This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer File: s8hW6VbErdthWY88JInyvfbtHRg.cer (raw, json) Hash identifier: d9Y9NqDSegtNOXFGCHu1tnPBjKevHlXWzA5RMZAgIUU= Subject key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A12CDE754C86A5B0F70FC11F9F5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.17.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a1:2c:de:75:4c:86:a5:b0:f7:0f:c1:1f:9f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:e8:f2:f9:b1:c2:08:7a:1d:bb:5f:6f:b4: da:94:c3:d8:3e:b6:14:28:2f:c4:44:96:ec:88:19: 38:3c:1f:b9:3e:8e:f8:9d:41:1a:17:43:b3:2a:3d: ca:6e:f3:9e:be:68:9a:81:58:b1:d4:21:db:21:fd: 21:16:ff:09:a0:bc:58:ac:be:9a:a2:c4:b9:c7:e9: 2d:31:e0:51:f1:34:30:30:b7:82:86:11:f1:ab:1f: 60:b4:e5:8d:73:88:ec:6c:80:32:94:7e:80:f4:d0: 86:29:15:b5:55:28:ae:ee:33:fe:bd:43:bc:89:12: 73:f8:6e:e9:8c:f9:f0:45:04:10:1a:a4:5d:af:8d: 83:43:92:13:0c:80:69:14:fa:b6:3a:84:2a:1b:92: 28:bf:17:32:0e:4f:39:1b:6b:7a:15:83:21:7a:d6: 53:ca:59:a7:05:5b:6a:0d:04:68:28:30:4c:35:e4: c4:bd:e7:3a:20:e5:9a:c6:84:a6:ba:3e:dd:08:77: 87:db:9a:ca:23:ef:20:aa:63:53:49:ab:05:6e:43: 29:9a:70:e4:84:ea:ac:6a:0d:1f:8c:2c:64:ea:61: 48:c7:2b:75:38:e7:08:2c:86:ff:5d:57:66:36:49: 6d:77:7d:b7:f2:ef:d9:b1:c4:e3:c6:fa:03:ee:68: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:86:06:a9:a5:65:a9:94:66:f2:f8:a7:33:d8:f2:bb:41:6b: 34:f1:70:47:4b:d0:c0:50:14:6a:8c:17:cc:9f:04:e3:13:48: 8f:71:09:9f:80:f9:48:e1:2e:f1:48:52:c1:3c:f1:81:2a:aa: c8:24:2d:41:6e:5a:24:50:67:e5:41:12:08:37:4c:44:78:38: 32:37:52:c3:59:75:02:3c:cc:fc:66:e9:ed:86:32:f4:f3:ee: af:29:b6:d8:e0:0f:a0:78:16:51:84:c8:39:07:bd:f5:93:9a: 3e:2c:ee:91:78:db:96:77:4a:f5:1c:4e:c2:72:40:d0:cf:73: 1e:62:87:23:de:0b:a2:35:a5:b7:cc:bf:e5:eb:22:b5:bf:52: fa:4f:e7:d9:5a:75:6a:08:21:2d:13:f9:62:fc:40:9b:61:6c: 5e:a1:77:d1:f0:55:5d:39:4a:af:94:e8:51:0c:bf:0a:c0:89: b6:fc:89:4d:c9:ad:d5:d7:ac:44:ac:7d:a2:91:b2:e0:d1:a6: 03:bd:e1:a8:da:62:0e:d9:8b:7f:c3:e7:a8:7f:d9:56:6b:0d: 56:c1:67:96:1a:22:c7:41:56:34:02:cb:ee:47:af:7e:f7:d2: e4:e0:78:d7:7d:55:44:e8:6e:1e:38:ac:54:52:61:57:88:1d: 64:87:f0:8c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt7NqEs3nVMhqWw9w/BH59dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2M4NTZlOTU2YzRhZGRiNjE1OThmM2MyNDg5ZjJiZGY2ZWQxZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zro8vmxwgh6Hbtfb7TalMPYPrYU KC/ERJbsiBk4PB+5Po74nUEaF0OzKj3KbvOevmiagVix1CHbIf0hFv8JoLxYrL6a osS5x+ktMeBR8TQwMLeChhHxqx9gtOWNc4jsbIAylH6A9NCGKRW1VSiu7jP+vUO8 iRJz+G7pjPnwRQQQGqRdr42DQ5ITDIBpFPq2OoQqG5IovxcyDk85G2t6FYMhetZT ylmnBVtqDQRoKDBMNeTEvec6IOWaxoSmuj7dCHeH25rKI+8gqmNTSasFbkMpmnDk hOqsag0fjCxk6mFIxyt1OOcILIb/XVdmNkltd3238u/ZscTjxvoD7mjNmwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLPIVulWxK3bYVmPPCSJ8r327R0YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2M1NWJl Ny1mZTY0LTRlNzMtYTA2My0xYjBlZjQ0Zjc4ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYzU1YmU3 LWZlNjQtNGU3My1hMDYzLTFiMGVmNDRmNzg4NC8xL3M4aFc2VmJFcmR0aFdZODhK SW55dmZidEhSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjREwDQYJKoZIhvcNAQELBQADggEBAHWGBqml ZamUZvL4pzPY8rtBazTxcEdL0MBQFGqMF8yfBOMTSI9xCZ+A+UjhLvFIUsE88YEq qsgkLUFuWiRQZ+VBEgg3TER4ODI3UsNZdQI8zPxm6e2GMvTz7q8pttjgD6B4FlGE yDkHvfWTmj4s7pF425Z3SvUcTsJyQNDPcx5ihyPeC6I1pbfMv+XrIrW/UvpP59la dWoIIS0T+WL8QJthbF6hd9HwVV05Sq+U6FEMvwrAibb8iU3JrdXXrESsfaKRsuDR pgO94ajaYg7Zi3/D56h/2VZrDVbBZ5YaIsdBVjQCy+5Hr3730uTgeNd9VUTobh44 rFRSYVeIHWSH8Iw= -----END CERTIFICATE-----Generated at Thu Jan 29 11:30:17 2026 by rpki-client