This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer (raw, json) Hash identifier: skcHla9TzY2xCcRR+ck0HR5rj2Wex+fhEwTMWSKHa+s= Subject key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA525B01BFC8F9653AF439BEC15BFE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204010 AS: 212341 IP: 77.87.185.0/24 IP: 185.66.176.0/22 IP: 195.60.83.0/26 IP: 195.60.92.192/26 IP: 195.60.93.64/26 IP: 2001:7f8:10e::/48 IP: 2001:7f8:155:: -- 2001:7f8:156:ffff:ffff:ffff:ffff:ffff IP: 2a05:900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:25:b0:1b:fc:8f:96:53:af:43:9b:ec:15:bf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:b5:ab:d0:07:62:04:51:32:83:53:08:89: 0c:29:2d:ce:25:98:55:1e:3f:c4:2d:b3:46:d4:1d: 53:dc:6c:d6:9e:53:8b:b6:ba:7b:44:ba:e0:cf:28: 44:86:75:77:45:84:78:83:5d:35:26:a0:4a:af:23: 6a:12:c3:79:a4:d4:67:8c:7d:c7:2a:fd:a6:4f:cd: 9a:73:43:8c:97:82:26:a7:1d:76:27:c3:0f:ae:79: 04:c2:6d:2f:04:45:df:01:c4:14:9d:16:51:fe:36: 83:7e:2d:ac:b2:20:90:e6:0c:62:16:b3:e5:9c:63: 25:b2:da:7d:92:57:f1:13:c0:ef:7e:14:74:1d:95: df:a5:37:83:75:c4:03:13:cb:b1:c5:15:4e:a9:c1: 11:af:be:df:e4:ae:23:a2:f7:0f:74:d7:2d:49:26: a4:d4:c0:6b:30:ab:46:68:2f:84:5c:13:6d:f0:06: d4:10:e8:83:5b:4e:28:c8:aa:f5:40:b1:6f:be:d4: 53:5f:70:45:55:a9:67:97:af:23:4b:80:33:51:ef: 6d:73:27:d6:d6:d9:cb:a6:7f:96:82:47:14:aa:11: bd:b5:a8:4c:f1:8c:12:4b:20:a3:a9:3d:00:76:5f: ea:98:02:b1:1c:94:9f:b8:ad:80:e5:35:40:0e:1b: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.185.0/24 185.66.176.0/22 195.60.83.0/26 195.60.92.192/26 195.60.93.64/26 IPv6: 2001:7f8:10e::/48 2001:7f8:155::-2001:7f8:156:ffff:ffff:ffff:ffff:ffff 2a05:900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204010 212341 Signature Algorithm: sha256WithRSAEncryption 05:9c:31:f0:9e:4b:02:63:3e:31:6b:0a:b2:6a:3a:67:59:4f: 94:bf:c3:fd:50:be:3a:28:90:92:f9:a2:83:75:a7:c1:1a:d9: 0f:6b:95:65:f2:4e:c7:96:8c:74:46:bc:4c:7a:6d:62:02:a1: 69:3a:08:44:21:30:2e:8e:07:b3:2c:45:4f:88:ff:0d:45:36: 08:c3:f1:93:42:7a:20:eb:76:f9:b4:f5:e6:cf:ab:d4:26:27: c8:2a:07:30:31:29:ae:1a:4c:d3:bb:d3:d1:f7:a1:9e:cd:b4: 1b:10:d2:1f:17:9f:e7:99:5f:ba:64:54:19:3a:ac:b8:b2:52: d1:61:7c:4b:65:d1:e5:c4:e1:ba:20:10:8b:37:9e:50:ce:90: b1:5d:4b:db:24:43:8d:9b:e9:cc:22:70:df:21:89:9f:fa:e2: 88:38:d0:5f:29:69:a4:77:ec:58:78:f8:24:eb:bf:0a:8e:98: 15:bf:da:bb:6f:06:a5:6f:5b:d3:18:c1:62:18:06:67:d0:46: 8a:e2:2e:25:91:4f:01:38:93:b5:4d:14:2b:cd:82:63:5b:e7: 2c:46:bc:7e:6d:c1:b9:87:05:7d:2e:f3:a4:3f:e9:dd:07:4e: 7a:42:d3:02:72:82:3c:9c:05:12:ec:0c:04:1f:b4:66:bc:c8: d1:64:e7:06 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISAZt7pSWwG/yPllOvQ5vsFb/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2MzM2U0M2VmNTY1MjdhMTY5ZDZhYzZkN2U2MmM2M2QxOTczMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3G1q9AHYgRRMoNTCIkMKS3OJZhV Hj/ELbNG1B1T3GzWnlOLtrp7RLrgzyhEhnV3RYR4g101JqBKryNqEsN5pNRnjH3H Kv2mT82ac0OMl4Impx12J8MPrnkEwm0vBEXfAcQUnRZR/jaDfi2ssiCQ5gxiFrPl nGMlstp9klfxE8DvfhR0HZXfpTeDdcQDE8uxxRVOqcERr77f5K4jovcPdNctSSak 1MBrMKtGaC+EXBNt8AbUEOiDW04oyKr1QLFvvtRTX3BFValnl68jS4AzUe9tcyfW 1tnLpn+WgkcUqhG9tahM8YwSSyCjqT0Adl/qmAKxHJSfuK2A5TVADhtdbwIDAQAB o4IC7DCCAugwHQYDVR0OBBYEFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2MxN2Mx NS1hMTQyLTRiMzctYjhmZS1hM2EzZWI4NzlmMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYzE3YzE1 LWExNDItNGIzNy1iOGZlLWEzYTNlYjg3OWYyYi8xL0E4TS1RLTlXVW5vV25Xckcx LVlzWTlHWE1GRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTAnBAIAATAhAwQATVe5AwQCuUKwAwUGwzxTAAMFBsM8XMADBQbD PF1AMCoEAgACMCQDBwAgAQf4AQ4wEgMHACABB/gBVQMHACABB/gBVgMFAyoFCQAw HwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAxzqAgMDPXUwDQYJKoZIhvcNAQELBQAD ggEBAAWcMfCeSwJjPjFrCrJqOmdZT5S/w/1QvjookJL5ooN1p8Ea2Q9rlWXyTseW jHRGvEx6bWICoWk6CEQhMC6OB7MsRU+I/w1FNgjD8ZNCeiDrdvm09ebPq9QmJ8gq BzAxKa4aTNO709H3oZ7NtBsQ0h8Xn+eZX7pkVBk6rLiyUtFhfEtl0eXE4bogEIs3 nlDOkLFdS9skQ42b6cwicN8hiZ/64og40F8paaR37Fh4+CTrvwqOmBW/2rtvBqVv W9MYwWIYBmfQRoriLiWRTwE4k7VNFCvNgmNb5yxGvH5twbmHBX0u86Q/6d0HTnpC 0wJygjycBRLsDAQftGa8yNFk5wY= -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:21 2026 by rpki-client