This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer File: 8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer (raw, json) Hash identifier: 30oCRYjkNKu5F9mhMzFiASbYDGc4p7ZcO4nagsBvRmo= Subject key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AEC74085AD208B77A47DF75FF7514 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30890 AS: 33911 IP: 31.14.220.0/23 IP: 77.81.181.0/24 IP: 85.204.123.0/24 IP: 86.105.32.0/21 IP: 86.106.81.0/24 IP: 86.107.178.0/23 IP: 89.33.12.0/23 IP: 89.33.192.0/22 IP: 89.34.24.0/22 IP: 89.34.224.0/21 IP: 89.35.158.0/24 IP: 89.36.94.0/23 IP: 89.37.112.0/21 IP: 89.37.196.0/23 IP: 89.38.228.0/23 IP: 89.39.111.0/24 IP: 89.40.67.0/24 IP: 89.40.82.0/23 IP: 89.41.176.0/21 IP: 89.42.80.0/20 IP: 89.42.142.0/23 IP: 89.42.192.0/22 IP: 89.43.140.0/22 IP: 89.45.12.0/23 IP: 89.45.164.0/24 IP: 89.46.0.0 -- 89.46.4.255 IP: 89.47.96.0/19 IP: 89.47.232.0/23 IP: 93.113.176.0/21 IP: 93.113.204.0/24 IP: 93.114.72.0/21 IP: 93.114.88.0/22 IP: 93.114.160.0/21 IP: 93.114.194.0/24 IP: 93.115.58.0/24 IP: 93.115.100.0/23 IP: 93.119.104.0/22 IP: 185.101.104.0/22 IP: 188.211.233.0/24 IP: 188.214.88.0/24 IP: 188.240.210.0/24 IP: 188.240.221.0/24 IP: 188.241.3.0/24 IP: 188.241.218.0/23 IP: 188.241.240.0/23 IP: 193.19.192.0/22 IP: 195.28.2.0/23 IP: 2001:4d18::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ec:74:08:5a:d2:08:b7:7a:47:df:75:ff:75:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:db:6d:99:e1:67:91:4c:9e:b3:48:77:b2:7a: 49:08:85:a6:24:dc:f8:6d:5b:27:58:d8:5e:f7:3a: 6b:05:06:fb:3c:4f:be:41:c5:4c:39:f2:93:0a:92: 22:c6:76:ae:01:ae:14:7f:2e:4a:49:67:a8:0f:bf: 91:44:67:20:b0:36:5d:25:8a:11:da:4d:77:1b:21: cd:77:20:f6:fe:83:f0:46:83:93:ec:9c:16:7d:35: ae:53:f3:dc:1d:db:f4:f1:18:9e:7a:ae:d4:a5:9f: e8:97:46:45:1f:07:6d:91:99:93:e0:19:0d:b5:e9: 7e:82:2b:70:30:96:47:16:57:6c:0d:6c:14:61:a5: 4f:11:b3:21:ca:5e:c9:7f:96:4c:e4:a1:26:3c:e4: 03:da:47:63:0f:ed:f7:63:90:38:ed:c9:13:fb:85: a7:f3:25:2a:e5:15:37:2a:4f:0a:2a:b2:60:e9:24: a9:64:ec:87:10:ec:d1:4b:47:a1:47:68:d8:7d:32: 8d:46:f1:8c:4e:94:a9:6d:55:2f:16:2e:46:d7:99: 41:df:0b:c7:87:29:c7:29:b9:c3:b6:06:21:4f:c5: 9b:bf:74:a9:a7:ff:16:97:ae:8b:b0:b0:43:f8:df: ac:a7:ef:90:56:06:f7:68:0d:4c:26:d0:00:c1:55: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.220.0/23 77.81.181.0/24 85.204.123.0/24 86.105.32.0/21 86.106.81.0/24 86.107.178.0/23 89.33.12.0/23 89.33.192.0/22 89.34.24.0/22 89.34.224.0/21 89.35.158.0/24 89.36.94.0/23 89.37.112.0/21 89.37.196.0/23 89.38.228.0/23 89.39.111.0/24 89.40.67.0/24 89.40.82.0/23 89.41.176.0/21 89.42.80.0/20 89.42.142.0/23 89.42.192.0/22 89.43.140.0/22 89.45.12.0/23 89.45.164.0/24 89.46.0.0-89.46.4.255 89.47.96.0/19 89.47.232.0/23 93.113.176.0/21 93.113.204.0/24 93.114.72.0/21 93.114.88.0/22 93.114.160.0/21 93.114.194.0/24 93.115.58.0/24 93.115.100.0/23 93.119.104.0/22 185.101.104.0/22 188.211.233.0/24 188.214.88.0/24 188.240.210.0/24 188.240.221.0/24 