This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer (raw, json) Hash identifier: 3h043QFYF61Oj7PBaP3ZcgeRjECdGRKEWhUPtb75v6w= Subject key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBB59E488AD658F8617DB2F3313F60 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 130.37.0.0/16 IP: 192.31.231.0/24 IP: 192.33.36.0/24 IP: 192.35.183.0 -- 192.35.192.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b5:9e:48:8a:d6:58:f8:61:7d:b2:f3:31:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f210bac96aff25b2aa931c4297446be37ffe2ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:de:a5:0a:26:c7:db:b3:8f:03:68:38:a9: 3f:e0:b6:2a:ed:bb:d7:ce:e2:0c:e5:d1:b8:ee:73: 1e:0e:b3:c8:9f:b7:dd:6b:66:97:e7:2d:d3:e0:71: 1c:5b:ab:81:ac:80:a8:6e:84:95:ca:60:8b:af:d4: 7b:5f:5e:1a:99:63:46:26:d6:34:6c:c7:ae:6b:39: 47:76:b5:20:be:e8:a6:dc:7d:3e:ab:bf:96:08:c5: 15:40:06:20:35:ba:ce:98:83:ab:e0:a1:dc:cc:25: a4:9e:64:4c:d1:67:72:32:3b:6e:49:41:a9:1f:be: 00:c1:e8:9c:a6:82:28:30:95:48:aa:bd:69:b1:23: 09:ea:3b:e2:04:5d:7e:7b:f8:ff:05:6c:89:e0:d9: f7:64:44:ef:7b:60:b5:ef:90:a5:7e:13:02:66:6e: ce:38:b4:1b:2b:3a:9d:23:c1:cd:30:c4:51:64:5b: 0d:9f:24:a5:b4:ea:60:cc:eb:02:6f:8e:c4:93:c5: 23:22:da:2d:6b:37:61:70:b1:8e:70:a6:07:a0:01: ed:91:ad:b7:9e:e4:e0:93:00:5d:d8:7d:59:52:70: f9:88:96:49:37:d9:bc:0c:95:22:46:c8:ba:fe:a0: 89:ac:11:1c:b1:a5:61:6d:91:67:0a:9b:8c:40:d6: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.37.0.0/16 192.31.231.0/24 192.33.36.0/24 192.35.183.0-192.35.192.255 Signature Algorithm: sha256WithRSAEncryption 69:71:7c:4b:75:78:c3:9f:97:2c:40:4b:a6:e1:02:ba:ad:7c: 83:aa:15:d6:ea:3c:e0:7f:82:e0:f2:2e:bc:4e:ae:27:49:bb: ee:ce:2a:71:68:18:ce:ec:39:3b:6d:69:2d:0b:9f:cc:08:bf: cf:0a:2d:c0:3f:3d:c3:54:6f:3d:4d:81:59:8f:dc:b6:4f:dc: 43:9d:e2:a3:01:f9:58:c6:1d:8a:e6:af:b3:fc:61:6a:5a:f5: 46:d6:9d:cf:41:93:04:26:37:62:5b:dc:7f:49:b1:5b:58:b0: 82:0d:7e:f2:51:b4:ae:51:a4:38:49:0e:42:5e:7d:df:f5:7e: fb:3b:63:f6:f2:8f:c9:ad:09:76:51:c8:9c:94:71:a6:bb:50: 8c:68:57:1d:01:bf:9b:0c:f1:08:36:e3:49:3d:bc:72:b0:f1: bb:e1:0b:c8:67:31:0d:bf:7c:37:cd:71:cd:9e:5f:b9:3a:4b: 45:79:2a:e9:c9:75:05:fa:c1:8c:f6:3e:8b:e0:77:eb:88:c6: 98:84:a1:de:df:11:84:79:6d:3e:32:71:10:30:7c:64:18:30: cd:f9:54:b0:05:55:59:25:3c:6a:1d:8f:88:fc:e4:5c:f0:8c: 92:a0:51:e7:29:5c:9a:15:4f:2a:16:02:9b:6f:7d:d9:9f:81: 18:fb:21:17 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgISAZt567WeSIrWWPhhfbLzMT9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjEwYmFjOTZhZmYyNWIyYWE5MzFjNDI5NzQ0NmJlMzdmZmUyYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEPepQomx9uzjwNoOKk/4LYq7bvX zuIM5dG47nMeDrPIn7fda2aX5y3T4HEcW6uBrICoboSVymCLr9R7X14amWNGJtY0 bMeuazlHdrUgvuim3H0+q7+WCMUVQAYgNbrOmIOr4KHczCWknmRM0WdyMjtuSUGp H74AweicpoIoMJVIqr1psSMJ6jviBF1+e/j/BWyJ4Nn3ZETve2C175ClfhMCZm7O OLQbKzqdI8HNMMRRZFsNnySltOpgzOsCb47Ek8UjItotazdhcLGOcKYHoAHtka23 nuTgkwBd2H1ZUnD5iJZJN9m8DJUiRsi6/qCJrBEcsaVhbZFnCpuMQNZKkQIDAQAB o4ICnTCCApkwHQYDVR0OBBYEFPIQuslq/yWyqpMcQpdEa+N//iraMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2I1MjQy MS0xYTNkLTQ4ZjUtOTQ5Zi1hMzI5Mzk0Njk4ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjUyNDIx LTFhM2QtNDhmNS05NDlmLWEzMjkzOTQ2OThkMi8xLzhoQzZ5V3JfSmJLcWt4eENs MFJyNDNfLUt0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzAlBAIAATAfAwMAgiUDBADAH+cDBADAISQwDAMEAMAjtwMEAMAj wDANBgkqhkiG9w0BAQsFAAOCAQEAaXF8S3V4w5+XLEBLpuECuq18g6oV1uo84H+C 4PIuvE6uJ0m77s4qcWgYzuw5O21pLQufzAi/zwotwD89w1RvPU2BWY/ctk/cQ53i owH5WMYdiuavs/xhalr1Rtadz0GTBCY3Ylvcf0mxW1iwgg1+8lG0rlGkOEkOQl59 3/V++ztj9vKPya0JdlHInJRxprtQjGhXHQG/mwzxCDbjST28crDxu+ELyGcxDb98 N81xzZ5fuTpLRXkq6cl1BfrBjPY+i+B364jGmISh3t8RhHltPjJxEDB8ZBgwzflU sAVVWSU8ah2PiPzkXPCMkqBR5ylcmhVPKhYCm2992Z+BGPshFw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:32 2026 by rpki-client