This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer File: v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer (raw, json) Hash identifier: r70jdAiAsbHEYjPqEoHvFruDD4kgUXMXniCdJtQGA2c= Subject key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38EE90589E73B980038A3D68A52B3B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57112 AS: 197985 AS: 203623 IP: 5.104.112.0/20 IP: 31.177.32.0/21 IP: 45.84.40.0/22 IP: 45.91.56.0/22 IP: 45.92.224.0/22 IP: 81.30.64.0/20 IP: 86.111.208.0/22 IP: 185.23.140.0/22 IP: 185.33.152.0/22 IP: 185.38.152.0/22 IP: 185.70.236.0/22 IP: 185.72.160.0/22 IP: 185.82.192.0/22 IP: 185.87.104.0/22 IP: 185.87.116.0/22 IP: 185.87.156.0/22 IP: 185.103.236.0/22 IP: 185.113.172.0/22 IP: 185.127.108.0/22 IP: 185.133.108.0/22 IP: 185.192.144.0/22 IP: 185.236.16.0/22 IP: 217.76.16.0/20 IP: 2a06:c8c0::/29 IP: 2a0a:4980::/29 IP: 2a0e:c40::/29 IP: 2a0e:9680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ee:90:58:9e:73:b9:80:03:8a:3d:68:a5:2b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:ac:27:c7:77:23:61:31:e5:bc:7e:8e:be: f1:ae:d1:01:e9:5b:12:0c:7d:68:c1:6f:1a:22:60: 0c:e7:0e:23:84:23:25:37:94:d5:78:13:88:68:13: 96:f4:cf:13:3c:f3:f2:74:e0:f9:6d:1a:01:64:25: fd:a4:43:cd:73:1d:4d:5d:d9:f0:fe:21:06:41:af: ac:62:15:20:32:36:cf:fb:aa:8b:56:8d:89:2e:12: f5:e9:d9:01:80:75:90:f8:1d:ec:bf:22:72:6a:62: 62:a0:73:cd:cb:43:dc:f3:de:c3:aa:ab:91:22:57: b8:ed:5c:87:1a:a4:f1:c1:90:77:37:be:dc:61:65: d8:21:2c:c3:89:87:30:88:02:06:a6:be:a5:e6:73: 1a:d1:61:01:1c:7c:ff:a8:64:6c:19:33:4e:47:67: e3:15:f1:9b:d1:30:26:6a:02:5f:4a:8d:20:1f:0e: c0:03:40:0a:8a:b3:e2:60:5d:e6:ea:8b:47:b9:d5: 08:da:80:5b:d1:39:83:63:28:7d:d3:64:b9:f5:db: cd:ef:ea:cf:61:29:5a:01:13:18:75:47:40:62:5c: 96:3a:72:6f:88:ef:f9:af:8b:7b:36:f2:13:15:bf: e3:f3:3a:82:33:23:31:69:fa:6a:6c:57:ed:81:7d: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.112.0/20 31.177.32.0/21 45.84.40.0/22 45.91.56.0/22 45.92.224.0/22 81.30.64.0/20 86.111.208.0/22 185.23.140.0/22 185.33.152.0/22 185.38.152.0/22 185.70.236.0/22 185.72.160.0/22 185.82.192.0/22 185.87.104.0/22 185.87.116.0/22 185.87.156.0/22 185.103.236.0/22 185.113.172.0/22 185.127.108.0/22 185.133.108.0/22 185.192.144.0/22 185.236.16.0/22 217.76.16.0/20 IPv6: 2a06:c8c0::/29 2a0a:4980::/29 2a0e:c40::/29 2a0e:9680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57112 197985 203623 Signature Algorithm: sha256WithRSAEncryption 96:99:a1:72:a5:0f:3b:28:71:a1:8b:7e:9f:d5:c6:e4:73:8f: 