This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer (raw, json) Hash identifier: H9LrUDl7hNroUjug4Zr+SpSi5yW25DqPbr9RJbkbkQ4= Subject key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C3303BAA54D99426E6C734A67479 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:fb4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:30:3b:aa:54:d9:94:26:e6:c7:34:a6:74:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:21:57:30:d3:25:69:21:69:c0:63:75:cf: 07:1b:1c:5c:72:68:4a:fa:52:4f:4f:e1:26:1b:69: d6:d0:fa:0e:a2:65:7c:06:68:23:dd:a4:53:07:b9: 31:4d:49:d9:f6:d1:c2:33:87:c5:2e:5f:f9:6c:8c: 06:dc:82:7f:2a:c7:66:a3:d5:9a:a2:47:2e:55:43: 9b:6e:a5:fd:dd:ed:c2:70:85:c0:c8:37:74:0a:be: 48:32:4a:3b:65:88:08:97:6f:a7:ea:4c:43:f9:4c: ac:34:ef:a9:ad:c7:84:ae:35:56:c7:13:86:ea:d2: 4a:c3:7e:c3:10:76:e8:44:27:44:9c:e6:2d:ff:8b: 29:87:9c:65:24:4b:1c:f3:5b:5d:d3:b1:b1:b8:9d: f9:c4:9b:a8:ce:72:a1:4f:c2:4c:2c:bf:9a:a0:50: 1e:08:b7:b5:9d:ae:0e:a5:5c:4b:c3:d4:22:79:54: 10:3b:f2:8f:9d:8f:ff:f6:7e:36:e4:d7:2f:12:42: c7:25:dc:08:21:c0:94:40:1a:af:11:f8:bd:51:8a: cc:a0:91:9c:f8:45:79:d9:4d:dd:63:23:13:c0:da: e8:f3:0c:56:fb:ca:cd:f2:37:31:0f:83:87:b5:5c: cf:e8:5e:00:96:93:8e:c4:1b:b8:58:46:f9:67:fe: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:fb4::/48 Signature Algorithm: sha256WithRSAEncryption 06:8c:87:14:9f:89:db:bb:6a:9d:1a:45:d4:62:a4:2a:42:e2: ce:24:5c:d2:f8:c2:63:d1:bd:ce:ff:8f:03:9b:b6:e4:db:0c: 19:a0:28:fb:69:26:70:fa:39:a7:f6:82:a4:ab:56:3f:bc:00: c0:68:b1:ba:1f:79:b9:3d:93:3b:bc:1a:f3:13:02:3b:a0:c4: 22:13:d7:26:6d:92:ee:ac:c0:1e:ff:1f:d3:eb:e6:72:45:46: 7f:46:78:80:6b:3b:f3:b1:20:94:81:d0:ce:53:f0:38:df:dd: 2b:d8:60:9f:f0:62:28:3e:79:ca:73:d0:e2:96:13:bf:dc:f7: 8b:50:7f:5a:10:23:46:7a:02:f2:5b:72:95:91:64:a6:de:8f: d4:37:ff:53:34:aa:71:09:3b:09:2f:db:b9:e7:6c:a1:8c:2a: 2a:99:eb:59:3a:19:35:ce:5f:c0:20:02:5b:4b:e7:f1:96:d4: da:90:96:7b:c4:00:17:a6:00:72:87:97:e8:10:6d:b9:ab:88: 57:0d:13:f3:67:e8:fc:96:3b:6b:be:44:0f:7e:f3:70:0e:cb: 93:14:c7:8e:41:53:c7:9c:b3:52:af:38:b7:8f:ec:e9:bb:58: a8:9f:3b:55:59:75:2e:b4:e3:53:74:ba:36:1d:ee:c0:d4:5e: 4b:1b:ad:60 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt3WMMwO6pU2ZQm5sc0pnR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGVjY2M0ODIwMGNlZjAyMTZjMmNlNTM4NjlmZDE5MmI0YTIzZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6AhVzDTJWkhacBjdc8HGxxccmhK +lJPT+EmG2nW0PoOomV8Bmgj3aRTB7kxTUnZ9tHCM4fFLl/5bIwG3IJ/Ksdmo9Wa okcuVUObbqX93e3CcIXAyDd0Cr5IMko7ZYgIl2+n6kxD+UysNO+prceErjVWxxOG 6tJKw37DEHboRCdEnOYt/4sph5xlJEsc81td07GxuJ35xJuoznKhT8JMLL+aoFAe CLe1na4OpVxLw9QieVQQO/KPnY//9n425NcvEkLHJdwIIcCUQBqvEfi9UYrMoJGc +EV52U3dYyMTwNro8wxW+8rN8jcxD4OHtVzP6F4AlpOOxBu4WEb5Z/5MIwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFPDszEggDO8CFsLOU4af0ZK0oj9UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2NkYjgw OS1kMWQ0LTQ1NTctYjQzMC1iYjY1YzU5MDBmNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RiODA5 LWQxZDQtNDU1Ny1iNDMwLWJiNjVjNTkwMGY3NS8xLzhPek1TQ0FNN3dJV3dzNVRo cF9Sa3JTaVAxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+0MA0GCSqGSIb3DQEBCwUAA4IBAQAG jIcUn4nbu2qdGkXUYqQqQuLOJFzS+MJj0b3O/48Dm7bk2wwZoCj7aSZw+jmn9oKk q1Y/vADAaLG6H3m5PZM7vBrzEwI7oMQiE9cmbZLurMAe/x/T6+ZyRUZ/RniAazvz sSCUgdDOU/A4390r2GCf8GIoPnnKc9DilhO/3PeLUH9aECNGegLyW3KVkWSm3o/U N/9TNKpxCTsJL9u552yhjCoqmetZOhk1zl/AIAJbS+fxltTakJZ7xAAXpgByh5fo EG25q4hXDRPzZ+j8ljtrvkQPfvNwDsuTFMeOQVPHnLNSrzi3j+zpu1ionztVWXUu tONTdLo2He7A1F5LG61g -----END CERTIFICATE-----Generated at Mon Feb 2 15:44:12 2026 by rpki-client