188.241.3.0/24 188.241.218.0/23 188.241.240.0/23 193.19.192.0/22 195.28.2.0/23 IPv6: 2001:4d18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30890 33911 Signature Algorithm: sha256WithRSAEncryption 4e:24:28:09:eb:80:b1:9e:8f:58:9a:8c:52:cf:8a:36:28:10: a3:c0:24:ff:67:86:a9:aa:2b:44:88:7a:0d:a9:7b:4a:cd:35: a1:97:1b:17:7b:72:66:37:8b:9d:e6:ce:50:8e:07:50:97:89: 11:ea:e7:09:11:7d:28:d4:5a:80:a2:db:51:17:ae:e8:0a:26: 9e:52:c1:94:23:f7:ae:72:fd:13:1b:cb:b8:06:65:73:41:f7: 7d:96:98:3a:b5:86:38:d6:e1:78:9a:e5:e7:f5:fa:49:04:b9: 2e:4e:ef:2c:42:f4:2a:d1:39:e0:8b:02:24:dd:4c:da:6d:60: c0:27:12:a7:f6:a4:38:51:31:b5:aa:83:91:73:e8:86:fc:a3: 81:d4:9a:65:66:53:3a:14:22:3e:71:32:23:83:4b:bc:22:c0: e4:89:85:a9:e9:ec:77:a6:5e:8b:fa:b6:5b:ce:32:12:a4:03: 38:29:5d:d0:6e:e4:81:fd:4d:13:3d:55:9b:32:8b:a5:54:30: 82:fe:c4:81:83:a1:ef:63:33:99:78:a8:2d:47:49:8a:ef:92: f2:99:97:50:ad:85:69:71:24:5f:0c:2e:fb:a9:cd:b3:19:7c: e0:0e:bf:c9:cb:d4:94:d8:81:a1:33:ed:5e:2a:8d:62:f4:6a: ff:58:58:ae -----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgISAZt9Wux0CFrSCLd6R991/3UUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWQ0NmUwZTNlOGNhYWFlZDRhNTI5YmQ3ZDczMDhiZDFlZjAxYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNttmeFnkUyes0h3snpJCIWmJNz4 bVsnWNhe9zprBQb7PE++QcVMOfKTCpIixnauAa4Ufy5KSWeoD7+RRGcgsDZdJYoR 2k13GyHNdyD2/oPwRoOT7JwWfTWuU/PcHdv08Rieeq7UpZ/ol0ZFHwdtkZmT4BkN tel+gitwMJZHFldsDWwUYaVPEbMhyl7Jf5ZM5KEmPOQD2kdjD+33Y5A47ckT+4Wn 8yUq5RU3Kk8KKrJg6SSpZOyHEOzRS0ehR2jYfTKNRvGMTpSpbVUvFi5G15lB3wvH hynHKbnDtgYhT8Wbv3Spp/8Wl66LsLBD+N+sp++QVgb3aA1MJtAAwVVTPQIDAQAB o4ID2DCCA9QwHQYDVR0OBBYEFPHUbg4+jKqu1KUpvX1zCL0e8BwdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzg0ZWI0 NC1iYmRmLTQ2YzEtYjA0My1iNDJmMjNkODI4YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvODRlYjQ0 LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8xLzhkUnVEajZNcXE3VXBTbTlm WE1JdlI3d0hCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBUQYIKwYB BQUHAQcBAf8EggFAMIIBPDCCASkEAgABMIIBIQMEAR8O3AMEAE1RtQMEAFXMewME A1ZpIAMEAFZqUQMEAVZrsgMEAVkhDAMEAlkhwAMEAlkiGAMEA1ki4AMEAFkjngME AVkkXgMEA1klcAMEAVklxAMEAVkm5AMEAFknbwMEAFkoQwMEAVkoUgMEA1kpsAME BFkqUAMEAVkqjgMEAlkqwAMEAlkrjAMEAVktDAMEAFktpDALAwMBWS4DBABZLgQD BAVZL2ADBAFZL+gDBANdcbADBABdccwDBANdckgDBAJdclgDBANdcqADBABdcsID BABdczoDBAFdc2QDBAJdd2gDBAK5ZWgDBAC80+kDBAC81lgDBAC88NIDBAC88N0D BAC88QMDBAG88doDBAG88fADBALBE8ADBAHDHAIwDQQCAAIwBwMFACABTRgwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICeKoCAwCEdzANBgkqhkiG9w0BAQsFAAOCAQEA TiQoCeuAsZ6PWJqMUs+KNigQo8Ak/2eGqaorRIh6Dal7Ss01oZcbF3tyZjeLnebO UI4HUJeJEernCRF9KNRagKLbUReu6AomnlLBlCP3rnL9ExvLuAZlc0H3fZaYOrWG ONbheJrl5/X6SQS5Lk7vLEL0KtE54IsCJN1M2m1gwCcSp/akOFExtaqDkXPohvyj gdSaZWZTOhQiPnEyI4NLvCLA5ImFqensd6Zei/q2W84yEqQDOCld0G7kgf1NEz1V mzKLpVQwgv7EgYOh72MzmXioLUdJiu+S8pmXUK2FaXEkXwwu+6nNsxl84A6/ycvU lNiBoTPtXiqNYvRq/1hYrg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:40 2026 by rpki-client