This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer File: U8DiB45PPrpfh5UD_dgJw4O7dig.cer (raw, json) Hash identifier: Plhs8PW+MRDLNHmHdVhiSLUFgPlB5yfvBsJy8lfKVK8= Subject key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED16398B5F39158B416EE7F05B01B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20746 AS: 202950 IP: 62.77.32.0/19 IP: 77.238.0.0/19 IP: 80.241.224.0/20 IP: 83.221.96.0/19 IP: 89.31.48.0/21 IP: 156.54.0.0/16 IP: 185.148.204.0/22 IP: 217.27.64.0/19 IP: 217.169.96.0/19 IP: 2001:4b18::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:16:39:8b:5f:39:15:8b:41:6e:e7:f0:5b:01:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:af:5d:d5:01:06:35:50:78:53:0a:0e:7d: 44:98:5f:4c:0d:9d:b3:81:e5:e3:a5:1d:9f:e2:5a: c0:9d:b7:76:ab:1c:97:4f:d8:d0:75:18:6c:99:8b: 9b:c2:8f:54:6b:34:7a:4c:bc:ce:61:7e:f8:a3:1d: 8e:a0:1a:91:3f:04:72:d3:76:2f:06:62:0f:66:51: fe:fb:0b:97:3a:29:62:43:3b:ff:ed:aa:ad:4b:e9: ab:f6:9d:b2:c0:c1:a9:1b:7a:16:25:ea:e9:90:59: b1:4f:28:1c:fd:bb:ca:90:2a:48:b7:16:11:65:11: 08:0e:21:d3:3c:46:38:77:64:84:25:b5:2d:e1:c3: e5:32:d9:c6:f7:cd:9d:a7:43:7d:43:a4:d5:79:12: 5c:6a:b3:2b:b5:6a:05:c3:fd:ef:d3:c4:21:e4:26: 19:47:f8:1c:f8:74:6a:1d:1f:00:ba:6a:02:20:bc: 02:f9:8b:cb:19:4a:94:cb:67:dc:7a:00:12:b9:fa: 0c:75:45:72:2c:a5:18:82:cd:d9:91:60:a2:0c:58: da:56:ce:bf:15:83:f7:e7:60:1c:a8:f6:68:a7:d5: 67:bc:22:f8:f2:e3:6d:50:0a:16:0c:1e:9a:4b:63: 9e:f0:49:c1:74:17:55:bb:99:5e:26:4c:2b:4a:de: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.32.0/19 77.238.0.0/19 80.241.224.0/20 83.221.96.0/19 89.31.48.0/21 156.54.0.0/16 185.148.204.0/22 217.27.64.0/19 217.169.96.0/19 IPv6: 2001:4b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20746 202950 Signature Algorithm: sha256WithRSAEncryption 5d:7f:1b:71:b6:35:51:43:56:f0:91:ae:67:94:35:f5:48:08: ae:eb:60:c8:68:89:f0:6c:85:55:7d:52:04:dc:f0:f3:69:56: 48:12:13:63:a6:d8:3b:06:a3:e4:93:ad:69:f8:a3:2b:a2:25: f2:46:fc:0d:d8:5a:01:ec:c5:d3:62:a0:d3:d4:f8:08:f8:41: 9b:12:c1:13:03:26:c9:c2:66:3d:b9:fe:6b:bb:d4:18:f1:37: 6d:c1:c1:63:01:9e:63:0c:8a:bf:63:14:25:3e:fb:79:77:a0: 6f:3a:fe:33:07:67:30:43:08:1b:ea:97:25:1c:cb:c9:87:ec: dd:d7:29:23:ec:0f:21:4a:64:b1:e8:b1:ab:e9:a7:de:68:82: 46:51:fc:a9:59:25:4f:ec:80:06:cc:0f:4c:9c:9d:42:42:d6: b3:b6:5b:9b:3c:39:8c:cf:3a:b9:2c:53:49:60:ab:fd:0f:b6: dd:0e:38:46:eb:12:c4:99:54:cb:9d:04:4b:85:fe:b2:1a:c7: 12:ce:70:99:f2:47:fb:aa:72:3d:04:7b:ed:03:f7:89:8a:51: 06:3a:d3:2b:0a:df:c4:96:4e:d9:93:a4:48:e3:50:02:b2:49: 7d:5a:56:83:5a:d3:4a:3d:24:45:03:3e:f1:13:d0:ea:6d:23: ac:ae:03:2f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt57RY5i185FYtBbufwWwG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2MwZTIwNzhlNGYzZWJhNWY4Nzk1MDNmZGQ4MDljMzgzYmI3NjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3WvXdUBBjVQeFMKDn1EmF9MDZ2z geXjpR2f4lrAnbd2qxyXT9jQdRhsmYubwo9UazR6TLzOYX74ox2OoBqRPwRy03Yv BmIPZlH++wuXOiliQzv/7aqtS+mr9p2ywMGpG3oWJerpkFmxTygc/bvKkCpItxYR ZREIDiHTPEY4d2SEJbUt4cPlMtnG982dp0N9Q6TVeRJcarMrtWoFw/3v08Qh5CYZ R/gc+HRqHR8AumoCILwC+YvLGUqUy2fcegASufoMdUVyLKUYgs3ZkWCiDFjaVs6/ FYP352AcqPZop9VnvCL48uNtUAoWDB6aS2Oe8EnBdBdVu5leJkwrSt6VyQIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFFPA4geOTz66X4eVA/3YCcODu3YoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2IzNjYz Ni0zMzA2LTQ0OGYtOGVjZi01NjQ4MmIzOTA2NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYjM2NjM2 LTMzMDYtNDQ4Zi04ZWNmLTU2NDgyYjM5MDY3OC8xL1U4RGlCNDVQUHJwZmg1VURf ZGdKdzRPN2RpZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GCCsGAQUF BwEHAQH/BE4wTDA7BAIAATA1AwQFPk0gAwQFTe4AAwQEUPHgAwQFU91gAwQDWR8w AwMAnDYDBAK5lMwDBAXZG0ADBAXZqWAwDQQCAAIwBwMFACABSxgwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICUQoCAwMYxjANBgkqhkiG9w0BAQsFAAOCAQEAXX8bcbY1 UUNW8JGuZ5Q19UgIrutgyGiJ8GyFVX1SBNzw82lWSBITY6bYOwaj5JOtafijK6Il 8kb8DdhaAezF02Kg09T4CPhBmxLBEwMmycJmPbn+a7vUGPE3bcHBYwGeYwyKv2MU JT77eXegbzr+MwdnMEMIG+qXJRzLyYfs3dcpI+wPIUpkseixq+mn3miCRlH8qVkl T+yABswPTJydQkLWs7Zbmzw5jM86uSxTSWCr/Q+23Q44RusSxJlUy50ES4X+shrH Es5wmfJH+6pyPQR77QP3iYpRBjrTKwrfxJZO2ZOkSONQArJJfVpWg1rTSj0kRQM+ 8RPQ6m0jrK4DLw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:15 2026 by rpki-client