This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer File: 8dBXL-cpkb0yhUuscWZ269rSKs4.cer (raw, json) Hash identifier: OGiVTxrYjDEpFyJ2WQX3Dt+8i0d2vqaJ1MwOC3W21J0= Subject key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78138485E59B23EB8E1208153D7C31BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:41:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48280 IP: 91.207.13.0/24 IP: 2a13:9640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:13:84:85:e5:9b:23:eb:8e:12:08:15:3d:7c:31:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 05:41:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1d0572fe72991bd32854bac716676ebdad22ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:7f:d1:8e:19:39:9e:7b:c4:68:de:24:a3: a0:ef:80:1b:1c:fd:14:50:ee:0b:ae:e9:d5:3c:47: 81:6b:18:75:2d:03:86:21:8b:43:4d:51:7c:f9:9f: 90:68:28:b3:fa:3d:d9:34:78:a4:fe:a9:bd:62:2d: 04:de:39:b5:5d:0c:5e:41:d7:76:d6:d7:55:fa:96: 1d:1b:1f:8a:02:b2:b7:7c:71:ca:78:75:1d:b0:2d: ad:74:e9:ac:05:00:65:af:15:98:7c:90:f0:a5:a7: 6f:33:ea:b8:de:c3:4d:a0:a0:3f:d1:ee:66:99:08: 45:21:96:ec:54:5c:17:97:b7:63:e3:2d:0f:83:a7: cb:7b:ea:1e:6a:1e:e6:5d:e2:17:1b:a1:48:4d:65: 5e:07:75:eb:83:ff:43:2d:72:76:87:21:45:54:38: a3:cb:f8:8b:63:f5:d2:b1:cd:dc:3d:13:25:87:54: 70:d5:05:e5:ef:52:17:05:29:ed:58:7f:2c:9d:db: fd:d3:78:ff:3c:1f:d4:fe:32:e0:47:4c:02:5e:00: 9c:85:49:01:2e:db:47:2a:76:63:d6:71:d8:b6:9f: 81:3a:b2:7b:b3:53:2f:bb:c0:ca:cb:b1:a4:4d:0b: 21:92:e8:ad:c3:71:c3:73:f3:bb:7e:2f:bd:04:25: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.13.0/24 IPv6: 2a13:9640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48280 Signature Algorithm: sha256WithRSAEncryption 17:2c:7e:53:56:53:5c:54:52:dc:98:d4:04:db:53:c8:a3:a0: 93:ba:ed:98:19:80:3b:1f:15:5e:97:12:01:c4:5f:76:41:e2: 5a:1a:e8:f0:8e:52:3c:19:fe:0b:5e:aa:b8:82:08:ed:56:cf: 40:f5:fa:54:d0:46:2a:5f:03:ff:10:95:57:d0:9c:e1:f8:1e: e8:b8:22:36:6e:ad:7a:c4:d4:17:81:c7:de:d7:fb:d5:99:81: d8:c7:e6:7a:1d:ab:06:21:b5:3c:2f:7d:f4:00:37:56:21:bd: 12:b8:7d:bd:06:dd:86:12:1a:09:3a:14:23:fb:fa:ae:06:4f: 75:f0:4b:f9:99:65:cb:04:a4:2a:50:3e:d8:9e:3a:65:8f:a8: 2e:bc:a8:aa:4c:a0:ac:b1:3e:c9:fd:0e:59:f1:2f:78:c4:79: 86:fc:da:d9:05:ff:66:0e:d1:68:85:e5:d4:ad:3c:24:1c:69: 9c:f4:14:18:cb:ed:02:99:fa:71:b3:dd:8b:92:d1:b0:20:42: 47:51:d0:22:6a:f1:74:53:7b:0b:ce:9e:a9:46:2a:78:07:d9: 84:17:62:bb:5b:d8:7d:9c:a6:dd:9c:c9:99:e9:3a:da:b5:42: 3f:fe:c7:e0:ae:0b:ec:50:70:0d:cd:c0:92:87:25:64:8f:86: 21:bd:32:33 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt4E4SF5Zsj644SCBU9fDG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDU0MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWQwNTcyZmU3Mjk5MWJkMzI4NTRiYWM3MTY2NzZlYmRhZDIyYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vN/0Y4ZOZ57xGjeJKOg74AbHP0U UO4LrunVPEeBaxh1LQOGIYtDTVF8+Z+QaCiz+j3ZNHik/qm9Yi0E3jm1XQxeQdd2 1tdV+pYdGx+KArK3fHHKeHUdsC2tdOmsBQBlrxWYfJDwpadvM+q43sNNoKA/0e5m mQhFIZbsVFwXl7dj4y0Pg6fLe+oeah7mXeIXG6FITWVeB3Xrg/9DLXJ2hyFFVDij y/iLY/XSsc3cPRMlh1Rw1QXl71IXBSntWH8sndv903j/PB/U/jLgR0wCXgCchUkB LttHKnZj1nHYtp+BOrJ7s1Mvu8DKy7GkTQshkuitw3HDc/O7fi+9BCUmewIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFPHQVy/nKZG9MoVLrHFmduva0irOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UzMGRl ODRiLTQwMGEtNGZkMS1hYjhhLWU3NjE2ZTI0NWI0OS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTMw ZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1YjQ5LzAvRjFEMDU3MkZFNzI5 OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME AFvPDTANBAIAAjAHAwUDKhOWQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAvJgw DQYJKoZIhvcNAQELBQADggEBABcsflNWU1xUUtyY1ATbU8ijoJO67ZgZgDsfFV6X EgHEX3ZB4loa6PCOUjwZ/gteqriCCO1Wz0D1+lTQRipfA/8QlVfQnOH4Hui4IjZu rXrE1BeBx97X+9WZgdjH5nodqwYhtTwvffQAN1YhvRK4fb0G3YYSGgk6FCP7+q4G T3XwS/mZZcsEpCpQPtieOmWPqC68qKpMoKyxPsn9DlnxL3jEeYb82tkF/2YO0WiF 5dStPCQcaZz0FBjL7QKZ+nGz3YuS0bAgQkdR0CJq8XRTewvOnqlGKngH2YQXYrtb 2H2cpt2cyZnpOtq1Qj/+x+CuC+xQcA3NwJKHJWSPhiG9MjM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:20 2026 by rpki-client