This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer File: 8fGG6XCXyEF9lDfXDP38UnMxtag.cer (raw, json) Hash identifier: iNs7hmxLSlGS5q+8T6x6QxC//OsB1GXOVDW9flM76b4= Subject key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39295F3B6B5AAE969DD67D683EFFCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39683 IP: 5.61.96.0/20 IP: 185.252.20.0/22 IP: 195.189.224.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:5f:3b:6b:5a:ae:96:9d:d6:7d:68:3e:ff:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:aa:d9:21:20:50:a4:30:da:fd:2b:24:35: b4:37:ba:89:6a:64:7e:84:d7:e8:c7:84:26:88:ef: 53:53:4f:79:0e:91:eb:30:84:53:e4:14:40:cf:62: 7e:c3:9b:f4:98:2f:f4:c7:62:2c:18:57:1a:7e:d2: da:fc:c7:9a:bd:36:05:32:b3:9e:96:9a:ff:1d:a6: 14:6c:0d:e8:5d:d0:1c:d0:32:cb:3f:a6:75:8d:32: 9d:d3:c7:8b:9d:db:fa:f4:85:30:8c:04:75:d9:26: b5:a4:86:dc:a1:1f:4f:54:a0:d1:f6:f1:d4:87:55: 0d:fb:e0:db:97:d2:9c:bb:b8:cc:2f:5e:77:2e:f8: f6:2d:98:bc:a3:86:96:56:80:42:2c:1b:89:cc:3c: 18:25:d8:2f:a3:84:2b:87:9c:82:99:46:c9:9b:2b: d5:20:ce:81:67:98:9f:e0:11:ee:ee:f8:5b:56:59: 9f:9d:dc:73:6c:53:b7:73:fd:4a:0d:9b:fc:4f:27: 93:c4:d3:1e:4f:a5:14:58:cf:66:e3:4c:dd:c9:7c: 3b:1e:43:8a:3f:4c:5e:35:0b:14:d3:eb:2c:13:22: 48:0c:07:3e:7e:95:52:41:39:11:d8:75:88:93:c0: 38:f1:ed:b4:92:06:86:65:eb:ea:47:75:d9:a7:63: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.96.0/20 185.252.20.0/22 195.189.224.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39683 Signature Algorithm: sha256WithRSAEncryption 72:f3:f9:5c:94:b9:6e:61:e5:99:43:f3:4b:2e:c2:73:ca:90: 7f:bb:b4:18:8b:62:10:cb:ce:ef:3e:4f:ff:a9:2e:c1:77:c4: 8b:9c:f6:ba:64:24:3f:24:5c:c6:8f:7f:ff:dd:34:46:c7:3b: 35:d8:4f:0f:0e:dd:90:2b:34:07:2b:3e:2a:80:5c:73:29:89: 7c:59:90:bc:02:f4:47:2f:fb:89:01:6e:b3:b1:77:e5:b9:0a: ba:f3:6e:9d:4e:4d:06:35:de:03:55:69:6c:54:79:8b:bb:cb: ae:52:e4:03:f6:f1:a4:2b:41:e0:82:e5:4b:35:dc:ac:cb:99: 0a:46:fa:c3:63:da:3c:39:87:c0:01:1f:34:6b:b3:75:fb:73: 4a:31:3b:b9:a7:2d:14:83:18:0e:03:08:3a:ed:4d:bd:54:a8: 12:7b:e5:08:7a:34:50:90:8f:20:b5:6c:7b:fd:ff:0f:42:92: 8c:ef:6b:17:dc:b5:5d:3d:8e:a3:c9:70:72:74:b5:c5:80:c2: 24:56:ef:35:e8:1f:58:a4:8b:d4:db:81:6a:f1:5c:8d:5f:62: 33:b0:f9:e5:f2:b2:5e:44:82:61:bc:50:6e:8f:bc:ff:32:b1: 28:6e:7b:7b:43:d3:b8:62:ff:d2:cf:e3:38:d3:63:28:f6:d1: 25:ad:95:fe -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt+OSlfO2tarpad1n1oPv/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWYxODZlOTcwOTdjODQxN2Q5NDM3ZDcwY2ZkZmM1MjczMzFiNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYyq2SEgUKQw2v0rJDW0N7qJamR+ hNfox4QmiO9TU095DpHrMIRT5BRAz2J+w5v0mC/0x2IsGFcaftLa/MeavTYFMrOe lpr/HaYUbA3oXdAc0DLLP6Z1jTKd08eLndv69IUwjAR12Sa1pIbcoR9PVKDR9vHU h1UN++Dbl9Kcu7jML153Lvj2LZi8o4aWVoBCLBuJzDwYJdgvo4Qrh5yCmUbJmyvV IM6BZ5if4BHu7vhbVlmfndxzbFO3c/1KDZv8TyeTxNMeT6UUWM9m40zdyXw7HkOK P0xeNQsU0+ssEyJIDAc+fpVSQTkR2HWIk8A48e20kgaGZevqR3XZp2OjtQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFPHxhulwl8hBfZQ31wz9/FJzMbWoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzVjM2I5 OS1iOGVmLTRlZDEtODU3Yy1iNjVjZDEzNjI2MmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNWMzYjk5 LWI4ZWYtNGVkMS04NTdjLWI2NWNkMTM2MjYyZS8xLzhmR0c2WENYeUVGOWxEZlhE UDM4VW5NeHRhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEBT1gAwQCufwUAwQBw73gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCbAzANBgkqhkiG9w0BAQsFAAOCAQEAcvP5XJS5bmHlmUPz Sy7Cc8qQf7u0GItiEMvO7z5P/6kuwXfEi5z2umQkPyRcxo9//900Rsc7NdhPDw7d kCs0Bys+KoBccymJfFmQvAL0Ry/7iQFus7F35bkKuvNunU5NBjXeA1VpbFR5i7vL rlLkA/bxpCtB4ILlSzXcrMuZCkb6w2PaPDmHwAEfNGuzdftzSjE7uactFIMYDgMI Ou1NvVSoEnvlCHo0UJCPILVse/3/D0KSjO9rF9y1XT2Oo8lwcnS1xYDCJFbvNegf WKSL1NuBavFcjV9iM7D55fKyXkSCYbxQbo+8/zKxKG57e0PTuGL/0s/jONNjKPbR Ja2V/g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:11 2026 by rpki-client