This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer File: 8J3iYg0i-mnFTL68by9IUFbOL-U.cer (raw, json) Hash identifier: QfATwDuDn3vYVveCe3yvrNB1hZJYpvUQqVyJ7eE5i7w= Subject key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37EC73E8F92AFB45945D188A86540D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211822 IP: 91.216.139.0/24 IP: 94.139.62.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ec:73:e8:f9:2a:fb:45:94:5d:18:8a:86:54:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:1c:45:36:5f:e8:e8:c6:1c:78:46:7e:00: e2:7b:e4:b3:b6:11:97:c5:6e:04:fd:9e:fe:77:7d: 22:77:b8:fa:db:a1:16:4f:bc:60:0d:9a:9a:3e:ba: 88:e0:19:e7:2d:a2:ba:5f:ac:d1:36:f8:f8:d5:18: d3:85:c0:af:69:55:0a:f7:3e:f1:62:4c:ad:26:f6: 77:4f:9f:e2:78:2d:9b:ac:9e:7e:2f:42:54:02:48: c6:b3:9d:a7:d1:c4:6b:95:f5:a0:a5:7a:ec:3c:f3: 36:bc:a7:3f:82:89:ef:32:34:20:43:34:47:d4:83: df:2b:93:d4:48:2f:c5:b0:7b:4f:6b:84:28:f6:42: 50:fb:c0:f6:3c:84:b2:cb:a6:eb:31:b3:bd:c3:fc: dc:1e:43:37:0c:8e:da:14:96:a3:5f:57:c3:ef:21: 01:20:8b:82:4e:1d:44:f7:30:b2:f6:f9:1e:a5:95: fe:36:28:bf:92:bc:68:33:65:37:67:5a:5d:78:a5: c3:b4:7e:d2:30:04:d7:a6:df:c7:ac:e6:4f:42:d1: 42:6e:76:d3:e2:96:b7:09:39:56:82:42:bb:f9:e3: ac:81:dc:22:96:4d:bf:2f:5b:c1:2a:05:4f:9d:6b: fc:cf:27:54:76:7c:29:e4:cf:34:bb:44:7e:90:64: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.139.0/24 94.139.62.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211822 Signature Algorithm: sha256WithRSAEncryption 25:05:64:3d:ec:ca:9a:2e:df:f9:3f:63:5a:cf:83:d2:56:21: 32:7b:85:1d:30:53:8b:2e:14:0d:11:9e:49:fd:f8:d9:af:59: b8:c0:1e:b4:40:00:31:ea:ea:cd:48:71:c8:fd:34:fa:6c:e3: 8f:0a:76:a6:d9:30:fc:13:9a:4f:e9:11:d3:b1:f1:87:71:a8: b9:6e:bc:b6:6e:f7:a0:45:5d:a5:29:31:ce:a0:cf:59:cb:14: 17:3c:07:73:fb:62:15:97:1a:8a:71:06:0d:5c:f7:8f:4d:b2: 8a:73:af:1a:e3:d6:2b:48:ce:84:da:37:00:bf:1b:e6:48:98: 4f:03:89:c3:45:0a:c2:3e:12:01:65:6e:d0:2f:d7:ec:db:ac: d5:c8:42:8a:43:ef:09:ba:a0:f8:52:d1:2c:d6:03:91:8b:df: 16:c7:ed:44:76:98:a3:67:6f:ca:61:0d:f7:38:1d:6d:f1:e7: 54:64:7d:62:d0:58:92:21:d2:bc:58:9d:e3:a3:53:ec:ff:89: 68:c7:7c:57:76:f6:5b:f0:82:27:42:bb:d2:ea:c2:1a:b5:36: 37:0f:8a:74:00:07:f6:49:5d:c8:04:fd:aa:9e:11:b0:5c:58: d0:8f:6d:f2:91:31:59:35:09:74:b1:11:ba:dd:4f:27:00:3f: 9e:55:1a:6b -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+N+xz6Pkq+0WUXRiKhlQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDlkZTI2MjBkMjJmYTY5YzU0Y2JlYmM2ZjJmNDg1MDU2Y2UyZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurQcRTZf6OjGHHhGfgDie+SzthGX xW4E/Z7+d30id7j626EWT7xgDZqaPrqI4BnnLaK6X6zRNvj41RjThcCvaVUK9z7x YkytJvZ3T5/ieC2brJ5+L0JUAkjGs52n0cRrlfWgpXrsPPM2vKc/gonvMjQgQzRH 1IPfK5PUSC/FsHtPa4Qo9kJQ+8D2PISyy6brMbO9w/zcHkM3DI7aFJajX1fD7yEB IIuCTh1E9zCy9vkepZX+Nii/krxoM2U3Z1pdeKXDtH7SMATXpt/HrOZPQtFCbnbT 4pa3CTlWgkK7+eOsgdwilk2/L1vBKgVPnWv8zydUdnwp5M80u0R+kGSeCwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFPCd4mINIvppxUy+vG8vSFBWzi/lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzkyODU5 My03YTBhLTQzMTItODZlMi1mODJkNjAwZGQ0ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTI4NTkz LTdhMGEtNDMxMi04NmUyLWY4MmQ2MDBkZDRlMi8xLzhKM2lZZzBpLW1uRlRMNjhi eTlJVUZiT0wtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9iLAwQBXos+MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwM7bjANBgkqhkiG9w0BAQsFAAOCAQEAJQVkPezKmi7f+T9jWs+D0lYh MnuFHTBTiy4UDRGeSf342a9ZuMAetEAAMerqzUhxyP00+mzjjwp2ptkw/BOaT+kR 07Hxh3GouW68tm73oEVdpSkxzqDPWcsUFzwHc/tiFZcainEGDVz3j02yinOvGuPW K0jOhNo3AL8b5kiYTwOJw0UKwj4SAWVu0C/X7Nus1chCikPvCbqg+FLRLNYDkYvf FsftRHaYo2dvymEN9zgdbfHnVGR9YtBYkiHSvFid46NT7P+JaMd8V3b2W/CCJ0K7 0urCGrU2Nw+KdAAH9kldyAT9qp4RsFxY0I9t8pExWTUJdLERut1PJwA/nlUaaw== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:04 2026 by rpki-client