This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer File: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer (raw, json) Hash identifier: pyRejZL3CjCkXGatkhm1A2/GJqri2Kjvkc30L17t9LQ= Subject key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37E35500F339B35F600E3395C493E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197343 AS: 204650 AS: 210609 IP: 5.56.128.0/22 IP: 5.57.32.0/21 IP: 37.32.40.0/21 IP: 178.239.144.0/20 IP: 185.26.32.0/22 IP: 185.124.172.0/22 IP: 185.212.48.0/22 IP: 185.215.228.0/22 IP: 185.243.48.0/22 IP: 2a00:7040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e3:55:00:f3:39:b3:5f:60:0e:33:95:c4:93:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:b6:9b:b2:5e:74:c6:94:73:cf:2e:b7:64: 54:ea:fa:81:bc:e4:5a:b6:e7:cf:9c:d3:5a:a5:60: 54:7f:b3:a8:5a:60:eb:aa:c6:ef:7f:96:03:28:ef: 42:83:08:2b:ea:7d:41:db:0d:08:57:1d:10:ee:bf: fc:cd:85:8a:2e:23:11:e8:03:44:47:34:72:4b:8e: 5e:ec:8f:79:2e:b3:b3:62:31:ed:8e:32:ae:0d:46: 40:68:5f:a7:49:35:90:ae:e5:f9:28:d2:e5:0c:95: 60:9a:4e:14:5e:d4:6e:42:40:e9:69:aa:65:4f:61: 8f:5f:82:74:5d:f5:f8:76:89:2c:ff:b9:4c:75:3d: b9:d5:75:dd:d1:14:8f:aa:f4:eb:50:83:3c:32:f1: cf:ba:f1:22:99:c5:89:a2:d3:b3:2f:69:ff:c6:72: f6:11:14:02:99:d1:11:31:b0:7e:de:f9:22:55:fe: f9:c6:32:60:b3:3a:68:01:4d:2e:2d:5a:51:5f:33: da:f7:08:8e:7e:a8:84:b9:2a:98:0d:82:13:57:01: 85:89:c3:7d:31:51:b7:1b:1d:9c:a9:65:4a:bc:2d: f2:0e:b3:54:a5:1e:99:99:3e:4c:0c:0d:47:6b:dc: bd:26:2b:59:25:3d:24:43:db:b5:c2:3e:8b:ba:40: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.128.0/22 5.57.32.0/21 37.32.40.0/21 178.239.144.0/20 185.26.32.0/22 185.124.172.0/22 185.212.48.0/22 185.215.228.0/22 185.243.48.0/22 IPv6: 2a00:7040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197343 204650 210609 Signature Algorithm: sha256WithRSAEncryption 6a:49:73:b0:1b:5a:cc:5a:72:c1:9a:68:c7:54:42:68:09:a0: 4a:4f:a4:9e:54:46:78:6c:87:f1:02:c4:ca:51:1b:de:22:6f: 13:5f:68:9f:04:3d:7a:3c:b0:19:35:0c:23:ba:ae:7c:aa:f3: b3:6d:92:85:f3:ae:ab:63:2c:e4:a9:02:3e:e0:59:12:93:93: a8:cf:f1:d3:bf:07:f5:bf:07:fb:83:e2:9c:f8:fc:cb:ba:18: 77:b3:3d:dc:fc:3c:21:08:a0:33:7d:a2:77:7e:b0:11:b1:b2: 2f:96:8a:83:8f:9a:ee:e8:98:93:78:9b:e8:c1:71:2a:78:21: f8:17:40:c1:69:f8:5f:bf:a2:7f:d9:85:46:66:00:68:61:63: ef:fe:de:42:6a:8b:ad:82:a4:a5:9a:c4:d8:df:e9:9a:b3:94: 1f:35:f3:b6:aa:6e:05:1f:55:5c:9d:96:d4:79:f7:a4:f1:9a: 91:81:7d:71:76:fd:6a:b5:71:e7:a1:70:90:a6:a0:0a:eb:a4: 18:09:88:13:6e:c0:58:ea:a5:35:49:f4:37:f5:47:33:a3:fe: bc:bb:fe:fc:47:14:d9:ba:48:de:cd:71:89:4b:ca:a5:e5:00: 5d:37:9f:71:de:61:bf:bb:7d:3d:58:16:d1:e2:84:06:3a:cb: 54:e7:75:f4 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgISAZt+N+NVAPM5s19gDjOVxJPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTM1MzMzOTlmNTVlYjUyZTZiMjIwMGM3Y2FlNDI3MmI3NGQ2NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hu2m7JedMaUc88ut2RU6vqBvORa tufPnNNapWBUf7OoWmDrqsbvf5YDKO9Cgwgr6n1B2w0IVx0Q7r/8zYWKLiMR6ANE RzRyS45e7I95LrOzYjHtjjKuDUZAaF+nSTWQruX5KNLlDJVgmk4UXtRuQkDpaapl T2GPX4J0XfX4doks/7lMdT251XXd0RSPqvTrUIM8MvHPuvEimcWJotOzL2n/xnL2 ERQCmdERMbB+3vkiVf75xjJgszpoAU0uLVpRXzPa9wiOfqiEuSqYDYITVwGFicN9 MVG3Gx2cqWVKvC3yDrNUpR6ZmT5MDA1Ha9y9JitZJT0kQ9u1wj6LukDOJQIDAQAB o4IC6TCCAuUwHQYDVR0OBBYEFPE1MzmfVetS5rIgDHyuQnK3TWRkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzg0NGVl Yi1jZGYxLTQ3ZjEtYmNmYS05ODkxNjY4ODE5NjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvODQ0ZWVi LWNkZjEtNDdmMS1iY2ZhLTk4OTE2Njg4MTk2OS8xLzhUVXpPWjlWNjFMbXNpQU1m SzVDY3JkTlpHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQCBTiAAwQDBTkgAwQDJSAoAwQEsu+QAwQCuRog AwQCuXysAwQCudQwAwQCudfkAwQCufMwMA0EAgACMAcDBQAqAHBAMCQGCCsGAQUF BwEIAQH/BBUwE6ARMA8CAwMC3wIDAx9qAgMDNrEwDQYJKoZIhvcNAQELBQADggEB AGpJc7AbWsxacsGaaMdUQmgJoEpPpJ5URnhsh/ECxMpRG94ibxNfaJ8EPXo8sBk1 DCO6rnyq87NtkoXzrqtjLOSpAj7gWRKTk6jP8dO/B/W/B/uD4pz4/Mu6GHezPdz8 PCEIoDN9ond+sBGxsi+WioOPmu7omJN4m+jBcSp4IfgXQMFp+F+/on/ZhUZmAGhh Y+/+3kJqi62CpKWaxNjf6ZqzlB8187aqbgUfVVydltR596TxmpGBfXF2/Wq1ceeh cJCmoArrpBgJiBNuwFjqpTVJ9Df1RzOj/ry7/vxHFNm6SN7NcYlLyqXlAF03n3He Yb+7fT1YFtHihAY6y1TndfQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:40 2026 by rpki-client