This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.cer (raw, json) Hash identifier: 95rZmi+eC4/yNs0wdQE9ha2GC5HLHYu11F7wrXNG4z4= Subject key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110B17AE7E28F1957A18BB49EB3AE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12982 AS: 209922 IP: 87.120.125.0/24 IP: 87.121.18.0/24 IP: 87.121.144.0/23 IP: 94.156.92.0/24 IP: 94.156.164.0/23 IP: 109.206.237.0/24 IP: 193.194.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0b:17:ae:7e:28:f1:95:7a:18:bb:49:eb:3a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:8e:57:01:df:24:31:c5:14:b8:b2:d4:a1: 35:4b:30:09:37:4e:a4:4f:75:4d:1f:9e:45:76:31: 83:77:5b:78:75:01:eb:13:a7:67:61:c3:0f:f3:05: 35:30:9b:af:1b:10:f0:b8:11:02:9e:b1:c6:f3:e2: b2:df:f2:f6:74:27:b2:78:6a:f5:a2:78:db:02:b2: d8:a3:c8:c8:79:b7:e7:51:2f:ec:65:1d:c3:af:61: 1a:6c:37:a4:4a:f2:c3:45:35:8c:76:1c:b5:5a:5d: 38:af:50:f2:5d:8d:34:ed:9c:df:be:5e:4a:7a:d8: f0:bb:26:6a:78:ec:97:3a:6d:f2:9b:cd:0f:5c:73: 6b:7f:08:0a:fa:b8:2f:b1:45:33:39:a3:f5:b6:26: 5c:58:c0:c1:8f:35:cc:82:f9:87:bb:fd:83:55:cb: 3a:f6:20:8f:32:d2:74:87:85:f7:e5:64:63:67:b7: f1:f4:06:79:cd:69:db:39:59:07:8d:0e:14:a0:4e: 34:e3:2f:2b:fa:ee:bc:ac:75:3f:0d:13:d1:b5:4c: d8:39:d6:46:1b:40:9a:2c:d8:76:04:d4:33:4d:6b: 30:73:36:d4:83:dd:ab:d7:77:b2:45:39:5b:be:b6: c2:62:ae:aa:a2:36:90:9a:a0:cf:d2:ec:1f:67:63: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.125.0/24 87.121.18.0/24 87.121.144.0/23 94.156.92.0/24 94.156.164.0/23 109.206.237.0/24 193.194.156.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12982 209922 Signature Algorithm: sha256WithRSAEncryption 8a:01:f8:a9:2d:87:0f:3b:8b:41:fc:e6:3c:a3:df:ba:cc:9f: 11:ca:59:7d:a9:27:e5:34:55:f8:10:51:be:61:fb:a4:7d:10: 04:a6:02:25:f9:c4:57:c2:b0:71:80:90:19:b0:f8:3f:7b:af: 07:c1:98:f4:58:84:08:c8:45:6c:7d:76:06:97:d8:ee:9a:4f: 84:92:90:ea:13:c5:50:da:80:2b:ae:04:b6:52:f5:25:c9:10: 5c:0e:8f:a3:b4:2e:1f:6f:69:a4:76:c9:56:78:bb:3a:a8:38: 4f:ab:51:81:d4:3c:a4:30:a7:2c:f0:c9:c0:07:41:4d:31:d4: 1d:5a:96:8c:88:4a:9e:9b:bd:f0:6f:c5:f2:1c:0c:c9:92:ba: b8:f7:9a:50:ac:80:f5:38:c7:5c:6f:bd:57:0f:3f:c5:82:b4: ca:f7:bc:db:c7:07:b7:e9:e0:86:ed:c8:a0:d1:f2:93:60:f1: f2:0a:38:cc:2e:0c:b9:ec:5b:4a:1b:8d:c7:3f:68:f3:8f:92: 35:77:39:14:d9:26:44:d8:ba:68:06:bd:9c:eb:d0:d3:10:b7: d5:2c:25:2f:5c:3b:d4:e6:31:bb:a8:f8:84:23:e6:24:1c:7c: 7c:ff:81:a9:82:f8:e6:20:f8:e0:b2:d7:20:1b:be:63:39:a8: 40:d3:15:a8 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt5EQsXrn4o8ZV6GLtJ6zrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzNmMmRiNzJhYWI0MzViOWRhYTJiMWY3ZTFhOGEzMjc2Nzc4OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2peOVwHfJDHFFLiy1KE1SzAJN06k T3VNH55FdjGDd1t4dQHrE6dnYcMP8wU1MJuvGxDwuBECnrHG8+Ky3/L2dCeyeGr1 onjbArLYo8jIebfnUS/sZR3Dr2EabDekSvLDRTWMdhy1Wl04r1DyXY007Zzfvl5K etjwuyZqeOyXOm3ym80PXHNrfwgK+rgvsUUzOaP1tiZcWMDBjzXMgvmHu/2DVcs6 9iCPMtJ0h4X35WRjZ7fx9AZ5zWnbOVkHjQ4UoE404y8r+u68rHU/DRPRtUzYOdZG G0CaLNh2BNQzTWswczbUg92r13eyRTlbvrbCYq6qojaQmqDP0uwfZ2OspQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFPM/Lbcqq0NbnaorH34aijJ2d4i+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzZjMDlk OS1kYTBiLTRmNWItYmUyMS1jNmMwNmUyYjNhOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvNmMwOWQ5 LWRhMGItNGY1Yi1iZTIxLWM2YzA2ZTJiM2E5Zi8xLzh6OHR0eXFyUTF1ZHFpc2Zm aHFLTW5aM2lMNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAwBAIAATAqAwQAV3h9AwQAV3kSAwQBV3mQAwQAXpxcAwQBXpyk AwQAbc7tAwQAwcKcMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAjK2AgMDNAIwDQYJ KoZIhvcNAQELBQADggEBAIoB+Kkthw87i0H85jyj37rMnxHKWX2pJ+U0VfgQUb5h +6R9EASmAiX5xFfCsHGAkBmw+D97rwfBmPRYhAjIRWx9dgaX2O6aT4SSkOoTxVDa gCuuBLZS9SXJEFwOj6O0Lh9vaaR2yVZ4uzqoOE+rUYHUPKQwpyzwycAHQU0x1B1a loyISp6bvfBvxfIcDMmSurj3mlCsgPU4x1xvvVcPP8WCtMr3vNvHB7fp4IbtyKDR 8pNg8fIKOMwuDLnsW0objcc/aPOPkjV3ORTZJkTYumgGvZzr0NMQt9UsJS9cO9Tm Mbuo+IQj5iQcfHz/gamC+OYg+OCy1yAbvmM5qEDTFag= -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:18 2026 by rpki-client