This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer (raw, json) Hash identifier: 5W/JxGOoJNKTvjXIL3UwhFy/uotajGXyuuCT+CAzmcY= Subject key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77593A84A0197F2D7BADF20C70577D35 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35070 AS: 198322 IP: 91.212.127.0/24 IP: 91.238.107.0/24 IP: 185.223.228.0/22 IP: 193.110.146.0/24 IP: 193.138.90.0/24 IP: 194.165.43.0/24 IP: 2001:67c:12fc::/48 IP: 2a0d:4040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3a:84:a0:19:7f:2d:7b:ad:f2:0c:70:57:7d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:a6:c3:12:14:1f:df:bc:c4:fd:f0:6d:27: 50:40:ab:bf:99:40:ae:93:37:0c:b6:33:61:89:ef: 89:80:30:2b:fb:7c:64:a2:7c:db:bd:92:c7:40:26: dd:e4:0c:ed:1a:c8:36:93:2f:df:29:cb:88:bb:83: f3:01:f5:59:c8:42:d1:d9:85:75:35:cb:2c:f6:de: d3:a8:ba:be:97:4e:43:a1:59:cb:7f:c1:c0:ea:b1: e0:22:cd:d2:d5:d6:78:da:da:d5:36:3d:19:a7:ca: a2:a6:b9:e6:5a:41:02:c5:ab:c2:50:ca:ce:9b:68: 8d:83:06:56:0b:c0:9a:b0:6e:c3:0c:9e:85:08:57: a4:a0:ac:91:06:f0:8a:46:5a:c8:5c:7d:3d:16:1e: 5c:23:97:4d:04:4b:fe:bd:e0:bf:3f:c0:c1:3f:18: 65:9c:fe:8e:71:ec:c8:e7:c1:cf:37:28:1e:5e:54: 7c:3e:20:9b:86:1b:ee:15:5c:a3:72:83:e2:54:af: 75:36:02:08:1f:6c:2c:8e:d9:c3:bc:8d:e3:80:ba: 89:c4:3f:5e:99:d4:a4:94:e2:6e:a3:cb:5b:4f:9b: 4c:a9:ec:aa:bd:eb:be:18:f7:ba:60:4b:33:3b:a9: 4e:1a:d4:a2:89:c5:3d:e1:90:da:0f:bd:2e:40:27: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.127.0/24 91.238.107.0/24 185.223.228.0/22 193.110.146.0/24 193.138.90.0/24 194.165.43.0/24 IPv6: 2001:67c:12fc::/48 2a0d:4040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35070 198322 Signature Algorithm: sha256WithRSAEncryption 99:05:3e:ad:42:92:70:3a:de:f6:a9:9f:63:0d:af:2c:3c:e3: c5:ca:0e:2a:8c:68:37:66:f6:ab:2a:10:e8:19:82:fb:55:85: c0:3f:72:4a:4d:29:83:60:33:96:36:84:a6:39:79:74:ad:74: 06:9a:fa:7b:4f:18:bc:e0:f8:04:aa:cf:27:ac:07:6c:24:47: 70:a3:43:56:50:dd:91:23:0b:5b:8e:cb:7e:be:42:23:4f:4d: b2:79:f7:bb:3b:80:a4:64:04:d3:e0:38:a3:76:00:47:bb:88: 1f:d4:10:17:65:db:b5:f9:a1:a5:d2:3f:ae:5e:57:c4:e4:6a: 4e:c7:e8:35:ff:65:43:09:c6:8c:90:bf:22:79:05:89:14:8c: 4b:05:02:d1:83:14:42:30:ef:13:ed:33:0a:e0:da:7f:a6:85: 5f:a3:b3:51:89:aa:04:6a:7a:1d:bc:c1:ed:2c:41:6e:a0:60: 6d:ca:0c:19:dc:20:9e:90:b7:13:c6:72:79:a5:5a:0e:c1:ec: d4:70:f8:f5:51:73:cf:cb:d3:f4:4e:85:36:5d:f6:98:f6:96: 8f:f5:71:57:58:60:5b:9d:d3:42:47:86:21:7a:12:cd:25:58: c8:ae:8f:08:cf:01:d2:a9:50:56:b6:23:00:8b:cc:d5:1c:53: 95:2b:78:bd -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt3WTqEoBl/LXut8gxwV301MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2NjNDZhZGU5NTdjOGYwNjZhNWM2ZmUyNTMxMGE0Y2Y1YTdlOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLamwxIUH9+8xP3wbSdQQKu/mUCu kzcMtjNhie+JgDAr+3xkonzbvZLHQCbd5AztGsg2ky/fKcuIu4PzAfVZyELR2YV1 Ncss9t7TqLq+l05DoVnLf8HA6rHgIs3S1dZ42trVNj0Zp8qiprnmWkECxavCUMrO m2iNgwZWC8CasG7DDJ6FCFekoKyRBvCKRlrIXH09Fh5cI5dNBEv+veC/P8DBPxhl nP6OcezI58HPNygeXlR8PiCbhhvuFVyjcoPiVK91NgIIH2wsjtnDvI3jgLqJxD9e mdSklOJuo8tbT5tMqeyqveu+GPe6YEszO6lOGtSiicU94ZDaD70uQCdBEwIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFHfMRq3pV8jwZqXG/iUxCkz1p+nUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxL2Q2MWI1 NC1lZTlmLTRlMDAtYjFlMy1mN2QwMjc1NjAwNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvZDYxYjU0 LWVlOWYtNGUwMC1iMWUzLWY3ZDAyNzU2MDA1OC8xL2Q4eEdyZWxYeVBCbXBjYi1K VEVLVFBXbjZkUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAqBAIAATAkAwQAW9R/AwQAW+5rAwQCud/kAwQAwW6SAwQAwYpa AwQAwqUrMBYEAgACMBADBwAgAQZ8EvwDBQMqDUBAMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCI/gIDAwayMA0GCSqGSIb3DQEBCwUAA4IBAQCZBT6tQpJwOt72qZ9j Da8sPOPFyg4qjGg3ZvarKhDoGYL7VYXAP3JKTSmDYDOWNoSmOXl0rXQGmvp7Txi8 4PgEqs8nrAdsJEdwo0NWUN2RIwtbjst+vkIjT02yefe7O4CkZATT4DijdgBHu4gf 1BAXZdu1+aGl0j+uXlfE5GpOx+g1/2VDCcaMkL8ieQWJFIxLBQLRgxRCMO8T7TMK 4Np/poVfo7NRiaoEanodvMHtLEFuoGBtygwZ3CCekLcTxnJ5pVoOwezUcPj1UXPP y9P0ToU2XfaY9paP9XFXWGBbndNCR4YhehLNJVjIro8IzwHSqVBWtiMAi8zVHFOV K3i9 -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:21 2026 by rpki-client