This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer (raw, json) Hash identifier: qZnpFacjMZ5lEq3Ml2z6TJfbC+ci6U31FfS9B5utB/Q= Subject key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8D41856AC4F0F70BFAF3875EFC9FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.221.116.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d4:18:56:ac:4f:0f:70:bf:af:38:75:ef:c9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:cb:bb:7c:3e:70:3d:45:23:b2:5c:3e:c5: 89:d4:4b:56:1b:84:7e:ef:b8:15:3c:40:cd:be:c9: 70:be:f1:1a:6d:02:09:62:45:c6:85:9b:61:24:d5: c5:3d:4a:a3:c8:0d:83:ab:5e:52:74:25:c7:58:d8: 3b:86:a8:40:d3:ce:fa:e8:43:56:52:5c:84:73:3c: 2a:b2:55:9b:19:a3:45:05:dd:b5:83:b5:89:83:71: ae:fd:10:b4:df:2d:33:51:94:a2:8b:eb:8a:91:53: 5f:44:0d:64:d2:3d:01:bc:c3:66:65:ae:33:9c:ad: 0f:a3:bc:ba:a3:a5:ce:b7:dc:36:28:24:98:5e:0a: 8f:27:cb:ea:97:2d:f3:b1:e0:de:03:16:36:ca:c0: a1:24:1c:a4:51:26:e5:85:1a:5e:27:5a:f6:a6:47: a8:29:93:91:3d:e9:64:76:c1:2d:81:a5:0b:93:58: 4c:30:20:91:d6:29:0e:d0:1b:35:2c:b1:d8:c0:49: d6:72:96:15:5e:a9:fc:40:f2:cf:5a:9e:29:c9:5e: 2f:d1:51:65:eb:68:ab:03:35:d0:7c:1f:56:a4:4e: 90:a8:00:dd:3f:8f:b5:48:19:87:e8:6c:89:56:2d: d7:ce:f2:67:b2:06:53:81:fc:3b:70:7a:08:d4:c6: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.116.0/24 Signature Algorithm: sha256WithRSAEncryption 58:b0:6d:99:b1:06:e9:13:3f:5b:1e:19:46:42:90:cb:c9:ab: 12:fc:67:56:7a:2c:fb:36:22:6f:eb:8e:b1:68:ea:8e:d1:9c: c5:10:10:81:da:22:3d:fd:39:b4:51:61:46:8e:52:15:2b:fc: 56:65:21:22:be:af:ff:4b:7d:86:01:c5:96:39:6c:00:d4:b7: f5:90:3c:24:79:53:56:7c:29:d9:e7:0a:26:0f:99:0f:38:1f: 42:84:7d:56:f0:f5:c6:fc:bd:4a:75:2c:ea:9b:bd:ec:16:b8: 90:d1:9c:e3:45:d8:6c:1f:a2:55:88:1e:73:ab:d4:e3:30:25: 0b:a6:36:4f:db:4e:95:b7:09:41:d8:48:ee:24:a7:b2:84:8d: 06:e8:01:b5:88:22:47:39:54:64:ad:26:75:b4:05:ab:a1:12: d3:c5:58:26:6e:6a:e3:77:88:80:ed:71:65:15:ae:06:7d:2d: 5b:22:9f:00:8c:ab:a8:53:e6:2b:e0:16:a1:ae:48:3e:75:3f: 45:51:1a:8f:00:8b:6b:5d:33:45:a0:03:c7:b8:86:61:c0:c8: ad:af:8f:f2:05:31:47:8b:d5:00:be:be:31:7c:08:98:50:9c: a4:a5:0e:be:e1:48:c4:85:e3:35:59:b7:51:af:30:ea:4b:37: d3:7a:a0:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yNQYVqxPD3C/rzh178n+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQwMzA5OGI4MzU2ZmZmYzVhNTk3ZTljNDViODRlZGY4N2NmOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQnLu3w+cD1FI7JcPsWJ1EtWG4R+ 77gVPEDNvslwvvEabQIJYkXGhZthJNXFPUqjyA2Dq15SdCXHWNg7hqhA08766ENW UlyEczwqslWbGaNFBd21g7WJg3Gu/RC03y0zUZSii+uKkVNfRA1k0j0BvMNmZa4z nK0Po7y6o6XOt9w2KCSYXgqPJ8vqly3zseDeAxY2ysChJBykUSblhRpeJ1r2pkeo KZORPelkdsEtgaULk1hMMCCR1ikO0Bs1LLHYwEnWcpYVXqn8QPLPWp4pyV4v0VFl 62irAzXQfB9WpE6QqADdP4+1SBmH6GyJVi3XzvJnsgZTgfw7cHoI1Ma5lwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPDQMJi4NW//xaWX6cRbhO34fPmUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2RmNTZl ZS1kZDcxLTRjYTctOThlZC0zMjdmODMxOTQ1ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZGY1NmVl LWRkNzEtNGNhNy05OGVkLTMyN2Y4MzE5NDVmZC8xLzhOQXdtTGcxYl9fRnBaZnB4 RnVFN2ZoOC1aUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwd10MA0GCSqGSIb3DQEBCwUAA4IBAQBYsG2Z sQbpEz9bHhlGQpDLyasS/GdWeiz7NiJv646xaOqO0ZzFEBCB2iI9/Tm0UWFGjlIV K/xWZSEivq//S32GAcWWOWwA1Lf1kDwkeVNWfCnZ5womD5kPOB9ChH1W8PXG/L1K dSzqm73sFriQ0ZzjRdhsH6JViB5zq9TjMCULpjZP206VtwlB2EjuJKeyhI0G6AG1 iCJHOVRkrSZ1tAWroRLTxVgmbmrjd4iA7XFlFa4GfS1bIp8AjKuoU+Yr4Bahrkg+ dT9FURqPAItrXTNFoAPHuIZhwMitr4/yBTFHi9UAvr4xfAiYUJykpQ6+4UjEheM1 WbdRrzDqSzfTeqA/ -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:02 2026 by rpki-client