This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer (raw, json) Hash identifier: e4Be2XUFhuHLNqSKeMlt8ljhHPlTyTu9fF+8JTn3eP4= Subject key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE55764B1E57AF64A527ABE9BD60D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49392 AS: 51659 IP: 46.17.40.0/21 IP: 46.29.160.0/21 IP: 176.32.32.0/21 IP: 185.22.152.0/22 IP: 2a00:b700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:55:76:4b:1e:57:af:64:a5:27:ab:e9:bd:60:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:64:9c:16:a8:5f:5e:a5:03:c3:8b:71:fb: 72:4c:d5:40:a2:98:e9:3b:3b:f0:41:e9:37:1a:f5: 22:98:37:f4:8f:06:15:fb:f2:40:dc:fd:50:ca:95: f3:e1:bb:e6:d0:20:56:c7:f0:5e:d2:dd:e3:cc:5c: 1c:54:63:32:c1:a7:76:4f:e5:8d:eb:a2:72:f4:d5: b5:5a:a9:b6:c3:7f:f9:98:9b:21:42:d9:9b:1b:83: 2c:e5:13:3e:cf:33:d5:96:93:0f:03:af:b2:91:99: 10:e7:50:ef:12:91:ef:f6:71:64:d2:be:45:d5:07: 30:92:4f:5b:a4:53:0c:28:06:84:c5:b0:a4:b0:8d: c4:e1:67:8c:67:da:11:ec:43:37:ad:fe:8f:9d:ee: 59:02:72:f8:0f:1f:59:bc:4d:39:08:ef:96:55:19: f3:e7:3f:ff:9c:d3:c3:77:56:57:f5:83:2a:8d:10: 47:63:f7:cd:c8:93:29:6e:c6:82:f1:45:05:d2:43: ed:12:ef:43:6b:3a:6a:c7:d9:9b:69:0b:8e:9f:53: 1f:0d:0d:4a:8d:0c:20:61:92:02:b8:83:5d:4d:be: 50:9d:6a:50:87:00:47:60:45:1c:0e:f0:e8:a2:27: 0d:e1:df:97:62:0d:92:f3:6f:7f:fe:de:9b:79:67: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.40.0/21 46.29.160.0/21 176.32.32.0/21 185.22.152.0/22 IPv6: 2a00:b700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49392 51659 Signature Algorithm: sha256WithRSAEncryption 9a:9d:63:46:c6:07:a2:82:1d:ab:4b:06:86:da:cc:9a:ba:92: c2:90:ce:40:72:50:c8:a2:27:f0:c9:0c:93:97:17:bc:ae:1b: 2d:78:92:39:a2:a9:7d:62:ee:11:a4:a3:16:3d:f2:b3:89:9f: 95:e2:c9:91:8b:b9:57:73:3f:56:7f:46:60:b9:e1:b5:dd:8a: 8e:1c:79:82:ca:7b:07:36:e3:a6:79:81:41:83:33:2e:d1:6c: f4:e4:23:4f:26:67:06:93:7f:d1:8f:e7:f7:ff:b4:06:14:0b: 09:d5:aa:85:01:54:c3:74:82:53:fd:db:fe:ce:0e:55:99:29: a3:f5:08:81:3e:bd:d5:09:b4:67:a1:18:e2:c9:03:85:6c:1e: 40:1b:28:36:34:d4:b7:25:e5:bf:0e:f7:6e:10:56:86:c8:fc: 2c:64:65:0e:4d:99:5b:b3:f2:ed:b3:38:b3:02:74:42:9f:8a: 5f:b7:98:63:d6:2f:05:cd:c8:2d:36:45:e8:b6:e0:11:e8:ce: 56:bd:e1:14:17:b0:9c:cd:a3:5d:7b:12:e9:db:54:f1:ec:e2: 15:d3:8c:b1:6f:54:8a:d2:fd:05:32:a6:2b:3a:19:2f:85:3d: c8:1a:d4:63:f3:e3:f1:74:cf:ca:17:67:f5:2e:a4:d4:f7:e0: 06:2e:d4:6d -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt87lV2Sx5Xr2SlJ6vpvWDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTVjYjlhZmM4YTg2NzBlMWYxMTZjYmQyMTQ5OWM5ZjcxMjE1YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfpknBaoX16lA8OLcftyTNVAopjp OzvwQek3GvUimDf0jwYV+/JA3P1QypXz4bvm0CBWx/Be0t3jzFwcVGMywad2T+WN 66Jy9NW1Wqm2w3/5mJshQtmbG4Ms5RM+zzPVlpMPA6+ykZkQ51DvEpHv9nFk0r5F 1Qcwkk9bpFMMKAaExbCksI3E4WeMZ9oR7EM3rf6Pne5ZAnL4Dx9ZvE05CO+WVRnz 5z//nNPDd1ZX9YMqjRBHY/fNyJMpbsaC8UUF0kPtEu9Dazpqx9mbaQuOn1MfDQ1K jQwgYZICuINdTb5QnWpQhwBHYEUcDvDooicN4d+XYg2S829//t6beWfSPQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFPFcua/IqGcOHxFsvSFJnJ9xIVvAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzk3N2Q3 MC02Yzg3LTQwOWQtOGVmOC0wMjdhNzQzYmE0NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvOTc3ZDcw LTZjODctNDA5ZC04ZWY4LTAyN2E3NDNiYTQ2Mi8xLzhWeTVyOGlvWnc0ZkVXeTlJ VW1jbjNFaFc4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDLhEoAwQDLh2gAwQDsCAgAwQCuRaYMA0EAgAC MAcDBQMqALcAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDA8AIDAMnLMA0GCSqG SIb3DQEBCwUAA4IBAQCanWNGxgeigh2rSwaG2syaupLCkM5AclDIoifwyQyTlxe8 rhsteJI5oql9Yu4RpKMWPfKziZ+V4smRi7lXcz9Wf0ZgueG13YqOHHmCynsHNuOm eYFBgzMu0Wz05CNPJmcGk3/Rj+f3/7QGFAsJ1aqFAVTDdIJT/dv+zg5VmSmj9QiB Pr3VCbRnoRjiyQOFbB5AGyg2NNS3JeW/DvduEFaGyPwsZGUOTZlbs/LtszizAnRC n4pft5hj1i8FzcgtNkXotuAR6M5WveEUF7CczaNdexLp21Tx7OIV04yxb1SK0v0F MqYrOhkvhT3IGtRj8+PxdM/KF2f1LqTU9+AGLtRt -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:35 2026 by rpki-client