This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer File: 8xDFDSzIe9v6W7URoYoid7oAumg.cer (raw, json) Hash identifier: zGpUZb7bmBqVlioz+uT64c3pIPbEdGjdeBs7FdW3Pxc= Subject key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35D923060C767CE733D082FBE2CDB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41568 IP: 91.192.104.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d9:23:06:0c:76:7c:e7:33:d0:82:fb:e2:cd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:eb:8e:30:44:28:bb:3b:9c:2e:1c:cb:6b: 63:db:34:8e:1e:78:53:19:44:eb:81:fc:57:ca:51: 45:c2:2e:79:09:ef:e1:5e:3e:c8:8c:4e:24:5a:48: f5:ad:bc:7f:8a:4b:48:2a:6f:eb:71:51:c0:b4:6e: 31:bb:15:da:86:0c:5e:8f:d5:64:7f:0f:35:56:01: 7c:fc:42:c3:69:07:21:7b:f9:36:3c:79:4b:92:f3: c2:b6:f2:a6:7d:12:46:c7:a1:48:c3:53:7a:5d:69: 33:c1:aa:49:f4:ba:ab:aa:c5:4e:aa:11:35:dc:52: a4:96:f7:8a:62:66:e8:b1:f0:09:99:bf:7a:c5:78: a3:e5:33:9e:49:91:de:40:72:e7:84:be:bb:6a:67: 57:54:e6:c9:a0:5e:de:2a:5e:36:b8:e8:3f:ba:6d: 92:93:b4:3d:37:83:ae:d1:73:8a:08:69:58:af:f4: 4e:62:e6:92:be:3a:b9:16:bf:8a:50:77:e9:53:16: df:ee:aa:45:52:17:c2:6b:9e:d3:3a:46:a7:f2:22: c2:d0:c3:c6:d3:05:74:85:b5:b7:3c:6a:b6:fb:41: 05:62:13:f1:a4:41:64:9a:4d:04:1c:19:54:b1:49: 3e:0c:6d:50:1c:67:4d:77:2e:ff:b4:72:19:d6:25: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.104.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41568 Signature Algorithm: sha256WithRSAEncryption 29:ff:2e:9c:ff:1c:59:ec:42:03:73:a8:f1:6f:3e:cb:73:13: fd:11:79:bc:da:fc:98:99:bc:c0:d8:ac:e3:2e:f4:1c:f4:f1: b9:d1:6e:4f:c3:83:8d:73:a6:d8:c7:96:d8:8d:8d:7f:10:cc: 4a:aa:5e:04:16:83:78:c9:5f:4f:0f:0b:89:2b:0d:fe:45:96: 8c:60:46:92:15:bd:89:65:86:5d:f1:d5:5b:af:e5:0c:90:d1: be:b6:16:07:6e:08:40:dc:03:4e:90:58:9a:42:b4:fc:06:a1: cb:8c:2c:84:42:03:8b:f7:bd:f5:75:e0:77:8e:97:57:7d:54: 63:b7:b3:6b:60:de:14:9e:71:30:b5:e9:6d:af:47:ee:4d:63: 57:fb:ee:09:05:02:4f:6a:6a:a4:87:dc:5a:98:f9:5b:00:65: 18:12:3e:65:f1:08:3b:69:1c:0d:5d:10:a5:78:df:4e:79:48: e6:45:ba:ca:6d:0f:be:5d:63:71:7b:34:3a:9a:5c:39:ce:0e: 6b:f0:14:5d:74:bc:d2:94:ef:22:8f:e4:5a:f8:f9:91:7d:4c: 3d:95:91:69:6c:41:62:08:71:13:7f:f9:91:bf:48:b3:f4:a6: e0:bc:e0:f2:55:59:ec:c2:89:3d:b9:45:08:49:86:1a:db:de: c1:74:bd:cf -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NdkjBgx2fOcz0IL74s2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzEwYzUwZDJjYzg3YmRiZmE1YmI1MTFhMThhMjI3N2JhMDBiYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QHrjjBEKLs7nC4cy2tj2zSOHnhT GUTrgfxXylFFwi55Ce/hXj7IjE4kWkj1rbx/iktIKm/rcVHAtG4xuxXahgxej9Vk fw81VgF8/ELDaQche/k2PHlLkvPCtvKmfRJGx6FIw1N6XWkzwapJ9LqrqsVOqhE1 3FKklveKYmbosfAJmb96xXij5TOeSZHeQHLnhL67amdXVObJoF7eKl42uOg/um2S k7Q9N4Ou0XOKCGlYr/ROYuaSvjq5Fr+KUHfpUxbf7qpFUhfCa57TOkan8iLC0MPG 0wV0hbW3PGq2+0EFYhPxpEFkmk0EHBlUsUk+DG1QHGdNdy7/tHIZ1iV5owIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPMQxQ0syHvb+lu1EaGKIne6ALpoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzBlYTRh NC0yNzc0LTQ1NDUtODA1Zi0xZTlmMGJkZWI1MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMGVhNGE0 LTI3NzQtNDU0NS04MDVmLTFlOWYwYmRlYjUzMi8xLzh4REZEU3pJZTl2Nlc3VVJv WW9pZDdvQXVtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8BoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCiYDANBgkqhkiG9w0BAQsFAAOCAQEAKf8unP8cWexCA3Oo8W8+y3MT/RF5vNr8 mJm8wNis4y70HPTxudFuT8ODjXOm2MeW2I2NfxDMSqpeBBaDeMlfTw8LiSsN/kWW jGBGkhW9iWWGXfHVW6/lDJDRvrYWB24IQNwDTpBYmkK0/Aahy4wshEIDi/e99XXg d46XV31UY7eza2DeFJ5xMLXpba9H7k1jV/vuCQUCT2pqpIfcWpj5WwBlGBI+ZfEI O2kcDV0QpXjfTnlI5kW6ym0Pvl1jcXs0OppcOc4Oa/AUXXS80pTvIo/kWvj5kX1M PZWRaWxBYghxE3/5kb9Is/Sm4Lzg8lVZ7MKJPblFCEmGGtvewXS9zw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:13 2026 by rpki-client