This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer File: h_S8G8xE8-kQBwQ1297UG25ILmg.cer (raw, json) Hash identifier: chPsqPwN0UvzsZ147Ff07jWcoFKmeNdzEVJ8TQrRvzw= Subject key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB0A0C2BA18E2CD5CF7C97E5326343 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.133.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0a:0c:2b:a1:8e:2c:d5:cf:7c:97:e5:32:63:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:02:e1:93:2d:6c:1c:fc:41:60:18:d8:43: 3c:22:03:24:69:03:5a:99:3e:81:91:cd:65:9d:fe: 14:50:24:47:e9:eb:e3:8e:98:c5:ca:4f:da:95:a3: 49:8f:83:45:a0:1c:1d:f3:d3:ea:cf:cb:e9:c6:0a: 18:47:70:11:1b:bd:21:87:3e:c1:2c:f3:bf:2c:ca: a3:22:48:fb:48:79:4f:ac:8b:8f:7b:cf:b4:91:4f: 14:2d:9a:b8:e3:cf:3a:9a:f3:4c:b9:4e:6a:14:dd: 42:07:05:7b:2c:67:5d:3a:84:d0:d3:b4:0c:7e:5a: 97:bb:62:ff:55:73:e0:f0:95:ab:39:fd:c4:7a:75: b9:d5:ed:d8:02:82:d4:0f:cd:49:9e:9c:a0:1c:cb: 21:0f:7a:b1:31:f7:a8:b5:4d:5f:e6:e8:05:eb:bd: e0:cd:c8:6c:be:97:54:3f:cd:30:2f:15:7d:22:47: 4d:23:6f:41:40:40:da:a1:bd:7f:56:82:fe:74:27: bf:eb:46:65:96:3e:fc:9a:b3:97:3b:d1:3f:56:a9: 2c:55:5c:df:0b:4a:7d:db:c3:59:16:84:d7:8b:ff: 70:d6:df:f2:96:28:f9:b3:ac:cd:bf:18:2c:06:7e: 70:b9:f3:5e:04:81:de:4f:5b:5d:81:33:6d:54:d0: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.12.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:85:47:3c:c2:8d:3f:eb:ca:4c:36:00:b2:b8:d6:f7:d5:da: e6:0d:10:c4:04:57:91:24:fb:ec:64:81:0d:2c:43:f5:af:37: b5:79:fc:78:de:97:f0:52:5b:cf:83:fc:df:09:57:91:52:58: bf:6c:ef:9a:0f:df:65:4c:cb:17:be:e7:96:ac:62:af:dc:74: 8a:f6:e6:f7:39:08:86:0e:0c:e5:98:11:ed:8f:55:66:b1:54: e0:1a:93:05:94:e5:40:9d:c8:c2:83:b8:47:db:3a:54:1a:43: 29:ac:7b:cf:7c:26:c8:c3:4d:a6:aa:9c:89:af:ee:aa:12:a9: 38:ab:7b:02:89:75:ea:88:25:a9:7a:7a:39:64:ae:63:0e:e9: 5f:4c:7b:ac:60:20:3b:9f:ed:58:a5:52:e2:bb:bd:b4:7c:49: ba:70:09:13:80:ab:e8:f7:08:1d:13:a2:cc:43:bf:79:96:dc: fa:71:36:19:b4:0f:a2:81:e8:01:00:4b:41:f1:d5:33:fc:62: 69:b4:6e:01:2a:2a:55:e2:bc:9e:6e:e8:5c:76:db:42:06:7b: c0:11:67:be:c9:b7:7b:83:65:4d:cb:63:ba:69:12:51:dc:65: 77:92:5b:87:1d:fc:f6:70:0d:25:96:28:83:69:0f:83:c4:52: a8:a7:f4:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ywoMK6GOLNXPfJflMmNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Y0YmMxYmNjNDRmM2U5MTAwNzA0MzVkYmRlZDQxYjZlNDgyZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYAC4ZMtbBz8QWAY2EM8IgMkaQNa mT6Bkc1lnf4UUCRH6evjjpjFyk/alaNJj4NFoBwd89Pqz8vpxgoYR3ARG70hhz7B LPO/LMqjIkj7SHlPrIuPe8+0kU8ULZq44886mvNMuU5qFN1CBwV7LGddOoTQ07QM flqXu2L/VXPg8JWrOf3EenW51e3YAoLUD81JnpygHMshD3qxMfeotU1f5ugF673g zchsvpdUP80wLxV9IkdNI29BQEDaob1/VoL+dCe/60Zllj78mrOXO9E/VqksVVzf C0p928NZFoTXi/9w1t/ylij5s6zNvxgsBn5wufNeBIHeT1tdgTNtVNBhoQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIf0vBvMRPPpEAcENdve1BtuSC5oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzBiNWI2 ZC03ZjQ2LTQ0N2EtODk0Ni03ZTc4MTY4MGQxZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMGI1YjZk LTdmNDYtNDQ3YS04OTQ2LTdlNzgxNjgwZDFkMi8xL2hfUzhHOHhFOC1rUUJ3UTEy OTdVRzI1SUxtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLYUMMA0GCSqGSIb3DQEBCwUAA4IBAQBthUc8 wo0/68pMNgCyuNb31drmDRDEBFeRJPvsZIENLEP1rze1efx43pfwUlvPg/zfCVeR Uli/bO+aD99lTMsXvueWrGKv3HSK9ub3OQiGDgzlmBHtj1VmsVTgGpMFlOVAncjC g7hH2zpUGkMprHvPfCbIw02mqpyJr+6qEqk4q3sCiXXqiCWpeno5ZK5jDulfTHus YCA7n+1YpVLiu720fEm6cAkTgKvo9wgdE6LMQ795ltz6cTYZtA+igegBAEtB8dUz /GJptG4BKipV4ryebuhcdttCBnvAEWe+ybd7g2VNy2O6aRJR3GV3kluHHfz2cA0l liiDaQ+DxFKop/R7 -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:38 2026 by rpki-client