This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.cer (raw, json) Hash identifier: TUambXxgYUCWGqBHu9pmgiZOG4hzi9xgVwX+6DnNSmI= Subject key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38868986564199BF04CA155EDE384D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207829 IP: 91.108.191.0/24 IP: 91.198.170.0/23 IP: 2a0b:c140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:86:89:86:56:41:99:bf:04:ca:15:5e:de:38:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:22:e1:a0:e6:95:d7:ce:ff:8b:32:b5:b0: 25:1b:f2:5e:e5:5f:94:79:04:50:c2:6a:cc:b7:17: 7b:d6:f3:e1:78:38:98:d3:84:20:ce:c5:ff:29:c9: 0e:5c:2c:63:23:34:32:c8:78:ae:78:ef:1b:f0:af: 5f:65:58:23:b3:d5:03:6a:c2:bd:b0:b3:5b:69:26: 87:c7:a9:aa:e8:8e:19:af:6d:24:ce:46:6e:80:e9: f4:5d:57:85:a2:bc:4b:59:40:5f:40:f9:a6:c5:c1: 2a:02:33:99:6e:6a:dc:70:36:62:12:48:af:de:cf: a5:34:d2:44:56:e8:ae:50:b5:83:9e:ae:3f:10:62: 58:8e:ab:79:b8:c2:eb:27:1c:95:d1:3b:6b:6e:a9: 05:95:58:5c:76:05:4a:40:53:f4:03:19:93:a8:a4: fd:1b:3a:1e:f4:aa:26:c3:05:18:7c:06:54:6d:41: 8e:bc:e5:9a:78:1e:8b:58:c4:15:ae:67:50:c2:6c: 62:c5:a9:ff:93:4a:86:bd:91:de:c5:ac:87:1a:78: b6:ed:20:25:68:8c:85:59:e7:ee:f7:4e:08:f9:0d: f9:d5:91:59:f6:8d:9c:47:0c:ad:b9:77:f3:a1:43: 04:97:e6:6c:57:f7:74:b6:47:db:ce:9c:cb:00:6c: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.191.0/24 91.198.170.0/23 IPv6: 2a0b:c140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207829 Signature Algorithm: sha256WithRSAEncryption b1:2e:1d:82:81:e4:2c:32:1b:b5:3b:fc:30:8d:2d:ff:6b:dd: b3:c8:3c:f3:d0:04:9e:66:10:da:6b:a6:98:5f:03:e1:3e:81: 09:c9:b2:45:da:62:34:76:b6:59:8c:e2:27:b8:ee:bc:f7:0f: d4:68:c5:6e:a7:c2:d6:c6:3e:26:34:57:b7:d6:87:ea:76:9b: b9:bd:95:23:79:2f:df:e9:ec:0a:f2:63:82:33:00:7a:80:93: db:71:12:bc:b8:e4:17:fc:02:1d:76:5a:6f:51:1b:43:f9:dc: 57:58:c4:10:71:43:d8:d5:c1:16:3c:4a:97:08:11:16:22:74: 7a:e6:6f:fb:26:84:62:67:c1:02:de:bc:ab:25:75:f0:8e:9f: 07:a1:91:82:20:de:eb:52:5c:63:1c:32:fe:c9:98:24:56:ec: e6:aa:d8:4e:9f:a4:5a:ae:ca:e4:23:45:c7:75:08:5f:4a:45: a0:26:ab:1c:3e:f9:3d:ec:10:48:5e:06:ef:ef:53:25:a1:9d: 4a:43:68:99:b8:28:10:ff:3e:72:01:7a:ea:bb:0c:82:93:f0: 13:08:e7:0c:fd:6f:36:6c:c0:72:47:de:a7:27:38:41:a4:e1: cb:01:c7:8f:96:ad:99:1b:56:8b:01:bd:fb:f0:a6:0b:b6:12: 87:20:d9:6d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OIaJhlZBmb8EyhVe3jhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGEzMmQyMTI5YTM4NmM5YTBhZmRiYjkxNWUwZGJmMTMwYmE3MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIEi4aDmldfO/4sytbAlG/Je5V+U eQRQwmrMtxd71vPheDiY04QgzsX/KckOXCxjIzQyyHiueO8b8K9fZVgjs9UDasK9 sLNbaSaHx6mq6I4Zr20kzkZugOn0XVeForxLWUBfQPmmxcEqAjOZbmrccDZiEkiv 3s+lNNJEVuiuULWDnq4/EGJYjqt5uMLrJxyV0TtrbqkFlVhcdgVKQFP0AxmTqKT9 Gzoe9KomwwUYfAZUbUGOvOWaeB6LWMQVrmdQwmxixan/k0qGvZHexayHGni27SAl aIyFWefu904I+Q351ZFZ9o2cRwytuXfzoUMEl+ZsV/d0tkfbzpzLAGwNgQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPCjLSEpo4bJoK/buRXg2/EwunDVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzU4Yjhl Mi0xMjE1LTRiYjAtOTZkZi0yZjA4MzgwYWU2YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNThiOGUy LTEyMTUtNGJiMC05NmRmLTJmMDgzODBhZTZjNy8xLzhLTXRJU21qaHNtZ3I5dTVG ZURiOFRDNmNOVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW2y/AwQBW8aqMA0EAgACMAcDBQAqC8FAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMr1TANBgkqhkiG9w0BAQsFAAOCAQEAsS4d goHkLDIbtTv8MI0t/2vds8g889AEnmYQ2mummF8D4T6BCcmyRdpiNHa2WYziJ7ju vPcP1GjFbqfC1sY+JjRXt9aH6nabub2VI3kv3+nsCvJjgjMAeoCT23ESvLjkF/wC HXZab1EbQ/ncV1jEEHFD2NXBFjxKlwgRFiJ0euZv+yaEYmfBAt68qyV18I6fB6GR giDe61JcYxwy/smYJFbs5qrYTp+kWq7K5CNFx3UIX0pFoCarHD75PewQSF4G7+9T JaGdSkNombgoEP8+cgF66rsMgpPwEwjnDP1vNmzAckfepyc4QaThywHHj5atmRtW iwG9+/CmC7YShyDZbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:45 2026 by rpki-client