This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer (raw, json) Hash identifier: VlEMt970TgFAOw86iWwfmJtcfMwpqKra5IujOMzXNms= Subject key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F850F5B93C6310A6A6A670B941A0592 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.66.107.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0f:5b:93:c6:31:0a:6a:6a:67:0b:94:1a:05:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:4f:05:53:89:5b:f9:1d:5b:cf:0d:33:0a: c6:db:0c:17:b2:2d:93:88:f7:b4:7a:22:42:6e:b8: 7c:04:55:67:eb:71:65:75:55:95:b5:88:de:bf:45: 58:0e:1a:47:e2:30:67:99:e4:de:b0:61:a5:2d:f5: 03:98:cc:84:1c:6e:73:4c:8c:38:d4:21:3b:89:95: aa:9b:60:aa:d4:f8:63:86:19:e6:4c:1c:14:e5:99: 0f:78:a6:40:27:5d:52:cd:94:c1:59:53:17:c7:84: 2c:79:a3:ea:3b:37:71:23:eb:8c:36:59:d1:21:e9: 87:99:26:23:72:9f:56:ec:2e:e6:4b:fd:b3:73:6a: 0e:6a:31:05:2f:f0:40:0f:83:59:d9:d8:e1:84:80: aa:2d:7f:78:13:f5:61:df:67:b9:96:12:40:14:ad: f0:9f:5b:18:74:30:8c:8e:d5:00:03:2b:0d:00:d9: bf:44:89:a8:b0:e0:82:10:43:0c:fa:69:d5:38:6f: 57:c3:64:56:de:32:f0:c7:6a:a1:63:bd:e1:b6:47: 66:36:4e:59:df:10:a1:63:db:fb:46:99:a3:27:41: 9f:18:d2:ea:bc:12:4a:e1:75:a1:73:0d:f6:f8:a4: d7:bc:e1:cd:83:3c:4a:32:48:c3:58:ae:e2:73:75: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.107.0/24 Signature Algorithm: sha256WithRSAEncryption 02:24:5b:5e:51:f0:98:ed:30:1b:59:3b:35:a6:8a:0a:54:0b: 43:89:3f:1e:08:3b:c0:b8:37:25:6a:63:21:6c:e4:30:86:0e: 30:a4:1f:36:1b:01:01:c4:97:46:fe:ed:a2:3a:05:40:b0:8d: b1:d9:67:99:4f:e3:46:bf:e0:f6:2b:62:eb:28:8d:77:d3:57: d6:c2:af:03:fa:5f:57:5b:24:7d:89:11:5c:c4:62:90:1e:cc: c8:da:df:05:5a:f6:2c:34:67:fe:df:31:c5:af:92:fc:bb:3d: ad:29:46:35:7f:0b:9c:77:0f:8d:2b:62:20:f0:49:8c:a1:86: db:b5:01:1c:10:81:ca:75:d8:70:c1:59:d6:a9:d6:ba:23:83: 55:8c:e2:51:8d:1c:ac:60:39:46:e5:2c:af:e9:76:8b:b4:86: a8:64:0d:78:a3:1e:33:51:55:8e:0e:ab:9e:0c:7a:01:63:fd: 77:09:30:1d:6f:b9:6f:98:6a:68:30:ca:97:05:dc:50:17:30: 82:18:bb:03:86:41:56:ca:57:bc:25:02:25:a3:34:32:28:e3: da:96:7a:91:c1:86:35:dc:bb:5e:14:92:a4:e8:7f:3e:7e:ab: 3f:75:23:27:27:47:6d:f4:3b:cb:f2:96:a1:cf:9f:a3:ef:0c: d9:e1:e0:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hQ9bk8YxCmpqZwuUGgWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTk5MThlZDIxOWU3ZDNkOTIyNzM3ZWNkYzczMWYwY2E2MGE2OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFNPBVOJW/kdW88NMwrG2wwXsi2T iPe0eiJCbrh8BFVn63FldVWVtYjev0VYDhpH4jBnmeTesGGlLfUDmMyEHG5zTIw4 1CE7iZWqm2Cq1PhjhhnmTBwU5ZkPeKZAJ11SzZTBWVMXx4QseaPqOzdxI+uMNlnR IemHmSYjcp9W7C7mS/2zc2oOajEFL/BAD4NZ2djhhICqLX94E/Vh32e5lhJAFK3w n1sYdDCMjtUAAysNANm/RImosOCCEEMM+mnVOG9Xw2RW3jLwx2qhY73htkdmNk5Z 3xChY9v7RpmjJ0GfGNLqvBJK4XWhcw32+KTXvOHNgzxKMkjDWK7ic3W93QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPGZGO0hnn09kic37NxzHwymCmi4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzYyYjA5 OC01NjhkLTQ4NzItYTAzMi0zMTNlZmViMGIxOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNjJiMDk4 LTU2OGQtNDg3Mi1hMDMyLTMxM2VmZWIwYjE5ZC8xLzhaa1k3U0dlZlQyU0p6ZnMz SE1mREtZS2FMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0GCSqGSIb3DQEBCwUAA4IBAQACJFte UfCY7TAbWTs1pooKVAtDiT8eCDvAuDclamMhbOQwhg4wpB82GwEBxJdG/u2iOgVA sI2x2WeZT+NGv+D2K2LrKI1301fWwq8D+l9XWyR9iRFcxGKQHszI2t8FWvYsNGf+ 3zHFr5L8uz2tKUY1fwucdw+NK2Ig8EmMoYbbtQEcEIHKddhwwVnWqda6I4NVjOJR jRysYDlG5Syv6XaLtIaoZA14ox4zUVWODqueDHoBY/13CTAdb7lvmGpoMMqXBdxQ FzCCGLsDhkFWyle8JQIlozQyKOPalnqRwYY13LteFJKk6H8+fqs/dSMnJ0dt9DvL 8pahz5+j7wzZ4eD/ -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:31 2026 by rpki-client