This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer File: 08ixCjj4HGTiASB7_DVEwpcq9fM.cer (raw, json) Hash identifier: C/Qk7vVaq21nDKFWznl0J/SBOghD9/JHxXpLXRlBvMk= Subject key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED156BEEECEE1EFC76BF56B8FB48B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50736 IP: 185.25.152.0/22 IP: 193.105.213.0/24 IP: 193.124.48.0/24 IP: 193.124.54.0/24 IP: 193.124.116.0/24 IP: 193.124.134.0/24 IP: 194.58.78.0/24 IP: 194.135.21.0/24 IP: 2a04:32c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:15:6b:ee:ec:ee:1e:fc:76:bf:56:b8:fb:48:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:29:cf:cb:2f:d1:8b:94:c4:c4:5e:3f:a3: 31:3e:22:50:13:6b:96:a5:6e:3b:61:ed:7c:38:c9: 7f:e4:10:42:5f:c9:77:c3:da:5e:27:71:29:3b:cb: 31:38:43:e6:cd:1b:f9:c1:5a:33:a8:25:80:6c:ef: d1:5a:25:cf:30:e7:07:51:bd:84:07:f8:28:55:d9: db:ce:17:99:b7:00:ff:88:60:23:59:18:5e:fc:b1: 5d:34:e1:8c:58:76:6d:4a:c4:d0:33:c7:92:5b:c7: 51:e9:1d:05:6b:8f:9d:16:e5:27:aa:62:a5:2e:9b: f2:de:2f:5e:8e:39:03:a0:72:4a:b8:79:76:06:87: 0d:a8:2f:a5:1d:a6:34:67:fb:59:54:32:3a:0b:f3: 1a:a4:82:22:8a:35:e8:97:a0:bb:54:54:5d:f5:a5: 85:5f:db:8f:32:42:dd:c7:d5:fc:2e:0f:0b:72:ba: ed:8f:22:50:0a:da:76:a7:39:a6:79:31:2e:ae:15: c5:59:e5:65:bd:57:14:02:61:9a:85:57:11:ac:0e: 6e:ab:d4:c8:8f:59:c8:5d:18:9d:0e:30:e5:e3:70: 0f:00:4d:93:20:97:8e:45:7e:89:3d:d9:ca:be:a8: 9e:af:9f:91:3b:7e:b6:53:9d:4f:c0:73:a8:87:54: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.152.0/22 193.105.213.0/24 193.124.48.0/24 193.124.54.0/24 193.124.116.0/24 193.124.134.0/24 194.58.78.0/24 194.135.21.0/24 IPv6: 2a04:32c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50736 Signature Algorithm: sha256WithRSAEncryption 78:e0:08:16:73:ad:0f:1e:81:38:f4:59:e1:e2:fb:ea:ee:f8: 9a:8d:45:1c:0f:d7:32:76:b1:a1:45:be:c3:63:be:c9:62:5e: fd:82:fc:e5:50:76:c8:6f:b8:0a:7c:f8:03:51:da:33:fc:c1: 14:a7:a6:af:fa:a6:10:c9:08:f3:dd:4b:69:f7:e5:d8:33:2f: 28:74:0d:7f:a1:5d:b3:8d:97:e4:49:fa:b1:3f:ee:16:18:49: 44:16:5e:8f:a3:94:f1:01:35:f5:e3:f6:57:c1:ea:e0:a8:bd: ad:3f:30:ec:42:7e:38:28:f1:78:a8:1b:cb:28:2e:23:22:46: 37:20:78:bd:ef:01:c2:19:70:64:01:0b:6d:d0:d3:31:19:73: a4:5a:c8:ec:70:e9:76:6e:78:bf:7e:a5:ba:b4:39:2c:3b:98: 01:1d:2c:ef:a0:41:af:1f:a5:a9:41:b5:79:03:93:4d:c7:6b: 1c:a8:f8:fd:89:e3:8c:9d:33:9f:75:08:c6:8d:58:43:00:9c: fa:0e:12:a3:ef:e3:5a:00:fb:ce:4d:cd:dd:c9:db:b4:7b:e8: ae:9c:4b:ad:f4:1b:f2:40:46:93:68:25:38:14:15:c0:37:d7: 9f:99:5e:f0:7b:9e:43:bb:b5:ad:3c:a1:4e:cc:bb:3b:52:ba: 64:cf:54:2f -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt57RVr7uzuHvx2v1a4+0i0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2M4YjEwYTM4ZjgxYzY0ZTIwMTIwN2JmYzM1NDRjMjk3MmFmNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ecpz8sv0YuUxMReP6MxPiJQE2uW pW47Ye18OMl/5BBCX8l3w9peJ3EpO8sxOEPmzRv5wVozqCWAbO/RWiXPMOcHUb2E B/goVdnbzheZtwD/iGAjWRhe/LFdNOGMWHZtSsTQM8eSW8dR6R0Fa4+dFuUnqmKl Lpvy3i9ejjkDoHJKuHl2BocNqC+lHaY0Z/tZVDI6C/MapIIiijXol6C7VFRd9aWF X9uPMkLdx9X8Lg8LcrrtjyJQCtp2pzmmeTEurhXFWeVlvVcUAmGahVcRrA5uq9TI j1nIXRidDjDl43APAE2TIJeORX6JPdnKvqier5+RO362U51PwHOoh1RsnQIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFNPIsQo4+Bxk4gEge/w1RMKXKvXzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzY0ZDRk MC02Yzk4LTRlZWMtYmJhMS0zN2FhMzVlNjlkYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNjRkNGQw LTZjOTgtNGVlYy1iYmExLTM3YWEzNWU2OWRjMS8xLzA4aXhDamo0SEdUaUFTQjdf RFZFd3BjcTlmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCuRmYAwQAwWnVAwQAwXwwAwQAwXw2AwQAwXx0 AwQAwXyGAwQAwjpOAwQAwocVMA0EAgACMAcDBQMqBDLAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDGMDANBgkqhkiG9w0BAQsFAAOCAQEAeOAIFnOtDx6BOPRZ4eL7 6u74mo1FHA/XMnaxoUW+w2O+yWJe/YL85VB2yG+4Cnz4A1HaM/zBFKemr/qmEMkI 891Laffl2DMvKHQNf6Fds42X5En6sT/uFhhJRBZej6OU8QE19eP2V8Hq4Ki9rT8w 7EJ+OCjxeKgbyyguIyJGNyB4ve8BwhlwZAELbdDTMRlzpFrI7HDpdm54v36lurQ5 LDuYAR0s76BBrx+lqUG1eQOTTcdrHKj4/YnjjJ0zn3UIxo1YQwCc+g4So+/jWgD7 zk3N3cnbtHvorpxLrfQb8kBGk2glOBQVwDfXn5le8HueQ7u1rTyhTsy7O1K6ZM9U Lw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:03 2026 by rpki-client