This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.cer (raw, json) Hash identifier: pPC82A7JLUuaSV4XDv7+wYy31butbc3kJy71usJhLE8= Subject key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C04C627BE92D38EBA2BFAFE5B833E5736 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 13:23:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211283 IP: 37.44.213.0/24 IP: 87.120.162.0/23 IP: 92.243.89.0/24 IP: 185.88.202.0/23 IP: 185.242.28.0/22 IP: 2a06:680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:c6:27:be:92:d3:8e:ba:2b:fa:fe:5b:83:3e:57:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 13:23:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03a913774dbc9e605dc17ab23a05a1680398de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:8e:8d:28:1e:33:34:ec:14:f0:e8:bf:08: 1e:49:19:82:19:88:86:e7:4b:59:7b:04:ba:b4:6e: fb:b7:9e:3f:4f:45:4d:db:05:aa:6a:65:a5:ab:47: ec:6f:e3:9b:3e:8c:1d:8b:80:f1:33:a9:9b:6e:e0: dc:4a:b2:2b:5d:cc:21:79:a5:73:91:9f:21:49:03: 94:0a:fd:e9:f3:08:c9:62:3d:dd:36:76:5d:7a:0b: db:59:fe:22:79:8e:b3:6e:26:f9:90:64:43:98:c3: 05:43:8f:ed:66:8b:d8:3f:ab:6a:d0:fc:ed:7f:b9: 52:32:3c:08:d2:e1:4c:bd:a0:36:09:b9:ba:89:3f: 6b:22:b3:ee:c1:33:06:a7:23:b5:81:fe:0e:a1:06: 0e:e2:49:e8:9f:33:76:1f:6d:28:b3:03:fb:65:78: 9c:16:71:44:d3:62:ad:41:98:69:fb:f0:6c:73:69: f1:fa:b1:44:2f:06:72:13:cb:61:96:12:26:d6:5f: 21:98:37:b7:6e:82:5d:97:fb:61:fa:c2:c3:64:7b: e7:49:2c:0f:02:01:ad:aa:fc:21:cd:c5:12:1e:fb: e4:ee:b9:1b:6d:7b:dd:05:94:ef:70:01:8a:20:20: 6d:c0:2b:77:88:2e:b8:f4:2a:6c:16:07:b5:06:d0: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.213.0/24 87.120.162.0/23 92.243.89.0/24 185.88.202.0/23 185.242.28.0/22 IPv6: 2a06:680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211283 Signature Algorithm: sha256WithRSAEncryption af:f4:b2:77:05:ec:45:24:f7:8d:d7:0f:22:1d:a8:6a:86:8a: 69:5c:22:2c:d6:04:1b:a9:0d:9d:1c:10:c6:34:a8:68:f4:b6: fa:cc:b0:e9:ac:13:e5:f3:bd:47:75:1a:b0:02:9e:bf:f7:38: de:b9:d8:0e:6f:e3:c8:58:d1:22:e7:3f:0e:5b:f0:21:63:9d: 58:b0:17:fd:85:95:55:6c:10:fb:7d:0a:af:c9:3f:9c:da:f5: 57:ec:63:dc:05:74:3a:4e:16:0b:2e:11:44:76:d8:9f:87:9c: dc:15:b9:9c:f0:6a:af:98:cb:c1:ae:0b:e3:98:7f:52:59:70: 11:05:ed:75:1b:f8:99:6a:d9:8d:ff:f5:8a:c2:50:86:96:3a: 14:d9:6d:85:95:fd:01:88:32:98:76:9e:f3:3c:6a:6e:f2:62: 7e:f8:fe:3f:7c:49:3e:9c:f7:17:36:01:f1:7d:1b:94:6d:18: 28:e2:54:f8:d9:d3:c8:a3:ea:0b:5f:00:87:ef:b0:0f:97:77: 00:f9:81:9c:89:d3:e8:96:52:4c:50:a4:7f:cb:7b:bf:27:99: e1:31:ac:ab:a0:b7:d5:3c:73:7b:50:ea:a9:33:aa:ef:74:6e: 54:b7:99:86:69:9e:c6:3e:2a:14:ac:9a:1d:6a:46:29:f9:21: 8c:e7:f7:c3 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZwExie+ktOOuiv6/luDPlc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTMyMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDNhOTEzNzc0ZGJjOWU2MDVkYzE3YWIyM2EwNWExNjgwMzk4ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuiOjSgeMzTsFPDovwgeSRmCGYiG 50tZewS6tG77t54/T0VN2wWqamWlq0fsb+ObPowdi4DxM6mbbuDcSrIrXcwheaVz kZ8hSQOUCv3p8wjJYj3dNnZdegvbWf4ieY6zbib5kGRDmMMFQ4/tZovYP6tq0Pzt f7lSMjwI0uFMvaA2Cbm6iT9rIrPuwTMGpyO1gf4OoQYO4knonzN2H20oswP7ZXic FnFE02KtQZhp+/Bsc2nx+rFELwZyE8thlhIm1l8hmDe3boJdl/th+sLDZHvnSSwP AgGtqvwhzcUSHvvk7rkbbXvdBZTvcAGKICBtwCt3iC649CpsFge1BtAG4wIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFPA6kTd028nmBdwXqyOgWhaAOY3lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2Y4MjQy Ni03ZWIwLTQ3NjUtOGRlOS1lMDA2MzI2OWU0NjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZjgyNDI2 LTdlYjAtNDc2NS04ZGU5LWUwMDYzMjY5ZTQ2OS8xLzhEcVJOM1RieWVZRjNCZXJJ NkJhRm9BNWplVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAJSzVAwQBV3iiAwQAXPNZAwQBuVjKAwQCufIc MA0EAgACMAcDBQMqBgaAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5UzANBgkq hkiG9w0BAQsFAAOCAQEAr/SydwXsRST3jdcPIh2oaoaKaVwiLNYEG6kNnRwQxjSo aPS2+syw6awT5fO9R3UasAKev/c43rnYDm/jyFjRIuc/DlvwIWOdWLAX/YWVVWwQ +30Kr8k/nNr1V+xj3AV0Ok4WCy4RRHbYn4ec3BW5nPBqr5jLwa4L45h/UllwEQXt dRv4mWrZjf/1isJQhpY6FNlthZX9AYgymHae8zxqbvJifvj+P3xJPpz3FzYB8X0b lG0YKOJU+NnTyKPqC18Ah++wD5d3APmBnInT6JZSTFCkf8t7vyeZ4TGsq6C31Txz e1DqqTOq73RuVLeZhmmexj4qFKyaHWpGKfkhjOf3ww== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:39 2026 by rpki-client