This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer File: psb8p1JpxrAQpvpxCeQxXgagg9w.cer (raw, json) Hash identifier: 8FZ3oGwmDNR/jvWZp7w2XZBYm+AvP3nWZddae7CKhjg= Subject key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36A1D2DA86A454F6FBFC557646595 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.161.96.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6a:1d:2d:a8:6a:45:4f:6f:bf:c5:57:64:65:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:1f:81:d7:9a:d8:96:46:98:b5:68:36:65: db:0e:83:bb:b9:10:84:9a:51:54:7e:4f:ed:78:5b: 8e:74:85:3f:a9:36:b0:74:3a:58:fa:4c:64:9e:1c: 50:1d:30:e5:73:73:38:13:50:73:de:a3:06:55:68: 5d:42:ed:01:a0:2a:79:cc:28:81:98:b4:8e:54:10: 15:43:a9:62:fa:9d:89:5e:f7:40:49:47:1f:8e:ec: 4b:7b:a7:fb:6b:b8:8d:71:30:5a:f6:36:83:54:28: 85:53:c4:5f:31:8c:86:c3:65:10:a9:02:82:1d:be: 27:a6:ad:dc:53:18:d8:af:ab:ae:58:8d:c3:b1:80: fd:38:58:6e:34:3d:39:01:0b:c4:9f:60:37:4c:b9: 45:ed:f8:20:f4:a2:be:a9:f3:6b:8b:df:fc:a7:90: ae:85:09:a4:6d:00:8d:ef:20:c6:a3:28:82:cb:aa: f8:d8:62:f8:2b:c1:b6:a0:9e:bb:f8:bc:29:5f:aa: ee:c6:1f:11:5c:88:0a:3c:ca:7c:09:49:d0:e9:fe: f1:0f:d6:2f:d2:1f:02:9e:e6:d7:1f:56:d8:3e:29: 65:5b:c4:f3:8a:d7:96:a8:43:42:02:13:0b:bc:ca: f6:5b:6f:9a:a3:dc:4f:e7:95:c5:a2:6b:f3:e7:3d: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.96.0/20 Signature Algorithm: sha256WithRSAEncryption ae:e6:6c:08:4d:9c:3f:54:5b:41:d7:49:72:2a:81:40:9d:3f: 84:9e:c5:81:13:24:73:90:e6:09:e9:3f:bc:b5:f8:b5:8b:57: f2:ce:97:3a:d6:37:54:c7:7f:b1:cb:fe:6f:e7:f0:91:f7:7f: f3:a0:58:7f:b5:cd:4f:42:00:85:f5:fb:8e:5b:fe:74:3a:0b: 32:2e:0e:35:6e:20:2a:54:32:76:f5:d3:c0:e6:59:2e:c6:75: aa:2b:26:69:b1:4e:23:e2:28:4e:a2:94:16:17:3c:d6:04:9e: 20:95:8c:e0:39:f2:10:e9:dc:76:22:ca:99:fa:c8:6f:a0:35: 70:59:f0:3a:89:35:0c:b7:67:46:61:c4:f6:03:92:8e:eb:15: c2:22:7b:24:99:ed:d7:34:5d:82:8a:c1:a4:8e:6e:fb:3a:6c: 8b:98:67:b3:ab:3f:7f:ac:ad:ef:9c:c0:40:26:d9:10:3f:13: 56:d1:85:6d:8d:f0:e0:95:2b:6a:5a:59:c4:97:5d:43:78:a7: 47:8b:c3:99:13:3d:04:81:af:b7:60:10:29:20:25:a0:f6:cf: 23:09:7a:68:41:9b:4d:b2:5a:e5:39:d9:c4:58:36:75:fb:af: 16:ce:01:00:97:c1:04:59:01:c1:ed:cd:e1:3c:21:81:8f:f9: b3:47:ae:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o2odLahqRU9vv8VXZGWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmM2ZmNhNzUyNjljNmIwMTBhNmZhNzEwOWU0MzE1ZTA2YTA4M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5wfgdea2JZGmLVoNmXbDoO7uRCE mlFUfk/teFuOdIU/qTawdDpY+kxknhxQHTDlc3M4E1Bz3qMGVWhdQu0BoCp5zCiB mLSOVBAVQ6li+p2JXvdASUcfjuxLe6f7a7iNcTBa9jaDVCiFU8RfMYyGw2UQqQKC Hb4npq3cUxjYr6uuWI3DsYD9OFhuND05AQvEn2A3TLlF7fgg9KK+qfNri9/8p5Cu hQmkbQCN7yDGoyiCy6r42GL4K8G2oJ67+LwpX6ruxh8RXIgKPMp8CUnQ6f7xD9Yv 0h8CnubXH1bYPillW8TziteWqENCAhMLvMr2W2+ao9xP55XFomvz5z1LEQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKbG/KdSacawEKb6cQnkMV4GoIPcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2VhYjdl Zi04Y2Q2LTRkZmUtOGYxZS04NmUyOWYwNWViOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZWFiN2Vm LThjZDYtNGRmZS04ZjFlLTg2ZTI5ZjA1ZWI5Ny8xL3BzYjhwMUpweHJBUXB2cHhD ZVF4WGdhZ2c5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwaFgMA0GCSqGSIb3DQEBCwUAA4IBAQCu5mwI TZw/VFtB10lyKoFAnT+EnsWBEyRzkOYJ6T+8tfi1i1fyzpc61jdUx3+xy/5v5/CR 93/zoFh/tc1PQgCF9fuOW/50OgsyLg41biAqVDJ29dPA5lkuxnWqKyZpsU4j4ihO opQWFzzWBJ4glYzgOfIQ6dx2IsqZ+shvoDVwWfA6iTUMt2dGYcT2A5KO6xXCInsk me3XNF2CisGkjm77OmyLmGezqz9/rK3vnMBAJtkQPxNW0YVtjfDglStqWlnEl11D eKdHi8OZEz0Ega+3YBApICWg9s8jCXpoQZtNslrlOdnEWDZ1+68WzgEAl8EEWQHB 7c3hPCGBj/mzR67k -----END CERTIFICATE-----Generated at Mon Jan 5 19:12:39 2026 by rpki-client