This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer File: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer (raw, json) Hash identifier: S+M/m0kSRmnMAjsECpzUW5JmB8k0f5Av/YLkTt1X7fQ= Subject key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A214CEEF9121EC8977C24782435431 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3232 IP: 91.216.220.0/24 IP: 91.237.8.0/22 IP: 185.83.85.0/24 IP: 193.17.43.0/24 IP: 193.105.132.0/24 IP: 194.165.45.0/24 IP: 194.165.53.0/24 IP: 2a13:f980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:14:ce:ef:91:21:ec:89:77:c2:47:82:43:54:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:10:66:99:ad:68:03:d6:8e:47:6a:b5:c6: b5:6a:0d:de:20:4b:fe:98:d9:81:ba:29:58:45:80: 11:a2:88:e4:33:30:d5:0a:e9:67:66:41:b0:0e:5e: ea:17:65:4f:f8:d2:aa:fa:7c:c0:fe:08:b5:24:cd: 81:57:d6:ee:13:d6:5e:e6:7c:94:5d:77:f1:03:f5: 0a:ca:76:d1:68:6f:22:93:74:03:29:6e:51:12:14: 89:49:6c:b0:16:d3:7d:10:39:35:41:e5:ed:5d:b1: d8:3c:53:bc:ca:73:e7:06:b4:31:bb:18:c8:b3:db: a9:18:10:81:99:fb:7f:56:b2:eb:4a:39:0f:58:96: 1a:eb:25:01:0f:59:89:8d:f4:b2:12:4b:9a:8a:90: b2:3c:3c:f2:bc:8b:40:f6:63:bc:35:7a:f7:00:09: 48:e5:e7:1c:e8:2a:05:d9:41:f9:a7:e8:30:94:a5: a5:04:ce:f2:9b:d5:51:01:b1:77:57:6e:7f:51:96: 2e:30:7c:4b:14:05:d9:5b:11:34:8f:21:8d:73:63: 17:1c:7e:88:46:7f:ff:25:ab:67:fd:54:35:ab:a6: 37:fc:7b:ef:8c:59:32:d3:2c:84:cc:e6:fe:0e:c9: 44:bd:db:0d:5a:b8:62:c1:3c:3d:f5:bc:03:61:3f: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.220.0/24 91.237.8.0/22 185.83.85.0/24 193.17.43.0/24 193.105.132.0/24 194.165.45.0/24 194.165.53.0/24 IPv6: 2a13:f980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3232 Signature Algorithm: sha256WithRSAEncryption 79:6a:0e:2e:c6:c7:a0:04:bc:fc:1a:17:03:74:0b:9c:2f:33: 2a:5d:c8:0b:a0:79:8e:ce:f6:0d:9b:b0:2b:90:99:a2:a8:de: 78:ba:51:e4:7e:c0:a4:c0:d4:95:5c:b4:9d:19:75:71:98:21: b0:07:41:a5:a9:e7:87:d9:0d:c0:6e:f7:c4:b8:c6:d8:aa:5e: b3:49:5e:94:3d:7f:ae:9b:cb:d2:8f:1f:88:0f:5a:10:4e:30: fb:3b:ee:32:17:32:dd:a5:19:d0:6d:d7:3c:64:4a:ea:fb:b9: bd:4f:43:cc:a2:58:01:63:06:8d:6c:3b:80:09:90:82:ad:8e: f2:06:8f:5f:67:c9:1b:32:03:57:77:ae:bb:be:6e:0d:94:0f: 63:01:cb:e6:52:3e:d0:65:5f:8a:a9:2c:ca:f3:a2:18:f0:49: b2:ac:96:08:7d:a7:5f:fa:f9:05:52:d3:7b:73:36:47:b2:b5: 56:2b:d5:da:4d:2b:aa:2e:d3:f0:9c:b5:08:e1:59:37:15:1d: f4:53:54:4d:f1:e8:75:ad:0d:c7:7d:3f:8e:7c:bd:f2:ee:62: c3:25:75:31:1a:f6:46:74:8e:94:02:74:84:2b:2a:b3:31:94: e7:2e:2c:cc:e1:af:bb:9c:b5:6e:b9:b3:5b:de:a4:f7:6a:3a: 14:c4:b5:76 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt4ohTO75Eh7Il3wkeCQ1QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2MwYmQ5ZjgzMzFlYTg0MzhmZDJhMmY2NzFiNzFhZjRhMmRlYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsEQZpmtaAPWjkdqtca1ag3eIEv+ mNmBuilYRYARoojkMzDVCulnZkGwDl7qF2VP+NKq+nzA/gi1JM2BV9buE9Ze5nyU XXfxA/UKynbRaG8ik3QDKW5REhSJSWywFtN9EDk1QeXtXbHYPFO8ynPnBrQxuxjI s9upGBCBmft/VrLrSjkPWJYa6yUBD1mJjfSyEkuaipCyPDzyvItA9mO8NXr3AAlI 5ecc6CoF2UH5p+gwlKWlBM7ym9VRAbF3V25/UZYuMHxLFAXZWxE0jyGNc2MXHH6I Rn//Jatn/VQ1q6Y3/HvvjFky0yyEzOb+DslEvdsNWrhiwTw99bwDYT+E5QIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFFfAvZ+DMeqEOP0qL2cbca9KLewXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2Q1ZTlm Ni0zZjZkLTQ2OTQtODliOC1hMDkzZDEwMDg3NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZDVlOWY2 LTNmNmQtNDY5NC04OWI4LWEwOTNkMTAwODc0Yy8xL1Y4QzluNE14Nm9RNF9Tb3Za eHR4cjBvdDdCYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQAW9jcAwQCW+0IAwQAuVNVAwQAwRErAwQAwWmE AwQAwqUtAwQAwqU1MA0EAgACMAcDBQMqE/mAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAgygMA0GCSqGSIb3DQEBCwUAA4IBAQB5ag4uxsegBLz8GhcDdAucLzMqXcgL oHmOzvYNm7ArkJmiqN54ulHkfsCkwNSVXLSdGXVxmCGwB0GlqeeH2Q3AbvfEuMbY ql6zSV6UPX+um8vSjx+ID1oQTjD7O+4yFzLdpRnQbdc8ZErq+7m9T0PMolgBYwaN bDuACZCCrY7yBo9fZ8kbMgNXd667vm4NlA9jAcvmUj7QZV+KqSzK86IY8EmyrJYI fadf+vkFUtN7czZHsrVWK9XaTSuqLtPwnLUI4Vk3FR30U1RN8eh1rQ3HfT+OfL3y 7mLDJXUxGvZGdI6UAnSEKyqzMZTnLizM4a+7nLVuubNb3qT3ajoUxLV2 -----END CERTIFICATE-----Generated at Mon Jan 26 13:48:29 2026 by rpki-client