This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.cer (raw, json) Hash identifier: 1ckEVSOEpJ7ZUJGdvIXJoQfMPH5ZS70YCzNB3JqqBec= Subject key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910440EED2C382DFF0DA20080F4B532 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.177.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:44:0e:ed:2c:38:2d:ff:0d:a2:00:80:f4:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:c9:cb:f2:b7:d8:fb:a0:cf:bd:e2:f8:fe: c1:e8:cf:40:a4:b6:3a:82:11:bd:a2:01:94:c2:f1: 58:5f:ee:f1:70:ac:ad:f5:0a:d0:02:9d:16:31:06: 7c:2c:e1:18:33:cc:74:5b:a5:c2:ca:fd:15:2c:87: b5:9f:66:74:65:1b:97:65:ad:d4:c3:55:f0:b1:0e: f0:7b:04:ea:17:6c:63:3d:94:c9:0f:d1:72:eb:bb: b7:29:da:de:0f:f9:24:91:8f:d1:49:88:63:e5:7a: 9e:4e:9d:03:e3:e4:74:ad:86:bd:a6:bf:f4:89:af: 7b:91:12:50:f5:21:39:a2:ff:4e:ba:52:d1:5f:14: c6:3c:74:64:46:54:a4:e2:2b:e4:35:70:b7:67:2b: 44:86:09:00:e5:ff:8a:60:e3:5b:53:7f:32:c3:b6: 1a:86:8b:7f:a9:74:c1:30:4a:68:23:7c:b3:b9:8b: 93:01:35:f2:3a:b1:b7:f4:8b:ff:4c:fe:47:7e:1b: 13:f2:e7:5f:d3:6d:c3:f2:b5:28:df:3f:1b:60:7e: 87:4c:75:e1:30:8a:58:59:56:26:17:15:ce:fe:3c: d1:47:1b:20:21:59:6a:f7:5b:c5:76:75:46:02:2a: 91:82:4c:36:25:6f:a3:5d:d9:cc:fd:02:65:5d:91: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.98.0/24 Signature Algorithm: sha256WithRSAEncryption 69:96:72:70:18:93:67:cb:23:9b:ea:04:3f:e6:c8:62:0c:c9: 3e:1f:1f:68:18:0f:cf:59:74:4c:9d:b0:6c:14:52:bf:ed:e6: d3:9e:0a:05:0a:6e:22:3e:70:c6:bc:40:67:ed:99:e6:99:df: 0a:1c:b6:f5:6d:59:3e:e5:ed:d5:71:d9:7c:8c:bc:2e:dc:9b: 7f:bb:3e:83:c6:16:63:2b:f5:07:dc:19:43:90:2c:59:58:00: 32:42:51:83:98:bb:56:3c:08:cd:c5:38:b2:73:d7:a4:dc:8b: 06:21:42:a8:e7:ae:d9:03:bf:4e:18:b0:3a:c6:e2:71:f3:13: 08:b9:39:f8:82:e9:12:ff:94:23:1b:b6:e2:0e:71:2e:a6:76: 9f:3f:b5:bd:c4:e8:00:c2:59:5d:ba:92:da:45:40:e1:e5:39: 89:b5:d9:e4:92:77:1d:dd:15:06:19:78:f0:10:a5:64:e1:48: 8a:47:b8:fb:78:2a:b2:1a:3c:ec:f7:fd:8f:96:f0:30:26:ed: de:68:53:ca:2a:73:4b:70:42:9c:12:45:f5:c7:29:b1:30:51: 27:ea:f8:ef:b6:81:75:1b:69:6b:6b:51:df:94:4d:e2:1b:1f: 88:06:40:7c:aa:6d:22:e8:05:07:81:f1:3b:bf:fa:5e:e9:9d: 23:fc:77:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EEQO7Sw4Lf8NogCA9LUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGZiMGQwYmUyOTZkYzFiNzE5ZDI0NDBmYjZhZDljNzVkMDhlMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE7Jy/K32Pugz73i+P7B6M9ApLY6 ghG9ogGUwvFYX+7xcKyt9QrQAp0WMQZ8LOEYM8x0W6XCyv0VLIe1n2Z0ZRuXZa3U w1XwsQ7wewTqF2xjPZTJD9Fy67u3KdreD/kkkY/RSYhj5XqeTp0D4+R0rYa9pr/0 ia97kRJQ9SE5ov9OulLRXxTGPHRkRlSk4ivkNXC3ZytEhgkA5f+KYONbU38yw7Ya hot/qXTBMEpoI3yzuYuTATXyOrG39Iv/TP5HfhsT8udf023D8rUo3z8bYH6HTHXh MIpYWVYmFxXO/jzRRxsgIVlq91vFdnVGAiqRgkw2JW+jXdnM/QJlXZESHwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPD7DQviltwbcZ0kQPtq2cddCOLiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzNkZWRm Ni0zZWM3LTRiNDAtYWRhYS1jMGUyNzg3MzZjODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvM2RlZGY2 LTNlYzctNGI0MC1hZGFhLWMwZTI3ODczNmM4OC8xLzhQc05DLUtXM0J0eG5TUkEt MnJaeDEwSTR1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw7FiMA0GCSqGSIb3DQEBCwUAA4IBAQBplnJw GJNnyyOb6gQ/5shiDMk+Hx9oGA/PWXRMnbBsFFK/7ebTngoFCm4iPnDGvEBn7Znm md8KHLb1bVk+5e3Vcdl8jLwu3Jt/uz6DxhZjK/UH3BlDkCxZWAAyQlGDmLtWPAjN xTiyc9ek3IsGIUKo567ZA79OGLA6xuJx8xMIuTn4gukS/5QjG7biDnEupnafP7W9 xOgAwlldupLaRUDh5TmJtdnkkncd3RUGGXjwEKVk4UiKR7j7eCqyGjzs9/2PlvAw Ju3eaFPKKnNLcEKcEkX1xymxMFEn6vjvtoF1G2lra1HflE3iGx+IBkB8qm0i6AUH gfE7v/pe6Z0j/Hc1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:10 2026 by rpki-client