This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer File: cS8iadFWM728cdjNP0WMvQP-Ax8.cer (raw, json) Hash identifier: IP4kZ0Ru4advHfD/dH5uBBh7u1Y99NAY59xv6qcB2d4= Subject key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1E34C5D0E7C09B432AAD13A6FA620 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47997 AS: 212616 IP: 91.230.48.0/24 IP: 93.175.32.0/19 IP: 176.97.214.0/24 IP: 2a07:5680::/29 IP: 2a0e:5b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e3:4c:5d:0e:7c:09:b4:32:aa:d1:3a:6f:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:31:49:c4:64:36:12:20:e6:25:2a:a3:75: 64:a0:12:eb:e5:18:54:58:c9:53:75:7e:fc:8f:a3: 7e:8f:78:9c:ab:78:e2:8b:87:18:29:0f:17:0d:bc: cb:a4:b1:a1:5b:e6:64:8c:50:e7:df:91:47:62:4b: 1d:0c:0f:88:3e:11:77:1b:1d:56:f6:66:4f:69:7a: a1:be:c8:a5:0c:b5:e3:75:87:16:4a:43:02:fa:d2: 08:70:02:35:1a:f9:9c:74:e1:f7:5a:88:a0:37:41: ca:27:5c:65:c5:d3:5e:cb:60:3f:46:12:ef:dd:af: 2e:35:2a:a9:5b:24:0b:e3:00:45:bc:de:6d:32:68: 0f:b5:8e:a1:2f:7c:47:a3:c3:18:ca:b4:93:30:4a: be:bc:23:2d:d1:3b:d6:52:3f:4c:2d:dc:a1:34:c7: 56:36:cc:e5:54:6d:a4:f2:b4:f9:f2:4a:43:40:61: f4:4f:d3:66:74:da:9b:16:e1:43:2f:eb:57:b4:92: 2a:7f:6b:21:a1:75:7e:7e:3e:a5:3c:88:3f:69:a2: ff:56:8e:e5:30:2b:2b:cc:f1:8f:8b:9c:04:6d:7f: 9f:fc:d3:1a:dc:62:b4:23:6a:d8:4e:65:0f:46:37: 0f:bc:22:79:37:13:93:e6:fc:7c:f4:8d:a8:14:0a: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.48.0/24 93.175.32.0/19 176.97.214.0/24 IPv6: 2a07:5680::/29 2a0e:5b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47997 212616 Signature Algorithm: sha256WithRSAEncryption 1a:2d:4a:a2:53:9f:04:72:45:ae:fb:48:03:fe:f7:27:ab:5e: a2:1c:f4:70:2d:73:12:ad:de:24:07:bc:1f:45:c1:e7:23:af: ec:61:30:c0:b4:6c:31:bb:2b:39:2b:8e:5c:69:40:5f:18:dc: 0d:d7:04:17:64:9f:c2:3b:20:cd:1a:2e:86:39:c0:17:99:a1: 3f:58:ed:d0:67:ca:40:84:35:9c:a5:b2:25:5d:75:46:31:59: b8:eb:9e:e3:6a:63:9a:bd:eb:6c:69:00:f9:82:5f:0b:36:b9: a2:26:56:55:ed:bb:f6:29:74:0a:5b:2e:e2:ce:e4:99:45:67: 63:d2:d3:45:1e:e4:c7:ac:36:a5:ec:2f:1e:88:47:5d:a8:8f: 7f:9c:ff:1a:e3:d9:a5:92:1e:b4:f3:f7:9e:10:f8:6f:1f:a9: 59:66:a3:4d:64:ee:85:2d:19:f4:25:ad:84:f0:1f:fa:24:66: f6:89:1d:45:c7:ab:99:d4:91:7e:81:10:15:d3:21:22:e7:3a: e1:0f:12:81:ea:51:ab:76:d0:3c:75:4e:1c:2d:ba:13:af:2d: 91:c4:e1:bb:1b:06:38:de:4b:4f:d9:6a:15:87:96:e9:e4:45: 6d:1d:ea:5a:68:0d:ca:91:8b:f0:94:69:8a:38:75:eb:16:75: ca:21:06:39 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt/8eNMXQ58CbQyqtE6b6YgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJmMjI2OWQxNTYzM2JkYmM3MWQ4Y2QzZjQ1OGNiZDAzZmUwMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV4xScRkNhIg5iUqo3VkoBLr5RhU WMlTdX78j6N+j3icq3jii4cYKQ8XDbzLpLGhW+ZkjFDn35FHYksdDA+IPhF3Gx1W 9mZPaXqhvsilDLXjdYcWSkMC+tIIcAI1GvmcdOH3WoigN0HKJ1xlxdNey2A/RhLv 3a8uNSqpWyQL4wBFvN5tMmgPtY6hL3xHo8MYyrSTMEq+vCMt0TvWUj9MLdyhNMdW NszlVG2k8rT58kpDQGH0T9NmdNqbFuFDL+tXtJIqf2shoXV+fj6lPIg/aaL/Vo7l MCsrzPGPi5wEbX+f/NMa3GK0I2rYTmUPRjcPvCJ5NxOT5vx89I2oFArL6QIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFHEvImnRVjO9vHHYzT9FjL0D/gMfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2U2Mzcz Yy01M2NkLTRmZDUtYTQzNS1kMThiYWI5NTE1YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvZTYzNzNj LTUzY2QtNGZkNS1hNDM1LWQxOGJhYjk1MTViZi8xL2NTOGlhZEZXTTcyOGNkak5Q MFdNdlFQLUF4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQAW+YwAwQFXa8gAwQAsGHWMBQEAgACMA4DBQMq B1aAAwUDKg5bADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAu30CAwM+iDANBgkq hkiG9w0BAQsFAAOCAQEAGi1KolOfBHJFrvtIA/73J6teohz0cC1zEq3eJAe8H0XB 5yOv7GEwwLRsMbsrOSuOXGlAXxjcDdcEF2SfwjsgzRouhjnAF5mhP1jt0GfKQIQ1 nKWyJV11RjFZuOue42pjmr3rbGkA+YJfCza5oiZWVe279il0Clsu4s7kmUVnY9LT RR7kx6w2pewvHohHXaiPf5z/GuPZpZIetPP3nhD4bx+pWWajTWTuhS0Z9CWthPAf +iRm9okdRcermdSRfoEQFdMhIuc64Q8SgepRq3bQPHVOHC26E68tkcThuxsGON5L T9lqFYeW6eRFbR3qWmgNypGL8JRpijh16xZ1yiEGOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:47 2026 by rpki-client