This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer File: 8L-tMcFMk9qlNEugT0tSNUaW368.cer (raw, json) Hash identifier: 8TfzUvQ1s2udqAoq+IhekYbeF+S68kAbtQsUrnRKd3k= Subject key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3B8313938DB3FB8C5145190A1988C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43181 IP: 185.169.148.0/22 IP: 2a0a:4b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b8:31:39:38:db:3f:b8:c5:14:51:90:a1:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:4a:e9:8e:ef:5a:ac:87:53:3c:6b:28:79: 91:b8:4b:7e:10:1d:5c:f1:9f:e1:c8:4c:a3:dc:08: cf:ff:bf:a1:25:b2:82:00:ed:a0:c7:7e:51:34:37: 32:85:47:dd:76:ad:98:5a:b8:75:4e:49:09:c6:97: 7b:12:e0:d0:0e:3c:52:7d:20:0b:54:61:4a:d3:b4: f8:d4:1c:6c:42:02:04:3a:b7:ca:26:a1:46:6c:a3: 0f:ba:c7:5f:95:fa:39:48:53:9b:d1:49:e7:b5:86: 0f:5d:47:cb:be:95:70:5d:d9:18:9a:0f:bd:89:a1: 67:32:65:04:a6:b6:af:a8:70:e2:f1:dd:69:97:b6: 07:6e:a8:dc:d9:f7:60:e9:3e:e5:eb:9c:90:3e:be: d3:d5:82:d6:90:e8:9c:bf:d2:93:44:dd:b8:a5:27: 3d:a8:53:2c:54:83:47:58:ed:e3:bc:dc:8c:f5:ca: 8d:44:ff:1d:82:75:47:c0:d6:06:1e:db:2d:48:a6: 35:c7:20:9e:cf:df:c1:2c:11:17:88:a4:76:aa:06: 52:80:c8:bb:c1:54:02:89:14:86:7a:46:ac:bb:56: df:df:7e:54:75:76:fa:36:3e:fa:5b:ed:3d:32:4d: 19:8d:ba:ec:83:5f:d7:9b:78:70:85:08:51:05:ec: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.148.0/22 IPv6: 2a0a:4b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43181 Signature Algorithm: sha256WithRSAEncryption 59:1e:b6:f8:13:ff:bb:79:0e:26:f8:15:02:9e:2b:0e:a1:01: 6b:45:6f:0d:ff:2a:86:ed:e4:14:3c:a1:8d:5b:7e:a6:e0:37: 22:7a:4c:09:ef:fd:ab:9f:17:9a:72:bf:95:44:01:60:f1:59: 63:1d:d9:92:68:00:f1:b9:db:08:48:45:51:8b:2b:2e:3a:1f: ef:86:67:ca:16:ca:ef:13:47:6e:ac:0e:88:a0:2f:f8:97:4f: a0:b4:84:0b:33:fb:62:79:1d:5b:ab:e7:7e:1f:df:f5:1c:36: 53:7e:d2:54:76:6e:49:03:f5:62:ce:56:c3:3b:8f:cc:5e:0a: 35:bd:1c:68:c8:05:b8:32:7e:77:90:63:96:54:ee:a5:c1:39: 34:38:60:84:8b:65:01:d5:5a:8d:7c:b8:72:29:0f:3b:da:84: 29:85:96:4f:52:e1:b2:bd:97:e9:f5:9a:10:8b:ec:b4:79:d3: 71:80:4e:1c:a4:3f:3b:27:b2:9d:c4:d8:14:69:14:b1:dd:93: 01:fe:96:bc:8d:bf:b8:bf:cd:53:2e:f2:95:44:25:58:d5:21: 6b:28:24:d3:27:4a:e2:50:7b:d2:f3:8d:0e:c9:09:53:5e:0b: a4:08:72:5c:d1:ab:8c:6c:51:dc:df:2f:f8:23:82:b4:25:69: 44:37:c8:db -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o7gxOTjbP7jFFFGQoZiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGJmYWQzMWMxNGM5M2RhYTUzNDRiYTA0ZjRiNTIzNTQ2OTZkZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy59K6Y7vWqyHUzxrKHmRuEt+EB1c 8Z/hyEyj3AjP/7+hJbKCAO2gx35RNDcyhUfddq2YWrh1TkkJxpd7EuDQDjxSfSAL VGFK07T41BxsQgIEOrfKJqFGbKMPusdflfo5SFOb0UnntYYPXUfLvpVwXdkYmg+9 iaFnMmUEpravqHDi8d1pl7YHbqjc2fdg6T7l65yQPr7T1YLWkOicv9KTRN24pSc9 qFMsVINHWO3jvNyM9cqNRP8dgnVHwNYGHtstSKY1xyCez9/BLBEXiKR2qgZSgMi7 wVQCiRSGekasu1bf335UdXb6Nj76W+09Mk0Zjbrsg1/Xm3hwhQhRBez0CQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPC/rTHBTJPapTRLoE9LUjVGlt+vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2RjMzVl Yi02ZWNmLTQ0NTItODU5OS03MGQ1OWNjNGY3Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvZGMzNWVi LTZlY2YtNDQ1Mi04NTk5LTcwZDU5Y2M0ZjdjYy8xLzhMLXRNY0ZNazlxbE5FdWdU MHRTTlVhVzM2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuamUMA0EAgACMAcDBQMqCksAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCorTANBgkqhkiG9w0BAQsFAAOCAQEAWR62+BP/u3kO JvgVAp4rDqEBa0VvDf8qhu3kFDyhjVt+puA3InpMCe/9q58XmnK/lUQBYPFZYx3Z kmgA8bnbCEhFUYsrLjof74ZnyhbK7xNHbqwOiKAv+JdPoLSECzP7YnkdW6vnfh/f 9Rw2U37SVHZuSQP1Ys5WwzuPzF4KNb0caMgFuDJ+d5BjllTupcE5NDhghItlAdVa jXy4cikPO9qEKYWWT1Lhsr2X6fWaEIvstHnTcYBOHKQ/OyeyncTYFGkUsd2TAf6W vI2/uL/NUy7ylUQlWNUhaygk0ydK4lB70vONDskJU14LpAhyXNGrjGxR3N8v+COC tCVpRDfI2w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:20 2026 by rpki-client