This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.cer (raw, json) Hash identifier: aIYkd4EP3AlCTCzWkih267cl3GXCP09mVF/J7k9cQKc= Subject key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C5F273CE74544480348785485615E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 188.92.25.0/24 IP: 212.237.212.0/22 IP: 2a13:2b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5f:27:3c:e7:45:44:48:03:48:78:54:85:61:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d67f1283b630e588cb039ba652b90299d71a8e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:67:4e:8a:bf:dc:18:7d:36:cc:97:86:10: bb:45:e6:6b:60:b0:80:01:97:1b:03:af:fe:8c:b4: f7:51:97:e6:4e:f1:cd:84:a6:ed:6a:3b:c2:69:f2: 3f:32:08:2a:27:f8:83:ff:f1:02:8b:8d:88:d7:48: 74:54:50:52:8c:8c:d3:fc:94:c4:aa:3d:ba:f8:2c: 19:75:b8:71:cd:83:8d:cf:72:81:9e:5c:25:41:4c: da:1c:59:9b:ad:c9:a2:87:f1:73:38:06:e0:2e:ae: f3:6d:ec:71:be:01:94:86:dc:b2:32:b1:a7:3b:49: 22:8c:17:46:43:87:41:de:ba:14:da:a7:26:a2:5a: 2a:77:92:4b:79:f3:e4:8c:fa:8b:58:96:2e:9d:e4: f3:72:1d:5d:5d:27:3b:88:67:42:70:9c:91:37:23: e3:20:c9:f8:02:2b:b8:32:e7:42:47:90:20:45:ed: 04:0d:18:fb:21:33:8b:dd:25:84:a8:f6:23:c8:77: 85:7e:74:0a:3a:a2:8d:35:55:86:24:ab:c0:5e:a3: 7a:27:1b:93:aa:57:67:b8:5e:68:f7:3b:28:9c:9c: 32:ec:76:ce:ef:ce:2c:20:e6:e1:13:7b:b1:29:51: 61:47:76:65:56:4a:32:ce:fb:bb:8f:98:bb:a2:de: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.25.0/24 212.237.212.0/22 IPv6: 2a13:2b80::/29 Signature Algorithm: sha256WithRSAEncryption 9a:03:ee:54:33:23:15:9f:ac:6a:fb:42:0f:d6:c4:2e:80:27: 54:8c:2e:51:1f:03:11:f4:a0:57:7e:8b:e6:da:f1:83:29:0f: 7f:74:f5:fb:51:d2:fd:fa:7b:e9:58:ff:0c:07:7d:6b:9c:15: 34:4b:18:f7:aa:c5:6e:15:d7:f0:d6:10:2c:a0:4d:8b:b2:e4: b2:87:e7:bb:bb:4e:4c:c1:1c:13:63:65:eb:1c:34:f2:b7:7d: 95:91:89:a0:34:02:2c:33:83:78:8d:58:0c:a0:65:41:b2:6f: 9b:68:df:c8:56:60:75:07:3e:8c:b1:b9:47:e1:3d:fa:15:32: 8f:b5:11:81:ac:5b:07:4b:97:3a:62:90:5e:15:97:d4:1d:56: e5:5d:c2:53:9c:6b:65:b4:33:5c:dc:b2:47:52:75:d1:38:c9: 55:79:73:27:21:f2:24:ae:50:22:f8:71:40:41:da:ca:69:44: b1:46:ae:71:60:76:58:0a:6b:19:d9:2b:58:b1:16:5a:e0:20: 94:17:63:7c:9a:5e:c4:a6:c7:68:f7:37:75:dd:e2:4a:d5:ab: 01:f5:0c:ee:6c:66:16:1b:99:4c:47:5d:e3:09:6a:f7:a0:2f: a9:44:95:f9:d3:7d:95:43:19:74:66:1a:c8:41:ff:1c:76:ba: 37:db:19:4c -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9XF8nPOdFREgDSHhUhWFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdmMTI4M2I2MzBlNTg4Y2IwMzliYTY1MmI5MDI5OWQ3MWE4ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02BnToq/3Bh9NsyXhhC7ReZrYLCA AZcbA6/+jLT3UZfmTvHNhKbtajvCafI/MggqJ/iD//ECi42I10h0VFBSjIzT/JTE qj26+CwZdbhxzYONz3KBnlwlQUzaHFmbrcmih/FzOAbgLq7zbexxvgGUhtyyMrGn O0kijBdGQ4dB3roU2qcmoloqd5JLefPkjPqLWJYuneTzch1dXSc7iGdCcJyRNyPj IMn4Aiu4MudCR5AgRe0EDRj7ITOL3SWEqPYjyHeFfnQKOqKNNVWGJKvAXqN6JxuT qldnuF5o9zsonJwy7HbO784sIObhE3uxKVFhR3ZlVkoyzvu7j5i7ot7phQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFNZ/EoO2MOWIywObplK5ApnXGo54MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJhODYw Yy0xMDA1LTQ0MjMtOTViZC0zMDc5ZDU4OGFhOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmE4NjBj LTEwMDUtNDQyMy05NWJkLTMwNzlkNTg4YWE5OS8xLzFuOFNnN1l3NVlqTEE1dW1V cmtDbWRjYWpuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAvFwZAwQC1O3UMA0EAgACMAcDBQMqEyuAMA0G CSqGSIb3DQEBCwUAA4IBAQCaA+5UMyMVn6xq+0IP1sQugCdUjC5RHwMR9KBXfovm 2vGDKQ9/dPX7UdL9+nvpWP8MB31rnBU0Sxj3qsVuFdfw1hAsoE2LsuSyh+e7u05M wRwTY2XrHDTyt32VkYmgNAIsM4N4jVgMoGVBsm+baN/IVmB1Bz6MsblH4T36FTKP tRGBrFsHS5c6YpBeFZfUHVblXcJTnGtltDNc3LJHUnXROMlVeXMnIfIkrlAi+HFA QdrKaUSxRq5xYHZYCmsZ2StYsRZa4CCUF2N8ml7Epsdo9zd13eJK1asB9QzubGYW G5lMR13jCWr3oC+pRJX5032VQxl0ZhrIQf8cdro32xlM -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:56 2026 by rpki-client