This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ve5y7uJUqw_GW580Lik26XeEcM.cer File: 8ve5y7uJUqw_GW580Lik26XeEcM.cer (raw, json) Hash identifier: DX6eU8bt5vqc8v+Jl90V+Q4uP64cyZrwxV9XcWEuB8Q= Subject key identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD44E15650939B6E09DFFC4E73E99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41110 IP: 5.154.190.0/23 IP: 45.92.188.0/22 IP: 78.142.200.0/22 IP: 80.173.208.0/20 IP: 85.208.176.0/22 IP: 87.237.248.0/21 IP: 89.38.112.0/21 IP: 89.41.34.0/23 IP: 89.43.120.0/21 IP: 185.4.92.0/22 IP: 185.39.88.0/22 IP: 185.64.136.0/22 IP: 185.76.28.0/22 IP: 185.223.244.0/22 IP: 193.37.76.0/22 IP: 193.124.136.0/21 IP: 194.135.128.0/22 IP: 2a04:7d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d4:4e:15:65:09:39:b6:e0:9d:ff:c4:e7:3e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2f7b9cbbb8952ac3f196e7cd0b8a4dba5de11c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:f0:12:41:6b:b0:a0:72:1d:00:1d:c1:18: 41:89:99:3a:88:aa:50:7e:de:ae:b9:61:a4:d4:bd: ac:d0:58:78:c7:a5:49:23:63:00:cf:45:f9:a0:47: 28:ff:c7:c4:5a:64:ce:2e:8a:52:25:66:a7:5d:37: 4f:23:28:db:b9:4a:16:b7:a4:1e:88:db:2b:17:2b: 6b:05:d1:29:5b:ae:da:f8:ad:31:d2:9e:d5:1a:ac: 76:41:a1:f4:8b:2e:5b:3e:27:2c:ff:60:67:10:1a: 07:b4:0d:78:88:42:89:5e:85:f2:28:e3:4c:a8:42: d9:46:92:e0:10:b0:bb:b0:67:cb:86:66:f7:81:ba: 7a:81:4a:d9:69:fa:ef:06:7b:96:4e:f3:cb:af:c0: 88:09:4d:e0:a1:be:f8:60:05:8e:77:e6:7d:a6:18: ec:b7:e9:18:70:92:91:6a:fc:c2:56:f4:ab:17:e3: ba:c4:21:9e:38:94:11:2f:13:f5:3b:50:52:23:c8: 38:2f:1b:03:49:15:95:17:b8:14:c1:e5:05:d8:0e: 61:c6:b4:b3:3f:45:98:37:20:48:ab:ac:39:c8:26: 94:3a:c1:38:9e:ec:3d:a6:7c:99:08:07:72:b3:2b: bd:78:d8:e9:f7:b0:48:90:fe:b8:6d:b6:e1:a3:3d: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F7:B9:CB:BB:89:52:AC:3F:19:6E:7C:D0:B8:A4:DB:A5:DE:11:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6714e9-3435-4e9e-a5ab-eb51949af446/1/8ve5y7uJUqw_GW580Lik26XeEcM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.190.0/23 45.92.188.0/22 78.142.200.0/22 80.173.208.0/20 85.208.176.0/22 87.237.248.0/21 89.38.112.0/21 89.41.34.0/23 89.43.120.0/21 185.4.92.0/22 185.39.88.0/22 185.64.136.0/22 185.76.28.0/22 185.223.244.0/22 193.37.76.0/22 193.124.136.0/21 194.135.128.0/22 IPv6: 2a04:7d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41110 Signature Algorithm: sha256WithRSAEncryption 7f:c6:6f:3e:8a:ea:42:71:0e:18:85:3e:e4:9f:6f:54:ba:27: 