This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer (raw, json) Hash identifier: FZIA6G3Zi1T963/dlz84ILk0l/3Yo6CshKtPAXNddbg= Subject key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB20FEE4F25B47FA5DD9A1085FF182 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24586 IP: 46.22.176.0/20 IP: 80.95.160.0/20 IP: 93.92.96.0/21 IP: 185.39.120.0/22 IP: 188.66.16.0/21 IP: 195.189.20.0/22 IP: 2001:4c10::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:20:fe:e4:f2:5b:47:fa:5d:d9:a1:08:5f:f1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f22bed3f37cd72826511c574560deb55542550e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:a3:05:c2:7e:ca:22:d4:b1:03:90:b1:25: a2:6d:a5:15:b4:f6:28:79:ec:d7:a9:2a:82:9a:6f: e1:08:4c:a0:56:24:9e:1b:25:20:39:af:2a:65:24: 61:1c:cb:81:31:4f:bc:60:83:ac:da:7b:d5:30:56: 49:5a:74:18:01:e8:2a:cf:36:c9:15:5d:e6:39:15: 2d:05:32:e7:45:ef:43:c8:bc:65:a8:e9:d1:cf:5e: 79:8c:d7:b1:69:23:ec:64:76:16:ac:ad:bd:66:21: 5e:d4:d2:19:99:92:37:83:17:6d:10:b5:8d:04:27: bc:81:41:52:9f:31:e4:bf:2a:64:99:cc:b9:a5:be: e0:ee:32:30:ce:82:81:3b:40:0a:b5:f4:69:bd:0e: cf:43:cf:6b:a6:fb:85:49:2f:7e:1c:8e:8d:68:17: 6a:9f:0b:b3:73:34:08:ea:46:88:6c:e5:48:20:9c: 8e:4c:8c:82:2a:ce:2c:d3:87:5e:4d:ec:18:a0:25: 3b:53:19:27:63:9d:ae:21:00:6d:cd:4f:78:a3:89: 4f:b9:7b:7e:05:67:df:81:56:ab:41:09:f3:cf:e0: b4:a3:73:20:9d:f2:bd:bb:84:2a:61:0e:be:d9:0c: 82:8d:50:9c:30:49:45:1a:e9:fb:56:a9:f7:86:8a: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.176.0/20 80.95.160.0/20 93.92.96.0/21 185.39.120.0/22 188.66.16.0/21 195.189.20.0/22 IPv6: 2001:4c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24586 Signature Algorithm: sha256WithRSAEncryption a2:ba:4e:6e:28:8d:f2:1c:d6:45:e2:26:ed:27:af:52:0f:6a: 82:80:46:c8:b6:c7:09:38:7b:21:10:43:9e:70:56:9d:92:23: 36:9d:21:c6:4e:27:24:de:4d:85:95:2c:75:aa:85:14:28:a2: d0:a5:6b:02:65:e4:ef:54:02:0e:8c:76:2a:f8:a2:7f:81:ae: ff:4a:d4:55:af:2b:9e:47:50:fb:a3:22:2f:b8:8e:8a:0f:84: b4:3b:ac:16:fc:57:30:a5:ba:74:97:cd:75:b6:7b:62:bb:cf: 1e:2b:40:f0:d7:71:c7:88:40:1b:e2:8b:fc:60:2f:fc:52:5e: 7b:bf:5e:a6:fe:31:1a:e0:18:26:27:cb:f6:30:0e:71:41:b6: b0:3d:25:e1:39:93:6a:ad:45:cb:75:cc:26:53:62:35:f8:a1: 8d:de:ab:8d:69:6f:95:73:69:6f:7b:68:51:74:be:55:aa:6d: d9:be:57:46:12:67:75:84:22:e2:d0:27:52:77:49:d5:17:0a: 7c:83:96:57:25:7c:de:e1:3d:7e:c5:2a:93:b9:bc:01:67:33: f8:4a:ac:7d:7a:37:dd:f7:a1:21:2b:18:19:32:ec:a9:0d:ef: 40:80:0d:dd:ab:9f:f2:2d:dd:02:38:ed:41:57:fb:8f:7e:26: ea:70:cc:3f -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt9yyD+5PJbR/pd2aEIX/GCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjJiZWQzZjM3Y2Q3MjgyNjUxMWM1NzQ1NjBkZWI1NTU0MjU1MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaCjBcJ+yiLUsQOQsSWibaUVtPYo eezXqSqCmm/hCEygViSeGyUgOa8qZSRhHMuBMU+8YIOs2nvVMFZJWnQYAegqzzbJ FV3mORUtBTLnRe9DyLxlqOnRz155jNexaSPsZHYWrK29ZiFe1NIZmZI3gxdtELWN BCe8gUFSnzHkvypkmcy5pb7g7jIwzoKBO0AKtfRpvQ7PQ89rpvuFSS9+HI6NaBdq nwuzczQI6kaIbOVIIJyOTIyCKs4s04deTewYoCU7UxknY52uIQBtzU94o4lPuXt+ BWffgVarQQnzz+C0o3MgnfK9u4QqYQ6+2QyCjVCcMElFGun7Vqn3hoos4wIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFPIr7T83zXKCZRHFdFYN61VUJVDkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzI5NGZh MS1lOTM4LTRjZDItOWE4OS0yOTA2MmU4NzBiNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvMjk0ZmEx LWU5MzgtNGNkMi05YTg5LTI5MDYyZTg3MGI2NC8xLzhpdnRQemZOY29KbEVjVjBW ZzNyVlZRbFVPUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQELhawAwQEUF+gAwQDXVxgAwQCuSd4AwQDvEIQ AwQCw70UMA0EAgACMAcDBQAgAUwQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmAK MA0GCSqGSIb3DQEBCwUAA4IBAQCiuk5uKI3yHNZF4ibtJ69SD2qCgEbItscJOHsh EEOecFadkiM2nSHGTick3k2FlSx1qoUUKKLQpWsCZeTvVAIOjHYq+KJ/ga7/StRV ryueR1D7oyIvuI6KD4S0O6wW/Fcwpbp0l811tntiu88eK0Dw13HHiEAb4ov8YC/8 Ul57v16m/jEa4BgmJ8v2MA5xQbawPSXhOZNqrUXLdcwmU2I1+KGN3quNaW+Vc2lv e2hRdL5Vqm3ZvldGEmd1hCLi0CdSd0nVFwp8g5ZXJXze4T1+xSqTubwBZzP4Sqx9 ejfd96EhKxgZMuypDe9AgA3dq5/yLd0COO1BV/uPfibqcMw/ -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:27 2026 by rpki-client