:b6:4b:99:4f: 2a:c1:40:d8:53:b0:60:9d:85:fc:30:81:8d:95:7b:b7:eb:b0: d7:78:45:ac:f6:a1:2b:fb:a9:22:e2:48:67:11:de:19:ec:21: 28:19:1d:be:a1:a9:e9:bf:76:4a:92:9b:84:eb:ed:dc:00:6c: 93:ea:08:0d:0c:3d:7b:f6:2b:1e:19:cc:18:98:91:a1:8a:bc: 96:1b:5a:49:99:8c:f3:7d:96:a5:f4:e8:d5:24:4b:bb:73:8b: 2b:42:85:e8:93:82:75:49:0a:21:3c:b5:4c:22:37:f9:58:2e: 65:02:07:87:a1:99:9b:4c:9d:9c:e9:e4:6e:e0:aa:26:2d:4c: e6:13:14:f1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EHRP3/6NjlsiNIX9mfPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ViYTI1YzRhMWM4NmNlNzVhMjRiNzZlNzg1NThjOTJmOGEwMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OJM07h//ppgqN2kEiUAIqH6Yo3X fNJtPRTJ/q4YxpbX2hvM5VHLzhGYufcZMnSDc2uYBez/Q1HtpdhyjDJK4IoXWn0p MMXiRoU/o62TMcrISv8JZ9fB8b/66oWNmmLDzkYTBRatKhlT7b/2WVMiQ9ll7KF6 s8Em11xgdxDV6/EWEsii+aZBXdj1HotQ71Lmlk47OHX7uDZSutnp/w2Bv+/m66NR 2wBrpoWSpidb+1KQKr1Ti/rSguqs2afoMjh4yRbIlQL1rhTh5iJ/pf88n0dxpj5W FnZRvBoHLDKio13iIBqvcWSIUk78qRcXEg/e3vJKDf7YYRTCA8ifBlEdZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIProlxKHIbOdaJLdueFWMkvigNyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2M1NjEy ZC1lODFiLTQzYmUtYWU3Yy01NzdmYWY4NTUzOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYzU2MTJk LWU4MWItNDNiZS1hZTdjLTU3N2ZhZjg1NTM5OS8xL2ctdWlYRW9jaHM1MW9rdDI1 NFZZeVMtS0EzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBZFoMA0EAgACMAcDBQAqAYtAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZnTANBgkqhkiG9w0BAQsFAAOCAQEAqFbVIEeycFI7 8DyOHNhdZt7zjdsA2/IbTF23gzJ9kUwedxrMgghxL0bv3EF125I+/GTdMcnWvYro ViV8WQyo3eUr3Rc2/pzeyFolR1Ra3dcR7C78kikI6Dgr+9q4WHPnE8Ld6ZWrMvHS TVjZj/EMldjRXXigvMr2U6q2S5lPKsFA2FOwYJ2F/DCBjZV7t+uw13hFrPahK/up IuJIZxHeGewhKBkdvqGp6b92SpKbhOvt3ABsk+oIDQw9e/YrHhnMGJiRoYq8lhta SZmM832WpfTo1SRLu3OLK0KF6JOCdUkKITy1TCI3+VguZQIHh6GZm0ydnOnkbuCq Ji1M5hMU8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:50 2026 by rpki-client