This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer File: 8WIlpQBFTmLx0lJTunotjB4lRCk.cer (raw, json) Hash identifier: h+Qj3FA0vFJwhV44vjPFpcJlXzujxImaWVNCgMmnhnA= Subject key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC88DFC0FD63A282AECA3BBDBA46169 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 926 IP: 37.10.116.0/24 IP: 185.184.229.0/24 IP: 2a13:9440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:8d:fc:0f:d6:3a:28:2a:ec:a3:bb:db:a4:61:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:8a:cb:82:ff:86:98:5a:66:bd:0c:68:47: 2e:37:2d:cd:0c:c7:61:a6:a6:e3:6c:42:26:57:4f: 17:13:db:69:a7:f3:96:a4:ee:c3:fa:cc:5f:bd:94: d0:c4:fb:6a:c7:9b:d6:6b:41:da:02:03:4d:dd:cd: f9:77:bd:e6:dc:79:65:bc:94:ae:76:c4:6e:49:2b: aa:45:ee:82:9a:40:7f:c0:5c:8d:ed:1e:a4:a1:77: 88:36:a4:c7:39:09:69:86:c8:8a:c7:f1:af:90:0e: ec:38:38:7e:df:5f:ba:fd:c4:99:fb:f5:ad:f9:6f: 75:73:7d:ab:0b:02:bd:85:4e:57:5c:5a:fc:ae:9a: 8b:cd:e0:10:e6:c0:13:3c:46:d3:4d:aa:bc:02:25: 8d:da:52:4a:2a:86:99:7b:e4:c3:9f:33:4c:97:75: 35:bd:a8:77:6f:ba:0d:96:d0:27:7a:b0:11:84:b6: 60:50:23:4f:db:f4:b7:f0:fe:da:70:69:b2:a5:c5: 86:3a:f0:55:6e:9a:08:24:97:9a:f7:ae:5b:b1:aa: fc:ff:cf:95:eb:d2:2a:f8:79:66:35:ee:0d:b8:11: fa:2e:d9:be:b7:8c:4f:4c:81:8c:d6:b7:90:af:db: eb:b5:16:bd:4d:82:65:02:31:f7:c4:df:f8:a5:16: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.10.116.0/24 185.184.229.0/24 IPv6: 2a13:9440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 926 Signature Algorithm: sha256WithRSAEncryption 33:27:65:a8:b3:88:1c:1c:2a:a5:a5:62:63:6f:d6:a5:39:0c: 2c:d0:29:c0:f2:82:4d:6c:6d:fe:bd:ac:de:21:d3:eb:78:fe: b8:44:d4:2c:07:62:02:ca:f9:7a:6f:2d:b6:08:73:31:68:7e: 88:2f:f3:af:e0:4e:c7:17:65:51:af:71:20:52:a9:78:76:9e: a9:58:92:75:82:dc:26:73:b2:28:98:f2:1e:dd:c5:7e:47:0b: 91:66:43:b1:1c:88:a8:a0:93:9d:a0:95:23:44:96:ff:8b:ae: 32:45:48:88:ea:5b:d9:22:88:e6:7b:15:77:6f:73:10:08:0c: 76:75:58:46:21:45:8f:21:98:e5:61:6c:3f:03:f0:7e:f9:13: b7:10:ad:71:a0:c9:3a:35:0a:b9:05:1e:cb:87:57:24:37:25: 04:2d:5a:9f:0e:6e:dd:40:9e:01:97:43:61:62:04:23:e3:76: d8:2d:2e:ec:2d:c0:31:9e:07:d2:30:82:93:86:4d:2d:97:4a: e9:a9:86:e8:50:14:50:57:04:be:f4:ea:e3:40:64:dd:59:a8: 71:a4:f1:c5:b7:40:b4:f6:4e:f8:3f:7b:8b:9c:be:54:2a:f7: 3e:a7:99:24:e1:56:d8:11:ba:3a:e9:1d:d5:ae:2a:6f:2f:75: c2:97:24:f8 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9yI38D9Y6KCrso7vbpGFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTYyMjVhNTAwNDU0ZTYyZjFkMjUyNTNiYTdhMmQ4YzFlMjU0NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV+Ky4L/hphaZr0MaEcuNy3NDMdh pqbjbEImV08XE9tpp/OWpO7D+sxfvZTQxPtqx5vWa0HaAgNN3c35d73m3HllvJSu dsRuSSuqRe6CmkB/wFyN7R6koXeINqTHOQlphsiKx/GvkA7sODh+31+6/cSZ+/Wt +W91c32rCwK9hU5XXFr8rpqLzeAQ5sATPEbTTaq8AiWN2lJKKoaZe+TDnzNMl3U1 vah3b7oNltAnerARhLZgUCNP2/S38P7acGmypcWGOvBVbpoIJJea965bsar8/8+V 69Iq+HlmNe4NuBH6Ltm+t4xPTIGM1reQr9vrtRa9TYJlAjH3xN/4pRbkCwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFPFiJaUARU5i8dJSU7p6LYweJUQpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzM4NDY0 NS02MThhLTQ1YjItOWQyYi01NmZhZGM5MmU0MDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMzg0NjQ1 LTYxOGEtNDViMi05ZDJiLTU2ZmFkYzkyZTQwMC8xLzhXSWxwUUJGVG1MeDBsSlR1 bm90akI0bFJDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJQp0AwQAubjlMA0EAgACMAcDBQMqE5RAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAgOeMA0GCSqGSIb3DQEBCwUAA4IBAQAzJ2Wo s4gcHCqlpWJjb9alOQws0CnA8oJNbG3+vazeIdPreP64RNQsB2ICyvl6by22CHMx aH6IL/Ov4E7HF2VRr3EgUql4dp6pWJJ1gtwmc7IomPIe3cV+RwuRZkOxHIiooJOd oJUjRJb/i64yRUiI6lvZIojmexV3b3MQCAx2dVhGIUWPIZjlYWw/A/B++RO3EK1x oMk6NQq5BR7Lh1ckNyUELVqfDm7dQJ4Bl0NhYgQj43bYLS7sLcAxngfSMIKThk0t l0rpqYboUBRQVwS+9OrjQGTdWahxpPHFt0C09k74P3uLnL5UKvc+p5kk4VbYEbo6 6R3VripvL3XClyT4 -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:36 2026 by rpki-client