This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer (raw, json) Hash identifier: T2qEjc5VNP8slDXA/83H5xAmdvYlIxF1LrPUWbbwUo4= Subject key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB623E56002CEBD687DE2C84ED9142 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.231.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:62:3e:56:00:2c:eb:d6:87:de:2c:84:ed:91:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:3e:6d:8b:bf:5c:52:53:20:04:46:97:6b: 63:21:6f:45:df:dc:dc:43:2e:cb:81:c8:14:ea:dd: 86:52:d0:94:d6:b2:1c:bf:0d:45:83:46:98:af:4f: ea:5c:5b:c1:03:27:5d:fb:de:c5:8c:d3:d0:a5:28: 5e:27:b3:ac:a2:04:9f:83:4d:a4:a8:ae:b5:31:3d: 50:c1:91:ac:4a:39:cf:84:2d:0f:a0:f7:fb:e7:8a: 86:77:08:5d:5d:32:ea:37:b5:87:df:6f:9e:eb:6b: 38:91:a3:a9:1a:09:28:ed:1d:66:9a:3d:44:41:4b: 46:b3:7c:b1:87:b0:e0:14:63:82:45:18:5d:4e:15: 7a:a8:c3:7e:a0:16:f8:4d:a2:bc:4a:81:82:7a:48: b4:96:90:5c:bc:aa:65:89:8d:84:72:bb:e1:96:96: bf:e2:e5:58:14:54:a3:cb:85:08:0c:a4:48:c0:3f: ee:29:66:e8:f7:1e:90:d9:2b:bd:ca:55:50:4e:79: 76:96:08:d1:a2:45:4e:8c:54:90:5e:0e:96:bd:af: cf:47:d5:b1:bc:fe:fd:20:7f:2f:37:21:b4:96:f9: 67:1d:7f:10:6f:a3:2b:83:09:bd:01:46:31:5f:df: d9:b8:7c:64:90:3b:33:2e:a5:60:df:f9:34:8d:3a: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:62:62:41:db:2e:5f:8d:53:2e:58:42:79:58:49:d8:b5:f2: 01:d6:b8:09:e6:4a:d2:9d:d2:fc:ed:94:29:2b:77:96:6c:1d: b9:b1:83:f6:73:9d:22:04:11:29:d1:e2:7f:82:ef:47:af:8e: ef:f5:bb:af:9d:d0:d7:12:de:6d:55:e3:d2:ef:c8:b2:6a:39: 69:6e:4d:6a:0c:1d:0b:d5:3a:63:8c:2a:2f:75:f5:a2:c3:b8: eb:fa:ee:c4:16:b9:48:e3:b8:f1:2c:94:98:b2:af:a5:a6:cd: 21:f6:91:5f:d5:72:0b:f2:3e:78:9d:a8:a9:69:ac:70:f4:21: 2e:35:d0:ed:4a:01:db:26:98:84:9b:90:13:de:89:da:a8:5f: 56:3a:6a:ca:58:77:60:54:4f:21:9c:48:1f:d3:43:13:30:00: 34:95:ea:66:ab:51:e2:42:6e:ea:80:04:69:fd:4e:cf:30:22: 4a:b6:03:2b:97:96:06:4e:7c:53:10:d2:60:9e:c1:18:96:a8: 93:7e:68:3c:10:58:d2:4e:c5:54:3e:1e:66:71:6d:eb:bc:db: d1:27:1b:9f:7d:9d:7b:2d:ac:c3:0e:c0:b9:83:71:57:d0:c0: a0:6f:cf:fb:47:b3:5e:cc:e3:c2:86:e1:74:66:6a:d3:e3:71: 50:34:24:0a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt262I+VgAs69aH3iyE7ZFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzFmMDY3MWYzOTllNGRhMjBhNDhiZDMyN2M0N2FmYTRhNDFmZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjU+bYu/XFJTIARGl2tjIW9F39zc Qy7LgcgU6t2GUtCU1rIcvw1Fg0aYr0/qXFvBAydd+97FjNPQpSheJ7OsogSfg02k qK61MT1QwZGsSjnPhC0PoPf754qGdwhdXTLqN7WH32+e62s4kaOpGgko7R1mmj1E QUtGs3yxh7DgFGOCRRhdThV6qMN+oBb4TaK8SoGCeki0lpBcvKpliY2Ecrvhlpa/ 4uVYFFSjy4UIDKRIwD/uKWbo9x6Q2Su9ylVQTnl2lgjRokVOjFSQXg6Wva/PR9Wx vP79IH8vNyG0lvlnHX8Qb6Mrgwm9AUYxX9/ZuHxkkDszLqVg3/k0jTqSvwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLMfBnHzmeTaIKSL0yfEevpKQf/DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzg3OGEx Yy1hN2EwLTRmZDEtOThhMC0zM2U0NDYyMWRiMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvODc4YTFj LWE3YTAtNGZkMS05OGEwLTMzZTQ0NjIxZGIwNy8xL3N4OEdjZk9aNU5vZ3BJdlRK OFI2LWtwQl84TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAk+cwDQYJKoZIhvcNAQELBQADggEBAHRiYkHb Ll+NUy5YQnlYSdi18gHWuAnmStKd0vztlCkrd5ZsHbmxg/ZznSIEESnR4n+C70ev ju/1u6+d0NcS3m1V49LvyLJqOWluTWoMHQvVOmOMKi919aLDuOv67sQWuUjjuPEs lJiyr6WmzSH2kV/VcgvyPnidqKlprHD0IS410O1KAdsmmISbkBPeidqoX1Y6aspY d2BUTyGcSB/TQxMwADSV6marUeJCbuqABGn9Ts8wIkq2AyuXlgZOfFMQ0mCewRiW qJN+aDwQWNJOxVQ+HmZxbeu829EnG599nXstrMMOwLmDcVfQwKBvz/tHs17M48KG 4XRmatPjcVA0JAo= -----END CERTIFICATE-----Generated at Mon Feb 2 15:46:04 2026 by rpki-client