This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer File: 71CC03-8gZmL_PlIpbvdpj7f3uA.cer (raw, json) Hash identifier: hAO3gEap5f+2QTNLKXqfzz8Kxg2MH1TfWetOhyKebGA= Subject key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD6A5097BA467800BDADFB4116DEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8251 AS: 41711 IP: 5.104.16.0/21 IP: 31.47.96.0/20 IP: 78.108.96.0/20 IP: 81.201.48.0/20 IP: 185.99.64.0/22 IP: 212.79.96.0/20 IP: 2a01:490::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d6:a5:09:7b:a4:67:80:0b:da:df:b4:11:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:9f:81:d8:82:2c:d0:69:bb:01:1d:fd:53: 2d:56:79:82:b4:de:25:c5:23:28:2e:17:0b:90:fd: 0c:bc:4b:97:63:46:24:20:c5:0e:f7:c3:b4:84:28: 20:b4:1a:54:88:7e:c7:75:f6:84:2b:a2:93:4d:03: ac:2a:e3:0c:a0:c5:7a:51:94:58:79:90:ad:86:54: bc:f8:be:6a:24:c7:15:bf:a5:e1:b6:72:3c:b5:b6: e5:e9:9f:51:8c:f1:6b:cb:7e:b5:22:8b:4b:00:c1: f7:6a:fa:ff:50:06:d8:aa:37:8e:48:26:f5:2e:a6: 06:80:18:90:4f:2a:ab:ec:fd:50:f4:f4:0a:3b:87: 1a:a6:98:27:d5:67:58:30:e7:54:b0:8d:06:c2:0f: 5d:a4:a4:4a:02:de:82:48:15:87:4d:6a:32:66:4e: ef:99:ef:f7:1e:13:0b:5b:ae:1a:6a:da:40:80:66: 04:61:cc:0c:2a:a4:c1:7d:7e:74:16:06:2c:18:88: 7c:3d:df:69:4d:40:ec:08:d7:26:68:59:0e:38:21: b4:6d:3b:71:8f:a8:8c:98:d5:3c:6a:1a:57:17:48: 96:0a:ec:3d:b9:44:ef:0b:28:66:df:d5:76:bc:d5: 82:01:4d:13:7c:be:e6:82:0e:ed:c8:a7:30:b4:60: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.16.0/21 31.47.96.0/20 78.108.96.0/20 81.201.48.0/20 185.99.64.0/22 212.79.96.0/20 IPv6: 2a01:490::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8251 41711 Signature Algorithm: sha256WithRSAEncryption 6c:3d:0c:f9:cc:0c:d4:a2:8d:ee:d9:ec:18:47:1d:8f:6c:3e: c6:40:30:0a:c6:8f:f5:83:00:70:ee:82:94:e3:5f:1c:d0:c5: b2:b5:4a:e8:d9:f4:2b:6d:d2:f7:ed:97:05:ad:e1:a1:bf:15: a7:8e:ad:10:e8:2c:56:35:94:24:20:82:8d:76:13:74:ab:b3: 8e:db:65:57:d4:4b:33:fb:92:50:80:39:ba:6d:da:ca:b5:ac: fb:e8:57:0b:96:b7:1e:1c:cf:e6:67:53:4a:ee:0e:bd:e9:37: 0a:ba:91:f7:14:13:09:b6:58:7e:16:bc:5b:bc:ce:0c:70:43: 1e:59:30:e5:81:b2:58:87:17:98:44:66:c0:d0:0d:90:3b:24: ed:0d:fb:e5:c7:d4:f8:bc:ac:ae:cf:eb:7e:87:06:88:a2:da: b4:cf:1d:8a:62:66:3d:e4:48:01:0f:3a:10:cc:7d:ab:f3:c7: c8:41:eb:2c:35:7c:74:02:e1:e3:f0:23:49:4e:83:90:16:f9: 33:f6:53:c1:09:3c:dc:33:b8:48:68:3b:04:60:df:43:28:a4: a1:6b:03:01:fa:f1:ba:cd:a3:ef:98:31:f6:a8:1e:10:7b:a8: 57:83:23:57:a3:35:e9:a7:04:bc:c5:0f:00:76:89:d9:87:9a: 67:d3:83:0f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt57NalCXukZ4AL2t+0EW3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjUwODJkMzdmYmM4MTk5OGJmY2Y5NDhhNWJiZGRhNjNlZGZkZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosifgdiCLNBpuwEd/VMtVnmCtN4l xSMoLhcLkP0MvEuXY0YkIMUO98O0hCggtBpUiH7HdfaEK6KTTQOsKuMMoMV6UZRY eZCthlS8+L5qJMcVv6XhtnI8tbbl6Z9RjPFry361IotLAMH3avr/UAbYqjeOSCb1 LqYGgBiQTyqr7P1Q9PQKO4cappgn1WdYMOdUsI0Gwg9dpKRKAt6CSBWHTWoyZk7v me/3HhMLW64aatpAgGYEYcwMKqTBfX50FgYsGIh8Pd9pTUDsCNcmaFkOOCG0bTtx j6iMmNU8ahpXF0iWCuw9uUTvCyhm39V2vNWCAU0TfL7mgg7tyKcwtGDVUQIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFO9QgtN/vIGZi/z5SKW73aY+397gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzBjM2M0 ZC0wMWQyLTQ0MGEtYTUxZi05MTk1ZDAyZGVkNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMGMzYzRk LTAxZDItNDQwYS1hNTFmLTkxOTVkMDJkZWQ1NS8xLzcxQ0MwMy04Z1ptTF9QbElw YnZkcGo3ZjN1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDBWgQAwQEHy9gAwQETmxgAwQEUckwAwQCuWNA AwQE1E9gMA0EAgACMAcDBQAqAQSQMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAiA7 AgMAou8wDQYJKoZIhvcNAQELBQADggEBAGw9DPnMDNSije7Z7BhHHY9sPsZAMArG j/WDAHDugpTjXxzQxbK1SujZ9Ctt0vftlwWt4aG/FaeOrRDoLFY1lCQggo12E3Sr s47bZVfUSzP7klCAObpt2sq1rPvoVwuWtx4cz+ZnU0ruDr3pNwq6kfcUEwm2WH4W vFu8zgxwQx5ZMOWBsliHF5hEZsDQDZA7JO0N++XH1Pi8rK7P636HBoii2rTPHYpi Zj3kSAEPOhDMfavzx8hB6yw1fHQC4ePwI0lOg5AW+TP2U8EJPNwzuEhoOwRg30Mo pKFrAwH68brNo++YMfaoHhB7qFeDI1ejNemnBLzFDwB2idmHmmfTgw8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:55 2026 by rpki-client