This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer (raw, json) Hash identifier: /yjKahXOOUbWbtImit5wp8wG2zWTzSAhgxOeSXqZmgk= Subject key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8DC85BA04180C21188D1015B97AF1C30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 10:51:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207003 IP: 5.61.88.0/22 IP: 185.188.30.0/24 IP: 185.218.192.0/22 IP: 193.163.5.0/24 IP: 2a0b:a700::/29 IP: 2a0b:dbc0::/29 IP: 2a10:f2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:c8:5b:a0:41:80:c2:11:88:d1:01:5b:97:af:1c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 10:51:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21df245ead9980d2b39533782f65d7566d0462d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:d1:74:e6:28:42:58:56:e6:fa:04:6d:4d: 47:fb:2b:59:7d:59:53:06:a4:8c:c4:96:a2:29:cf: df:df:44:a2:3e:41:be:eb:09:62:a8:b6:57:b9:39: f7:8f:ed:c7:ef:78:f5:4b:50:1b:35:b5:b9:e2:93: fb:bb:57:1b:fc:13:c6:5f:0a:de:13:0d:f6:b0:60: 40:c7:e4:d4:59:4b:aa:8c:1b:d4:76:c0:80:b2:b4: da:f6:15:c9:45:43:82:90:87:5d:97:16:67:cd:df: ca:9f:0e:1d:a8:4a:26:b7:75:58:28:bb:e6:ec:3b: 12:2d:9a:8b:40:14:a9:1a:5a:24:08:a5:fc:9b:62: e6:a7:7f:9a:a6:78:14:5b:7d:75:cb:92:6e:05:c0: 45:c5:db:04:d6:be:e0:63:66:27:3d:c6:c2:af:ab: ed:3d:7c:9c:0e:be:63:4a:74:dc:f5:5c:c4:e3:d0: 61:6f:aa:9c:f7:69:17:c0:bf:69:33:0f:93:62:00: ad:3b:85:ed:0f:3b:d9:22:ad:b1:28:64:85:42:ad: 25:19:bb:87:7b:dc:e7:3c:5a:88:7b:96:c4:de:8b: 77:a9:4d:e4:30:87:9b:a7:db:d9:36:e0:0d:65:02: 10:18:2d:c4:23:3e:4b:ef:67:97:78:91:c0:b8:e5: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.88.0/22 185.188.30.0/24 185.218.192.0/22 193.163.5.0/24 IPv6: 2a0b:a700::/29 2a0b:dbc0::/29 2a10:f2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207003 Signature Algorithm: sha256WithRSAEncryption 1f:57:78:92:9f:31:5b:8a:47:50:71:ce:51:a0:7a:ef:bc:61: a0:40:0c:ff:4d:00:d3:64:ff:b2:75:97:d0:e6:b9:80:2b:55: d7:88:9e:85:f0:b7:b1:ec:8c:d8:9b:8a:7e:92:5a:0a:75:3f: 83:62:01:20:da:8a:45:d2:68:63:4f:8f:43:5b:d8:f0:2a:1c: f2:21:0b:ef:f9:ae:b0:c2:22:eb:60:d4:06:dc:a7:2e:69:b3: c1:e4:49:19:19:32:29:0b:eb:5b:82:df:30:83:67:65:87:25: 71:bd:2b:e5:10:c6:9e:c2:f0:a5:6c:c4:79:b7:a4:e8:31:c3: 78:2f:fa:b4:75:ef:8e:55:16:ec:a8:8d:45:61:7b:9e:65:9c: e5:26:47:6a:3e:7f:a2:d1:0f:42:b1:07:16:74:34:85:57:70: 9f:c6:4b:c2:ee:9e:5d:17:92:7a:8d:79:9a:3d:35:7b:84:17: f4:cc:d0:1a:16:f8:0a:25:dc:c2:86:9d:21:7d:5f:f4:35:56: b3:8d:47:42:50:1c:bf:b0:e3:6f:4f:1a:4f:80:49:49:03:f8: 72:70:15:92:e3:13:73:06:d2:fe:0d:ea:57:b6:02:10:e2:ee: fc:43:37:51:7e:f7:d9:3c:4d:87:1c:c5:0b:40:1c:84:16:3c: f9:1f:5b:e2 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZuNyFugQYDCEYjRAVuXrxwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTA1MTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWRmMjQ1ZWFkOTk4MGQyYjM5NTMzNzgyZjY1ZDc1NjZkMDQ2MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GnRdOYoQlhW5voEbU1H+ytZfVlT BqSMxJaiKc/f30SiPkG+6wliqLZXuTn3j+3H73j1S1AbNbW54pP7u1cb/BPGXwre Ew32sGBAx+TUWUuqjBvUdsCAsrTa9hXJRUOCkIddlxZnzd/Knw4dqEomt3VYKLvm 7DsSLZqLQBSpGlokCKX8m2Lmp3+apngUW311y5JuBcBFxdsE1r7gY2YnPcbCr6vt PXycDr5jSnTc9VzE49Bhb6qc92kXwL9pMw+TYgCtO4XtDzvZIq2xKGSFQq0lGbuH e9znPFqIe5bE3ot3qU3kMIebp9vZNuANZQIQGC3EIz5L72eXeJHAuOXb5wIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFCHfJF6tmYDSs5UzeC9l11ZtBGLRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2RmN2Q2 YS00NTkyLTQwMGItYWRlNC0wZWM1MjM1ZDRlOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvZGY3ZDZh LTQ1OTItNDAwYi1hZGU0LTBlYzUyMzVkNGU5Zi8xL0lkOGtYcTJaZ05LemxUTjRM MlhYVm0wRVl0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCBT1YAwQAubweAwQCudrAAwQAwaMFMBsEAgAC MBUDBQMqC6cAAwUDKgvbwAMFAyoQ8sAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AyibMA0GCSqGSIb3DQEBCwUAA4IBAQAfV3iSnzFbikdQcc5RoHrvvGGgQAz/TQDT ZP+ydZfQ5rmAK1XXiJ6F8Lex7IzYm4p+kloKdT+DYgEg2opF0mhjT49DW9jwKhzy IQvv+a6wwiLrYNQG3KcuabPB5EkZGTIpC+tbgt8wg2dlhyVxvSvlEMaewvClbMR5 t6ToMcN4L/q0de+OVRbsqI1FYXueZZzlJkdqPn+i0Q9CsQcWdDSFV3CfxkvC7p5d F5J6jXmaPTV7hBf0zNAaFvgKJdzChp0hfV/0NVazjUdCUBy/sONvTxpPgElJA/hy cBWS4xNzBtL+DepXtgIQ4u78QzdRfvfZPE2HHMULQByEFjz5H1vi -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:46 2026 by rpki-client