This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer (raw, json) Hash identifier: wN9xLzjwaRO41axibZn2ueYG5yErokxVV/G/YevEUm8= Subject key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C57C310711D74D31D4D13AD19C0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.25.184.0/22 IP: 188.213.234.0/23 IP: 188.215.18.0/23 IP: 2a00:8220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c5:7c:31:07:11:d7:4d:31:d4:d1:3a:d1:9c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:4e:20:5e:77:4f:8c:b6:bd:4c:7f:32:31: 1d:50:b0:18:ab:58:27:9c:ec:7a:69:93:f0:8f:69: 2c:95:2b:71:1b:9f:b6:df:1a:43:00:b9:46:90:96: db:ca:0e:fa:47:6d:cd:05:0b:ab:96:cd:38:63:80: e1:1b:c2:93:cb:16:b6:b6:30:67:dd:49:0d:5c:3b: 39:98:56:d7:fb:57:8d:65:03:c9:d7:74:24:1d:be: 0e:1f:ca:c3:fd:f7:85:90:7f:ab:7e:86:df:18:98: 04:28:23:42:43:5f:c2:53:e2:78:d6:4d:c1:5e:12: 82:6d:1a:38:91:cd:56:60:25:92:f4:55:18:eb:7a: 9a:25:23:29:a2:23:39:ba:0b:b7:fc:b5:16:20:4e: 75:c8:f5:db:2e:d4:cc:7a:a6:8b:f2:ef:19:de:52: 88:dd:eb:e9:67:48:2b:c6:e5:98:4e:d7:1c:ec:fa: c4:f0:9f:24:40:75:8d:81:17:65:74:3f:18:90:07: bd:c9:bf:96:97:7c:94:41:58:6e:73:e3:8d:51:e6: dd:03:53:c7:24:54:b2:65:97:4e:42:c8:18:f7:dd: 9b:4e:c1:ba:23:e6:d0:d0:56:3e:97:98:f2:6d:59: 4f:01:f0:69:5f:98:1a:5a:f8:4a:0b:f3:88:f0:36: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.184.0/22 188.213.234.0/23 188.215.18.0/23 IPv6: 2a00:8220::/32 Signature Algorithm: sha256WithRSAEncryption 40:25:6d:9e:3f:bc:f6:d5:89:2e:d3:c1:64:76:d0:f6:ea:79: 8d:8e:dd:27:65:5e:c0:2c:b0:a1:72:f2:6f:bb:f2:1a:d6:94: 3b:d6:ec:ea:cf:b9:3c:e3:13:6e:e8:9d:cd:32:3d:a0:27:7d: ca:b8:7a:81:45:af:d3:6d:6f:c5:bb:a9:f7:f2:89:0c:57:f9: 08:a2:b7:01:91:3c:80:43:3e:a2:31:61:c3:63:60:0a:15:a3: 2a:4c:9e:1a:ea:77:a3:ae:a9:6d:34:a6:7e:2c:b1:9e:22:02: 19:d2:e3:26:dc:35:48:30:7f:82:f2:2c:bd:ac:cb:29:8b:9d: 68:ad:90:d7:a2:a9:e0:eb:bb:92:d8:24:a1:16:19:b9:43:a5: 13:d9:a6:2c:3b:aa:8a:4b:58:49:db:6a:11:2a:ca:15:22:f9: 9b:11:7e:63:e8:ef:60:8d:cc:52:5d:11:59:05:c8:ee:c3:b9: a1:65:39:3f:09:45:1e:1f:ae:21:3e:3c:14:30:c1:e4:c7:81: 99:0c:ea:ee:99:5b:4b:57:e5:de:18:8e:92:f3:6f:4f:73:fa: 0e:3a:7b:f3:85:c1:0d:0b:7c:23:9b:77:44:7a:09:a9:97:cf: a1:65:e2:e2:dc:56:f3:37:31:f1:11:5f:3f:03:3f:43:9b:e3: ec:36:87:03 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5EMV8MQcR100x1NE60ZwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2M5MGFkMTUxZDQzMjZhNmQ2MmUxMzA0NmQ3ODhmODViZjgyZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXlOIF53T4y2vUx/MjEdULAYq1gn nOx6aZPwj2kslStxG5+23xpDALlGkJbbyg76R23NBQurls04Y4DhG8KTyxa2tjBn 3UkNXDs5mFbX+1eNZQPJ13QkHb4OH8rD/feFkH+rfobfGJgEKCNCQ1/CU+J41k3B XhKCbRo4kc1WYCWS9FUY63qaJSMpoiM5ugu3/LUWIE51yPXbLtTMeqaL8u8Z3lKI 3evpZ0grxuWYTtcc7PrE8J8kQHWNgRdldD8YkAe9yb+Wl3yUQVhuc+ONUebdA1PH JFSyZZdOQsgY992bTsG6I+bQ0FY+l5jybVlPAfBpX5gaWvhKC/OI8DZF4wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHPJCtFR1DJqbWLhMEbXiPhb+C6UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzliZTJh MC0xMDYwLTQxYzctYjhlMi1iYTYyNmQzMjVkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvOWJlMmEw LTEwNjAtNDFjNy1iOGUyLWJhNjI2ZDMyNWQ1OS8xL2M4a0swVkhVTW1wdFl1RXdS dGVJLUZ2NExwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuRm4AwQBvNXqAwQBvNcSMA0EAgACMAcDBQAq AIIgMA0GCSqGSIb3DQEBCwUAA4IBAQBAJW2eP7z21Yku08FkdtD26nmNjt0nZV7A LLChcvJvu/Ia1pQ71uzqz7k84xNu6J3NMj2gJ33KuHqBRa/TbW/Fu6n38okMV/kI orcBkTyAQz6iMWHDY2AKFaMqTJ4a6nejrqltNKZ+LLGeIgIZ0uMm3DVIMH+C8iy9 rMspi51orZDXoqng67uS2CShFhm5Q6UT2aYsO6qKS1hJ22oRKsoVIvmbEX5j6O9g jcxSXRFZBcjuw7mhZTk/CUUeH64hPjwUMMHkx4GZDOrumVtLV+XeGI6S829Pc/oO OnvzhcENC3wjm3dEegmpl8+hZeLi3FbzNzHxEV8/Az9Dm+PsNocD -----END CERTIFICATE-----Generated at Tue Jan 27 03:57:13 2026 by rpki-client