This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer File: m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer (raw, json) Hash identifier: +E8Gdx5Vir3Ev/H1udoWz+9PT51w3h+WVZXBNENi6JM= Subject key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11ACE6723CB4BAE1B26BBC4F1D49C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.109.111.0/24 IP: 193.98.156.0/24 IP: 193.102.132.0/24 IP: 194.115.212.0/22 IP: 194.127.96.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ac:e6:72:3c:b4:ba:e1:b2:6b:bc:4f:1d:49:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:31:59:e9:36:0e:0f:07:33:cc:bf:bb:08: 67:ef:4d:5e:d6:b9:66:a6:ff:90:96:99:34:e3:69: 91:4a:ca:c3:27:8b:c0:95:18:81:f8:72:2e:38:09: 76:c2:f4:3d:35:1d:2d:6b:88:e1:84:21:d1:89:ab: f1:94:56:67:5d:7f:b1:bc:52:bb:52:d8:3f:7d:df: 99:1d:18:cb:59:d1:8c:78:d7:95:81:83:a5:40:c9: 53:c3:e6:77:4c:34:3b:c7:18:af:df:0a:31:bf:b7: be:36:6b:02:88:40:02:1b:90:cc:0c:40:4b:87:34: 2c:13:eb:cd:7a:b6:22:ce:24:d3:42:d3:61:ee:e9: d8:b7:fd:14:e2:21:fb:8c:6b:77:2e:69:a4:f4:72: 61:b9:16:59:75:fe:a2:93:1c:05:6e:f0:1e:16:22: 43:b6:a4:76:a8:f5:7e:db:6a:6f:b3:78:e3:ae:48: 55:d5:56:af:2e:c3:e9:de:e0:a0:e0:be:a0:f6:69: 40:5f:83:b5:14:9e:6c:6a:06:1c:20:ff:45:cd:a3: 4c:ec:ac:88:4d:b5:0b:6f:be:8d:95:e0:f3:78:e2: 8f:89:df:65:a9:11:1e:e0:1f:ba:6d:7c:c9:eb:e9: a6:cf:83:80:eb:56:e8:c5:e4:8f:9e:c1:67:a5:ca: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.111.0/24 193.98.156.0/24 193.102.132.0/24 194.115.212.0/22 194.127.96.0/24 Signature Algorithm: sha256WithRSAEncryption 96:da:ea:1f:4d:4f:02:3c:d1:a5:98:1d:9b:08:6a:11:26:17: 99:1c:0e:3e:1b:c4:e8:d1:a1:01:95:ec:34:92:1e:20:85:33: df:4d:de:df:10:4a:68:6f:3b:2b:5f:99:b0:94:d0:7c:9f:cc: 3d:59:d7:61:a7:e3:b0:22:c5:e4:ff:98:48:8f:76:2b:7f:2b: 30:8d:e9:b9:1d:07:5b:11:86:7b:29:56:55:0d:53:de:2d:b8: ac:c5:02:bc:ba:8f:8f:15:f3:b1:0c:5c:12:1b:9f:45:55:9c: f2:ad:d0:73:76:1f:6b:84:5e:15:23:62:33:a9:68:26:fe:80: 14:f0:21:83:b9:ca:a5:76:0c:eb:ab:79:96:32:7a:80:0f:96: 3a:a1:1e:3f:92:e0:bb:f3:53:42:c7:99:1e:f4:3f:48:db:19: 6a:19:10:32:36:4a:c2:c8:44:a4:fe:33:cb:86:07:4e:80:59: 9d:bf:7f:8b:8b:cf:ff:0f:da:c3:4c:37:a3:b3:ee:ba:9f:78: 96:26:19:88:35:70:b4:f2:22:08:b3:26:ea:14:25:cc:3f:eb: ae:71:38:83:de:bb:4c:63:40:20:91:97:7d:b2:b4:c0:69:48: 54:95:fa:25:46:70:7f:79:be:a8:c4:fb:28:b5:10:45:53:e2: 93:74:46:bc -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt8Eazmcjy0uuGya7xPHUnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmM2ZmQzZjMyY2E0NTk0Yzk2MDc1NjU5YTcwODliMjdhZTNmZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO0xWek2Dg8HM8y/uwhn701e1rlm pv+Qlpk042mRSsrDJ4vAlRiB+HIuOAl2wvQ9NR0ta4jhhCHRiavxlFZnXX+xvFK7 Utg/fd+ZHRjLWdGMeNeVgYOlQMlTw+Z3TDQ7xxiv3woxv7e+NmsCiEACG5DMDEBL hzQsE+vNerYiziTTQtNh7unYt/0U4iH7jGt3Lmmk9HJhuRZZdf6ikxwFbvAeFiJD tqR2qPV+22pvs3jjrkhV1VavLsPp3uCg4L6g9mlAX4O1FJ5sagYcIP9FzaNM7KyI TbULb76NleDzeOKPid9lqREe4B+6bXzJ6+mmz4OA61boxeSPnsFnpcrDGQIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFJvG/T8yykWUyWB1ZZpwibJ64/7zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2RhMjQ0 Ny1iMjUyLTRiNmEtYTgyZi1kY2JlNTNkYTc4NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvZGEyNDQ3 LWIyNTItNGI2YS1hODJmLWRjYmU1M2RhNzg2MC8xL204YjlQekxLUlpUSllIVmxt bkNKc25yal92TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQAwG1vAwQAwWKcAwQAwWaEAwQCwnPUAwQAwn9g MA0GCSqGSIb3DQEBCwUAA4IBAQCW2uofTU8CPNGlmB2bCGoRJheZHA4+G8To0aEB lew0kh4ghTPfTd7fEEpobzsrX5mwlNB8n8w9Wddhp+OwIsXk/5hIj3Yrfyswjem5 HQdbEYZ7KVZVDVPeLbisxQK8uo+PFfOxDFwSG59FVZzyrdBzdh9rhF4VI2IzqWgm /oAU8CGDucqldgzrq3mWMnqAD5Y6oR4/kuC781NCx5ke9D9I2xlqGRAyNkrCyESk /jPLhgdOgFmdv3+Li8//D9rDTDejs+66n3iWJhmINXC08iIIsybqFCXMP+uucTiD 3rtMY0AgkZd9srTAaUhUlfolRnB/eb6oxPsotRBFU+KTdEa8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:39 2026 by rpki-client