This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer (raw, json) Hash identifier: tV+kpGEzfKlahnkWkUNg+MySKV6cLtweZzu7CDQgonE= Subject key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB2D600BD385F67238383695AB9AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62253 IP: 185.124.67.0/24 IP: 2a12:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b2:d6:00:bd:38:5f:67:23:83:83:69:5a:b9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:ae:bb:40:03:34:77:0f:80:d5:f0:19:01: f4:ce:6e:f6:fb:11:a6:f8:5e:d1:1d:c4:33:ea:11: ef:4c:a6:9f:ed:09:d4:e8:fb:06:fc:12:a5:6f:0c: e8:64:5f:45:de:b4:77:e0:f6:bd:d7:b9:9e:d6:ed: c6:ec:4c:da:b6:dc:bb:a9:44:ca:d8:27:d4:a0:c0: bd:1f:a9:e6:ee:ab:a5:71:03:10:b6:dd:3c:ed:3f: 17:c9:6c:08:4a:ce:a5:21:1e:3b:67:5e:9f:d8:b3: 5e:b6:13:a4:78:51:68:a2:1b:8f:5a:0b:60:e1:d9: 80:02:99:76:1e:fd:e1:3b:72:04:2e:57:f8:56:96: 84:25:05:c3:67:89:61:00:6a:45:5a:e9:f0:d3:47: 76:b9:e4:7b:28:54:73:c1:df:44:98:db:0f:72:6c: 38:82:1f:b3:5a:10:52:0e:8a:91:e6:d2:f4:f8:37: ae:dc:0c:36:12:0f:5f:f0:31:73:57:b1:1f:6a:d6: de:30:0d:16:1c:02:45:8d:31:da:ae:5d:d0:56:6e: db:93:b4:c6:5f:f6:06:e1:f1:24:1f:7f:57:b0:d3: 64:45:9f:a6:8a:04:a7:a2:bd:52:30:04:d1:71:be: 4f:f2:8f:f3:3b:34:6d:51:af:b8:d5:cb:cb:bb:46: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.67.0/24 IPv6: 2a12:ca80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62253 Signature Algorithm: sha256WithRSAEncryption 8e:56:13:b0:5e:2b:00:94:80:57:f4:69:6a:5a:b7:5f:de:2b: d4:20:76:5d:3b:cc:4a:d7:05:51:1a:1f:fa:e1:b2:b1:5e:8e: db:bc:0f:ab:73:13:60:77:8b:19:66:ef:88:c8:cf:ff:0d:98: 51:e8:72:f3:75:9d:3c:89:35:a5:38:8f:d5:c4:c8:4a:dc:43: 9c:fa:6a:51:b5:41:87:43:d6:1a:68:77:67:4f:6d:08:e6:ff: 8f:b9:b6:b5:48:fe:50:2b:79:3c:b2:24:ed:03:24:04:4b:d6: 0b:b9:d0:5b:65:30:be:8d:54:d2:dc:b2:d5:35:d6:aa:15:90: 8c:2f:d8:8c:87:68:60:19:8a:e0:0d:5d:82:40:98:3c:71:2e: a9:94:1d:f1:06:09:1e:74:1e:ef:8e:cc:6e:5d:69:4b:b6:58: ea:53:3b:e4:7d:b0:87:9b:76:c8:56:5b:29:e6:21:78:2e:17: fb:1a:1f:16:35:2b:9f:7a:aa:87:18:f5:64:a4:d2:bf:ff:ef: b2:42:e6:f8:f8:1c:64:66:c6:31:56:a1:d0:85:12:75:cf:d1: ba:f2:c4:4c:9f:b6:65:f8:d1:45:b9:74:c0:05:2f:ad:60:f1: 36:d1:ea:84:19:35:af:a0:2b:4b:0c:70:ea:0b:23:40:bb:33: e5:b4:ab:be -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57LLWAL04X2cjg4NpWrmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDM3NzRhMjc2MjE0Yjg2ZTBhNWI0ZmE3NzIxYmRiMGUzMjJlMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg2uu0ADNHcPgNXwGQH0zm72+xGm +F7RHcQz6hHvTKaf7QnU6PsG/BKlbwzoZF9F3rR34Pa917me1u3G7Ezatty7qUTK 2CfUoMC9H6nm7qulcQMQtt087T8XyWwISs6lIR47Z16f2LNethOkeFFoohuPWgtg 4dmAApl2Hv3hO3IELlf4VpaEJQXDZ4lhAGpFWunw00d2ueR7KFRzwd9EmNsPcmw4 gh+zWhBSDoqR5tL0+Deu3Aw2Eg9f8DFzV7EfatbeMA0WHAJFjTHarl3QVm7bk7TG X/YG4fEkH39XsNNkRZ+migSnor1SMATRcb5P8o/zOzRtUa+41cvLu0YMBQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPA3dKJ2IUuG4KW0+nchvbDjIuCAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzFlZDg4 My0zNzZhLTQ1ZjktODg4NC1iODE2MjI2MDEyNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMWVkODgz LTM3NmEtNDVmOS04ODg0LWI4MTYyMjYwMTI0Zi8xLzhEZDBvblloUzRiZ3BiVDZk eUc5c09NaTRJQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXxDMA0EAgACMAcDBQMqEsqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzLTANBgkqhkiG9w0BAQsFAAOCAQEAjlYTsF4rAJSA V/Rpalq3X94r1CB2XTvMStcFURof+uGysV6O27wPq3MTYHeLGWbviMjP/w2YUehy 83WdPIk1pTiP1cTIStxDnPpqUbVBh0PWGmh3Z09tCOb/j7m2tUj+UCt5PLIk7QMk BEvWC7nQW2Uwvo1U0tyy1TXWqhWQjC/YjIdoYBmK4A1dgkCYPHEuqZQd8QYJHnQe 747Mbl1pS7ZY6lM75H2wh5t2yFZbKeYheC4X+xofFjUrn3qqhxj1ZKTSv//vskLm +PgcZGbGMVah0IUSdc/RuvLETJ+2ZfjRRbl0wAUvrWDxNtHqhBk1r6ArSwxw6gsj QLsz5bSrvg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:13 2026 by rpki-client