This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer (raw, json) Hash identifier: z6aCzHo3TBtKFo3+IuiF5s8GNLs10Hdwgm3MzvC7xTg= Subject key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E92451058F1ED8FE11FE90D74289D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12348 IP: 86.109.224.0/19 IP: 193.23.167.0/24 IP: 194.45.232.0/24 IP: 212.34.160.0/19 IP: 2a01:120::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:92:45:10:58:f1:ed:8f:e1:1f:e9:0d:74:28:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:e0:54:8d:87:7d:47:53:a3:ed:84:e7:d2: 9a:c0:e2:a7:3e:42:44:de:f7:a9:1c:03:94:e6:2f: 10:5d:80:9d:2f:c5:df:d8:4d:96:4b:31:44:96:d5: 8e:ea:fd:bf:2a:e2:0d:9d:bd:54:e1:c6:97:07:57: 3c:4f:cc:e9:3d:b3:18:3d:17:3d:4b:44:94:b6:cd: 88:2f:6e:9a:a2:a2:3b:11:a5:7e:36:97:1d:6d:fe: 9b:23:99:eb:de:34:26:e3:f3:04:1f:4e:bd:08:4c: 9e:17:cd:8f:10:54:c3:3c:7d:9a:79:6f:c1:6a:e1: 73:ea:7a:4a:7f:f0:5b:76:1b:32:e6:0e:11:c8:69: 49:73:01:c2:33:19:05:35:51:55:69:9d:d8:90:31: f1:22:1b:9d:e6:4e:90:4a:59:07:66:f6:9c:28:68: 86:5e:7e:12:b8:be:5b:2d:c1:0e:1e:c7:96:a2:7c: b1:fd:43:6a:00:8b:5e:84:ca:41:9c:56:f0:cb:ab: 1a:f4:40:81:97:3e:54:b3:63:9c:85:7d:db:d1:af: eb:52:4c:71:2d:4b:3b:9e:5d:f9:c5:38:91:2e:a3: 52:65:ce:0d:34:92:8a:82:dd:23:68:2c:d6:44:ba: a1:8e:3b:94:41:ab:3f:ec:c8:52:e6:7e:7c:21:1d: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.224.0/19 193.23.167.0/24 194.45.232.0/24 212.34.160.0/19 IPv6: 2a01:120::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12348 Signature Algorithm: sha256WithRSAEncryption 1b:24:2e:50:c7:48:bf:7a:2b:d2:99:dd:13:b8:87:5b:98:ab: b9:8c:12:5e:a6:12:c8:04:8b:6d:48:38:c8:df:59:46:6c:77: 7b:b3:b6:ab:53:bd:80:69:e6:c4:18:09:45:e1:a7:3f:a2:f5: d5:52:47:61:1a:ab:db:c7:b8:7e:2c:c3:29:36:c7:e8:b9:84: 47:67:01:84:7a:68:db:13:66:0c:0a:9e:56:71:2c:79:eb:0a: 1c:62:e0:e6:f4:f4:6b:52:81:54:2d:15:2d:4b:68:e1:2a:2b: c2:a6:19:15:7a:32:35:f7:a4:39:6d:31:a6:0c:bc:0b:dd:b1: 31:d9:f2:9c:ff:17:93:2e:f1:5b:f0:9a:21:45:3f:39:28:78: f3:88:7a:d2:79:03:93:79:84:38:b1:21:8a:7b:57:a6:c5:8b: fa:59:ee:50:7d:fc:91:a8:87:e0:1d:ab:3e:a8:49:11:de:9d: 92:a5:e2:03:67:71:bc:a8:98:00:a4:56:59:10:c8:32:f9:44: a6:bc:c8:04:b8:dc:f6:b5:be:25:f4:e5:c1:fc:19:72:22:fe: 44:29:62:e7:dd:5a:83:0f:4a:ba:bb:e6:5e:5f:e7:e8:1c:d3: 8d:64:17:56:07:c5:b2:a4:6d:1b:e4:0e:d8:ef:54:77:9b:50: 8b:0e:0b:4a -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt5fpJFEFjx7Y/hH+kNdCidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmMzZTZjYjJlYjAyZmNjNzQyYmFmOTFhYjg2NWM5YjIwZDY0ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz27gVI2HfUdTo+2E59KawOKnPkJE 3vepHAOU5i8QXYCdL8Xf2E2WSzFEltWO6v2/KuINnb1U4caXB1c8T8zpPbMYPRc9 S0SUts2IL26aoqI7EaV+Npcdbf6bI5nr3jQm4/MEH069CEyeF82PEFTDPH2aeW/B auFz6npKf/Bbdhsy5g4RyGlJcwHCMxkFNVFVaZ3YkDHxIhud5k6QSlkHZvacKGiG Xn4SuL5bLcEOHseWonyx/UNqAItehMpBnFbwy6sa9ECBlz5Us2OchX3b0a/rUkxx LUs7nl35xTiRLqNSZc4NNJKKgt0jaCzWRLqhjjuUQas/7MhS5n58IR1odQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFGvD5ssusC/MdCuvkauGXJsg1khLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2Y1ZTQ0 MC0xMDBmLTQ5MzMtYWFiZi0xMTA5OGFhMmViYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZjVlNDQw LTEwMGYtNDkzMy1hYWJmLTExMDk4YWEyZWJjMy8xL2E4UG15eTZ3TDh4MEs2LVJx NFpjbXlEV1NFcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFVm3gAwQAwRenAwQAwi3oAwQF1CKgMA0EAgAC MAcDBQMqAQEgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjA8MA0GCSqGSIb3DQEB CwUAA4IBAQAbJC5Qx0i/eivSmd0TuIdbmKu5jBJephLIBIttSDjI31lGbHd7s7ar U72AaebEGAlF4ac/ovXVUkdhGqvbx7h+LMMpNsfouYRHZwGEemjbE2YMCp5WcSx5 6wocYuDm9PRrUoFULRUtS2jhKivCphkVejI196Q5bTGmDLwL3bEx2fKc/xeTLvFb 8JohRT85KHjziHrSeQOTeYQ4sSGKe1emxYv6We5QffyRqIfgHas+qEkR3p2SpeID Z3G8qJgApFZZEMgy+USmvMgEuNz2tb4l9OXB/BlyIv5EKWLn3VqDD0q6u+ZeX+fo HNONZBdWB8WypG0b5A7Y71R3m1CLDgtK -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:01 2026 by rpki-client