This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer File: i85CgamU1SFm7z_xdyi64hiFX8Q.cer (raw, json) Hash identifier: 8OiIK/4kHYPysQ/V8F2kSWK2ECJF8cfeckOLkDQ7puc= Subject key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A19076A6B0B9F8706E847E7F74BCD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.8.165.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:19:07:6a:6b:0b:9f:87:06:e8:47:e7:f7:4b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bce4281a994d52166ef3ff17728bae218855fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:94:6d:04:70:f6:f2:69:a0:c1:e4:4e:5c: ca:8e:a2:41:15:b5:45:8f:69:ca:41:55:2c:0a:4a: ec:a6:b3:97:fd:59:3b:f5:2c:3e:3f:44:ae:6b:84: 60:78:65:6d:a2:bd:20:0c:21:3a:12:5d:a2:22:d1: 02:f9:2f:ae:81:b0:4e:8b:9a:75:a7:e9:c2:ef:6f: 0b:a2:6c:b5:d4:e3:ef:ec:84:87:40:ec:1d:bb:3f: 43:0d:3d:8a:c1:3b:c5:81:18:aa:66:53:7e:66:5e: 05:00:e2:d5:fd:5f:f2:b5:aa:34:11:3a:11:0b:d6: 9c:f8:8d:5b:b9:7b:ad:fa:ef:04:2d:82:d7:dc:f9: ba:b7:6e:bd:47:80:c7:72:57:de:ec:f4:e1:1d:d7: 29:24:88:f6:8d:41:c4:a9:94:a7:7c:71:c1:de:ef: ff:ba:49:96:91:d8:b3:4a:32:53:89:3e:09:eb:8e: 4c:52:bf:6c:ad:e5:83:93:db:f8:23:24:13:0e:15: 0c:06:df:aa:e2:2f:81:9f:3b:b5:98:63:1b:87:90: 73:e9:bd:2b:8e:f4:bf:94:aa:e8:38:47:38:d8:5e: ee:51:27:e1:71:18:80:af:b9:1c:4d:bd:23:fb:9b: e7:22:c9:fb:0a:00:2b:f6:dc:37:18:be:40:9f:a0: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.165.0/24 Signature Algorithm: sha256WithRSAEncryption 16:fd:90:df:cd:d7:4b:a0:30:04:41:2c:02:fa:93:5d:86:14: 68:3e:b6:4f:8c:8f:2c:46:3d:6c:c8:e5:03:b2:7d:7b:7d:d6: ed:e3:c3:85:91:95:5f:a1:d6:62:e6:fa:80:ee:90:9d:58:dc: 1d:5c:36:6f:38:ea:d1:5a:57:eb:7f:b9:a1:4a:d9:46:5a:5e: 6e:97:8b:bf:70:4e:de:a1:f7:56:18:4c:a8:57:60:0d:b7:9f: f3:ba:1c:7f:26:e7:48:3d:bc:4d:67:a8:27:bc:9d:d6:38:9f: a0:bd:7c:17:83:21:55:08:bc:9c:b5:7a:32:99:5f:d8:e7:22: 71:0c:31:13:5a:5c:a9:d3:13:93:57:53:9d:d9:11:2a:a1:ad: c7:c7:45:03:37:b2:a1:10:b0:38:35:9a:c4:a8:ba:cd:9e:de: f9:d7:f2:5b:df:04:9b:26:39:2a:fb:cc:43:b6:ae:27:87:35: 3f:52:35:96:ea:33:ea:3d:c2:cb:21:dc:d1:9b:3e:26:3a:58: dc:fc:15:48:9d:f4:e2:3e:c6:7f:59:ab:e2:3a:91:6c:c7:bd: 00:91:66:95:54:11:1d:5e:54:ef:31:75:f5:06:2c:0c:70:48: 3c:0f:71:82:10:0f:c9:27:26:83:33:ad:69:0c:a2:e9:78:fb: 66:23:14:10 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WhkHamsLn4cG6Efn90vNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNlNDI4MWE5OTRkNTIxNjZlZjNmZjE3NzI4YmFlMjE4ODU1ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37OUbQRw9vJpoMHkTlzKjqJBFbVF j2nKQVUsCkrsprOX/Vk79Sw+P0Sua4RgeGVtor0gDCE6El2iItEC+S+ugbBOi5p1 p+nC728Lomy11OPv7ISHQOwduz9DDT2KwTvFgRiqZlN+Zl4FAOLV/V/ytao0EToR C9ac+I1buXut+u8ELYLX3Pm6t269R4DHclfe7PThHdcpJIj2jUHEqZSnfHHB3u// ukmWkdizSjJTiT4J645MUr9sreWDk9v4IyQTDhUMBt+q4i+Bnzu1mGMbh5Bz6b0r jvS/lKroOEc42F7uUSfhcRiAr7kcTb0j+5vnIsn7CgAr9tw3GL5An6AIEQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIvOQoGplNUhZu8/8XcouuIYhV/EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2ZmYzQ0 OC04ZTE5LTQ3YWEtOTY2NS1hMWUwMWM2MzM0M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvZmZjNDQ4 LThlMTktNDdhYS05NjY1LWExZTAxYzYzMzQzYS8xL2k4NUNnYW1VMVNGbTd6X3hk eWk2NGhpRlg4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQilMA0GCSqGSIb3DQEBCwUAA4IBAQAW/ZDf zddLoDAEQSwC+pNdhhRoPrZPjI8sRj1syOUDsn17fdbt48OFkZVfodZi5vqA7pCd WNwdXDZvOOrRWlfrf7mhStlGWl5ul4u/cE7eofdWGEyoV2ANt5/zuhx/JudIPbxN Z6gnvJ3WOJ+gvXwXgyFVCLyctXoymV/Y5yJxDDETWlyp0xOTV1Od2REqoa3Hx0UD N7KhELA4NZrEqLrNnt751/Jb3wSbJjkq+8xDtq4nhzU/UjWW6jPqPcLLIdzRmz4m Oljc/BVInfTiPsZ/WaviOpFsx70AkWaVVBEdXlTvMXX1BiwMcEg8D3GCEA/JJyaD M61pDKLpePtmIxQQ -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:07 2026 by rpki-client