72:40:75:70:19:ef:80:07:28:bb:6d:73:28:08:f7:6b:b9:e8: d7:94:1f:a3:7c:2e:31:23:25:14:a1:8b:cb:0a:ed:5c:7c:47: 73:cb:92:56:d8:78:30:7c:98:90:d8:4e:b0:6a:d7:d7:59:c8: 24:01:fb:13:a0:e2:2e:22:5b:75:dd:fd:a5:35:2f:d2:d0:73: 11:be:d4:ce:65:c0:90:49:88:88:15:f8:7c:3a:c0:a6:12:64: 20:ce:aa:c1:8c:47:c5:ab:5c:4d:e6:e0:0d:39:14:bb:1b:2a: b9:be:ce:a4:ca:b5:6b:f7:ea:96:57:ca:9a:f8:98:f3:c3:70: bb:49:3d:77:69:65:c6:74:b2:87:b8:30:9f:89:8f:74:65:ce: bf:99:fc:cb:49:2b:f7:7b:07:87:5b:74:99:ab:c9:6a:16:db: 8b:a5:f0:44:69:7d:dc:86:ac:34:b0:c7:0f:ce:13:5b:36:87: bf:33:b7:76:b5:d6:d1:31:7c:68:fb:15:4e:36:a0:01:04:22: 43:58:db:f0:10:be:db:5b:3f:59:46:05:70:1f:bd:7c:da:e0: 49:54:6a:00:92:97:1b:47:c6:3b:4d:6e:34:aa:48:57:93:8c: 10:38:9c:d6 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZt87dROFWUJObbgnf/E5z6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmY3YjljYmJiODk1MmFjM2YxOTZlN2NkMGI4YTRkYmE1ZGUxMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLrwEkFrsKByHQAdwRhBiZk6iKpQ ft6uuWGk1L2s0Fh4x6VJI2MAz0X5oEco/8fEWmTOLopSJWanXTdPIyjbuUoWt6Qe iNsrFytrBdEpW67a+K0x0p7VGqx2QaH0iy5bPics/2BnEBoHtA14iEKJXoXyKONM qELZRpLgELC7sGfLhmb3gbp6gUrZafrvBnuWTvPLr8CICU3gob74YAWOd+Z9phjs t+kYcJKRavzCVvSrF+O6xCGeOJQRLxP1O1BSI8g4LxsDSRWVF7gUweUF2A5hxrSz P0WYNyBIq6w5yCaUOsE4nuw9pnyZCAdysyu9eNjp97BIkP64bbbhoz3rPwIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFPL3ucu7iVKsPxlufNC4pNul3hHDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzY3MTRl OS0zNDM1LTRlOWUtYTVhYi1lYjUxOTQ5YWY0NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNjcxNGU5 LTM0MzUtNGU5ZS1hNWFiLWViNTE5NDlhZjQ0Ni8xLzh2ZTV5N3VKVXF3X0dXNTgw TGlrMjZYZUVjTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF BQcBBwEB/wR/MH0wbAQCAAEwZgMEAQWavgMEAi1cvAMEAk6OyAMEBFCt0AMEAlXQ sAMEA1ft+AMEA1kmcAMEAVkpIgMEA1kreAMEArkEXAMEArknWAMEArlAiAMEArlM HAMEArnf9AMEAsElTAMEA8F8iAMEAsKHgDANBAIAAjAHAwUDKgR9gDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAoJYwDQYJKoZIhvcNAQELBQADggEBAH/Gbz6K6kJx DhiFPuSfb1S6J3JAdXAZ74AHKLttcygI92u56NeUH6N8LjEjJRShi8sK7Vx8R3PL klbYeDB8mJDYTrBq19dZyCQB+xOg4i4iW3Xd/aU1L9LQcxG+1M5lwJBJiIgV+Hw6 wKYSZCDOqsGMR8WrXE3m4A05FLsbKrm+zqTKtWv36pZXypr4mPPDcLtJPXdpZcZ0 soe4MJ+Jj3Rlzr+Z/MtJK/d7B4dbdJmryWoW24ul8ERpfdyGrDSwxw/OE1s2h78z t3a11tExfGj7FU42oAEEIkNY2/AQvttbP1lGBXAfvXza4ElUagCSlxtHxjtNbjSq SFeTjBA4nNY= -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:04 2026 by rpki-client