This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer File: 8phZtw6kUOE62ockwOtr7syNqpE.cer (raw, json) Hash identifier: eACvdb9Kj2EyrqZ0Z2POJXnuSwYJOa7jVx/vNgQBJ8k= Subject key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD6C9A81ECBC762DAD0796692813E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43807 IP: 91.198.160.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d6:c9:a8:1e:cb:c7:62:da:d0:79:66:92:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:71:82:66:61:cd:24:50:10:f0:0d:e8:b6: c0:c4:2d:34:9a:71:1e:2b:d3:77:4b:d3:e5:26:1b: 20:7c:ba:f0:74:f1:b7:8a:c8:c6:52:d9:ff:b5:e5: c7:05:c5:2a:b3:5e:67:b7:21:05:1a:12:44:58:9d: 4e:d3:0d:67:23:eb:ed:3a:7b:49:9b:dd:52:20:a5: 5d:9f:fd:02:55:d4:b5:25:4f:bf:e7:e4:de:8e:13: fb:67:de:8c:d7:2b:5d:ae:22:d4:de:21:ae:4d:b3: ec:c7:5d:e8:d1:e0:99:ce:23:82:c9:07:1a:61:e6: d3:fb:c0:ae:6e:a0:6a:56:35:0e:5f:94:18:cb:8c: 6e:1a:3c:9e:80:e2:2d:b8:d3:79:9d:ea:a5:37:a5: 66:83:9f:85:44:5d:f9:4c:df:2f:f4:74:84:2b:f8: e3:a5:80:dd:db:1d:98:b0:33:67:26:6e:28:31:c7: 1f:f8:65:7d:cb:56:4d:03:31:16:35:a9:5c:ab:49: 15:16:c3:86:f6:2f:18:0a:a5:b8:6c:8e:94:e4:f3: 0c:37:a3:19:c5:f1:df:78:f5:d6:24:3d:31:e3:61: c0:9f:7d:56:01:df:60:66:20:c5:91:54:a9:8e:6a: ed:aa:17:b8:fb:ca:88:85:f4:df:de:39:78:6c:d4: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.160.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43807 Signature Algorithm: sha256WithRSAEncryption 55:b8:e4:e8:25:a2:1a:a9:50:a1:5d:f8:04:6b:b7:d7:e8:fa: b0:1d:4e:bf:c2:66:7b:57:ab:b8:a0:07:15:1e:f2:33:c0:8f: 3c:f3:47:b2:83:04:0c:aa:b2:f3:aa:b4:d6:ff:3b:df:83:2e: 0a:0f:11:eb:cf:f9:61:d9:c4:bd:ad:33:c7:b6:1b:16:72:e9: 66:af:38:2f:96:75:1f:0d:97:aa:a5:32:02:b0:bc:a4:d7:08: db:89:0a:aa:35:27:a5:e9:9b:16:c2:56:e6:05:8f:4e:da:34: ac:22:46:5b:3a:36:28:52:5d:17:0f:9b:9f:6a:e7:89:47:5f: 8d:58:24:fe:14:76:75:ed:f0:81:16:32:a0:b4:04:47:06:f2: f2:54:02:ec:f4:19:d6:3a:57:6a:2f:a4:a9:b3:29:48:30:4f: 39:2b:a4:24:6a:ed:a5:de:60:3f:1a:b2:c1:bc:34:5b:30:8b: f0:b5:78:88:2c:16:d1:a1:8b:c9:55:93:21:fa:e0:8b:39:34: ef:15:38:5d:cb:8d:5e:8d:5f:b9:0f:c7:5c:5f:3e:4c:48:27: 03:5f:33:a9:8c:31:cb:3e:be:71:71:f6:bf:77:92:25:da:42: 6a:84:f8:d2:1a:05:78:ed:79:75:b1:d1:b0:27:1f:4c:b4:b3: f4:9a:c4:9e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57NbJqB7Lx2La0HlmkoE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjk4NTliNzBlYTQ1MGUxM2FkYTg3MjRjMGViNmJlZWNjOGRhYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BZxgmZhzSRQEPAN6LbAxC00mnEe K9N3S9PlJhsgfLrwdPG3isjGUtn/teXHBcUqs15ntyEFGhJEWJ1O0w1nI+vtOntJ m91SIKVdn/0CVdS1JU+/5+TejhP7Z96M1ytdriLU3iGuTbPsx13o0eCZziOCyQca YebT+8CubqBqVjUOX5QYy4xuGjyegOItuNN5neqlN6Vmg5+FRF35TN8v9HSEK/jj pYDd2x2YsDNnJm4oMccf+GV9y1ZNAzEWNalcq0kVFsOG9i8YCqW4bI6U5PMMN6MZ xfHfePXWJD0x42HAn31WAd9gZiDFkVSpjmrtqhe4+8qIhfTf3jl4bNTfTQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPKYWbcOpFDhOtqHJMDra+7MjaqRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzFmMDQw Yi1iMzEwLTQzOGItYjE1ZS0zZGY0N2I2MjBkNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMWYwNDBi LWIzMTAtNDM4Yi1iMTVlLTNkZjQ3YjYyMGQ2MC8xLzhwaFp0dzZrVU9FNjJvY2t3 T3RyN3N5TnFwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8agMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCrHzANBgkqhkiG9w0BAQsFAAOCAQEAVbjk6CWiGqlQoV34BGu31+j6sB1Ov8Jm e1eruKAHFR7yM8CPPPNHsoMEDKqy86q01v8734MuCg8R68/5YdnEva0zx7YbFnLp Zq84L5Z1Hw2XqqUyArC8pNcI24kKqjUnpembFsJW5gWPTto0rCJGWzo2KFJdFw+b n2rniUdfjVgk/hR2de3wgRYyoLQERwby8lQC7PQZ1jpXai+kqbMpSDBPOSukJGrt pd5gPxqywbw0WzCL8LV4iCwW0aGLyVWTIfrgizk07xU4XcuNXo1fuQ/HXF8+TEgn A18zqYwxyz6+cXH2v3eSJdpCaoT40hoFeO15dbHRsCcfTLSz9JrEng== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:33 2026 by rpki-client