This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer (raw, json) Hash identifier: 5dyaVLEylnUsr4IFUp/1V8dyuXe5LBXoZs5lQWvYfCI= Subject key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B79CFFEA46FDD9F9BCFE3E8A42351 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216222 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:79:cf:fe:a4:6f:dd:9f:9b:cf:e3:e8:a4:23:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:47:3c:5e:b6:82:3a:f0:3b:bc:a1:02:43: 4c:06:f6:cc:51:b4:2e:89:51:b0:1e:bd:13:14:3f: bf:a4:82:34:93:ee:61:08:35:c8:00:c2:a3:d5:5a: 4e:ef:15:f4:b8:0a:a3:96:4c:03:ac:27:8c:9b:f5: b5:fa:d3:d2:a8:b5:42:03:04:1d:c1:da:ce:21:c7: 06:f0:93:82:ac:75:8c:70:f1:fb:3d:f7:63:23:57: 6f:83:29:ac:7a:5b:3d:65:61:1f:6a:d9:1d:cf:d4: e7:1e:93:d4:6d:c9:db:b9:6b:72:db:90:8a:14:ff: 10:8e:5b:f6:7d:af:c8:d0:ee:82:51:ee:0c:6a:2c: 7f:da:0d:5c:89:dc:ac:30:1e:97:b6:31:3c:66:7e: 04:6d:1b:f9:e1:40:f4:ab:50:a4:b7:02:3a:2e:44: bc:cb:d5:e1:44:8f:5d:83:7e:95:eb:b8:a4:f0:52: 0e:6c:bf:8f:5a:b0:4a:27:2d:02:ac:d3:e1:fe:1f: 93:1d:8a:25:a6:a5:43:6e:bc:26:72:5c:b5:89:df: 86:45:97:8a:4d:ca:91:7c:79:63:6c:e0:2a:11:c1: 01:5a:79:bd:0d:df:fb:f7:44:e0:15:19:a8:a9:e2: cc:fd:38:a2:2e:19:4d:ed:5e:7f:8b:c7:c4:c2:c8: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216222 Signature Algorithm: sha256WithRSAEncryption 29:68:e3:bd:e2:b7:96:10:6f:47:c8:7c:93:ca:cd:06:42:5c: f1:4d:f4:cf:c8:6b:69:ac:35:b0:98:bf:20:3d:3d:e1:a7:5b: 88:e3:3d:45:00:69:c0:6e:37:84:8a:3f:18:7a:b6:ef:b5:bd: 72:c9:6f:92:f1:25:62:65:95:17:40:09:bd:2f:44:8f:98:d9: db:a5:ed:16:ce:88:4c:c6:e3:64:a9:00:b3:23:aa:bc:ad:8e: 00:30:23:ce:05:4a:58:06:f9:2d:6a:32:e9:a4:74:6e:38:b0: 87:1b:cb:fa:02:5d:70:46:bd:52:dd:5e:ba:f6:4c:37:4f:f7: e6:63:ee:4c:7c:8b:ae:ff:6e:fc:66:e2:de:c9:fc:70:39:f9: 3d:1a:89:62:d3:d4:f5:4e:87:42:51:b6:d4:fe:a9:a0:55:4d: fe:e0:41:e5:45:9d:62:43:3f:46:92:f2:41:64:fe:c8:28:b2: d1:1b:87:88:b9:72:6f:6a:ce:ff:5e:0e:e3:e6:db:d5:3a:e2: 28:11:40:93:95:78:79:ba:62:2c:e7:93:10:97:ba:6e:b5:8e: 03:f2:10:05:f4:ba:5e:d1:23:9b:aa:ac:82:9d:41:5d:cf:90: d5:c3:62:d7:c5:e6:17:92:98:fc:58:37:bb:40:2e:ee:86:5b: 0c:39:73:e1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9W3nP/qRv3Z+bz+PopCNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDhjMTk2NDg0NzAwOTFmY2E3YzBlZDc5Y2U5ZGY2YmRhYTBjZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+9HPF62gjrwO7yhAkNMBvbMUbQu iVGwHr0TFD+/pII0k+5hCDXIAMKj1VpO7xX0uAqjlkwDrCeMm/W1+tPSqLVCAwQd wdrOIccG8JOCrHWMcPH7PfdjI1dvgymsels9ZWEfatkdz9TnHpPUbcnbuWty25CK FP8Qjlv2fa/I0O6CUe4Maix/2g1cidysMB6XtjE8Zn4EbRv54UD0q1CktwI6LkS8 y9XhRI9dg36V67ik8FIObL+PWrBKJy0CrNPh/h+THYolpqVDbrwmcly1id+GRZeK TcqRfHljbOAqEcEBWnm9Dd/790TgFRmoqeLM/TiiLhlN7V5/i8fEwsjT7QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPCMGWSEcAkfynwO15zp32vaoM3/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2M1NDg1 ZS0zODI2LTQzZTgtOGJlMi1kMWZlOGNiMDE0NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYzU0ODVl LTM4MjYtNDNlOC04YmUyLWQxZmU4Y2IwMTQ1Ni8xLzhJd1paSVJ3Q1JfS2ZBN1hu T25mYTlxZ3pmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMnjANBgkqhkiG9w0BAQsFAAOCAQEAKWjjveK3lhBv R8h8k8rNBkJc8U30z8hraaw1sJi/ID094adbiOM9RQBpwG43hIo/GHq277W9cslv kvElYmWVF0AJvS9Ej5jZ26XtFs6ITMbjZKkAsyOqvK2OADAjzgVKWAb5LWoy6aR0 bjiwhxvL+gJdcEa9Ut1euvZMN0/35mPuTHyLrv9u/Gbi3sn8cDn5PRqJYtPU9U6H QlG21P6poFVN/uBB5UWdYkM/RpLyQWT+yCiy0RuHiLlyb2rO/14O4+bb1TriKBFA k5V4ebpiLOeTEJe6brWOA/IQBfS6XtEjm6qsgp1BXc+Q1cNi18XmF5KY/Fg3u0Au 7oZbDDlz4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:46 2026 by rpki-client