This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer (raw, json) Hash identifier: ocCQJRV6CgVDwSEAwypL3MBUpa3B5su5yW3QNLEw96g= Subject key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC941C2F9B2269BC2850FEA85BF014C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21234 IP: 217.25.128.0/20 IP: 2a07:fbc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:41:c2:f9:b2:26:9b:c2:85:0f:ea:85:bf:01:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:f6:10:55:bf:aa:56:4e:89:2d:11:e5:21: 59:52:8f:7e:31:ca:56:16:37:a7:5d:72:06:fd:bc: 0f:e0:9d:dc:09:f0:99:8d:70:78:d1:bf:bc:72:bb: e6:08:38:f1:bb:1f:6c:6d:a5:27:72:de:d9:da:b7: a6:98:7f:8e:b7:03:73:99:df:08:c1:b1:65:a4:55: 80:37:2e:3b:53:b8:0c:cb:fb:ac:46:5a:9e:6f:c1: ba:45:ab:8b:54:bb:ed:29:99:90:cb:94:df:d1:10: 57:1c:73:8d:9b:1a:f2:1f:83:40:40:d3:4e:c3:55: a6:79:4f:f0:c6:f3:85:d0:77:85:7e:a9:f4:a8:00: dc:e7:8d:60:3d:69:de:a4:bc:c8:e0:bd:1c:5f:80: 57:76:d0:ce:48:b9:ec:85:71:3f:63:44:34:21:1f: 3d:9f:90:c7:28:fc:fd:2d:4d:86:85:3e:31:ed:b1: c7:fd:00:78:52:17:5a:0c:5e:66:a5:00:fa:d2:66: fa:ed:2d:c0:cf:a2:bb:3b:f8:07:af:dc:7c:7d:41: 49:d5:f7:d9:44:74:21:5d:4d:08:a6:26:8b:5e:d9: 42:df:f3:ca:f4:62:ef:48:a7:4d:18:e8:b9:7f:38: 10:c1:a8:55:9f:c0:43:4a:46:5d:25:65:40:d1:2b: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.25.128.0/20 IPv6: 2a07:fbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21234 Signature Algorithm: sha256WithRSAEncryption 3c:d9:aa:a2:96:35:0c:99:9b:e2:dd:19:68:9e:20:2e:b3:f3: c0:ab:7e:9a:1b:4f:29:6d:38:7c:81:ad:f8:04:be:44:3d:27: 60:1e:c3:45:a2:0c:ec:62:d6:93:3d:36:ed:31:26:d4:03:53: 92:78:b5:2f:9a:3c:e9:82:68:f5:3e:0c:77:6c:d7:90:06:4c: 68:7b:2a:19:21:a3:af:3e:7e:62:23:43:6f:3e:c9:d8:09:37: b4:5f:11:bf:1f:5c:0a:08:cf:32:92:82:f9:b6:a2:f1:8d:57: f9:f9:22:09:01:ff:f1:18:f8:e9:ba:17:98:da:e3:52:fe:e4: d4:47:4e:bd:e4:61:c6:5a:a8:73:3f:8b:ef:3e:0e:ba:cb:a4: e2:ec:2c:ec:a3:ae:f5:a0:d3:f1:df:60:25:35:4f:6e:11:12: e5:43:bf:a4:fd:1b:fc:6b:97:25:85:5c:5d:ae:43:1f:35:0c: 68:01:06:b7:0c:1c:82:06:de:78:e2:36:fd:ae:bf:93:98:7a: ee:73:3c:8c:65:b5:ac:1f:c2:48:39:ea:92:8b:26:5d:33:7a: 58:4d:ff:85:d5:4b:eb:28:09:ee:b0:e9:61:6d:67:de:fb:50: 54:0f:b4:43:9d:52:8f:4e:2b:b4:2d:e1:9f:e7:70:ba:01:65: 1c:1b:7d:2a -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt6yUHC+bImm8KFD+qFvwFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDJmMDlmMjY1ZTliMjc4ZjgwNzNkNjk4MmZmMTc1NzEzYTVhMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAf2EFW/qlZOiS0R5SFZUo9+McpW FjenXXIG/bwP4J3cCfCZjXB40b+8crvmCDjxux9sbaUnct7Z2remmH+OtwNzmd8I wbFlpFWANy47U7gMy/usRlqeb8G6RauLVLvtKZmQy5Tf0RBXHHONmxryH4NAQNNO w1WmeU/wxvOF0HeFfqn0qADc541gPWnepLzI4L0cX4BXdtDOSLnshXE/Y0Q0IR89 n5DHKPz9LU2GhT4x7bHH/QB4UhdaDF5mpQD60mb67S3Az6K7O/gHr9x8fUFJ1ffZ RHQhXU0IpiaLXtlC3/PK9GLvSKdNGOi5fzgQwahVn8BDSkZdJWVA0SsjYwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2U3NWFk Mi0xZTMwLTQ1NWUtOTc4Ny0zYjU1ZjIzMjdiMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvZTc1YWQy LTFlMzAtNDU1ZS05Nzg3LTNiNTVmMjMyN2IzNC8xL01DOEo4bVhwc25qNEJ6MXBn djhYVnhPbG9Qby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQE2RmAMA0EAgACMAcDBQAqB/vAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlLyMA0GCSqGSIb3DQEBCwUAA4IBAQA82aqiljUMmZvi 3RloniAus/PAq36aG08pbTh8ga34BL5EPSdgHsNFogzsYtaTPTbtMSbUA1OSeLUv mjzpgmj1Pgx3bNeQBkxoeyoZIaOvPn5iI0NvPsnYCTe0XxG/H1wKCM8ykoL5tqLx jVf5+SIJAf/xGPjpuheY2uNS/uTUR0695GHGWqhzP4vvPg66y6Ti7Czso671oNPx 32AlNU9uERLlQ7+k/Rv8a5clhVxdrkMfNQxoAQa3DByCBt544jb9rr+TmHruczyM ZbWsH8JIOeqSiyZdM3pYTf+F1UvrKAnusOlhbWfe+1BUD7RDnVKPTiu0LeGf53C6 AWUcG30q -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:31 2026 by rpki-client