This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer (raw, json) Hash identifier: 3AZKJamn8g49+HfVBAJ6itpV2YeQF9JLU2c6aPXa+D8= Subject key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F73891A6ABEDF698EA9EB2CCC256 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211512 IP: 2a09:42c0::/29 IP: 2a10:ce40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f7:38:91:a6:ab:ed:f6:98:ea:9e:b2:cc:c2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:f1:7a:93:db:52:e4:b9:27:1d:c5:4c:45: 8a:14:68:13:42:42:e4:40:cb:18:6f:da:d9:b1:12: 28:56:71:5d:7d:c8:be:02:de:58:10:78:d5:3f:09: 46:2a:c3:ab:9e:1e:ee:73:6d:98:a4:ee:96:b4:ce: bf:0d:fa:33:18:07:a5:d8:9a:fd:cd:6c:76:56:20: ac:98:ff:28:d9:0e:69:50:e2:6c:19:08:59:a2:b6: f0:c4:0a:52:1c:77:29:54:4d:79:e3:0e:97:5d:e0: 39:1a:5a:b0:28:7e:aa:0b:d0:1c:69:dc:c5:5b:50: 66:a0:c3:0f:b4:b6:68:7f:a1:51:3a:be:42:cf:2a: 72:b9:6a:a8:57:cb:03:61:15:5e:95:33:c5:9a:f3: 1a:55:ea:f6:a0:e6:9c:1d:ef:62:72:8d:45:ce:86: 89:16:63:97:2d:4a:53:30:85:a1:a3:e1:07:24:2d: a6:1e:60:1d:37:cb:46:c6:2a:58:b7:8a:6c:0d:5d: c5:25:3e:28:61:9c:64:3d:ff:08:f5:65:5b:7f:dd: 3c:3e:2b:70:28:96:16:2d:90:3e:3e:f1:6d:06:da: 3d:90:cc:d3:14:bd:bd:46:c6:92:52:b0:40:7e:f5: 87:6b:3c:b5:27:84:f1:d6:cb:ab:b3:3e:c0:0a:f9: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:42c0::/29 2a10:ce40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211512 Signature Algorithm: sha256WithRSAEncryption 35:85:f2:54:e1:43:36:a6:0f:49:a9:95:6b:58:fe:29:90:5d: 3b:9d:f3:fa:fc:2f:ab:ff:68:07:61:dd:1a:97:bb:6c:30:11: 63:8f:e1:13:80:46:f0:eb:bc:6d:00:4b:b3:24:45:ae:f9:10: a1:f3:26:d3:c2:40:c5:de:f1:12:90:14:0d:93:01:8e:fd:1a: bc:1b:56:46:91:4f:2c:55:85:69:df:d5:e4:0b:cf:47:03:0a: 1e:44:25:e9:a0:80:c9:1d:af:68:62:09:ee:21:72:9a:b4:e8: 66:25:49:3a:79:7a:d0:95:af:d7:09:76:ad:a9:15:ca:84:b7: b2:6c:10:ab:9e:12:de:eb:9b:b9:a4:85:5a:89:21:29:1f:c1: 94:fb:4d:71:30:b1:3b:48:0d:77:ce:06:ba:2e:5e:cd:d3:10: a7:fe:8d:21:51:b7:86:87:5f:0a:5d:8a:7d:3c:eb:d2:2c:3b: e3:74:51:25:ea:62:ad:0b:c8:78:68:da:a5:14:1c:2c:01:71: 2d:e0:a1:13:c4:e6:ff:f4:71:fa:2f:a6:3f:0b:f0:15:ee:17: 30:86:42:af:7e:65:4f:8d:73:ac:37:b1:2a:5b:3c:7f:13:d1: 72:3e:9d:cd:e1:38:b4:cd:6c:3b:8b:7e:b3:b5:0f:e0:1a:fe: b7:4a:99:d3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt4ovc4kaar7faY6p6yzMJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRmMzMwOWIzZjE4ZmJiZWM5OTljNDEyZmRlZjFkYzQ0MjBlNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzHxepPbUuS5Jx3FTEWKFGgTQkLk QMsYb9rZsRIoVnFdfci+At5YEHjVPwlGKsOrnh7uc22YpO6WtM6/DfozGAel2Jr9 zWx2ViCsmP8o2Q5pUOJsGQhZorbwxApSHHcpVE154w6XXeA5GlqwKH6qC9AcadzF W1BmoMMPtLZof6FROr5CzypyuWqoV8sDYRVelTPFmvMaVer2oOacHe9ico1FzoaJ FmOXLUpTMIWho+EHJC2mHmAdN8tGxipYt4psDV3FJT4oYZxkPf8I9WVbf908Pitw KJYWLZA+PvFtBto9kMzTFL29RsaSUrBAfvWHazy1J4Tx1sursz7ACvnjMQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFNDfMwmz8Y+77JmcQS/e8dxEIOQsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzJmNzE1 Yi1jZGFmLTQwMmMtOTIwOS0xZmY5MTViZmVkOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMmY3MTVi LWNkYWYtNDAyYy05MjA5LTFmZjkxNWJmZWQ5OS8xLzBOOHpDYlB4ajd2c21aeEJM OTd4M0VRZzVDdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAAjAOAwUDKglCwAMFACoQzkAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAzo4MA0GCSqGSIb3DQEBCwUAA4IBAQA1hfJU4UM2pg9JqZVrWP4p kF07nfP6/C+r/2gHYd0al7tsMBFjj+ETgEbw67xtAEuzJEWu+RCh8ybTwkDF3vES kBQNkwGO/Rq8G1ZGkU8sVYVp39XkC89HAwoeRCXpoIDJHa9oYgnuIXKatOhmJUk6 eXrQla/XCXatqRXKhLeybBCrnhLe65u5pIVaiSEpH8GU+01xMLE7SA13zga6Ll7N 0xCn/o0hUbeGh18KXYp9POvSLDvjdFEl6mKtC8h4aNqlFBwsAXEt4KETxOb/9HH6 L6Y/C/AV7hcwhkKvfmVPjXOsN7EqWzx/E9FyPp3N4Ti0zWw7i36ztQ/gGv63SpnT -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:20 2026 by rpki-client