This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer File: pi8tPCadk1InaQsot_vdlT4entw.cer (raw, json) Hash identifier: yhYOFYqNEeTIOS85vkvLnMrRtTHlHL1drk5EOsYaYZ4= Subject key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA517AB5A3F1D13590279C36E468A75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212012 IP: 45.8.105.0/24 IP: 91.240.72.0/24 IP: 91.241.42.0/24 IP: 185.42.232.0/22 IP: 194.88.222.0/23 IP: 2a04:7040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:ab:5a:3f:1d:13:59:02:79:c3:6e:46:8a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:61:c6:d1:7a:be:ef:b6:73:d5:a9:8d:5f: d3:6d:24:96:7f:d2:9e:d1:d8:fa:b7:52:de:60:4a: 3f:3b:b0:3d:1f:ba:24:27:24:fe:fc:9f:59:4a:64: 18:d2:e3:96:3d:76:10:56:f5:76:a7:7a:b4:35:be: c8:7c:28:6d:8e:c3:1e:58:7d:d8:a9:66:c5:b3:4b: e3:16:f3:49:7f:4c:f5:ea:f9:3e:05:5f:39:f7:89: fd:08:54:4a:9e:12:e9:4b:f3:c0:90:60:a1:9d:b2: c0:68:09:d0:62:e6:91:2e:54:8e:5a:58:90:ef:aa: e8:7a:80:e1:2d:a9:ed:04:d1:cd:7b:ca:09:52:8a: 6c:60:e3:c6:22:4f:10:00:f6:a5:87:b3:51:e1:51: 70:b8:c5:73:04:5d:88:a8:2e:89:8f:a0:dd:a7:05: c2:78:0d:50:5b:8c:f4:ec:6c:92:53:91:2a:23:91: 4a:78:05:cd:e0:b6:65:df:31:d5:ba:2a:30:70:e8: 6c:dc:da:73:bf:22:b2:b4:36:d1:f4:1a:bb:09:63: 84:54:2f:95:71:3d:08:f6:42:74:2c:d7:0c:1c:ba: ea:d1:b1:aa:b1:00:5d:3e:52:11:af:b7:0c:fa:be: 33:85:91:c0:71:68:1b:5b:f0:5e:98:70:72:66:c9: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.105.0/24 91.240.72.0/24 91.241.42.0/24 185.42.232.0/22 194.88.222.0/23 IPv6: 2a04:7040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212012 Signature Algorithm: sha256WithRSAEncryption ad:61:53:f4:0f:77:37:0f:5f:ec:f6:16:e9:cb:b5:e2:1d:55: 46:37:29:8e:6e:34:b7:a6:3f:49:b1:0f:d1:cb:98:18:72:27: eb:8b:65:05:d0:e5:f6:09:52:f9:ed:02:b1:8e:72:c3:9e:d1: d1:a4:d6:1b:f6:f7:27:0d:09:5c:7d:5c:f2:bc:28:7f:83:94: b4:21:16:63:c0:ab:35:41:e2:35:ff:88:eb:7b:9b:41:8d:8b: 8e:7e:7d:83:a6:12:43:e9:ac:15:ae:20:bb:65:28:19:6f:93: dd:e2:3c:86:f0:f4:57:33:04:bb:ae:3c:5c:46:b8:96:05:bf: f0:9d:bc:ce:a8:f0:6a:5f:ac:5b:83:32:6a:a6:ee:bc:42:35: d2:fe:ff:7d:e9:8e:8d:31:57:ce:f5:0e:9e:8b:8e:3b:c1:b1: 90:f4:bc:64:5b:c9:ec:db:72:e7:1c:35:82:36:4c:09:ec:f2: ec:0b:47:83:cc:88:4c:90:84:5f:06:0a:1f:2b:d7:af:2b:db: 6c:48:7c:95:7c:03:02:7a:0e:f6:f1:73:50:e0:9c:d9:a8:80: 19:ae:bb:2d:1d:38:9f:fc:68:9a:19:ab:7b:ff:11:17:6e:2e: 95:9e:43:ff:4a:41:6f:99:b0:44:3d:0c:ac:e9:20:3e:ac:e5: 14:1e:b1:28 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt7pRerWj8dE1kCecNuRop1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjJmMmQzYzI2OWQ5MzUyMjc2OTBiMjhiN2ZiZGQ5NTNlMWU5ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw39hxtF6vu+2c9WpjV/TbSSWf9Ke 0dj6t1LeYEo/O7A9H7okJyT+/J9ZSmQY0uOWPXYQVvV2p3q0Nb7IfChtjsMeWH3Y qWbFs0vjFvNJf0z16vk+BV8594n9CFRKnhLpS/PAkGChnbLAaAnQYuaRLlSOWliQ 76roeoDhLantBNHNe8oJUopsYOPGIk8QAPalh7NR4VFwuMVzBF2IqC6Jj6DdpwXC eA1QW4z07GySU5EqI5FKeAXN4LZl3zHVuiowcOhs3NpzvyKytDbR9Bq7CWOEVC+V cT0I9kJ0LNcMHLrq0bGqsQBdPlIRr7cM+r4zhZHAcWgbW/BemHByZsl4kQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzMyNWI4 NC0yZWQ0LTQwOTItOTA2Yy0xMDBlZWQ4MTJjNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMzI1Yjg0 LTJlZDQtNDA5Mi05MDZjLTEwMGVlZDgxMmM0MC8xL3BpOHRQQ2FkazFJbmFRc290 X3ZkbFQ0ZW50dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQALQhpAwQAW/BIAwQAW/EqAwQCuSroAwQBwlje MA0EAgACMAcDBQMqBHBAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8LDANBgkq hkiG9w0BAQsFAAOCAQEArWFT9A93Nw9f7PYW6cu14h1VRjcpjm40t6Y/SbEP0cuY GHIn64tlBdDl9glS+e0CsY5yw57R0aTWG/b3Jw0JXH1c8rwof4OUtCEWY8CrNUHi Nf+I63ubQY2Ljn59g6YSQ+msFa4gu2UoGW+T3eI8hvD0VzMEu648XEa4lgW/8J28 zqjwal+sW4MyaqbuvEI10v7/femOjTFXzvUOnouOO8GxkPS8ZFvJ7Nty5xw1gjZM Cezy7AtHg8yITJCEXwYKHyvXryvbbEh8lXwDAnoO9vFzUOCc2aiAGa67LR04n/xo mhmre/8RF24ulZ5D/0pBb5mwRD0MrOkgPqzlFB6xKA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:54 2026 by rpki-client