89:9c:6a:74:9f:ac:82:17:6c:a8:50:36:81:7a:c6:a1:8a:dd: 84:fc:cf:01:4a:5e:4e:d4:12:36:53:f7:77:3b:9b:11:b0:c0: 93:fe:ec:18:cb:12:63:d8:e8:39:b1:26:d7:8f:3e:fe:18:36: bb:11:8f:c3:29:73:a2:bc:8c:f1:18:8a:b0:4f:e7:71:17:4b: 83:f5:dc:5a:d6:7e:65:c8:d2:77:61:88:42:d3:cb:91:6f:ee: 6b:09:ef:07:10:ff:aa:dd:a7:26:05:81:f9:19:ca:12:08:09: 5d:81:f4:17:a4:15:9d:f1:86:46:e6:a2:e0:48:50:05:af:3b: 46:af:09:e6:53:41:69:a7:a4:bb:16:80:fc:ef:8e:96:3b:ba: 65:6d:88:03:4d:46:e5:ba:e0:7b:38:a6:25:99:3b:4f:e2:36: 4b:6d:8d:7a:27:a2:26:c3:ef:1b:b7:11:fd:37:2c:35:51:37: db:e2:a9:28:08:52:b2:c7:aa:da:4e:e0:83:60:32:7d:7c:bb: 8e:d9:e9:23:d1:ac:9d:31:28:24:f0:c9:be:f8:a1:5d:de:99: d4:9e:23:b0:26:b0:ce:6c:01:47:a1:ed:76:e9:41:7e:b7:0d: 73:7a:5d:3a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAZt+OO6QWJ5zuYADij1opSs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmM0NzBlOWI1OGU1NTdlYThjMWRiZWRhZWI5YzZhNWZjNDU1MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjOsJ8d3I2Ex5bx+jr7xrtEB6VsS DH1owW8aImAM5w4jhCMlN5TVeBOIaBOW9M8TPPPydOD5bRoBZCX9pEPNcx1NXdnw /iEGQa+sYhUgMjbP+6qLVo2JLhL16dkBgHWQ+B3svyJyamJioHPNy0Pc897DqquR Ile47VyHGqTxwZB3N77cYWXYISzDiYcwiAIGpr6l5nMa0WEBHHz/qGRsGTNOR2fj FfGb0TAmagJfSo0gHw7AA0AKirPiYF3m6otHudUI2oBb0TmDYyh902S59dvN7+rP YSlaARMYdUdAYlyWOnJviO/5r4t7NvITFb/j8zqCMyMxafpqbFftgX2PnwIDAQAB o4IDVzCCA1MwHQYDVR0OBBYEFL/EcOm1jlV+qMHb7a65xqX8RVElMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzI3YjM5 Yi0wNDQ5LTRjNjQtYmE3OS1hMmFhNjU0MGY4NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvMjdiMzli LTA0NDktNGM2NC1iYTc5LWEyYWE2NTQwZjg3NS8xL3Y4Unc2YldPVlg2b3dkdnRy cm5HcGZ4RlVTVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHLBggrBgEF BQcBBwEB/wSBuzCBuDCBkQQCAAEwgYoDBAQFaHADBAMfsSADBAItVCgDBAItWzgD BAItXOADBARRHkADBAJWb9ADBAK5F4wDBAK5IZgDBAK5JpgDBAK5RuwDBAK5SKAD BAK5UsADBAK5V2gDBAK5V3QDBAK5V5wDBAK5Z+wDBAK5cawDBAK5f2wDBAK5hWwD BAK5wJADBAK57BADBATZTBAwIgQCAAIwHAMFAyoGyMADBQMqCkmAAwUDKg4MQAMF AyoOloAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAN8YAgMDBWECAwMbZzANBgkq hkiG9w0BAQsFAAOCAQEAlpmhcqUPOyhxoYt+n9XG5HOPiZxqdJ+sghdsqFA2gXrG oYrdhPzPAUpeTtQSNlP3dzubEbDAk/7sGMsSY9joObEm148+/hg2uxGPwylzoryM 8RiKsE/ncRdLg/XcWtZ+ZcjSd2GIQtPLkW/uawnvBxD/qt2nJgWB+RnKEggJXYH0 F6QVnfGGRuai4EhQBa87Rq8J5lNBaaekuxaA/O+Olju6ZW2IA01G5brgezimJZk7 T+I2S22NeieiJsPvG7cR/TcsNVE32+KpKAhSsseq2k7gg2AyfXy7jtnpI9GsnTEo JPDJvvihXd6Z1J4jsCawzmwBR6HtdulBfrcNc3pdOg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:52 2026 by rpki-client