This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer File: 1a8gwCbeEE2W8XrLr054fvnTAgY.cer (raw, json) Hash identifier: jnEVE9pZsLSJceGOoN4sHSGunbEmpkNEPkR62ZGR128= Subject key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364EAA2B7F34B201F332187103DBDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.154.160.0/22 IP: 2a07:8e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4e:aa:2b:7f:34:b2:01:f3:32:18:71:03:db:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9c:ba:1d:db:9c:6c:96:39:a9:a2:e7:ac:bd: cd:2a:9b:30:ad:a1:3b:0e:c4:3a:60:76:58:c1:63: 59:5b:2e:f3:20:d7:6f:a5:28:26:a5:66:54:f8:be: 3e:05:83:c5:e8:4d:bb:97:75:32:9c:0a:83:dc:7c: 27:ab:63:c8:e5:c6:e3:a5:f2:b2:08:e1:bb:2e:40: c0:0f:da:ae:62:12:93:d3:79:0a:28:90:3e:b7:5f: 15:39:a1:74:e3:c0:ac:91:71:8c:91:e5:2d:8d:fd: 94:33:27:8c:0d:6f:fa:12:a1:1f:ea:08:49:f9:8e: ca:28:d9:b7:d0:83:e9:ef:be:b2:03:fd:f1:87:db: e3:a0:de:05:3f:38:70:ba:de:88:83:d5:20:15:18: 56:ad:60:22:1d:14:c6:ca:c5:cd:d8:16:40:18:e9: 0b:15:e2:7d:62:bc:7b:de:f4:13:0c:f7:97:ba:0f: 19:35:63:d0:30:cf:81:7e:40:7c:5b:6b:04:5a:e5: 90:c4:52:95:28:48:b9:0c:2d:bb:37:79:ec:85:4d: 9f:aa:82:f5:11:92:87:8d:a1:71:14:c3:2d:2a:43: a1:f7:32:46:de:57:bf:ef:9d:90:6b:d6:3f:f3:ed: ee:a7:74:ae:6e:3c:34:c2:d2:c1:e2:85:6f:ba:b9: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.160.0/22 IPv6: 2a07:8e40::/29 Signature Algorithm: sha256WithRSAEncryption 55:35:19:16:11:02:bf:d3:84:67:10:3d:85:de:83:4c:f2:4a: 71:93:b5:84:26:43:1a:3b:df:6f:52:fe:14:db:6b:4b:30:45: 33:fc:a5:bb:3a:a8:62:2a:f5:d0:16:3b:a0:31:1f:9b:2e:8a: d0:17:94:53:9d:f9:46:39:11:33:91:14:24:40:63:ea:16:f3: 93:64:5a:d9:ef:31:85:d4:9a:ad:4d:e3:2a:e3:33:ad:ad:2b: 96:34:cf:a7:d6:17:f8:82:42:1c:f4:44:69:da:6b:1c:8a:e9: 5a:52:0b:d3:f9:cf:a2:8c:17:8e:1a:6d:da:e1:af:5c:cd:ba: 17:62:47:b7:42:69:c6:fe:ce:5e:72:3f:55:e6:58:bd:36:ee: c2:21:c2:20:d0:a3:1c:bc:e0:0d:cf:da:b7:19:6a:4d:50:b4: 02:33:27:b0:d8:22:42:13:da:24:15:45:91:88:bb:46:72:8d: 56:cf:23:db:db:78:64:12:00:57:d6:d0:48:6f:e0:5d:7c:44: 40:c3:93:58:3d:11:36:b8:2c:2c:ec:84:e5:8d:a0:70:3c:b2: a7:10:4a:e6:9b:b9:1c:85:8d:71:2c:05:2d:1f:7d:36:c1:8d: b1:ba:19:62:b2:c4:7c:93:29:89:1f:52:62:72:e6:44:8e:c6: 0e:68:8f:c9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nk6qK380sgHzMhhxA9veMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWFmMjBjMDI2ZGUxMDRkOTZmMTdhY2JhZjRlNzg3ZWY5ZDMwMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6py6HducbJY5qaLnrL3NKpswraE7 DsQ6YHZYwWNZWy7zINdvpSgmpWZU+L4+BYPF6E27l3UynAqD3Hwnq2PI5cbjpfKy COG7LkDAD9quYhKT03kKKJA+t18VOaF048CskXGMkeUtjf2UMyeMDW/6EqEf6ghJ +Y7KKNm30IPp776yA/3xh9vjoN4FPzhwut6Ig9UgFRhWrWAiHRTGysXN2BZAGOkL FeJ9Yrx73vQTDPeXug8ZNWPQMM+BfkB8W2sEWuWQxFKVKEi5DC27N3nshU2fqoL1 EZKHjaFxFMMtKkOh9zJG3le/752Qa9Y/8+3up3Subjw0wtLB4oVvurlJGQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNWvIMAm3hBNlvF6y69OeH750wIGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzA5ZDcy ZS04MjY3LTQzOTMtODM2My04OWYxODE1ZDRjMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvMDlkNzJl LTgyNjctNDM5My04MzYzLTg5ZjE4MTVkNGMxOS8xLzFhOGd3Q2JlRUUyVzhYckxy MDU0ZnZuVEFnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZqgMA0EAgACMAcDBQMqB45AMA0GCSqGSIb3 DQEBCwUAA4IBAQBVNRkWEQK/04RnED2F3oNM8kpxk7WEJkMaO99vUv4U22tLMEUz /KW7OqhiKvXQFjugMR+bLorQF5RTnflGOREzkRQkQGPqFvOTZFrZ7zGF1JqtTeMq 4zOtrSuWNM+n1hf4gkIc9ERp2msciulaUgvT+c+ijBeOGm3a4a9czboXYke3QmnG /s5ecj9V5li9Nu7CIcIg0KMcvOANz9q3GWpNULQCMyew2CJCE9okFUWRiLtGco1W zyPb23hkEgBX1tBIb+BdfERAw5NYPRE2uCws7ITljaBwPLKnEErmm7kchY1xLAUt H302wY2xuhlissR8kymJH1JicuZEjsYOaI/J -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:01 2026 by rpki-client