This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.cer (raw, json) Hash identifier: y0nIkvGpXHEv+9RKekxia1XfLMFzhOChGi2DR5LBeMw= Subject key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7DBB46E2EBD2F4FCDBA8AAEBEC8B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208337 IP: 45.143.180.0/22 IP: 2a0e:ecc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:bb:46:e2:eb:d2:f4:fc:db:a8:aa:eb:ec:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f261df44b346823cce8c6643b5fa6919afb23195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a1:00:8f:4b:8b:d3:ac:19:f7:75:ff:b6:7f: d0:3e:68:5c:31:97:13:23:bb:22:d7:15:0e:74:f3: 73:19:1e:64:f8:4a:4d:99:f4:16:01:68:32:20:ae: 95:fa:0b:39:2e:8c:e4:2c:10:df:b2:2c:24:69:d9: f9:37:05:ea:89:ae:68:0e:77:1c:e2:0a:bd:d1:d8: 44:b2:5f:4a:e2:a1:b2:a9:6a:0f:4b:3c:24:c6:62: 50:cb:e8:b7:b1:f6:43:b4:08:97:76:44:5d:32:5d: 77:18:a9:cf:08:99:e7:4d:25:ed:51:92:62:b5:ea: c1:56:cb:93:cf:1a:b7:bb:1f:bc:98:2a:b8:b5:7c: 99:f5:4d:40:d3:2a:9b:09:04:b0:5b:90:e2:8a:2f: 1c:27:10:36:89:25:ea:27:9d:76:4c:84:eb:e2:1a: 08:c8:b8:81:41:f7:7a:ca:e6:b6:c9:66:da:e7:01: ae:b4:34:03:fe:e5:9c:3a:c8:a2:7d:dc:cb:dc:c9: cb:87:68:2d:ee:24:5a:da:86:73:d6:05:35:48:5e: 17:9d:b6:0b:78:c6:3c:ee:a1:8d:16:86:64:30:27: e2:06:c3:39:e8:2d:93:61:38:0f:56:92:e3:29:45: 54:ee:5e:33:33:2c:4f:4e:5d:e2:49:05:43:cd:e9: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.180.0/22 IPv6: 2a0e:ecc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208337 Signature Algorithm: sha256WithRSAEncryption 7f:52:0b:93:ca:4d:6a:41:8c:61:82:d2:f0:ca:31:93:7a:56: cc:0f:b6:6e:44:65:cd:3d:d0:b5:b4:5f:3a:e2:0d:72:e3:8d: df:cd:61:f4:00:18:18:95:2e:af:d6:42:2c:c6:0e:dc:4f:31: ea:51:9c:1c:84:b3:4f:e8:e4:87:2e:d9:2a:5c:d9:62:c8:4b: 59:f3:93:da:6e:92:29:6f:c7:14:6c:0f:47:c7:56:05:31:ac: d2:4f:4d:77:fa:e0:b1:3f:20:d7:f4:78:20:c0:3a:f8:ca:59: 7d:39:50:ac:5d:da:67:7e:14:b0:32:38:09:d0:d5:3e:f9:d7: 08:31:0d:59:6f:b2:4e:1b:3f:d3:c3:fe:fc:42:28:5d:2a:ab: 63:4a:15:ff:80:0a:af:ec:99:2f:8a:f0:b0:43:9f:fc:0a:6c: 84:f4:69:3e:7a:66:4b:5f:d2:33:d2:ed:8f:f2:e7:ac:0d:b4: ba:70:7d:45:02:b2:7a:46:c7:f4:9f:7e:3a:8e:f1:57:3e:c5: d5:a3:fd:1d:4c:5a:ad:ff:bf:aa:1b:18:ca:41:21:55:98:72: be:c6:30:35:81:88:25:f6:80:76:ce:a9:c4:d8:18:93:7d:f3: 7c:48:c5:fe:40:ba:af:6c:01:4f:8e:c0:87:9c:69:2e:76:89: bd:bf:3e:0e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26327RuLr0vT826iq6+yLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjYxZGY0NGIzNDY4MjNjY2U4YzY2NDNiNWZhNjkxOWFmYjIzMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KEAj0uL06wZ93X/tn/QPmhcMZcT I7si1xUOdPNzGR5k+EpNmfQWAWgyIK6V+gs5LozkLBDfsiwkadn5NwXqia5oDncc 4gq90dhEsl9K4qGyqWoPSzwkxmJQy+i3sfZDtAiXdkRdMl13GKnPCJnnTSXtUZJi terBVsuTzxq3ux+8mCq4tXyZ9U1A0yqbCQSwW5Diii8cJxA2iSXqJ512TITr4hoI yLiBQfd6yua2yWba5wGutDQD/uWcOsiifdzL3MnLh2gt7iRa2oZz1gU1SF4XnbYL eMY87qGNFoZkMCfiBsM56C2TYTgPVpLjKUVU7l4zMyxPTl3iSQVDzemd9QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPJh30SzRoI8zoxmQ7X6aRmvsjGVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzNjYjlk Mi03MGZmLTQ2ZDYtOWM3My01NzU4NjE1NjM1NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvM2NiOWQy LTcwZmYtNDZkNi05YzczLTU3NTg2MTU2MzU0ZS8xLzhtSGZSTE5HZ2p6T2pHWkR0 ZnBwR2EteU1aVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLY+0MA0EAgACMAcDBQMqDuzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMt0TANBgkqhkiG9w0BAQsFAAOCAQEAf1ILk8pNakGM YYLS8Moxk3pWzA+2bkRlzT3QtbRfOuINcuON381h9AAYGJUur9ZCLMYO3E8x6lGc HISzT+jkhy7ZKlzZYshLWfOT2m6SKW/HFGwPR8dWBTGs0k9Nd/rgsT8g1/R4IMA6 +MpZfTlQrF3aZ34UsDI4CdDVPvnXCDENWW+yThs/08P+/EIoXSqrY0oV/4AKr+yZ L4rwsEOf/ApshPRpPnpmS1/SM9Ltj/LnrA20unB9RQKyekbH9J9+Oo7xVz7F1aP9 HUxarf+/qhsYykEhVZhyvsYwNYGIJfaAds6pxNgYk33zfEjF/kC6r2wBT47Ah5xp LnaJvb8+Dg== -----END CERTIFICATE-----Generated at Tue Jan 27 09:54:36 2026 by rpki-client