This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer File: 8uFg8M5eA1rzyyH039BOq56n7lE.cer (raw, json) Hash identifier: KshoSCqYe8yRqNM03uYo/tdv29ayuuJlr8dxH1PTfwY= Subject key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE096DC3652DE6973523D7D5C83C9C74A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 12:45:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.91.96.0/19 IP: 91.214.78.0/23 IP: 2a00:1e68::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:96:dc:36:52:de:69:73:52:3d:7d:5c:83:c9:c7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 12:45:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:4d:0e:84:bf:b1:bf:e6:e7:41:e3:8f:89: d0:25:48:47:86:04:1b:5c:25:38:2a:26:41:76:43: ea:0b:ae:99:40:1d:1e:f0:57:a6:34:61:cc:72:89: 50:f4:f2:d4:28:4f:d7:2a:74:66:bd:ec:07:0b:9f: 18:a5:81:39:1d:ce:b6:7f:76:47:fb:6e:71:41:4e: 42:04:ab:9e:b5:5f:13:9a:33:6f:2e:ed:5e:c5:23: c3:31:b5:d4:de:d3:68:02:28:47:c2:3c:81:f7:84: b9:b6:de:6a:1a:bb:b7:55:ac:91:14:a2:3a:3b:f6: dd:ba:b3:00:4e:83:26:c2:6a:51:22:a8:e9:c4:53: 05:d1:ba:dd:48:4e:18:9d:d2:36:8e:62:50:aa:69: 6b:43:a4:53:37:6a:a4:8a:8f:79:a9:98:b0:87:49: 6c:ce:61:89:b8:7f:f7:19:6b:38:62:86:e7:3d:7b: 59:df:ea:1d:93:96:96:70:d5:cb:94:36:dc:0b:28: be:91:78:e8:eb:e7:8c:cf:66:04:0b:7e:23:94:71: b9:60:00:10:93:4a:e6:df:7b:6d:82:87:a2:7f:cb: 4e:ef:90:94:15:a5:d2:a1:fa:36:2b:29:86:7e:84: b5:ea:cb:37:e0:c3:ca:d7:83:4a:78:a3:9f:d5:84: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.96.0/19 91.214.78.0/23 IPv6: 2a00:1e68::/30 Signature Algorithm: sha256WithRSAEncryption a6:56:fe:95:f9:e2:44:36:e3:2f:66:13:47:9f:2b:8f:b0:72: 9b:e9:62:99:1d:99:d4:5b:a9:11:09:9d:99:88:68:12:12:ef: 97:38:03:5e:c6:db:1f:9e:b8:e2:02:f0:69:d4:ac:43:00:3e: 16:29:1d:34:56:ab:3f:c2:b1:8e:67:fe:58:68:b3:2a:87:92: d3:fa:bc:f6:e3:21:43:d4:83:97:97:36:83:de:76:0f:63:68: f1:e0:98:62:48:d2:66:f9:81:c7:5d:ba:d7:1b:fd:2a:c4:40: b2:cd:1b:ec:da:bc:58:16:0d:02:1e:99:63:9c:43:e2:83:90: 01:e4:73:c3:f9:4b:97:da:0f:b9:84:b5:ae:90:ad:69:c6:41: 5c:6f:f7:bc:6e:d7:c2:08:51:1a:28:47:68:d6:77:57:f6:d1: c7:35:07:d8:7f:2e:9b:11:10:23:39:82:a1:07:74:ee:c3:5b: d7:08:d7:39:37:e3:85:d1:10:42:8f:44:4f:cb:a7:24:6e:e3: 6b:a3:97:99:6f:90:18:45:72:d5:07:23:47:0b:70:80:ad:68: 81:e4:41:0e:60:02:c8:e3:6e:79:33:a7:5e:fd:3d:d0:e5:7a: 1f:21:78:7f:f4:48:8d:27:3f:e6:d1:4b:66:fe:d7:c2:fe:b9: c0:cb:3e:c7 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZvgltw2Ut5pc1I9fVyDycdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTI0NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmUxNjBmMGNlNWUwMzVhZjNjYjIxZjRkZmQwNGVhYjllYTdlZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RVNDoS/sb/m50Hjj4nQJUhHhgQb XCU4KiZBdkPqC66ZQB0e8FemNGHMcolQ9PLUKE/XKnRmvewHC58YpYE5Hc62f3ZH +25xQU5CBKuetV8TmjNvLu1exSPDMbXU3tNoAihHwjyB94S5tt5qGru3VayRFKI6 O/bdurMAToMmwmpRIqjpxFMF0brdSE4YndI2jmJQqmlrQ6RTN2qkio95qZiwh0ls zmGJuH/3GWs4YobnPXtZ3+odk5aWcNXLlDbcCyi+kXjo6+eMz2YEC34jlHG5YAAQ k0rm33ttgoeif8tO75CUFaXSofo2KymGfoS16ss34MPK14NKeKOf1YTXPQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFPLhYPDOXgNa88sh9N/QTquep+5RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzNiMTU0 NC00YjUwLTQ2ODQtYWI3NS1mY2UyMTRjNmZmZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvM2IxNTQ0 LTRiNTAtNDY4NC1hYjc1LWZjZTIxNGM2ZmZkYS8xLzh1Rmc4TTVlQTFyenl5SDAz OUJPcTU2bjdsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFTVtgAwQBW9ZOMA0EAgACMAcDBQIqAB5oMA0G CSqGSIb3DQEBCwUAA4IBAQCmVv6V+eJENuMvZhNHnyuPsHKb6WKZHZnUW6kRCZ2Z iGgSEu+XOANextsfnrjiAvBp1KxDAD4WKR00Vqs/wrGOZ/5YaLMqh5LT+rz24yFD 1IOXlzaD3nYPY2jx4JhiSNJm+YHHXbrXG/0qxECyzRvs2rxYFg0CHpljnEPig5AB 5HPD+UuX2g+5hLWukK1pxkFcb/e8btfCCFEaKEdo1ndX9tHHNQfYfy6bERAjOYKh B3Tuw1vXCNc5N+OF0RBCj0RPy6ckbuNro5eZb5AYRXLVByNHC3CArWiB5EEOYALI 4255M6de/T3Q5XofIXh/9EiNJz/m0Utm/tfC/rnAyz7H -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:31 2026 by rpki-client