This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer (raw, json) Hash identifier: K30NvzwutyIx0vqX15Y3Oy9o2GcYCxvOnQja4Dh/1sc= Subject key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC913BE742CF3329F9D65760E0CAFDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.206.11.0/24 IP: 2a10:a1c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:13:be:74:2c:f3:32:9f:9d:65:76:0e:0c:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:61:21:1d:b5:cf:4b:bc:e6:27:a2:84:ff: e8:68:4e:4b:d5:96:89:93:f6:5a:8e:38:e7:75:0c: 0e:c4:ee:c8:15:24:c2:ca:2f:54:d9:6c:1d:e5:e0: 69:fe:d4:d6:65:ef:3f:ab:69:04:35:7a:84:15:27: de:4c:c2:5d:7e:87:b5:25:39:fc:11:44:85:66:0a: 7b:6b:be:c5:77:23:9b:99:98:3d:43:38:45:f4:da: 4f:00:f2:a6:f5:eb:66:3a:71:fc:6d:49:da:eb:8c: 63:98:9a:95:34:90:bc:bd:eb:f9:14:22:d8:40:f0: 73:51:80:4c:47:29:64:f4:0f:2b:af:4b:c4:96:e9: 6d:0d:9d:1b:12:97:84:4c:cb:7b:f4:6e:18:68:1d: cd:1a:7d:19:c1:3b:07:5b:72:f6:58:dd:e9:a2:dc: 1c:56:70:1d:52:22:da:0b:07:19:78:3f:35:94:de: b3:b4:92:0a:94:fe:e1:af:54:3a:24:8e:f0:55:b5: 5c:3b:e4:7d:a3:fb:ef:9c:65:76:03:a3:b2:db:da: ef:e7:9e:64:2d:29:f4:75:c3:ac:7a:20:49:e1:dd: 28:ce:88:b2:5f:b5:55:e7:16:6c:7d:36:b2:a0:c5: de:b7:ae:71:a6:29:13:b2:fd:27:8c:07:70:6c:a9: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.11.0/24 IPv6: 2a10:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:45:5b:1d:2a:71:bd:65:86:08:5e:ba:4b:b0:ac:c0:fc:e6: 1c:15:39:db:b7:49:aa:c5:20:98:5e:b8:58:bc:66:62:e6:a1: 76:55:58:9a:c9:76:f7:23:43:ae:72:93:6c:29:34:31:26:20: 0d:fc:a0:fb:7f:b9:c3:63:22:8d:b3:aa:1c:6e:96:86:38:03: cb:62:c7:e1:c1:27:46:ff:08:cd:91:fc:b1:ca:a4:db:be:03: aa:d1:01:f9:05:84:9d:2d:9b:58:fa:e3:df:a2:43:f8:f0:00: 1d:97:a3:3c:7f:70:92:47:91:5f:be:98:0d:5b:ab:d6:90:86: 03:7b:be:7a:76:ab:c9:ef:85:6c:aa:7b:d8:f1:06:85:ca:da: e9:39:05:35:cf:54:d1:37:16:5e:96:04:7b:e6:5d:0e:85:6a: 30:30:0e:e0:84:87:46:c4:19:e2:91:01:94:38:b0:fd:eb:20: 83:b2:1e:0f:04:e1:76:07:ec:eb:d8:7d:e9:a4:23:cd:37:b2: 08:81:11:9d:51:9e:53:09:f8:45:93:30:4f:97:f8:1b:6d:37: 3c:51:9a:83:90:9d:1a:4e:a0:fb:a9:7e:85:9f:43:a1:69:28: 1f:a5:4a:0c:a4:8b:9f:2a:d2:20:6e:95:af:f4:3f:57:37:e8: cf:7e:df:cb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yRO+dCzzMp+dZXYODK/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTU2ZGIyZDI4NzRmOWU1OTg1YzlmMThmMDVmZTU2ZTgzZjA5NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1VhIR21z0u85ieihP/oaE5L1ZaJ k/ZajjjndQwOxO7IFSTCyi9U2Wwd5eBp/tTWZe8/q2kENXqEFSfeTMJdfoe1JTn8 EUSFZgp7a77FdyObmZg9QzhF9NpPAPKm9etmOnH8bUna64xjmJqVNJC8vev5FCLY QPBzUYBMRylk9A8rr0vElultDZ0bEpeETMt79G4YaB3NGn0ZwTsHW3L2WN3potwc VnAdUiLaCwcZeD81lN6ztJIKlP7hr1Q6JI7wVbVcO+R9o/vvnGV2A6Oy29rv555k LSn0dcOseiBJ4d0ozoiyX7VV5xZsfTayoMXet65xpikTsv0njAdwbKmk2wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPFW2y0odPnlmFyfGPBf5W6D8JUWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzliYjQw ZC1hZDI4LTRlNTEtODRiOC01YWU1M2EwNmVhYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOWJiNDBk LWFkMjgtNGU1MS04NGI4LTVhZTUzYTA2ZWFhNy8xLzhWYmJMU2gwLWVXWVhKOFk4 Rl9sYm9Qd2xSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW84LMA0EAgACMAcDBQAqEKHAMA0GCSqGSIb3 DQEBCwUAA4IBAQBPRVsdKnG9ZYYIXrpLsKzA/OYcFTnbt0mqxSCYXrhYvGZi5qF2 VViayXb3I0OucpNsKTQxJiAN/KD7f7nDYyKNs6ocbpaGOAPLYsfhwSdG/wjNkfyx yqTbvgOq0QH5BYSdLZtY+uPfokP48AAdl6M8f3CSR5FfvpgNW6vWkIYDe756dqvJ 74VsqnvY8QaFytrpOQU1z1TRNxZelgR75l0OhWowMA7ghIdGxBnikQGUOLD96yCD sh4PBOF2B+zr2H3ppCPNN7IIgRGdUZ5TCfhFkzBPl/gbbTc8UZqDkJ0aTqD7qX6F n0OhaSgfpUoMpIufKtIgbpWv9D9XN+jPft/L -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:07 2026 by rpki-client