This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer File: 8EDR-cl75GbgverISSieKjzKns4.cer (raw, json) Hash identifier: hFSY6Y6zwGJeBzCdyE2YmvVkTCSTbzdYwuCDETY/JC8= Subject key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEAA5AFBC2781E6FDA4A052DA00E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207683 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ea:a5:af:bc:27:81:e6:fd:a4:a0:52:da:00:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:8b:48:43:f1:0c:87:ab:c6:1e:32:bd:91: de:ca:e3:db:a2:43:77:88:a2:41:81:72:ed:02:93: 51:8d:32:12:32:73:2f:7a:50:b5:21:03:f4:cf:ea: 55:94:e7:0c:11:be:15:fc:19:a5:22:50:7d:c3:eb: b9:2b:e3:96:72:7e:bf:23:11:59:f1:74:80:f2:ee: 99:30:8a:f5:87:1a:b4:75:5b:98:d1:89:8d:06:9a: 0a:df:80:8a:a7:78:a8:76:7c:c9:fa:6d:9f:80:d7: b9:90:26:54:3e:78:2e:7e:25:9a:a5:89:98:f6:8f: 01:74:cc:18:19:3b:af:c9:08:17:ed:93:45:ce:eb: 41:12:89:4e:e0:02:2f:66:30:43:af:d0:80:38:1f: 4d:36:d7:a0:f3:78:c5:39:45:f3:b7:6c:97:66:88: 65:27:98:f6:11:db:f8:6d:e3:33:8f:c7:b7:f4:86: af:e4:6f:f1:bf:78:f3:91:44:3b:65:61:d4:1e:73: 76:47:89:7b:3c:a6:42:5b:5f:48:16:ba:47:65:39: 7d:1e:57:78:ee:ed:af:9a:e4:33:c5:bc:f3:92:e9: 1b:07:82:9b:72:8b:32:4e:d0:12:25:92:27:4e:ed: 2b:fb:16:0b:2f:e6:ce:80:e2:16:03:23:8d:95:3b: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207683 Signature Algorithm: sha256WithRSAEncryption 0b:07:77:ab:6d:be:c8:5a:04:0a:ad:51:90:ff:83:d6:93:ba: e0:e2:a8:fd:f8:e7:2b:f2:28:97:6e:52:df:b4:25:6c:88:bf: 5e:58:cf:73:15:77:8b:a3:21:20:1e:7b:88:25:5d:45:38:8e: 34:f0:47:71:33:4d:b1:9e:1e:f1:28:65:63:ca:0a:b8:17:90: ba:22:b0:ef:a8:57:a2:de:4f:90:fa:6b:7b:06:86:43:fa:18: a4:52:32:4b:b5:f6:1d:c1:5a:52:b5:a5:3e:7f:ff:7f:39:f7: 57:63:c1:a6:b3:43:01:4e:b2:23:b6:75:91:4a:e0:38:19:5f: 64:d3:60:5e:74:ca:fd:f8:79:8b:18:89:26:6a:5e:9c:02:dc: 4f:f6:72:10:13:77:0e:d7:7a:1b:c9:9c:7c:0b:23:ab:b0:16: 08:11:97:0e:42:ac:19:45:27:7d:e1:b4:8d:eb:a2:75:ae:7a: d5:d3:af:4c:e9:bf:b8:2e:6f:6e:18:3f:0e:6e:58:62:c7:72: b9:37:44:ab:67:aa:1e:3d:53:b9:32:b0:44:fe:a5:2a:da:38: 21:bb:f8:74:e8:36:e0:af:36:23:03:cc:2f:83:51:9b:2a:5a: cf:aa:90:a2:e2:6d:e0:d9:96:ac:5d:6c:c7:c1:04:2c:fb:00: a3:96:81:6d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6Wuqlr7wngeb9pKBS2gDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDQwZDFmOWM5N2JlNDY2ZTBiZGVhYzg0OTI4OWUyYTNjY2E5ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMSLSEPxDIerxh4yvZHeyuPbokN3 iKJBgXLtApNRjTISMnMvelC1IQP0z+pVlOcMEb4V/BmlIlB9w+u5K+OWcn6/IxFZ 8XSA8u6ZMIr1hxq0dVuY0YmNBpoK34CKp3iodnzJ+m2fgNe5kCZUPngufiWapYmY 9o8BdMwYGTuvyQgX7ZNFzutBEolO4AIvZjBDr9CAOB9NNteg83jFOUXzt2yXZohl J5j2Edv4beMzj8e39Iav5G/xv3jzkUQ7ZWHUHnN2R4l7PKZCW19IFrpHZTl9Hld4 7u2vmuQzxbzzkukbB4KbcosyTtASJZInTu0r+xYLL+bOgOIWAyONlTt3CQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPBA0fnJe+Rm4L3qyEkonio8yp7OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzNjMmYz Yi01NTlhLTQwNWItOTIxNi04OTUzZWM4ZGRkNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvM2MyZjNi LTU1OWEtNDA1Yi05MjE2LTg5NTNlYzhkZGQ0YS8xLzhFRFItY2w3NUdiZ3ZlcklT U2llS2p6S25zNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMrQzANBgkqhkiG9w0BAQsFAAOCAQEACwd3q22+yFoE Cq1RkP+D1pO64OKo/fjnK/Iol25S37QlbIi/XljPcxV3i6MhIB57iCVdRTiONPBH cTNNsZ4e8ShlY8oKuBeQuiKw76hXot5PkPprewaGQ/oYpFIyS7X2HcFaUrWlPn// fzn3V2PBprNDAU6yI7Z1kUrgOBlfZNNgXnTK/fh5ixiJJmpenALcT/ZyEBN3Dtd6 G8mcfAsjq7AWCBGXDkKsGUUnfeG0jeuida561dOvTOm/uC5vbhg/Dm5YYsdyuTdE q2eqHj1TuTKwRP6lKto4Ibv4dOg24K82IwPML4NRmypaz6qQouJt4NmWrF1sx8EE LPsAo5aBbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:24 2026 by rpki-client