This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer File: 8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer (raw, json) Hash identifier: 3Vls5QNkwq54sdhkWEU/f8M3JBIPIBY/YUdky4M/Vao= Subject key identifier: F0:8A:2C:EC:71:01:F2:17:73:DE:FC:59:16:C0:8B:01:C1:85:90:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78353DB158746519D35961398B3821FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16061 IP: 192.118.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3d:b1:58:74:65:19:d3:59:61:39:8b:38:21:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f08a2cec7101f21773defc5916c08b01c18590e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:99:de:c8:e8:5a:70:0b:e6:1d:09:68:8f: c5:15:59:9c:87:68:9c:64:5e:79:70:85:69:e9:e6: 41:60:d7:8d:17:ee:c9:eb:cf:66:eb:19:7b:0f:2c: 1a:d4:30:58:9f:90:64:73:fe:b3:6e:95:5c:50:b4: a5:12:29:a9:e7:be:68:ac:cf:b6:a4:78:00:2b:e3: 7f:20:78:f5:6d:4a:35:f7:34:a1:a8:da:09:c5:35: e8:ca:c8:cd:bb:34:d0:8a:28:2e:4d:69:ac:e4:6f: fa:7d:27:89:ad:32:f8:30:c5:c4:9a:6d:83:4e:33: 95:10:45:b8:02:13:be:12:62:ae:52:50:68:44:6c: 28:3c:dd:c1:4e:9e:18:6d:7c:24:e3:96:2b:57:07: 29:17:ad:09:a5:a9:ea:2e:ee:cf:bf:44:ef:7a:26: 6b:fd:78:33:b0:8c:f7:11:01:d3:bc:35:27:1a:39: a6:b7:58:9b:ef:70:9c:06:94:46:b2:92:5a:f5:eb: d9:57:97:2f:8a:8a:c8:8a:bc:82:80:39:d1:85:7a: 44:d7:94:9d:3c:d8:41:7a:2e:8f:6f:5b:eb:33:79: e2:49:ac:53:ed:cd:1c:4d:26:96:c6:81:85:13:a7: e9:c2:6e:5a:52:e4:9b:76:24:a0:f6:93:f5:75:dd: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8A:2C:EC:71:01:F2:17:73:DE:FC:59:16:C0:8B:01:C1:85:90:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.118.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16061 Signature Algorithm: sha256WithRSAEncryption a4:91:1e:d5:1f:6b:f6:f5:b2:2b:0d:d4:78:53:15:f2:17:54: cd:e9:64:93:1d:31:0b:cc:96:5e:13:12:13:55:16:4e:d5:c9: 61:1f:b1:e6:39:cd:57:4a:d9:75:96:e7:00:ae:6a:23:d2:6a: 39:87:72:5a:e4:6a:33:2a:77:e4:6c:8c:6b:9c:5e:bb:d7:13: ff:e8:2a:3d:bf:de:6a:f5:11:8d:7c:74:59:dc:06:26:35:33: e5:ff:e8:5e:3e:14:07:31:67:8c:95:f2:33:69:1b:6b:c0:f4: d5:2a:9f:25:79:79:f5:d7:17:bb:4f:12:37:71:46:83:0c:b8: 75:af:57:6a:12:54:42:d3:ef:d9:3f:63:0e:81:66:87:00:57: dc:57:cc:b4:a0:54:f7:0d:a9:ba:c8:20:7d:c4:44:8f:3b:22: c5:83:63:89:44:ba:15:48:36:45:cf:0d:6c:4b:a1:5b:41:83: f8:8e:6e:8d:5a:4e:2b:58:0b:46:48:f1:10:c9:2a:0c:b8:f6: fa:ee:e1:ff:c4:cb:8f:e7:05:61:69:72:e0:c6:f4:1f:c8:da: 7a:dc:94:15:67:ce:70:13:b6:b6:47:cb:0e:46:0f:74:32:ee: b7:84:a3:5b:b4:7d:e1:ef:ef:4a:a9:db:75:6e:a2:18:65:47: eb:11:84:cc -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NT2xWHRlGdNZYTmLOCH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDhhMmNlYzcxMDFmMjE3NzNkZWZjNTkxNmMwOGIwMWMxODU5MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1aZ3sjoWnAL5h0JaI/FFVmch2ic ZF55cIVp6eZBYNeNF+7J689m6xl7Dywa1DBYn5Bkc/6zbpVcULSlEimp575orM+2 pHgAK+N/IHj1bUo19zShqNoJxTXoysjNuzTQiiguTWms5G/6fSeJrTL4MMXEmm2D TjOVEEW4AhO+EmKuUlBoRGwoPN3BTp4YbXwk45YrVwcpF60JpanqLu7Pv0TveiZr /XgzsIz3EQHTvDUnGjmmt1ib73CcBpRGspJa9evZV5cviorIiryCgDnRhXpE15Sd PNhBei6Pb1vrM3niSaxT7c0cTSaWxoGFE6fpwm5aUuSbdiSg9pP1dd20nwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFPCKLOxxAfIXc978WRbAiwHBhZDnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzZmMjUy ZC01OWVkLTRhMjItOWQ5Ny02NWI2NDA4YmRmZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNmYyNTJk LTU5ZWQtNGEyMi05ZDk3LTY1YjY0MDhiZGZmZS8xLzhJb3M3SEVCOGhkejN2eFpG c0NMQWNHRmtPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwHYMMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Aj69MA0GCSqGSIb3DQEBCwUAA4IBAQCkkR7VH2v29bIrDdR4UxXyF1TN6WSTHTEL zJZeExITVRZO1clhH7HmOc1XStl1lucArmoj0mo5h3Ja5GozKnfkbIxrnF671xP/ 6Co9v95q9RGNfHRZ3AYmNTPl/+hePhQHMWeMlfIzaRtrwPTVKp8leXn11xe7TxI3 cUaDDLh1r1dqElRC0+/ZP2MOgWaHAFfcV8y0oFT3Dam6yCB9xESPOyLFg2OJRLoV SDZFzw1sS6FbQYP4jm6NWk4rWAtGSPEQySoMuPb67uH/xMuP5wVhaXLgxvQfyNp6 3JQVZ85wE7a2R8sORg90Mu63hKNbtH3h7+9Kqdt1bqIYZUfrEYTM -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:15 2026 by rpki-client