This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.cer (raw, json) Hash identifier: Rr8vzDFZ7VI0EXoNghcy1kSg7DU7zCtikQhr4G2et0E= Subject key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAFB0644EDCCC1CA0AA221AD122BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39668 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fb:06:44:ed:cc:c1:ca:0a:a2:21:ad:12:2b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10317f24d71a516d75043be90f5abe3fa1c9259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:75:e7:d9:f7:75:4e:fb:88:39:70:86:5c: 89:ce:0d:6b:7d:7f:22:b2:4b:64:c9:4e:28:47:90: 34:96:db:4b:76:14:9b:65:62:e0:00:6a:4b:0b:ed: 29:42:d2:d3:d1:27:24:0f:b4:b3:d2:29:69:1b:ca: d6:ad:17:3f:27:4f:37:7f:43:83:37:39:a0:de:07: 5a:34:75:75:d0:3a:2c:6d:55:d2:18:b3:5e:03:b2: 0f:1f:83:37:ba:18:fb:ab:67:d2:70:7d:19:7d:49: d0:e8:65:ad:38:0b:93:01:d5:8a:75:2f:f8:5f:4e: 97:64:aa:5c:fc:98:3d:40:41:80:1c:82:64:44:a1: c9:9e:db:4a:6b:0c:b2:1b:8f:5e:ff:26:ef:c4:f0: 21:eb:35:69:5d:d7:34:c9:77:00:5c:a2:c7:0f:cb: 69:6a:db:49:4e:56:4a:b1:f5:ce:38:10:db:90:79: 32:2e:fc:55:2f:aa:34:4f:f4:ef:74:4b:8f:75:e1: 5a:a2:6d:89:f9:04:d9:42:39:b3:9a:e9:11:41:25: 04:5e:ee:3e:75:53:80:9a:c5:55:bc:66:92:4d:34: f6:3b:40:dd:05:96:41:b0:ec:60:5b:d0:ab:99:70: 6c:88:be:86:95:a3:db:a9:1d:88:81:5d:ed:52:f2: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 39668 Signature Algorithm: sha256WithRSAEncryption 97:c7:ed:eb:b2:2a:c7:8c:e5:f3:1b:09:42:d2:21:90:6d:85: bf:7e:5c:3b:6e:33:8a:d6:a3:f6:6a:8f:75:1d:c5:68:02:d3: 5c:8e:3f:50:b5:b9:19:8d:27:d4:63:d0:9e:78:33:35:cd:5d: 77:88:7c:f0:3d:ca:df:b1:5c:1b:6f:49:ec:cc:96:bc:ed:3c: 64:1e:1b:29:db:62:f4:ed:9e:a6:68:d9:85:12:22:1e:06:9e: 46:a6:8c:3d:4e:97:31:5c:4b:9b:fe:c5:75:f3:29:99:99:45: 0e:dd:65:3e:7d:83:13:7c:dd:9a:4d:f2:9d:c8:77:f1:43:66: 26:5e:01:da:61:df:6b:93:14:f2:21:df:f6:78:0c:14:b4:de: c2:6b:bb:4a:d3:27:cc:b2:2c:2f:ff:03:ef:62:10:d9:96:3e: 76:46:8b:18:7a:0a:b7:01:58:23:ee:d8:c3:c8:59:09:a0:25: fd:7b:a1:1b:2d:80:57:ac:50:73:ca:69:e0:4c:2e:e8:f5:11: 69:d1:05:ad:d7:a5:f1:5b:ae:db:71:d7:e5:4d:72:61:1f:6b: ff:26:89:44:0f:f6:32:ec:80:27:24:b0:82:cb:32:4c:7d:4c: f8:52:6f:ca:d2:00:4d:22:41:9e:00:b9:47:a4:fb:16:8a:07: a2:20:a1:12 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26vsGRO3MwcoKoiGtEivYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTAzMTdmMjRkNzFhNTE2ZDc1MDQzYmU5MGY1YWJlM2ZhMWM5MjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp41159n3dU77iDlwhlyJzg1rfX8i sktkyU4oR5A0lttLdhSbZWLgAGpLC+0pQtLT0SckD7Sz0ilpG8rWrRc/J083f0OD Nzmg3gdaNHV10DosbVXSGLNeA7IPH4M3uhj7q2fScH0ZfUnQ6GWtOAuTAdWKdS/4 X06XZKpc/Jg9QEGAHIJkRKHJnttKawyyG49e/ybvxPAh6zVpXdc0yXcAXKLHD8tp attJTlZKsfXOOBDbkHkyLvxVL6o0T/TvdEuPdeFaom2J+QTZQjmzmukRQSUEXu4+ dVOAmsVVvGaSTTT2O0DdBZZBsOxgW9CrmXBsiL6GlaPbqR2IgV3tUvLbHQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPEDF/JNcaUW11BDvpD1q+P6HJJZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzEzNWEw My1lMTFhLTQ3MGEtODQ2Yy02NmQ0OWRmNTNlZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvMTM1YTAz LWUxMWEtNDcwYS04NDZjLTY2ZDQ5ZGY1M2VmMS8xLzhRTVg4azF4cFJiWFVFTy1r UFdyNF9vY2tsay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCa9DANBgkqhkiG9w0BAQsFAAOCAQEAl8ft67Iqx4zl 8xsJQtIhkG2Fv35cO24zitaj9mqPdR3FaALTXI4/ULW5GY0n1GPQnngzNc1dd4h8 8D3K37FcG29J7MyWvO08ZB4bKdti9O2epmjZhRIiHgaeRqaMPU6XMVxLm/7FdfMp mZlFDt1lPn2DE3zdmk3ynch38UNmJl4B2mHfa5MU8iHf9ngMFLTewmu7StMnzLIs L/8D72IQ2ZY+dkaLGHoKtwFYI+7Yw8hZCaAl/XuhGy2AV6xQc8pp4Ewu6PURadEF rdel8Vuu23HX5U1yYR9r/yaJRA/2MuyAJySwgssyTH1M+FJvytIATSJBngC5R6T7 FooHoiChEg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:24 2026 by rpki-client