This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer File: 8M9JYzV925hV-brEx9mVrciaNyo.cer (raw, json) Hash identifier: Roh+T6qATLuDOiQDScEJzRuCdNOVyOpBGviSIaRfPs4= Subject key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E2E2B3A97373EE2017BE3CCCDE96B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202454 IP: 185.152.0.0/22 IP: 193.28.36.0/22 IP: 2a0a:2700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2e:2b:3a:97:37:3e:e2:01:7b:e3:cc:cd:e9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:ad:9e:7d:3f:47:cd:8f:e7:97:91:95:04: 64:65:73:50:b1:67:91:03:b7:bb:5b:a7:fa:22:4a: 86:0d:9f:82:1b:7c:cd:c1:c1:41:c0:ba:db:a9:2f: b8:82:d2:58:d5:8a:5d:04:ca:56:16:5e:e7:ab:4a: b0:14:ef:cc:71:f5:c7:7d:0a:2a:6b:fe:89:92:41: 7e:5e:35:79:9a:25:14:da:90:70:1e:19:cd:64:53: 2c:5a:1f:e7:94:ae:5d:be:e4:df:d0:65:42:71:02: 42:f2:5d:92:f5:85:c5:c7:de:8f:2f:dd:e3:e3:6c: 1b:db:18:81:24:06:ef:46:08:b0:55:82:3e:c8:f2: 7a:84:a4:e4:eb:11:79:8d:a6:f0:58:f2:83:c4:c1: 0e:d5:d0:8f:2d:29:67:8c:00:b1:66:bb:76:f1:49: 95:ce:c8:65:b5:14:d0:ea:a1:13:81:62:72:ed:5e: 64:6d:cd:dd:6f:9f:21:07:bd:53:09:65:c1:b4:80: 19:9f:f2:31:ac:eb:56:c5:3f:68:01:8b:69:ec:29: 58:03:b6:83:e1:e6:8a:56:07:77:19:61:d5:1c:4c: 31:ba:9b:0a:d2:53:eb:8b:a4:f9:aa:7d:f7:38:93: f6:e1:98:38:0e:68:7b:7d:8a:42:10:a7:c4:4e:8a: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.0.0/22 193.28.36.0/22 IPv6: 2a0a:2700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202454 Signature Algorithm: sha256WithRSAEncryption 5f:5f:ce:19:4d:3f:0d:0b:05:2b:e1:23:e8:9c:31:67:b7:c6: b7:32:98:59:84:44:dd:bd:98:b5:53:a8:57:d9:fa:4f:c0:0b: 46:aa:18:5b:9f:02:09:54:5b:c7:84:27:64:e1:0f:49:81:67: d4:77:76:cd:3a:8f:f1:a9:0b:0a:5c:59:0d:b5:9b:4b:c8:c0: db:0d:fc:64:97:94:63:ec:27:bc:51:b3:0e:15:ff:79:4f:e4: 36:20:3f:e0:9e:7a:1d:7f:72:b8:d3:b2:63:7d:5f:f7:84:7f: ed:33:d9:f5:53:22:50:3a:c6:83:82:19:3c:e5:aa:8d:df:61: 73:6c:45:c7:8b:3d:66:2d:78:34:61:3b:47:5a:5d:2a:7d:07: 0c:7d:f9:44:60:62:99:02:75:2f:53:9e:81:5a:96:a2:9a:35: 44:f8:39:c6:48:07:46:5a:26:e5:8d:0d:a2:cb:c8:68:5e:be: cf:af:2d:01:a5:21:de:f1:8d:78:d9:16:ad:81:33:2f:2f:38: 45:07:1c:cc:2a:09:e0:63:fd:f7:4d:d1:74:0e:9f:4b:c8:f0: 83:5d:62:3d:a2:ed:c8:8b:d6:9e:ce:7a:37:d5:5d:c2:63:30: 30:d7:20:26:49:8d:82:d6:74:8c:64:2f:7f:3c:99:c0:e7:7b: 58:68:4f:4b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fi4rOpc3PuIBe+PMzelrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGNmNDk2MzM1N2RkYjk4NTVmOWJhYzRjN2Q5OTVhZGM4OWEzNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWytnn0/R82P55eRlQRkZXNQsWeR A7e7W6f6IkqGDZ+CG3zNwcFBwLrbqS+4gtJY1YpdBMpWFl7nq0qwFO/McfXHfQoq a/6JkkF+XjV5miUU2pBwHhnNZFMsWh/nlK5dvuTf0GVCcQJC8l2S9YXFx96PL93j 42wb2xiBJAbvRgiwVYI+yPJ6hKTk6xF5jabwWPKDxMEO1dCPLSlnjACxZrt28UmV zshltRTQ6qETgWJy7V5kbc3db58hB71TCWXBtIAZn/IxrOtWxT9oAYtp7ClYA7aD 4eaKVgd3GWHVHEwxupsK0lPri6T5qn33OJP24Zg4Dmh7fYpCEKfETop8fwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPDPSWM1fduYVfm6xMfZla3ImjcqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzk3NTkx Mi1mZDBjLTQzMTgtYjBiMC02ZTA1NmI2MTdkMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvOTc1OTEy LWZkMGMtNDMxOC1iMGIwLTZlMDU2YjYxN2QyYS8xLzhNOUpZelY5MjVoVi1ickV4 OW1WcmNpYU55by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZgAAwQCwRwkMA0EAgACMAcDBQMqCicAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMW1jANBgkqhkiG9w0BAQsFAAOCAQEAX1/O GU0/DQsFK+Ej6JwxZ7fGtzKYWYRE3b2YtVOoV9n6T8ALRqoYW58CCVRbx4QnZOEP SYFn1Hd2zTqP8akLClxZDbWbS8jA2w38ZJeUY+wnvFGzDhX/eU/kNiA/4J56HX9y uNOyY31f94R/7TPZ9VMiUDrGg4IZPOWqjd9hc2xFx4s9Zi14NGE7R1pdKn0HDH35 RGBimQJ1L1OegVqWopo1RPg5xkgHRlom5Y0NosvIaF6+z68tAaUh3vGNeNkWrYEz Ly84RQcczCoJ4GP9903RdA6fS8jwg11iPaLtyIvWns56N9VdwmMwMNcgJkmNgtZ0 jGQvfzyZwOd7WGhPSw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:33 2026 by rpki-client