This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer (raw, json) Hash identifier: sTy/m0Fk41QC3ebK539pp17qVPUFAjlUnwQixFpZXh0= Subject key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596D3CBDCB07F66AFE9903F815E962 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.8.184.0/21 IP: 5.152.168.0/21 IP: 37.1.176.0/21 IP: 185.15.100.0/22 IP: 2a03:b740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6d:3c:bd:cb:07:f6:6a:fe:99:03:f8:15:e9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:cb:0c:be:ac:03:33:27:f8:0e:87:e4:47: 3d:2a:63:d4:fd:a2:bb:9c:84:13:c2:3a:c7:88:5e: 5f:7d:92:e0:54:8d:30:44:fd:c7:fd:34:b1:dd:51: 5f:9b:ae:04:6a:6b:59:53:e0:07:31:cb:b7:5a:6f: a5:b8:6c:cf:7f:63:e9:8d:11:63:89:1e:d2:0e:85: 76:38:70:2e:87:10:a6:65:a6:60:f0:6d:47:bf:c5: 70:01:17:89:a6:39:b7:c9:b5:8d:19:3a:fc:f7:e4: 90:ed:77:ea:c5:ea:aa:02:f2:de:a0:20:59:5c:80: 4c:d0:85:1e:6b:32:5b:0f:d1:96:be:bf:f6:52:75: bd:9f:36:c6:6e:46:04:e9:22:d3:a7:07:a3:cc:6c: 98:14:74:99:72:c1:37:36:67:b8:d4:2b:5a:95:55: 7b:69:cd:9d:15:e7:4d:81:44:00:02:19:90:90:23: 69:a3:06:d6:55:be:38:15:43:aa:f6:8a:fd:a4:1c: c5:e6:af:3b:c9:49:f9:ea:10:b9:c8:49:d6:b8:27: 60:4f:5a:24:62:4b:07:95:21:cd:54:30:9a:b6:dd: 62:f3:19:92:e2:0f:fa:93:e2:ec:d4:94:3b:e2:d5: a5:68:6d:e2:cb:49:f4:4b:de:32:84:ba:17:41:1e: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.184.0/21 5.152.168.0/21 37.1.176.0/21 185.15.100.0/22 IPv6: 2a03:b740::/32 Signature Algorithm: sha256WithRSAEncryption a7:ee:b2:2b:21:73:f6:32:94:4c:6a:0e:a9:ed:e5:8e:c8:9b: f9:63:4e:13:ef:d4:15:b0:b6:fa:04:62:1f:ed:5e:08:6a:6d: 73:68:35:57:9f:45:7c:71:8c:5f:ac:aa:b1:9a:fd:69:99:e2: d2:48:2c:4b:c7:d4:ca:12:60:52:86:5e:1c:b9:f8:fa:b6:cb: a7:cb:38:37:4b:e3:6b:80:94:15:c0:7c:73:b7:74:61:24:73: a4:41:67:f4:01:52:4f:41:bb:c3:1e:a2:c7:28:f1:fc:04:14: 84:2d:78:b5:32:9c:8b:64:f6:19:60:8e:a4:c7:4e:21:18:1a: a0:ee:05:21:8c:5d:ed:c8:3c:34:49:55:04:9b:5b:4d:cb:dd: 2b:bd:d6:e3:11:77:34:dd:b8:54:07:d7:2f:4b:16:fb:30:c7: 51:b3:57:a9:9d:59:6a:18:b7:c8:05:10:01:15:ec:2a:47:f5: b3:97:8b:c7:7f:8d:39:d4:69:b5:9e:21:c3:11:a3:d3:8b:79: 37:f5:e9:67:8a:33:83:59:8f:71:ae:89:a9:b4:18:5b:12:26: 1b:97:c9:66:38:19:8d:ad:f7:51:a3:3f:f7:6d:c3:d9:6e:2e: e7:c1:25:7b:ad:4e:b2:7a:47:a0:d2:21:80:9f:49:e3:f3:be: 91:57:c3:89 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt3WW08vcsH9mr+mQP4FeliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWE4OWI2N2M2NmRlYmY1ZGVkM2YyODgwYmI0OTQxZDMwNDExMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JLLDL6sAzMn+A6H5Ec9KmPU/aK7 nIQTwjrHiF5ffZLgVI0wRP3H/TSx3VFfm64EamtZU+AHMcu3Wm+luGzPf2PpjRFj iR7SDoV2OHAuhxCmZaZg8G1Hv8VwAReJpjm3ybWNGTr89+SQ7XfqxeqqAvLeoCBZ XIBM0IUeazJbD9GWvr/2UnW9nzbGbkYE6SLTpwejzGyYFHSZcsE3Nme41CtalVV7 ac2dFedNgUQAAhmQkCNpowbWVb44FUOq9or9pBzF5q87yUn56hC5yEnWuCdgT1ok YksHlSHNVDCatt1i8xmS4g/6k+Ls1JQ74tWlaG3iy0n0S94yhLoXQR5NvwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFLGom2fGbev13tPyiAu0lB0wQRJXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2JjNGQ3 Yi0zY2I3LTRmMzMtODllNy0yMTAwYmYwZjE0MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvYmM0ZDdi LTNjYjctNGYzMy04OWU3LTIxMDBiZjBmMTQwYS8xL3NhaWJaOFp0Nl9YZTBfS0lD N1NVSFRCQkVsYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBQi4AwQDBZioAwQDJQGwAwQCuQ9kMA0EAgAC MAcDBQAqA7dAMA0GCSqGSIb3DQEBCwUAA4IBAQCn7rIrIXP2MpRMag6p7eWOyJv5 Y04T79QVsLb6BGIf7V4Iam1zaDVXn0V8cYxfrKqxmv1pmeLSSCxLx9TKEmBShl4c ufj6tsunyzg3S+NrgJQVwHxzt3RhJHOkQWf0AVJPQbvDHqLHKPH8BBSELXi1MpyL ZPYZYI6kx04hGBqg7gUhjF3tyDw0SVUEm1tNy90rvdbjEXc03bhUB9cvSxb7MMdR s1epnVlqGLfIBRABFewqR/Wzl4vHf4051Gm1niHDEaPTi3k39elnijODWY9xromp tBhbEiYbl8lmOBmNrfdRoz/3bcPZbi7nwSV7rU6yekeg0iGAn0nj876RV8OJ -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:42 2026 by rpki-client