This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer File: _8P1ykeS2U0ao2616jqhtAQ80BQ.cer (raw, json) Hash identifier: NBRuKsTdezcsKv1DYQ2l7YIOlWpWohe0HlEtFulo0VE= Subject key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B05F4A5D1A6E44CEBDC09A4BE2758D1BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 01:51:17 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 185.242.76.0/22 IP: 2a0f:f8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:f4:a5:d1:a6:e4:4c:eb:dc:09:a4:be:27:58:d1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 01:51:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:15:92:e8:0c:4c:17:47:8f:e1:fd:ba:bf: 77:dc:ab:e9:c0:b8:89:f5:ee:f8:d1:50:07:4b:e9: 38:b4:26:0f:86:76:9e:02:8c:c9:1d:00:7d:5d:d3: d7:8b:35:8c:fe:22:04:29:bc:40:99:f9:12:7e:f0: d2:7a:3c:5a:d4:20:79:0b:20:1b:b2:5e:45:35:03: 21:f4:22:ec:16:aa:2e:39:b3:d6:19:c4:1a:7f:76: 13:50:3a:0e:b7:16:ba:89:be:fb:63:cf:7b:7d:1e: 1b:69:c1:20:50:62:b1:7b:1d:c3:01:8a:c5:31:3f: 4c:9f:26:87:9d:c4:f7:6f:f7:81:cb:3d:81:43:32: d9:60:f9:bb:38:95:37:4f:35:0a:05:a3:d1:24:ba: de:08:04:fd:04:5a:fe:6d:25:7a:cf:4d:35:6d:f7: 61:0e:d4:ad:5d:d4:4a:7f:f3:3c:56:ba:97:f4:ab: e4:be:4c:58:47:ef:dc:dc:16:13:33:16:79:da:eb: 0a:30:68:5e:cf:9b:14:e3:52:28:2f:c0:3e:f7:36: ca:ab:fd:10:fd:f4:b2:38:72:08:71:1f:a2:b5:39: 54:21:37:fa:76:75:8e:88:44:09:21:1d:f4:56:a3: 13:08:6c:69:0e:17:08:af:59:e2:d3:24:80:33:11: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.76.0/22 IPv6: 2a0f:f8c0::/29 Signature Algorithm: sha256WithRSAEncryption 35:e6:83:d0:e8:0f:98:8d:7b:b8:43:f1:9f:1e:77:fe:27:ac: 9e:57:3a:31:ff:fd:bb:92:c2:a8:96:91:86:f6:ee:96:dd:9c: 06:56:aa:22:84:ae:e7:87:c4:0b:7a:d9:e6:3e:6f:79:f7:45: 7c:d1:e9:40:37:40:26:31:a7:0c:4a:4d:6a:54:65:40:5f:7e: 5c:43:14:bd:44:2b:34:ad:3b:75:b5:c5:cc:ce:12:ed:f1:23: c1:41:59:da:4f:b0:2b:03:f3:13:e0:34:48:6c:07:95:40:81: 7d:6b:9e:b0:c0:45:06:af:9f:dc:50:c4:5d:5d:5c:1f:6c:e5: 7c:a8:45:db:0e:af:37:c3:44:a0:30:94:79:1d:1d:91:5e:54: f9:2c:c2:90:7a:ea:6b:13:90:c0:a7:11:1d:b0:84:9a:c9:ed: 47:84:62:c7:45:75:38:7f:ef:99:03:ce:b3:05:f0:f9:1a:fd: a5:b6:d6:e1:de:15:91:67:bb:9d:21:e5:7a:28:29:ba:55:ba: 89:ca:cd:ab:4a:ad:03:68:a3:bb:bc:27:da:e1:ef:9e:21:fe: e4:15:2d:f1:f9:ce:f3:66:7e:9c:5b:46:04:0c:0c:89:f7:7f: 25:10:aa:16:21:8b:2a:a2:be:6d:26:56:e9:fd:cd:f9:66:dd: 33:b9:fb:60 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZsF9KXRpuRM69wJpL4nWNG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMDE1MTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmMzZjVjYTQ3OTJkOTRkMWFhMzZlYjVlYTNhYTFiNDA0M2NkMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXMVkugMTBdHj+H9ur933KvpwLiJ 9e740VAHS+k4tCYPhnaeAozJHQB9XdPXizWM/iIEKbxAmfkSfvDSejxa1CB5CyAb sl5FNQMh9CLsFqouObPWGcQaf3YTUDoOtxa6ib77Y897fR4bacEgUGKxex3DAYrF MT9MnyaHncT3b/eByz2BQzLZYPm7OJU3TzUKBaPRJLreCAT9BFr+bSV6z001bfdh DtStXdRKf/M8VrqX9KvkvkxYR+/c3BYTMxZ52usKMGhez5sU41IoL8A+9zbKq/0Q /fSyOHIIcR+itTlUITf6dnWOiEQJIR30VqMTCGxpDhcIr1ni0ySAMxGmawIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFP/D9cpHktlNGqNuteo6obQEPNAUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2ZkNjk2 My1kMjVjLTQwMmYtOWVhMS0yOGVkMGY5MjgxMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZmQ2OTYz LWQyNWMtNDAyZi05ZWExLTI4ZWQwZjkyODEzMy8xL184UDF5a2VTMlUwYW8yNjE2 anFodEFRODBCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufJMMA0EAgACMAcDBQMqD/jAMA0GCSqGSIb3 DQEBCwUAA4IBAQA15oPQ6A+YjXu4Q/GfHnf+J6yeVzox//27ksKolpGG9u6W3ZwG VqoihK7nh8QLetnmPm9590V80elAN0AmMacMSk1qVGVAX35cQxS9RCs0rTt1tcXM zhLt8SPBQVnaT7ArA/MT4DRIbAeVQIF9a56wwEUGr5/cUMRdXVwfbOV8qEXbDq83 w0SgMJR5HR2RXlT5LMKQeuprE5DApxEdsISaye1HhGLHRXU4f++ZA86zBfD5Gv2l ttbh3hWRZ7udIeV6KCm6VbqJys2rSq0DaKO7vCfa4e+eIf7kFS3x+c7zZn6cW0YE DAyJ938lEKoWIYsqor5tJlbp/c35Zt0zuftg -----END CERTIFICATE-----Generated at Sun Dec 21 04:39:35 2025 by rpki-client