This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer (raw, json) Hash identifier: iwNCVBtdK/VC+zW2sh6Rpj+vK6Ut1MrrTrvgBWsdiLY= Subject key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E477B91919D68F820064C796F43A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.152.32.0/23 IP: 195.216.236.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e4:77:b9:19:19:d6:8f:82:00:64:c7:96:f4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73c2f49445980199475512f5297608f45d08bb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:4b:2c:50:8b:0d:3e:60:42:96:43:d6:10: c6:8e:f7:24:d4:ba:6d:b4:f7:c8:a3:6b:ce:6d:46: 5f:64:b2:e5:53:cd:cc:5d:44:cd:da:67:44:a8:6a: 46:35:16:6f:b0:d5:73:f3:61:77:13:b8:ce:3d:e7: d5:25:f0:71:9b:92:41:b7:1b:46:77:81:2a:95:c3: 93:a7:30:f5:73:11:38:19:6a:6e:d8:a0:26:59:b6: 13:5b:b7:21:23:b1:99:fc:5e:60:79:55:9c:1c:87: 1d:ac:8e:b4:de:0f:d5:44:ff:0f:22:b4:e9:70:94: 70:66:58:4a:bd:b9:6e:1e:e5:36:b5:3d:8d:2e:54: 3d:2d:20:e7:99:65:75:a3:ee:35:c6:8f:3d:95:fa: c8:a4:b7:1e:50:ba:88:e8:26:4b:25:6d:94:82:f4: d1:a3:50:d3:82:41:bf:28:70:2d:fd:9c:f5:ee:e9: 7e:f7:11:2f:5f:8f:53:52:b7:72:fd:d3:f0:d7:05: 39:b9:4f:16:de:2f:26:47:ee:5d:10:35:8f:cb:da: 60:b1:df:09:25:d5:b5:e6:b9:8d:19:96:68:5b:57: 2b:16:58:cd:9a:3e:e7:9c:fd:53:92:80:98:cb:16: b0:13:7a:47:43:a1:d9:5c:6a:71:53:d9:82:56:a4: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.32.0/23 195.216.236.0/24 Signature Algorithm: sha256WithRSAEncryption 77:6d:e4:e2:57:cf:82:60:38:09:8f:14:4c:6c:91:aa:f8:a4: 37:b4:de:c4:66:69:d8:25:c1:79:c3:6a:ad:fe:af:79:7c:c2: a9:ca:9a:c1:9a:8d:be:85:f6:4d:e2:d3:dc:0e:46:8d:4c:8c: fb:95:d3:96:f3:41:27:27:63:98:03:05:7f:0a:6a:3f:86:a0: 68:c2:27:3c:eb:aa:4a:d9:24:e8:ea:ac:02:c5:63:ae:04:b9: 04:45:29:d5:5f:8f:c2:0a:c7:c4:d2:2a:9f:35:64:75:96:59: 72:a0:2b:e5:de:d0:79:3c:96:b1:ad:61:cf:5e:15:64:6a:27: 01:a3:ce:e1:5f:4e:7c:9f:01:c3:dd:dc:c6:46:09:51:8b:39: 6a:3a:fb:38:e1:42:f7:ab:6f:e7:97:04:37:69:7c:6e:d3:c1: ad:92:2c:82:ad:a2:86:ef:1f:e1:02:1f:d8:84:e4:7a:e0:18: 23:cb:1e:a5:9a:59:f1:84:3a:01:5b:d4:49:3a:84:e5:1e:bb: 08:13:e8:67:e0:e2:55:a0:8d:aa:e7:29:04:b3:dc:b3:65:a5: 07:70:95:96:b0:0a:d2:be:df:be:81:34:b6:c8:88:0e:bb:3d: 69:04:81:28:fe:29:5a:74:ef:26:bc:94:5b:d6:a5:e4:8f:a7: f2:25:30:da -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt5EOR3uRkZ1o+CAGTHlvQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2MyZjQ5NDQ1OTgwMTk5NDc1NTEyZjUyOTc2MDhmNDVkMDhiYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3RLLFCLDT5gQpZD1hDGjvck1Lpt tPfIo2vObUZfZLLlU83MXUTN2mdEqGpGNRZvsNVz82F3E7jOPefVJfBxm5JBtxtG d4EqlcOTpzD1cxE4GWpu2KAmWbYTW7chI7GZ/F5geVWcHIcdrI603g/VRP8PIrTp cJRwZlhKvbluHuU2tT2NLlQ9LSDnmWV1o+41xo89lfrIpLceULqI6CZLJW2UgvTR o1DTgkG/KHAt/Zz17ul+9xEvX49TUrdy/dPw1wU5uU8W3i8mR+5dEDWPy9pgsd8J JdW15rmNGZZoW1crFljNmj7nnP1TkoCYyxawE3pHQ6HZXGpxU9mCVqTD8wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHPC9JRFmAGZR1US9Sl2CPRdCLtaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzhhMjUx OC0zOWEwLTRhOTgtOTU2Mi03ODdiOWI1ODRjMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvOGEyNTE4 LTM5YTAtNGE5OC05NTYyLTc4N2I5YjU4NGMyZC8xL2M4TDBsRVdZQVpsSFZSTDFL WFlJOUYwSXUxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwpggAwQAw9jsMA0GCSqGSIb3DQEBCwUAA4IB AQB3beTiV8+CYDgJjxRMbJGq+KQ3tN7EZmnYJcF5w2qt/q95fMKpyprBmo2+hfZN 4tPcDkaNTIz7ldOW80EnJ2OYAwV/Cmo/hqBowic866pK2STo6qwCxWOuBLkERSnV X4/CCsfE0iqfNWR1lllyoCvl3tB5PJaxrWHPXhVkaicBo87hX058nwHD3dzGRglR izlqOvs44UL3q2/nlwQ3aXxu08GtkiyCraKG7x/hAh/YhOR64Bgjyx6lmlnxhDoB W9RJOoTlHrsIE+hn4OJVoI2q5ykEs9yzZaUHcJWWsArSvt++gTS2yIgOuz1pBIEo /iladO8mvJRb1qXkj6fyJTDa -----END CERTIFICATE-----Generated at Sun Jan 25 16:58:31 2026 by rpki-client