This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer File: g8ED1lpU1q8e-6asPmNyICivK7E.cer (raw, json) Hash identifier: w7gACPSgx1g3Z8pMGjtA5G1qciXslBgix7AhhjuRxJM= Subject key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3913EB0EFF8BEED1E0395D097267AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 66.22.192.0/18 IP: 195.62.89.0/24 IP: 2a0e:5940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:eb:0e:ff:8b:ee:d1:e0:39:5d:09:72:67:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:4d:b3:ed:c7:79:0e:5e:44:bc:9d:8b:b6: 96:8a:7b:25:ef:5b:68:b7:ff:7b:16:de:fb:60:74: f8:ce:a5:c8:df:c9:11:a0:6a:04:9b:f3:db:c9:41: 49:3b:1b:b8:df:bb:d1:a6:fb:ef:8f:7a:cf:80:f6: c0:01:1c:bb:fb:e2:d4:18:db:c3:c9:a1:dc:0e:4f: 23:b8:53:8b:ec:73:69:e5:d9:12:2c:55:92:3b:97: 0a:d5:88:58:84:5a:8c:35:a9:4d:5e:32:be:20:43: f6:cd:e4:c1:64:2c:4e:e7:7e:25:3b:df:4f:91:56: d2:e5:d5:b2:35:bb:97:54:dd:d2:01:25:80:cd:e7: 52:60:d3:9c:0c:0f:81:62:f9:77:94:a1:df:6f:c8: d4:38:29:3f:a4:fe:e3:b6:32:16:5c:23:01:4e:cf: 7e:34:e7:b1:48:9e:64:35:77:51:93:f6:ba:ff:98: b3:fa:7b:5e:b0:4d:5f:04:18:a2:5c:84:6a:89:f4: 7c:9c:b8:c7:b1:1d:5e:9f:6c:99:e6:d1:00:f9:25: 3d:55:39:8c:04:1d:25:16:d8:e1:ba:29:2e:62:18: 51:49:a7:62:54:83:90:f9:1a:af:17:e1:53:e2:ab: 8d:80:27:22:d4:0b:2c:b8:2c:5d:eb:a9:b7:39:ab: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.22.192.0/18 195.62.89.0/24 IPv6: 2a0e:5940::/29 Signature Algorithm: sha256WithRSAEncryption 42:3c:90:07:78:95:96:b0:86:21:ec:02:23:ba:fb:e5:ca:e1: 8e:88:fe:a7:6e:b8:b5:5c:f2:9f:03:c4:e0:c8:33:4a:09:cc: 25:e9:dc:52:a7:a1:72:f1:e7:53:e3:d1:c4:4a:0a:e8:15:e5: b0:f9:d6:37:9f:c3:e5:3e:8d:3a:43:b5:7c:77:d7:64:f7:df: 20:8a:50:fc:82:b9:fb:a4:44:a9:62:75:0a:cd:11:cb:ca:28: 46:4a:ca:6e:c1:d7:97:c1:c2:ce:23:dc:c2:d3:4a:68:aa:dc: 68:d6:f5:b8:96:1f:bd:21:96:5b:ee:cb:c8:69:51:8c:f8:93: e2:5e:08:55:db:0b:2a:cf:01:62:ea:a1:eb:e1:5b:89:89:76: 1f:50:4a:69:d3:ad:c3:b8:25:52:59:07:35:2e:ca:25:a4:f4: e1:32:35:a7:e0:e0:45:47:ed:aa:e9:5f:43:0d:26:0b:93:a2: 69:dc:ef:6a:2c:12:41:0a:1f:b8:54:21:72:44:2a:9b:0d:d3: 0b:42:e1:6b:bc:57:14:d8:be:2d:e0:f2:bc:6b:66:0b:b9:55: 17:a6:f2:73:49:1c:e4:51:22:49:e9:7a:d9:99:61:91:f6:20: ca:08:43:29:ad:c0:a6:7c:69:5c:bf:cc:f3:6c:27:98:77:11: 8c:dc:54:1f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+ORPrDv+L7tHgOV0JcmetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2MxMDNkNjVhNTRkNmFmMWVmYmE2YWMzZTYzNzIyMDI4YWYyYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWJNs+3HeQ5eRLydi7aWinsl71to t/97Ft77YHT4zqXI38kRoGoEm/PbyUFJOxu437vRpvvvj3rPgPbAARy7++LUGNvD yaHcDk8juFOL7HNp5dkSLFWSO5cK1YhYhFqMNalNXjK+IEP2zeTBZCxO534lO99P kVbS5dWyNbuXVN3SASWAzedSYNOcDA+BYvl3lKHfb8jUOCk/pP7jtjIWXCMBTs9+ NOexSJ5kNXdRk/a6/5iz+ntesE1fBBiiXIRqifR8nLjHsR1en2yZ5tEA+SU9VTmM BB0lFtjhuikuYhhRSadiVIOQ+RqvF+FT4quNgCci1AssuCxd66m3OascKwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFIPBA9ZaVNavHvumrD5jciAoryuxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzA4MWJk NC0xMjEwLTQwMjEtYTg2NC1iNTBjZjVmMmFhMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMDgxYmQ0 LTEyMTAtNDAyMS1hODY0LWI1MGNmNWYyYWEyMi8xL2c4RUQxbHBVMXE4ZS02YXNQ bU55SUNpdks3RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGQhbAAwQAwz5ZMA0EAgACMAcDBQMqDllAMA0G CSqGSIb3DQEBCwUAA4IBAQBCPJAHeJWWsIYh7AIjuvvlyuGOiP6nbri1XPKfA8Tg yDNKCcwl6dxSp6Fy8edT49HESgroFeWw+dY3n8PlPo06Q7V8d9dk998gilD8grn7 pESpYnUKzRHLyihGSspuwdeXwcLOI9zC00poqtxo1vW4lh+9IZZb7svIaVGM+JPi XghV2wsqzwFi6qHr4VuJiXYfUEpp063DuCVSWQc1LsolpPThMjWn4OBFR+2q6V9D DSYLk6Jp3O9qLBJBCh+4VCFyRCqbDdMLQuFrvFcU2L4t4PK8a2YLuVUXpvJzSRzk USJJ6XrZmWGR9iDKCEMprcCmfGlcv8zzbCeYdxGM3FQf -----END CERTIFICATE-----Generated at Sun Jan 11 14:34:06 2026 by rpki-client