This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer File: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer (raw, json) Hash identifier: MbhaucepO+wOy2H/+20hHTvREJoTzGgCXZ0vUVeh6cE= Subject key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8283D9594333224904D9E1E24D33C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.2.0/24 IP: 2001:678:5::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:83:d9:59:43:33:22:49:04:d9:e1:e2:4d:33:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f07be9d1189771b7337efc1ced2c825dc2472a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:32:2a:a7:e1:54:b6:17:65:d8:03:54:8c: 21:f5:b3:29:2d:50:ff:f7:0c:b7:85:0c:a6:93:a4: 8c:6e:44:1c:58:37:99:5e:23:27:ce:3a:e6:cb:69: 2d:43:af:ab:7b:78:31:b1:6c:05:f7:ad:af:36:d3: 34:0b:1d:da:8b:c2:f8:0b:79:5a:18:71:e5:dd:73: 9b:9c:b8:69:b3:5e:a1:a7:82:e7:a2:36:9b:95:83: 9b:44:c2:9f:c1:5f:88:7d:c2:5c:2f:c3:7d:a4:d3: b1:3f:fd:88:22:61:32:58:3c:d3:c2:3f:39:19:27: 4d:8a:75:97:e0:46:02:03:f2:c9:77:7a:84:67:eb: 81:55:f6:5a:dd:42:48:68:46:77:45:ab:03:20:a2: f3:3c:2c:2c:1e:e6:e1:05:b5:68:1f:13:20:14:65: 7e:d7:0f:8e:6f:13:4d:c3:06:be:ec:d1:bb:09:68: 96:17:db:cb:cd:fc:a9:14:52:62:69:19:a9:c6:8b: 12:87:f3:69:a3:b6:41:0f:38:0e:49:7e:06:27:0e: 48:8e:ec:28:9f:86:fc:b7:41:f7:32:41:74:e6:62: 61:d4:7c:a8:d1:86:86:d9:8a:2f:5a:73:23:e1:25: cd:f8:10:3e:66:a3:fb:ea:97:54:59:b4:75:06:52: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.2.0/24 IPv6: 2001:678:5::/48 Signature Algorithm: sha256WithRSAEncryption 65:b6:33:58:1a:5e:07:2d:e2:1c:01:22:69:d0:89:1b:75:33: eb:10:c5:c3:93:7d:2d:16:6f:29:ab:2b:b0:98:82:92:7e:8e: af:2b:1b:b2:12:76:f8:4a:ac:71:f3:04:37:1b:b8:1f:e7:70: 34:72:1e:f4:42:46:e0:5b:63:89:9e:19:1e:3f:dc:50:4e:90: b9:55:ea:e2:df:84:d6:7b:85:05:8f:ff:03:55:a2:ab:9c:ba: 04:7a:44:dd:22:90:e9:48:28:6c:ca:97:44:1e:c5:d0:ee:16: 6a:de:b8:c0:1f:23:ce:5a:0a:fa:a3:48:02:05:77:d6:10:e7: dc:a3:ad:91:6d:aa:dc:73:34:26:fa:db:a2:47:2b:7b:2c:ff: 2d:d3:33:da:af:30:16:31:7d:f7:9a:af:72:63:42:0a:2a:47: 03:5c:96:92:c0:b4:d1:a2:cf:4f:53:17:18:1e:dc:f0:7e:48: 1f:04:c9:de:d0:23:b1:1c:26:ae:01:06:42:29:e6:1c:83:a4: 48:44:e4:83:2c:66:39:8a:4d:eb:e1:e7:85:de:1e:59:3e:70: 52:03:73:dc:2a:b4:32:70:22:1b:03:35:90:6e:ae:1c:0f:75: 70:dc:de:5d:a4:c8:91:60:d7:34:41:2f:3f:a8:19:4f:6c:81: 67:63:ef:74 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt/goPZWUMzIkkE2eHiTTPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDdiZTlkMTE4OTc3MWI3MzM3ZWZjMWNlZDJjODI1ZGMyNDcyYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VQyKqfhVLYXZdgDVIwh9bMpLVD/ 9wy3hQymk6SMbkQcWDeZXiMnzjrmy2ktQ6+re3gxsWwF962vNtM0Cx3ai8L4C3la GHHl3XObnLhps16hp4LnojablYObRMKfwV+IfcJcL8N9pNOxP/2IImEyWDzTwj85 GSdNinWX4EYCA/LJd3qEZ+uBVfZa3UJIaEZ3RasDIKLzPCwsHubhBbVoHxMgFGV+ 1w+ObxNNwwa+7NG7CWiWF9vLzfypFFJiaRmpxosSh/Npo7ZBDzgOSX4GJw5Ijuwo n4b8t0H3MkF05mJh1Hyo0YaG2YovWnMj4SXN+BA+ZqP76pdUWbR1BlJGCwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFPB76dEYl3G3M378HO0sgl3CRypWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2VjMTgx Ni01NDY2LTQ1YTYtYWU2MS0zZmIwODcwZWEyNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZWMxODE2 LTU0NjYtNDVhNi1hZTYxLTNmYjA4NzBlYTI1OS8xLzhIdnAwUmlYY2JjemZ2d2M3 U3lDWGNKSEtsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwgACMA8EAgACMAkDBwAgAQZ4AAUwDQYJKoZI hvcNAQELBQADggEBAGW2M1gaXgct4hwBImnQiRt1M+sQxcOTfS0WbymrK7CYgpJ+ jq8rG7ISdvhKrHHzBDcbuB/ncDRyHvRCRuBbY4meGR4/3FBOkLlV6uLfhNZ7hQWP /wNVoqucugR6RN0ikOlIKGzKl0QexdDuFmreuMAfI85aCvqjSAIFd9YQ59yjrZFt qtxzNCb626JHK3ss/y3TM9qvMBYxffear3JjQgoqRwNclpLAtNGiz09TFxge3PB+ SB8Eyd7QI7EcJq4BBkIp5hyDpEhE5IMsZjmKTevh54XeHlk+cFIDc9wqtDJwIhsD NZBurhwPdXDc3l2kyJFg1zRBLz+oGU9sgWdj73Q= -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:15 2026 by rpki-client