This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer File: 8x7XsfY7UapRap_8sDWjoNaeZaE.cer (raw, json) Hash identifier: 5l9NfTpGbqECnnCst+e+P4QltOuu1KBqJywn+wWGQiI= Subject key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1334ED8DCCECE73AE66BF230F06C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216245 IP: 80.249.134.0/24 IP: 2a13:edc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:13:34:ed:8d:cc:ec:e7:3a:e6:6b:f2:30:f0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:41:69:ae:c4:89:0c:11:72:c6:1e:25:e8: 9c:00:c1:8e:ab:3b:25:56:66:b1:9a:f9:09:31:46: 60:c1:ab:43:c6:c7:e1:7b:40:80:a9:0f:84:51:43: a1:a9:11:e7:1c:bf:9b:1f:7c:da:2e:8a:14:6e:2a: 3a:3f:fc:3e:59:fd:02:d4:2d:c9:e0:d3:79:a9:b2: 3d:d3:9d:4f:6d:95:5e:6e:00:33:ff:db:80:d6:cd: 3c:a3:b0:46:c9:c8:c4:0e:45:b6:18:d4:4f:6d:59: a3:80:06:07:8f:8b:fd:d9:54:5e:cd:5e:d7:bb:5d: e9:84:e9:58:c4:bf:41:fc:57:66:8f:1f:2e:b2:6a: 99:67:98:57:d8:3e:5c:bd:4c:6d:ad:19:93:93:5a: 17:35:34:db:14:ab:fe:eb:c5:2c:a8:67:12:ea:31: 6c:f8:80:9a:ca:dd:a9:dd:5b:6b:bd:e6:c8:95:30: 78:cd:f7:4c:4c:ae:bb:c7:cb:33:9e:eb:ef:2c:25: cb:20:45:0d:f2:af:db:1b:81:22:13:05:40:80:4b: 58:99:51:e6:90:6f:05:61:db:b3:18:b0:60:1a:c1: 70:ca:c0:f3:af:39:23:89:ef:4e:32:6e:13:42:62: e2:46:27:53:de:11:9d:ac:33:a1:7a:70:80:5e:73: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.249.134.0/24 IPv6: 2a13:edc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216245 Signature Algorithm: sha256WithRSAEncryption 80:54:5e:7a:c7:c9:7e:4e:58:41:42:2d:f1:9d:69:b8:8c:90: f0:07:61:6a:4f:c3:cd:34:ae:59:a0:df:16:59:54:bd:0b:76: 56:6e:2c:18:e8:36:42:df:e5:31:93:a6:3c:04:27:f0:69:a2: e4:4e:e1:c4:3e:bc:c7:f0:b9:b1:9f:e4:39:f1:72:e5:fd:b6: 92:c6:c9:5c:22:43:8b:05:0f:72:9f:36:97:60:18:a0:10:a6: a3:18:b1:c1:5a:bb:c5:42:b7:54:44:56:88:b9:0c:6c:f8:f3: 33:04:0a:2f:20:26:c3:97:5f:4e:02:45:16:4a:43:4e:ad:ca: e0:35:e5:95:7e:b3:d7:3a:e9:9a:95:6e:36:0a:5d:f8:44:d8: 89:57:5c:ac:52:a3:29:ba:da:7b:7f:ad:22:1c:a4:ab:84:57: d8:55:12:84:ec:d7:3e:05:9b:42:fb:2f:d1:a4:86:d7:6d:0f: a7:08:ec:9f:88:58:a7:e1:b3:cf:53:39:e3:8f:09:4d:3d:65: 91:43:09:08:01:f8:cc:2e:a5:1b:3b:8b:9d:86:a8:44:4e:1b: 4b:d5:25:32:1e:ac:a5:6c:0f:ce:51:7b:af:c3:08:24:48:5f: 87:28:d3:46:6b:43:9c:80:ce:e2:e2:28:dc:4a:f3:d6:ce:87: 5b:e9:b0:a2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fxM07Y3M7Oc65mvyMPBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFlZDdiMWY2M2I1MWFhNTE2YTlmZmNiMDM1YTNhMGQ2OWU2NWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cZBaa7EiQwRcsYeJeicAMGOqzsl VmaxmvkJMUZgwatDxsfhe0CAqQ+EUUOhqRHnHL+bH3zaLooUbio6P/w+Wf0C1C3J 4NN5qbI9051PbZVebgAz/9uA1s08o7BGycjEDkW2GNRPbVmjgAYHj4v92VRezV7X u13phOlYxL9B/Fdmjx8usmqZZ5hX2D5cvUxtrRmTk1oXNTTbFKv+68UsqGcS6jFs +ICayt2p3VtrvebIlTB4zfdMTK67x8sznuvvLCXLIEUN8q/bG4EiEwVAgEtYmVHm kG8FYduzGLBgGsFwysDzrzkjie9OMm4TQmLiRidT3hGdrDOhenCAXnMsEQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPMe17H2O1GqUWqf/LA1o6DWnmWhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzk5ZWQw Ni1lNDQ1LTRjYTItYjY0Ny1iZDJiM2FiYWUxMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvOTllZDA2 LWU0NDUtNGNhMi1iNjQ3LWJkMmIzYWJhZTEyMS8xLzh4N1hzZlk3VWFwUmFwXzhz RFdqb05hZVphRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAUPmGMA0EAgACMAcDBQMqE+3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMtTANBgkqhkiG9w0BAQsFAAOCAQEAgFReesfJfk5Y QUIt8Z1puIyQ8Adhak/DzTSuWaDfFllUvQt2Vm4sGOg2Qt/lMZOmPAQn8Gmi5E7h xD68x/C5sZ/kOfFy5f22ksbJXCJDiwUPcp82l2AYoBCmoxixwVq7xUK3VERWiLkM bPjzMwQKLyAmw5dfTgJFFkpDTq3K4DXllX6z1zrpmpVuNgpd+ETYiVdcrFKjKbra e3+tIhykq4RX2FUShOzXPgWbQvsv0aSG120Ppwjsn4hYp+Gzz1M5448JTT1lkUMJ CAH4zC6lGzuLnYaoRE4bS9UlMh6spWwPzlF7r8MIJEhfhyjTRmtDnIDO4uIo3Erz 1s6HW+mwog== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:01 2026 by rpki-client