This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer File: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer (raw, json) Hash identifier: djSgazEL2lExY+lAy4hbYqTY7f/E/SCsqIsTLUZ1+yo= Subject key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A302D9E9E11BEDE0D0B6167C9D6713 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.13.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:d9:e9:e1:1b:ed:e0:d0:b6:16:7c:9d:67:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f344a9f3665084f5009921ac52d119750beed4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:12:0d:0b:3d:c5:70:d6:c6:c0:03:da:ee: 68:da:06:05:fe:72:82:c3:6e:fa:b0:77:22:d1:7c: ce:fa:45:52:f6:db:9a:dd:a5:4f:9f:50:82:6f:8b: 5c:76:a9:8c:fb:93:76:54:34:46:24:d7:24:72:c5: 42:54:6c:8e:b1:2d:23:11:b4:95:62:76:43:d3:eb: cd:f4:a3:a3:c0:cd:90:96:87:02:c4:45:66:cb:66: 32:cd:de:05:f2:6d:d8:a3:c6:48:f6:0e:37:37:d5: 84:1c:c4:d5:9f:33:7e:d3:90:d9:b2:58:c6:e8:0b: 55:30:06:5c:bc:3f:a3:68:66:83:1f:ce:0b:0d:0d: fe:0c:91:28:ee:cb:3a:2a:a1:3c:af:0c:dc:91:1b: 78:bb:cf:76:3d:91:bd:cb:6b:d3:fd:fa:f1:fe:74: bf:c2:28:08:38:d9:65:f1:c6:b4:ce:82:3a:9c:d9: 55:b4:42:cc:9a:63:f7:7d:35:6c:6f:6e:ad:a5:96: 94:ac:bb:34:89:64:e6:b2:30:6b:cf:e8:bc:c7:2a: c5:b6:7a:1a:13:90:b6:7e:df:c2:5c:b9:5d:c2:32: 07:20:76:bf:a2:c7:8d:35:3d:8c:eb:4b:ec:1d:9b: 2d:10:6c:e1:05:df:24:73:5d:8d:47:38:f0:da:e6: 1c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.112.0/21 Signature Algorithm: sha256WithRSAEncryption 50:8b:4f:7d:36:8b:b5:a6:97:0d:d2:f2:1d:bb:40:91:af:f5: d4:4f:d1:98:81:e5:d5:bb:96:b6:5e:f9:67:37:37:38:8f:7e: ec:2b:0d:fb:9f:e7:91:19:43:1b:50:31:14:3d:2e:40:c6:4d: 87:e5:6a:87:53:14:da:b3:62:ce:e2:b2:de:71:ef:61:1d:95: db:c7:c5:14:91:35:40:90:d2:35:a1:28:68:21:2d:d2:69:b9: ce:c3:37:8c:93:d4:2f:8c:5c:20:f5:1f:fc:52:89:b7:b7:2f: b1:9d:16:25:9f:2f:4e:46:65:24:b3:5d:e0:0f:60:a4:d7:7b: e5:c4:9d:0d:0d:90:d3:0f:65:d4:49:b8:b6:d0:2b:68:af:4d: c7:4f:fa:0c:5b:04:61:0b:0b:19:ee:1f:a1:87:0f:8e:9e:c0: c9:b1:54:4c:c6:5f:d7:55:32:90:8d:8c:3e:e4:c6:c7:54:11: 33:11:cd:0d:3b:03:95:8c:a7:17:e1:10:fa:3b:35:56:0b:7f: 4a:bb:c0:ae:8f:d0:00:54:1a:f1:ee:ef:08:d1:3c:16:74:a0: a6:86:bc:f2:c3:a9:67:42:20:fb:34:c8:8b:ec:d6:fd:80:b5: dd:78:c9:d4:64:eb:b2:6c:8a:18:f3:4f:ca:26:aa:0b:74:14: b7:a9:49:36 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4owLZ6eEb7eDQthZ8nWcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ0YTlmMzY2NTA4NGY1MDA5OTIxYWM1MmQxMTk3NTBiZWVkNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyQSDQs9xXDWxsAD2u5o2gYF/nKC w276sHci0XzO+kVS9tua3aVPn1CCb4tcdqmM+5N2VDRGJNckcsVCVGyOsS0jEbSV YnZD0+vN9KOjwM2QlocCxEVmy2Yyzd4F8m3Yo8ZI9g43N9WEHMTVnzN+05DZsljG 6AtVMAZcvD+jaGaDH84LDQ3+DJEo7ss6KqE8rwzckRt4u892PZG9y2vT/frx/nS/ wigIONll8ca0zoI6nNlVtELMmmP3fTVsb26tpZaUrLs0iWTmsjBrz+i8xyrFtnoa E5C2ft/CXLldwjIHIHa/oseNNT2M60vsHZstEGzhBd8kc12NRzjw2uYcoQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPNEqfNmUIT1AJkhrFLRGXUL7tS0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzcxNmE5 MC1kMjk1LTQ5MDMtOTBmOS1kOGM3ZWYxNTUxMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNzE2YTkw LWQyOTUtNDkwMy05MGY5LWQ4YzdlZjE1NTExZC8xLzgwU3A4MlpRaFBVQW1TR3NV dEVaZFF2dTFMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwg1wMA0GCSqGSIb3DQEBCwUAA4IBAQBQi099 Nou1ppcN0vIdu0CRr/XUT9GYgeXVu5a2XvlnNzc4j37sKw37n+eRGUMbUDEUPS5A xk2H5WqHUxTas2LO4rLece9hHZXbx8UUkTVAkNI1oShoIS3SabnOwzeMk9QvjFwg 9R/8Uom3ty+xnRYlny9ORmUks13gD2Ck13vlxJ0NDZDTD2XUSbi20Ctor03HT/oM WwRhCwsZ7h+hhw+OnsDJsVRMxl/XVTKQjYw+5MbHVBEzEc0NOwOVjKcX4RD6OzVW C39Ku8Cuj9AAVBrx7u8I0TwWdKCmhrzyw6lnQiD7NMiL7Nb9gLXdeMnUZOuybIoY 80/KJqoLdBS3qUk2 -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:08 2026 by rpki-client