This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer (raw, json) Hash identifier: /v5DF++LcdFmMbuQTL0T2dt2j0cMBR2jqxP20IFR7OI= Subject key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36847A9070FCAF5868145EAB8DA4C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215657 IP: 195.184.230.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:84:7a:90:70:fc:af:58:68:14:5e:ab:8d:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:a2:72:71:3b:28:31:bc:e3:01:a0:03:8a: eb:dd:c6:99:47:a0:81:b9:84:f2:3d:f4:7d:28:0b: 7d:52:4e:71:3c:b1:df:36:77:84:21:cf:34:ed:f6: ab:0a:8d:99:10:08:da:a5:1a:f1:56:65:8a:60:9e: 91:f2:7e:ea:93:95:32:72:59:f8:f0:55:dd:6d:04: fe:76:78:a6:21:8f:96:5f:56:99:2d:b7:3f:87:c2: 16:c6:26:d0:f0:51:c9:53:0f:e6:05:54:41:3b:58: 3c:4d:84:cb:9d:16:fe:11:0a:3b:0d:17:b4:9b:3c: 25:bc:35:f6:b9:c5:8d:cc:87:64:88:c5:81:4b:87: cf:ed:f8:0a:e0:fc:1f:ba:6e:3b:6d:ad:1c:6f:d1: 14:98:c7:d0:7f:76:1a:a0:31:4e:fb:b2:2c:0a:31: b1:35:55:42:35:5e:13:d5:2d:ff:64:fb:7c:6b:a6: 00:82:9b:d4:97:f4:64:4b:03:2d:f2:52:d4:9e:ef: 17:61:bd:75:d4:ee:9e:bc:fd:58:e9:1d:09:52:a2: 97:1b:92:8a:b9:8b:81:ca:aa:03:ba:ef:3f:4c:1f: 41:c4:72:2d:b6:d8:0b:18:b4:86:e2:1f:31:91:54: 5f:5e:81:8a:61:d9:51:06:4f:e6:cb:f3:5d:86:45: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.230.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215657 Signature Algorithm: sha256WithRSAEncryption 73:83:6d:5c:72:3c:99:8a:3a:70:30:4f:01:73:ea:37:a6:8c: 8b:3f:dc:6e:6b:04:8d:8c:9d:03:7d:be:09:45:b6:c8:68:e0: 26:d1:2a:5a:89:aa:e4:3e:cf:28:c0:1d:05:12:85:ae:c7:81: 43:95:ff:be:2e:ea:d3:45:24:b2:33:e4:17:f8:c7:d2:82:c3: 79:9d:20:91:7c:a6:c1:e8:2c:a5:ca:c2:cb:a1:55:66:57:f2: 74:2f:7d:be:34:5a:a9:c5:f9:ca:25:72:ef:12:7e:42:7f:0d: 44:cc:f2:2d:dd:da:a6:ab:18:b0:79:c2:e6:0f:91:48:1a:82: dc:1d:04:ce:31:07:09:cd:46:da:da:f6:90:f9:81:11:67:3a: a6:47:93:f0:9b:75:b7:44:02:b6:94:30:64:84:bb:4b:1e:e3: e4:ea:a6:5e:23:6d:58:5e:d4:80:31:64:1f:a8:cf:e2:ba:fe: 6c:a3:0f:77:8d:3e:dd:c6:82:7d:fa:b0:5c:a5:2f:90:70:2b: 88:67:bf:bd:6a:97:b7:0b:87:34:20:ab:7a:ac:f4:59:0e:a0: 43:4c:46:2e:a6:f8:81:0e:03:ce:62:64:0d:1e:15:7a:3d:11: 83:d9:d5:46:8a:24:a7:76:9a:33:c9:14:8a:57:a7:cb:6f:bf: c2:2f:5c:ed -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NoR6kHD8r1hoFF6rjaTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQzMjNhZDQ4ZjVhNDViYmNhOWU4Nzk4ODNmYWU5MzE0YjU4ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolWicnE7KDG84wGgA4rr3caZR6CB uYTyPfR9KAt9Uk5xPLHfNneEIc807farCo2ZEAjapRrxVmWKYJ6R8n7qk5Uycln4 8FXdbQT+dnimIY+WX1aZLbc/h8IWxibQ8FHJUw/mBVRBO1g8TYTLnRb+EQo7DRe0 mzwlvDX2ucWNzIdkiMWBS4fP7fgK4Pwfum47ba0cb9EUmMfQf3YaoDFO+7IsCjGx NVVCNV4T1S3/ZPt8a6YAgpvUl/RkSwMt8lLUnu8XYb111O6evP1Y6R0JUqKXG5KK uYuByqoDuu8/TB9BxHItttgLGLSG4h8xkVRfXoGKYdlRBk/my/NdhkWMFwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPDTI61I9aRbvKnoeYg/rpMUtY6dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzdkZTJk Zi0xMGRiLTRiYmUtOTA1Mi01ZmFiZDZkYzVmOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvN2RlMmRm LTEwZGItNGJiZS05MDUyLTVmYWJkNmRjNWY5My8xLzhOTWpyVWoxcEZ1OHFlaDVp RC11a3hTMWpwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw7jmMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNKaTANBgkqhkiG9w0BAQsFAAOCAQEAc4NtXHI8mYo6cDBPAXPqN6aMiz/cbmsE jYydA32+CUW2yGjgJtEqWomq5D7PKMAdBRKFrseBQ5X/vi7q00UksjPkF/jH0oLD eZ0gkXymwegspcrCy6FVZlfydC99vjRaqcX5yiVy7xJ+Qn8NRMzyLd3apqsYsHnC 5g+RSBqC3B0EzjEHCc1G2tr2kPmBEWc6pkeT8Jt1t0QCtpQwZIS7Sx7j5OqmXiNt WF7UgDFkH6jP4rr+bKMPd40+3caCffqwXKUvkHAriGe/vWqXtwuHNCCreqz0WQ6g Q0xGLqb4gQ4DzmJkDR4Vej0Rg9nVRookp3aaM8kUileny2+/wi9c7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:50 2026 by rpki-client