This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer (raw, json) Hash identifier: 1GKP3wFtHl+/w+iBXs2HBIHvAgE+di0uDIV6Kr2jvds= Subject key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF8DC6C49B47887E924A70A468CF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43606 AS: 58172 IP: 85.116.176.0/20 IP: 91.132.148.0/22 IP: 91.212.93.0/24 IP: 91.239.101.0/24 IP: 128.127.96.0/21 IP: 178.20.176.0/21 IP: 2a04:3b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f8:dc:6c:49:b4:78:87:e9:24:a7:0a:46:8c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c113413d0df5b8fa069011eeb109f067b5579a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:23:b0:f9:94:d4:e6:2b:bb:f0:00:2b:6a: 74:ac:14:ae:ff:c5:55:95:af:10:91:fd:bc:76:12: 3b:da:73:af:58:1d:44:65:b5:70:7a:2d:35:ca:92: 31:f6:5b:a4:d7:e0:c2:43:21:8a:43:ae:0b:81:b4: 7f:04:8d:0d:6f:78:f6:62:f6:90:3a:db:9f:96:21: 26:63:fe:0e:87:c1:e9:67:2f:10:df:8e:c4:44:5d: c7:1a:5d:f2:6c:c8:98:c6:61:b3:29:3e:ed:98:16: 9e:9d:34:6a:b1:9a:3d:c4:cc:37:63:9d:61:34:c0: 1c:d9:af:64:50:75:7c:c8:76:e6:02:d3:8a:db:61: a5:b9:6a:a5:aa:4c:81:d8:0b:b1:b3:5b:ef:40:ad: df:13:4b:75:45:10:37:c4:5d:98:d9:5e:16:60:fb: a7:ed:05:47:e9:ca:5e:9e:33:d3:fd:14:9f:6b:38: f3:31:e1:fb:ab:8c:05:d3:df:99:ed:f4:d3:e0:6a: 16:c1:18:d7:af:d1:8f:b0:13:c1:bc:54:c4:24:1b: b3:77:83:ea:61:34:2d:da:a7:93:7e:5c:88:1b:85: ab:60:d2:4b:bd:5a:9c:c9:51:82:83:6f:01:c5:b0: 0d:e0:9f:5a:2d:f1:04:81:80:a5:b0:7f:a3:56:24: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.176.0/20 91.132.148.0/22 91.212.93.0/24 91.239.101.0/24 128.127.96.0/21 178.20.176.0/21 IPv6: 2a04:3b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43606 58172 Signature Algorithm: sha256WithRSAEncryption 69:b0:46:b0:17:74:fe:e8:b5:ee:fa:48:e9:1e:b0:b9:b3:c0: cb:1f:e5:ef:68:b8:ec:4e:1a:94:1b:2e:43:38:c4:5a:e3:d2: ea:f5:37:b0:b6:86:95:83:04:aa:cd:3a:98:cf:f8:bf:a0:0d: 5f:3b:8f:02:af:58:50:40:55:aa:a7:09:b7:7a:a2:cb:49:40: 08:ea:5f:88:cb:2f:6c:c0:08:58:3d:22:28:c0:d6:4a:3a:ab: a6:9f:2f:f4:09:dd:16:2f:d9:f7:11:50:f6:44:88:37:89:b7: e0:de:f1:37:23:b8:d5:40:de:2e:f0:2d:80:1d:9d:9e:d5:b3: b0:75:16:0a:7d:a5:8c:9b:9c:9d:41:89:68:5a:1d:99:1e:20: 66:45:62:3b:79:af:23:d8:cc:d3:67:02:f8:df:1e:fd:fd:09: 4b:6e:66:5a:ba:11:b2:c7:4e:7f:c9:ba:2b:06:12:af:36:31: 65:5e:3d:c3:8c:16:a4:3c:96:5f:1f:0a:8b:c6:35:6a:ec:f0: cf:5d:d7:06:6d:85:53:f5:03:20:e6:01:56:04:04:65:36:06: 9d:4d:7a:03:30:d9:4b:8b:4e:4a:f7:58:f2:1b:c6:8b:6c:aa: ad:05:d9:9b:f9:a3:ef:88:a2:dd:5f:af:8b:26:78:2f:16:1c: 96:a2:2c:ab -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt8f/jcbEm0eIfpJKcKRoz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMxMTM0MTNkMGRmNWI4ZmEwNjkwMTFlZWIxMDlmMDY3YjU1NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjUjsPmU1OYru/AAK2p0rBSu/8VV la8Qkf28dhI72nOvWB1EZbVwei01ypIx9luk1+DCQyGKQ64LgbR/BI0Nb3j2YvaQ OtufliEmY/4Oh8HpZy8Q347ERF3HGl3ybMiYxmGzKT7tmBaenTRqsZo9xMw3Y51h NMAc2a9kUHV8yHbmAtOK22GluWqlqkyB2Auxs1vvQK3fE0t1RRA3xF2Y2V4WYPun 7QVH6cpenjPT/RSfazjzMeH7q4wF09+Z7fTT4GoWwRjXr9GPsBPBvFTEJBuzd4Pq YTQt2qeTflyIG4WrYNJLvVqcyVGCg28BxbAN4J9aLfEEgYClsH+jViQKwwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFPDBE0E9DfW4+gaQEe6xCfBntVeaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2MxMDRj Ni05YjY1LTRkNDYtOWU0NS01MDI2MWIxMTkxNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvYzEwNGM2 LTliNjUtNGQ0Ni05ZTQ1LTUwMjYxYjExOTE2Yi8xLzhNRVRRVDBOOWJqNkJwQVI3 ckVKOEdlMVY1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQEVXSwAwQCW4SUAwQAW9RdAwQAW+9lAwQDgH9g AwQDshSwMA0EAgACMAcDBQMqBDsAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCq VgIDAOM8MA0GCSqGSIb3DQEBCwUAA4IBAQBpsEawF3T+6LXu+kjpHrC5s8DLH+Xv aLjsThqUGy5DOMRa49Lq9TewtoaVgwSqzTqYz/i/oA1fO48Cr1hQQFWqpwm3eqLL SUAI6l+Iyy9swAhYPSIowNZKOqumny/0Cd0WL9n3EVD2RIg3ibfg3vE3I7jVQN4u 8C2AHZ2e1bOwdRYKfaWMm5ydQYloWh2ZHiBmRWI7ea8j2MzTZwL43x79/QlLbmZa uhGyx05/yborBhKvNjFlXj3DjBakPJZfHwqLxjVq7PDPXdcGbYVT9QMg5gFWBARl NgadTXoDMNlLi05K91jyG8aLbKqtBdmb+aPviKLdX6+LJngvFhyWoiyr -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:30 2026 by rpki-client