This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer File: 8YCPGr745rWc1DWaa0SB_HyWMdE.cer (raw, json) Hash identifier: TpkShhp3BrlS6WpJA0XMSVG5aRHmbmXONUvNWnywyMU= Subject key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E382CFFA536769D4829197F53C63324 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34966 IP: 153.92.184.0/22 IP: 185.237.32.0/22 IP: 194.30.174.0/24 IP: 195.238.224.0/24 IP: 2a0c:280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2c:ff:a5:36:76:9d:48:29:19:7f:53:c6:33:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:68:d9:2c:f9:ad:26:c7:6f:96:d7:e2:2e: ab:98:27:ee:46:df:fb:d6:0b:4d:c9:c6:57:51:31: cd:0e:11:46:5a:37:74:f5:5b:22:3d:7f:3c:1e:3e: eb:98:9d:60:14:b0:1a:75:c3:7b:ce:5c:58:3d:26: 69:1e:63:25:1f:ed:76:0a:06:54:e7:e3:5c:3f:b5: e6:39:d1:eb:ee:3e:82:72:23:03:3a:1a:be:35:63: b4:7e:07:38:34:a1:08:44:1f:53:26:91:ae:08:ac: 17:e1:13:54:81:ec:0c:82:4e:c3:f8:e4:81:26:ff: b7:5e:94:16:34:18:f8:2a:79:e1:92:c7:78:44:26: 67:46:69:db:d4:88:67:8c:0f:06:d9:a0:db:60:3e: d9:de:a8:f8:cc:7b:49:73:a0:70:29:3e:60:58:b1: 0e:f5:b6:71:09:0c:c2:41:ef:98:31:96:0a:db:fa: 7a:f5:08:69:62:f3:64:55:af:c3:cd:d7:e6:c4:fd: 16:9b:1f:03:4f:aa:4a:08:bb:c5:8e:5f:9d:d0:9a: db:22:53:2b:54:06:89:93:e5:d0:c7:87:b9:b5:28: 02:ba:e8:aa:9e:ae:7e:ca:13:07:cf:59:c9:ed:ce: c6:9f:ac:76:9e:c5:00:f8:0d:46:37:4e:d0:c9:0e: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.92.184.0/22 185.237.32.0/22 194.30.174.0/24 195.238.224.0/24 IPv6: 2a0c:280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34966 Signature Algorithm: sha256WithRSAEncryption 6b:06:72:e1:9b:31:80:67:ba:a9:70:76:ff:3b:da:a5:6a:52: af:42:f3:98:ac:ad:f0:8a:19:d8:5d:3a:72:49:48:56:16:a2: c8:95:f7:b6:5d:51:ea:fd:7f:f8:99:eb:d1:29:4b:6f:cc:c1: 39:b7:fe:a9:bf:25:2d:6b:94:02:48:96:bf:e4:87:56:35:9b: 85:cf:45:4d:ca:c3:3f:1e:e5:de:27:11:af:b9:cf:4f:9a:79: 38:3b:28:90:cd:2f:0f:cb:96:03:4c:e8:2c:21:66:77:b9:de: 6e:a4:98:d4:b4:47:96:a1:08:79:e6:60:4f:45:4f:6b:10:c4: ef:a3:06:20:7b:aa:ba:e7:ef:22:9c:e2:1b:d9:c3:a7:e2:21: 55:1f:25:86:9e:08:c6:0e:03:ac:24:82:50:7b:a7:a4:70:97: 38:67:87:55:d4:8c:ac:c4:6b:b0:72:e6:05:17:ed:a9:6f:08: 31:15:19:23:95:a9:fb:0b:cf:72:90:da:fd:86:f3:61:15:60: 47:d3:bb:71:d3:93:e0:35:ae:fe:0f:36:68:ec:a3:b2:d7:31: 3d:90:0f:7a:17:7d:70:00:95:56:17:1c:7d:49:91:31:bc:91: 62:ba:05:bb:f8:ef:cc:c7:e2:45:59:6f:a4:5e:b1:b7:ad:89: 16:26:c5:d1 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+OCz/pTZ2nUgpGX9TxjMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTgwOGYxYWJlZjhlNmI1OWNkNDM1OWE2YjQ0ODFmYzdjOTYzMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumxo2Sz5rSbHb5bX4i6rmCfuRt/7 1gtNycZXUTHNDhFGWjd09VsiPX88Hj7rmJ1gFLAadcN7zlxYPSZpHmMlH+12CgZU 5+NcP7XmOdHr7j6CciMDOhq+NWO0fgc4NKEIRB9TJpGuCKwX4RNUgewMgk7D+OSB Jv+3XpQWNBj4Knnhksd4RCZnRmnb1IhnjA8G2aDbYD7Z3qj4zHtJc6BwKT5gWLEO 9bZxCQzCQe+YMZYK2/p69QhpYvNkVa/DzdfmxP0Wmx8DT6pKCLvFjl+d0JrbIlMr VAaJk+XQx4e5tSgCuuiqnq5+yhMHz1nJ7c7Gn6x2nsUA+A1GN07QyQ5lRwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2FlMzI0 Zi01NGY1LTQxZGEtYmViZi0wMzA3N2UzN2M2MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvYWUzMjRm LTU0ZjUtNDFkYS1iZWJmLTAzMDc3ZTM3YzYxYS8xLzhZQ1BHcjc0NXJXYzFEV2Fh MFNCX0h5V01kRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCmVy4AwQCue0gAwQAwh6uAwQAw+7gMA0EAgAC MAcDBQMqDAKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCIljANBgkqhkiG9w0B AQsFAAOCAQEAawZy4ZsxgGe6qXB2/zvapWpSr0LzmKyt8IoZ2F06cklIVhaiyJX3 tl1R6v1/+Jnr0SlLb8zBObf+qb8lLWuUAkiWv+SHVjWbhc9FTcrDPx7l3icRr7nP T5p5ODsokM0vD8uWA0zoLCFmd7nebqSY1LRHlqEIeeZgT0VPaxDE76MGIHuquufv IpziG9nDp+IhVR8lhp4Ixg4DrCSCUHunpHCXOGeHVdSMrMRrsHLmBRftqW8IMRUZ I5Wp+wvPcpDa/YbzYRVgR9O7cdOT4DWu/g82aOyjstcxPZAPehd9cACVVhccfUmR MbyRYroFu/jvzMfiRVlvpF6xt62JFibF0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:04 2026 by rpki-client