This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer File: 8G3inpNW30RwfIOW2RjmsokSnEo.cer (raw, json) Hash identifier: /ESd23eFa81e19oTZwiuDPlrUNloOtu57XG6aIUALvE= Subject key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C120FFB42C9CA0DFEE5D4EE264B7644 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.130.152.0/21 IP: 185.55.144.0/22 IP: 194.50.78.0/24 IP: 2a01:73a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0f:fb:42:c9:ca:0d:fe:e5:d4:ee:26:4b:76:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f06de29e9356df44707c8396d918e6b289129c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:b0:c1:1a:45:a9:cd:cc:5e:82:17:4e:92: 55:58:0a:09:87:7e:1d:14:5a:97:90:39:b4:c8:e2: 5f:95:1a:63:f0:01:41:b2:91:4f:82:32:36:8c:24: 69:80:21:61:5f:37:16:04:a3:17:3d:f4:85:e1:d3: cd:35:df:f3:14:f6:0c:f2:e3:16:24:9d:84:fb:bf: 49:b1:81:6c:8d:4b:91:b3:b2:11:e2:b0:c8:80:3a: d8:a4:57:f2:6d:be:ce:4e:65:c4:b2:08:7c:b4:1d: 49:c3:61:c1:1d:d5:76:2c:43:53:cc:e7:b6:4b:2f: ca:2e:9d:b8:2d:eb:06:45:32:78:cf:51:0f:34:c1: 6b:fb:8d:eb:00:fe:7c:2c:76:c3:3a:55:f1:91:68: c4:b3:c2:3c:22:b1:87:7e:6a:51:a5:5e:a4:cf:da: 38:1e:a5:45:08:b9:f9:47:09:0d:5e:2a:35:99:b2: 48:72:2a:59:3f:83:97:d1:06:b6:36:2c:87:54:d8: 5b:28:87:f9:d1:67:c7:67:58:65:fb:c2:e4:c6:16: bb:36:9e:a2:67:fe:d2:fc:f2:4a:eb:f4:a1:10:19: 9e:0a:62:21:ed:85:11:fc:c3:56:a7:66:99:b7:20: c3:7f:24:cf:88:55:a9:37:41:8f:ab:13:4f:ac:97: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.152.0/21 185.55.144.0/22 194.50.78.0/24 IPv6: 2a01:73a0::/32 Signature Algorithm: sha256WithRSAEncryption a0:d9:d9:6a:27:d0:ce:d2:2b:5a:87:ce:0c:99:a6:63:67:a9: bc:e2:24:07:3b:7c:2a:4b:25:0c:cb:82:0a:0b:f8:74:5c:5c: 8e:f9:2e:d0:60:47:c0:b1:cb:99:a6:81:94:72:38:d1:78:f4: 29:db:9f:30:01:3b:02:eb:e2:c1:35:1d:52:13:22:06:69:6a: d4:6a:3d:17:a3:55:60:86:40:85:10:ff:a2:c1:f7:6c:63:34: 82:f3:76:55:27:d6:a8:e6:73:4a:79:a4:ab:c6:5c:cd:a9:5b: f1:64:5e:40:30:8c:ec:16:2b:3c:33:9d:35:d4:93:48:4c:43: 0c:90:7c:6e:15:1d:2b:e2:8c:ee:39:1f:9b:1c:24:72:6b:08: cb:96:e0:77:41:69:b9:e2:31:f6:d5:fd:46:2c:fb:99:bb:af: 09:cf:e3:7d:e8:c0:ff:ca:d7:75:9b:2c:af:38:2f:ad:f5:af: a4:f3:bd:60:15:e0:78:0d:14:e5:e3:d8:56:4e:67:9f:37:50: 35:56:89:50:bf:cb:88:b0:42:ef:21:9f:e9:36:82:95:f1:4a: 61:9e:20:12:d8:92:fe:fb:55:c1:06:10:21:42:96:82:c1:ca: fc:13:38:d3:2d:3b:0d:06:78:64:2e:51:31:ff:1f:d5:38:ac: f7:fd:b3:33 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8Eg/7QsnKDf7l1O4mS3ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDZkZTI5ZTkzNTZkZjQ0NzA3YzgzOTZkOTE4ZTZiMjg5MTI5YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvWwwRpFqc3MXoIXTpJVWAoJh34d FFqXkDm0yOJflRpj8AFBspFPgjI2jCRpgCFhXzcWBKMXPfSF4dPNNd/zFPYM8uMW JJ2E+79JsYFsjUuRs7IR4rDIgDrYpFfybb7OTmXEsgh8tB1Jw2HBHdV2LENTzOe2 Sy/KLp24LesGRTJ4z1EPNMFr+43rAP58LHbDOlXxkWjEs8I8IrGHfmpRpV6kz9o4 HqVFCLn5RwkNXio1mbJIcipZP4OX0Qa2NiyHVNhbKIf50WfHZ1hl+8Lkxha7Np6i Z/7S/PJK6/ShEBmeCmIh7YUR/MNWp2aZtyDDfyTPiFWpN0GPqxNPrJf0NQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFPBt4p6TVt9EcHyDltkY5rKJEpxKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2U0NGQ1 OC0xNWQ1LTQ4YzctYmUyMS1mODE2ZDNiZTQwMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZTQ0ZDU4 LTE1ZDUtNDhjNy1iZTIxLWY4MTZkM2JlNDAxMi8xLzhHM2lucE5XMzBSd2ZJT1cy Umptc29rU25Fby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDX4KYAwQCuTeQAwQAwjJOMA0EAgACMAcDBQAq AXOgMA0GCSqGSIb3DQEBCwUAA4IBAQCg2dlqJ9DO0itah84MmaZjZ6m84iQHO3wq SyUMy4IKC/h0XFyO+S7QYEfAscuZpoGUcjjRePQp258wATsC6+LBNR1SEyIGaWrU aj0Xo1VghkCFEP+iwfdsYzSC83ZVJ9ao5nNKeaSrxlzNqVvxZF5AMIzsFis8M501 1JNITEMMkHxuFR0r4ozuOR+bHCRyawjLluB3QWm54jH21f1GLPuZu68Jz+N96MD/ ytd1myyvOC+t9a+k871gFeB4DRTl49hWTmefN1A1VolQv8uIsELvIZ/pNoKV8Uph niAS2JL++1XBBhAhQpaCwcr8EzjTLTsNBnhkLlEx/x/VOKz3/bMz -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:06 2026 by rpki-client