This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer File: F8ID4_NlkjqEPTIgMXocaM903g8.cer (raw, json) Hash identifier: CbFVuP/XLagKPe/6BeRC5ZNbuftMeiTPfQsDMzjYiyY= Subject key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6628D5A30905B435B0DDAF45C89DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12993 AS: 215373 IP: 37.203.32.0/21 IP: 81.94.224.0/20 IP: 89.111.0.0/18 IP: 178.16.16.0/20 IP: 185.34.24.0/22 IP: 185.219.156.0/22 IP: 193.108.144.0/22 IP: 193.108.185.0/24 IP: 194.9.175.0/24 IP: 2a00:17c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:62:8d:5a:30:90:5b:43:5b:0d:da:f4:5c:89:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17c203e3f365923a843d3220317a1c68cf74de0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:78:92:d1:f5:0a:12:c9:83:a3:9d:51:c0: 0e:14:20:23:7c:be:dd:85:bf:89:fb:ab:d3:35:ab: 5a:43:02:e8:b7:c1:77:bd:4a:86:9a:8c:d2:7c:d0: 9f:39:26:0c:20:34:ae:66:36:c1:94:11:b5:71:7b: 07:05:07:b1:fe:8d:cf:c1:af:03:0c:fc:ac:84:56: f2:00:f1:4a:0e:f1:74:6a:2f:09:13:b1:67:03:14: d0:89:f7:25:67:84:53:87:13:d4:6e:80:72:e4:c8: cd:84:fa:c5:c1:84:a6:2e:f0:f5:b1:05:64:50:f3: 8a:ca:89:13:e1:25:a6:50:1d:86:93:17:ad:6e:bd: 63:6e:ab:52:61:eb:ab:19:2b:59:56:af:49:9e:61: 6f:e2:28:31:75:d5:04:d7:99:cb:c7:8a:9f:37:9b: 37:6c:6f:83:fc:f3:83:1d:02:4b:9f:58:34:3d:85: 85:04:76:0a:6c:ee:cb:1f:76:36:e6:91:34:6a:6b: fe:fe:00:78:98:33:af:90:b7:73:ed:b8:75:3f:59: 1c:1f:cf:73:96:f7:6b:f9:af:ec:30:5f:29:61:66: 53:cd:59:2a:85:55:a8:95:91:c0:a6:1d:63:c4:c7: 23:8a:db:29:8b:9d:41:1c:c5:24:dc:24:ce:0c:dd: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.32.0/21 81.94.224.0/20 89.111.0.0/18 178.16.16.0/20 185.34.24.0/22 185.219.156.0/22 193.108.144.0/22 193.108.185.0/24 194.9.175.0/24 IPv6: 2a00:17c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12993 215373 Signature Algorithm: sha256WithRSAEncryption 8d:a5:25:6b:a1:07:9c:72:b1:e7:63:90:f3:0b:9f:68:ab:7b: 58:f3:2a:c0:1e:0e:bd:82:01:b7:26:c8:1b:5b:dc:e7:a0:dd: 5a:0e:d9:13:5d:b7:b2:14:21:72:a6:6c:60:42:4e:0a:ba:11: 49:5c:af:31:a1:91:c8:13:20:ef:89:eb:fb:91:4d:1d:3f:1e: 76:04:6c:87:14:98:00:44:e2:9a:70:c3:b6:60:90:80:96:64: d3:3c:24:88:9e:78:51:f4:5b:02:30:c4:67:97:42:c4:d4:d5: ef:67:2d:6d:ba:a6:c3:50:98:d1:bf:43:89:4d:51:0a:01:5a: 3a:da:ac:4f:bc:68:9c:40:88:1b:55:e5:c2:0f:37:07:3c:94: 86:b3:1f:5d:76:ce:3c:1d:bf:85:f9:7b:de:79:01:e7:f2:87: 27:9b:e3:33:d6:75:88:3c:9f:ef:26:9a:e8:a8:84:52:ae:bf: 33:18:49:92:82:26:90:fa:be:53:a1:19:4f:60:73:51:17:3e: 73:d3:30:ed:90:f5:40:55:16:cd:5c:44:fd:6f:41:fd:c5:57: 2b:ca:34:fa:7d:90:ce:36:e0:ee:02:ad:32:33:78:f4:ba:06: ea:d2:6c:b9:43:f2:68:50:b6:ed:82:92:5f:af:c2:b6:b5:3e: b5:26:c3:5b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt3xmKNWjCQW0NbDdr0XIncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2MyMDNlM2YzNjU5MjNhODQzZDMyMjAzMTdhMWM2OGNmNzRkZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZ4ktH1ChLJg6OdUcAOFCAjfL7d hb+J+6vTNataQwLot8F3vUqGmozSfNCfOSYMIDSuZjbBlBG1cXsHBQex/o3Pwa8D DPyshFbyAPFKDvF0ai8JE7FnAxTQifclZ4RThxPUboBy5MjNhPrFwYSmLvD1sQVk UPOKyokT4SWmUB2Gkxetbr1jbqtSYeurGStZVq9JnmFv4igxddUE15nLx4qfN5s3 bG+D/PODHQJLn1g0PYWFBHYKbO7LH3Y25pE0amv+/gB4mDOvkLdz7bh1P1kcH89z lvdr+a/sMF8pYWZTzVkqhVWolZHAph1jxMcjitspi51BHMUk3CTODN0U4QIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFBfCA+PzZZI6hD0yIDF6HGjPdN4PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzg5YWU4 ZS00Njc0LTQ1NWQtOWYyMy1hYzY3YTM2ZTRhYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvODlhZThl LTQ2NzQtNDU1ZC05ZjIzLWFjNjdhMzZlNGFhYi8xL0Y4SUQ0X05sa2pxRVBUSWdN WG9jYU05MDNnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQDJcsgAwQEUV7gAwQGWW8AAwQEshAQAwQCuSIY AwQCuducAwQCwWyQAwQAwWy5AwQAwgmvMA0EAgACMAcDBQAqABfAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAjLBAgMDSU0wDQYJKoZIhvcNAQELBQADggEBAI2lJWuh B5xysedjkPMLn2ire1jzKsAeDr2CAbcmyBtb3Oeg3VoO2RNdt7IUIXKmbGBCTgq6 EUlcrzGhkcgTIO+J6/uRTR0/HnYEbIcUmABE4ppww7ZgkICWZNM8JIieeFH0WwIw xGeXQsTU1e9nLW26psNQmNG/Q4lNUQoBWjrarE+8aJxAiBtV5cIPNwc8lIazH112 zjwdv4X5e955Aefyhyeb4zPWdYg8n+8mmuiohFKuvzMYSZKCJpD6vlOhGU9gc1EX PnPTMO2Q9UBVFs1cRP1vQf3FVyvKNPp9kM424O4CrTIzePS6BurSbLlD8mhQtu2C kl+vwra1PrUmw1s= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:46 2026 by rpki-client