This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer File: 8-NiIsy8bHIhNgVAurOp26nyN6A.cer (raw, json) Hash identifier: 6GnlJnA1qdoJNLAUaOXSbq08GXSj75dXUqAFNP1W61U= Subject key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F856B0633100E2439DF6799CFBA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42909 IP: 91.208.95.0/24 IP: 193.223.78.0/24 IP: 194.180.184.0/22 IP: 2a13:f040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f8:56:b0:63:31:00:e2:43:9d:f6:79:9c:fb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:f0:6e:0f:da:b1:9f:26:e6:1a:61:e2:ee: 27:ce:aa:ab:e9:79:7d:e9:53:bc:88:f3:91:7f:6f: 4f:4b:6f:82:15:03:a5:0d:09:15:7c:0d:dd:5f:40: 98:a3:97:b6:5a:af:65:db:68:d7:63:c6:b0:59:f6: fc:8c:69:c8:4c:f3:8c:b8:87:21:21:2c:92:24:61: c4:da:b0:0a:b5:fe:98:1e:de:b9:68:a5:f8:71:9f: 60:76:9f:a0:ff:b3:47:42:d7:35:cc:54:9b:32:47: 06:18:6c:29:e7:e8:ec:c0:1f:ea:c8:48:09:9e:bc: 31:4d:e7:9d:44:2a:c9:da:bc:80:36:79:b9:0e:5d: 51:cf:16:01:35:70:f5:b6:a9:29:ec:90:81:dd:a4: f0:fc:25:75:92:71:48:b0:03:50:2b:71:52:54:43: a8:3e:d3:31:23:35:c5:b5:1c:fc:42:bf:c3:e7:97: 99:26:a6:55:cc:3f:b9:13:1d:a6:cf:42:8c:25:82: 89:d9:bf:50:77:80:54:90:de:9b:2a:dd:50:9f:3a: 75:a5:66:2e:07:3b:fa:7d:10:51:25:63:e0:f1:37: a0:d5:ac:44:9b:a3:5c:96:0d:a8:4b:18:37:fb:5c: d9:18:f2:c2:a7:10:c9:88:97:17:65:8d:87:5b:42: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.95.0/24 193.223.78.0/24 194.180.184.0/22 IPv6: 2a13:f040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42909 Signature Algorithm: sha256WithRSAEncryption 1a:0e:13:53:89:6d:16:ae:91:aa:45:d9:36:c3:64:6b:b0:31: 3a:25:16:da:78:43:c5:bb:c4:c3:c6:85:86:b2:8c:43:5e:83: e6:94:e7:24:6a:67:d9:36:3a:4b:ca:50:7b:ca:75:53:5a:51: 30:4b:31:8c:19:38:81:5a:80:65:5f:9c:12:5e:f7:02:a2:8a: 75:8d:48:9b:be:bc:ad:d5:85:e3:71:8c:41:d1:00:58:4a:b4: 25:2a:bb:98:f5:2e:11:da:b7:6c:c7:7f:66:4e:4c:17:f3:45: f1:9d:d9:37:85:1e:95:b1:d2:4a:f5:d2:71:3b:36:1d:98:b8: 9c:85:c4:ee:58:f6:41:93:5a:28:8f:ac:89:f6:8c:10:2b:29: 9e:a4:6d:b8:95:f1:04:7f:05:85:7e:7e:c5:0d:79:aa:97:aa: b5:88:63:b3:40:fa:f7:75:88:d2:9b:81:81:69:30:21:e0:d1: 32:f2:cc:37:6e:14:e0:0c:73:9b:a8:e4:f4:ff:76:aa:c6:82: 2f:19:52:9f:6e:3e:a4:f9:fd:fa:21:f3:46:78:52:b0:b1:71: 54:bd:1e:dc:80:6b:27:6b:e6:f0:0a:6d:1d:59:cb:42:26:d6: 42:d1:b1:f6:a4:39:6d:65:ec:4f:05:7f:d3:52:27:67:f7:8d: 53:4e:73:3f -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yfhWsGMxAOJDnfZ5nPunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2UzNjIyMmNjYmM2YzcyMjEzNjA1NDBiYWIzYTlkYmE5ZjIzN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidnwbg/asZ8m5hph4u4nzqqr6Xl9 6VO8iPORf29PS2+CFQOlDQkVfA3dX0CYo5e2Wq9l22jXY8awWfb8jGnITPOMuIch ISySJGHE2rAKtf6YHt65aKX4cZ9gdp+g/7NHQtc1zFSbMkcGGGwp5+jswB/qyEgJ nrwxTeedRCrJ2ryANnm5Dl1RzxYBNXD1tqkp7JCB3aTw/CV1knFIsANQK3FSVEOo PtMxIzXFtRz8Qr/D55eZJqZVzD+5Ex2mz0KMJYKJ2b9Qd4BUkN6bKt1Qnzp1pWYu Bzv6fRBRJWPg8Teg1axEm6Nclg2oSxg3+1zZGPLCpxDJiJcXZY2HW0K5lwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFPPjYiLMvGxyITYFQLqzqdup8jegMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2NjNDhm NC0wZDkzLTRiNjktOGE0Zi04NzI0ZWQ1ZTkwM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvY2M0OGY0 LTBkOTMtNGI2OS04YTRmLTg3MjRlZDVlOTAzYS8xLzgtTmlJc3k4YkhJaE5nVkF1 ck9wMjZueU42QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9BfAwQAwd9OAwQCwrS4MA0EAgACMAcDBQMq E/BAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCnnTANBgkqhkiG9w0BAQsFAAOC AQEAGg4TU4ltFq6RqkXZNsNka7AxOiUW2nhDxbvEw8aFhrKMQ16D5pTnJGpn2TY6 S8pQe8p1U1pRMEsxjBk4gVqAZV+cEl73AqKKdY1Im768rdWF43GMQdEAWEq0JSq7 mPUuEdq3bMd/Zk5MF/NF8Z3ZN4UelbHSSvXScTs2HZi4nIXE7lj2QZNaKI+sifaM ECspnqRtuJXxBH8FhX5+xQ15qpeqtYhjs0D693WI0puBgWkwIeDRMvLMN24U4Axz m6jk9P92qsaCLxlSn24+pPn9+iHzRnhSsLFxVL0e3IBrJ2vm8AptHVnLQibWQtGx 9qQ5bWXsTwV/01InZ/eNU05zPw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:33 2026 by rpki-client