This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer File: a8vbb9OedvAEhAEuExRrIYdVw_s.cer (raw, json) Hash identifier: 6Gsd4DkkGWe5SBMHVw2HLWdrgbMyF25FmXWpVHP3Dug= Subject key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A229D9427121E038DB9FA696AAED45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49259 IP: 91.212.192.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:29:d9:42:71:21:e0:38:db:9f:a6:96:aa:ed:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:e3:48:4e:43:72:4b:6b:dc:51:09:97:43: 24:04:be:1d:d2:63:fd:ec:5a:19:4a:88:fd:fb:1d: 35:3a:72:03:a8:c8:c3:e9:18:26:05:56:ba:c8:e3: c7:5f:de:21:d9:16:b8:09:ea:99:08:81:7e:50:69: 02:0e:30:bc:08:06:a0:1e:0e:db:5f:a3:30:32:1a: 8c:4b:8d:f5:c0:63:0f:52:ce:bc:6e:5b:e6:c9:1f: 2f:d0:ab:df:ce:e1:89:b5:ad:e4:54:99:8a:8c:32: 94:2a:a9:ad:d9:fb:76:d7:6e:27:0e:b9:08:ef:84: d3:4c:dd:4a:22:9c:63:19:b7:8b:e9:b5:7c:f1:3b: 41:3b:8d:d6:90:d7:2b:2d:2b:c5:4e:3e:43:99:fd: 0a:71:69:ab:2c:12:95:56:4b:47:45:87:67:70:2b: 7f:d6:7e:ce:26:14:42:1e:70:88:e8:bd:80:0d:a7: f6:8a:81:a4:40:84:a2:0a:63:cf:b8:96:9d:11:10: 3b:32:64:7f:62:e7:dd:1f:5b:3a:da:7e:44:0c:42: c2:19:6c:fd:80:02:d8:af:af:ee:92:f1:2a:c3:8d: 30:69:63:33:94:ea:98:2c:c8:07:de:56:61:9e:6a: 30:01:d5:ea:96:35:54:25:d4:04:73:a8:7b:05:81: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.192.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49259 Signature Algorithm: sha256WithRSAEncryption 4b:d2:7a:98:29:ec:dc:4d:52:70:1d:bd:47:23:3c:b1:44:a2: 06:aa:65:d0:3f:a2:cd:bd:37:a0:14:ba:f1:c0:48:21:0e:9b: 71:c6:b5:2d:01:88:8e:16:95:be:5d:3d:4f:fe:4c:7b:4b:70: e4:f8:e8:c1:fa:4a:f4:ff:6a:27:3a:74:37:52:1c:d3:d2:31: cc:bc:32:a0:61:41:1e:26:f4:52:7b:cd:b6:8d:55:84:e2:2c: d7:68:1e:0d:f3:5f:3f:76:00:dc:27:fe:a6:5a:f4:cb:38:cb: c7:7f:50:7f:c4:05:e8:29:05:6d:8d:c4:0a:33:c1:0a:14:76: 7d:9a:1b:a5:45:7b:8d:2b:c0:f2:0f:bb:cd:a3:5f:c6:5a:d5: 16:6c:d4:27:30:28:08:6f:ee:f0:7b:e3:36:05:51:46:c8:ff: 7a:29:e4:b0:4a:d4:f5:85:f0:1c:1b:be:81:73:84:e7:3f:5a: be:74:71:28:33:15:c7:47:8e:56:b6:9d:d4:ca:93:6a:e4:51: 5c:f9:6c:14:9e:e8:a4:d4:63:cd:da:81:9b:b1:5b:82:26:02: 94:d9:09:95:f4:cb:87:43:ce:8b:87:be:2b:56:13:1f:3d:da: 04:2b:35:f8:c4:02:0b:c3:8d:83:fe:63:67:ee:0b:97:a5:be: 2b:a1:13:10 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oinZQnEh4Djbn6aWqu1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmNiZGI2ZmQzOWU3NmYwMDQ4NDAxMmUxMzE0NmIyMTg3NTVjM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rrjSE5Dcktr3FEJl0MkBL4d0mP9 7FoZSoj9+x01OnIDqMjD6RgmBVa6yOPHX94h2Ra4CeqZCIF+UGkCDjC8CAagHg7b X6MwMhqMS431wGMPUs68blvmyR8v0KvfzuGJta3kVJmKjDKUKqmt2ft2124nDrkI 74TTTN1KIpxjGbeL6bV88TtBO43WkNcrLSvFTj5Dmf0KcWmrLBKVVktHRYdncCt/ 1n7OJhRCHnCI6L2ADaf2ioGkQISiCmPPuJadERA7MmR/YufdH1s62n5EDELCGWz9 gALYr6/ukvEqw40waWMzlOqYLMgH3lZhnmowAdXqljVUJdQEc6h7BYH2QQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGvL22/TnnbwBIQBLhMUayGHVcP7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzc0ZDg3 Ni0wNWE4LTRiMTAtOTBlMi1jOWRhMDMwYWYzMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNzRkODc2 LTA1YTgtNGIxMC05MGUyLWM5ZGEwMzBhZjMyNi8xL2E4dmJiOU9lZHZBRWhBRXVF eFJySVlkVndfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9TAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDAazANBgkqhkiG9w0BAQsFAAOCAQEAS9J6mCns3E1ScB29RyM8sUSiBqpl0D+i zb03oBS68cBIIQ6bcca1LQGIjhaVvl09T/5Me0tw5PjowfpK9P9qJzp0N1Ic09Ix zLwyoGFBHib0UnvNto1VhOIs12geDfNfP3YA3Cf+plr0yzjLx39Qf8QF6CkFbY3E CjPBChR2fZobpUV7jSvA8g+7zaNfxlrVFmzUJzAoCG/u8HvjNgVRRsj/einksErU 9YXwHBu+gXOE5z9avnRxKDMVx0eOVrad1MqTauRRXPlsFJ7opNRjzdqBm7FbgiYC lNkJlfTLh0POi4e+K1YTHz3aBCs1+MQCC8ONg/5jZ+4Ll6W+K6ETEA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:06 2026 by rpki-client