This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer File: 8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer (raw, json) Hash identifier: 7TofOKxZI6V5+JvSYt6OP+TDbS5wEsuvW6BDKlj0SLQ= Subject key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36995409E6D2460BB54373FFB89E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39674 AS: 44374 AS: 50788 AS: 61245 IP: 46.250.224.0/19 IP: 2a00:8e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:69:95:40:9e:6d:24:60:bb:54:37:3f:fb:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:9c:39:f4:f5:f8:80:a7:2d:ec:cf:f4:16: 18:ee:cb:00:08:62:d9:0e:4d:33:a3:ab:89:f1:d1: 7a:af:a5:df:b0:b6:ed:a9:c1:aa:da:b4:1b:d7:50: b9:93:c0:57:da:9d:b0:9e:dc:c2:44:25:97:7a:30: 98:e4:d0:7d:c2:42:81:9e:1f:7e:af:c9:5f:e8:77: f5:fc:da:51:6d:49:5f:a9:43:c9:d1:9c:72:d2:c8: a6:c0:fd:42:4f:0d:d2:24:10:40:8c:3a:0e:79:a9: 1d:1d:ac:7c:d8:cb:61:4f:36:21:c1:ce:44:d3:85: 86:56:29:a6:7b:fd:ee:e9:41:69:79:a3:a7:b5:3d: fa:57:32:bd:f9:8c:42:51:de:37:f0:81:99:a9:67: ae:6f:c2:69:4f:2e:2f:4d:0b:65:08:95:1c:64:5a: c9:67:f0:88:92:29:82:f3:eb:61:61:b9:5c:1e:f0: cf:f2:0d:04:9e:47:84:e6:8e:7d:34:1d:7b:17:51: 47:74:10:5e:45:5b:7d:11:ac:91:2b:be:c5:aa:3d: e6:0e:0b:3a:43:58:ca:15:3e:c4:72:2e:8e:67:e8: df:ce:f3:d0:a0:81:e4:65:2c:eb:85:dd:e1:0b:d6: 04:4c:43:c1:85:2d:10:2e:25:79:59:0f:0e:66:d6: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.250.224.0/19 IPv6: 2a00:8e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39674 44374 50788 61245 Signature Algorithm: sha256WithRSAEncryption 6a:56:bc:de:b1:a9:32:27:fa:4b:58:27:ae:57:ba:9d:c0:5b: b5:dc:4a:1d:6a:e4:69:f4:9f:d5:e3:87:43:50:2c:01:cf:96: f6:c5:83:d7:f5:60:32:7c:9e:91:4c:6f:f1:92:33:75:1d:00: ef:7c:e3:de:11:1d:d4:36:82:c5:40:b0:55:18:cc:d2:25:33: f2:87:3f:d7:08:1c:65:6c:7d:0a:96:51:9d:7a:bf:3e:b4:96: a9:19:37:b0:f7:77:ed:71:1d:11:01:9d:61:9a:ee:d5:23:0e: 99:31:63:2b:cb:aa:4b:ae:65:75:26:88:15:87:c3:09:01:3a: cc:ba:b7:00:b4:9f:9b:99:b3:be:a3:8e:05:dc:1a:fb:b9:7c: 58:4c:f4:a3:d2:97:11:3b:35:e8:1d:39:61:cf:b2:ae:dd:73: 55:a4:1c:7f:af:f8:87:31:8c:e8:12:0a:84:f4:fc:5f:55:0b: bc:18:ca:27:94:36:68:72:f6:be:a8:c6:7b:45:83:57:1e:2e: 5f:08:ca:cc:5d:9a:9c:da:ef:96:7c:d3:89:74:09:89:01:25: 65:13:f8:4a:01:a7:e5:3b:e0:67:d3:60:74:b2:1c:38:d3:fd: 60:a8:fc:35:fe:c2:98:53:ed:d9:18:06:5f:f8:b2:fc:b3:98: ea:16:8e:15 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt4o2mVQJ5tJGC7VDc/+4ngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjlmYmFiNGRiODY3ZjZiZDlhN2VmZjZhYTU1ZDk4YzE2MmUxYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hqcOfT1+ICnLezP9BYY7ssACGLZ Dk0zo6uJ8dF6r6XfsLbtqcGq2rQb11C5k8BX2p2wntzCRCWXejCY5NB9wkKBnh9+ r8lf6Hf1/NpRbUlfqUPJ0Zxy0simwP1CTw3SJBBAjDoOeakdHax82MthTzYhwc5E 04WGVimme/3u6UFpeaOntT36VzK9+YxCUd438IGZqWeub8JpTy4vTQtlCJUcZFrJ Z/CIkimC8+thYblcHvDP8g0EnkeE5o59NB17F1FHdBBeRVt9EayRK77Fqj3mDgs6 Q1jKFT7Eci6OZ+jfzvPQoIHkZSzrhd3hC9YETEPBhS0QLiV5WQ8OZtbvkQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFPKfurTbhn9r2afv9qpV2YwWLhqtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JmNTJk ODE0LTNkMmYtNGRmNC04MTQwLWRmYjUzMGY3NDkxMi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1 MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvRjI5RkJBQjREQjg2 N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME BS764DANBAIAAjAHAwUDKgCOADApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMAmvoC AwCtVgIDAMZkAgMA7z0wDQYJKoZIhvcNAQELBQADggEBAGpWvN6xqTIn+ktYJ65X up3AW7XcSh1q5Gn0n9Xjh0NQLAHPlvbFg9f1YDJ8npFMb/GSM3UdAO98494RHdQ2 gsVAsFUYzNIlM/KHP9cIHGVsfQqWUZ16vz60lqkZN7D3d+1xHREBnWGa7tUjDpkx YyvLqkuuZXUmiBWHwwkBOsy6twC0n5uZs76jjgXcGvu5fFhM9KPSlxE7NegdOWHP sq7dc1WkHH+v+IcxjOgSCoT0/F9VC7wYyieUNmhy9r6oxntFg1ceLl8Iysxdmpza 75Z804l0CYkBJWUT+EoBp+U74GfTYHSyHDjT/WCo/DX+wphT7dkYBl/4svyzmOoW jhU= -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:22 2026 by rpki-client