This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.cer (raw, json) Hash identifier: 9uDMT5dneEuCufI/bqd41WJsJmOW1uym4Yg48yi07AQ= Subject key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F787696616DC56ABF5ACEF883C0B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209925 IP: 185.116.232.0/24 IP: 2a14:fa80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:78:76:96:61:6d:c5:6a:bf:5a:ce:f8:83:c0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:03:40:91:9c:a0:27:e2:17:97:9e:69:f6: a8:00:f0:28:32:86:ef:c0:e9:b0:95:f7:2a:76:9e: 19:d4:5c:73:67:d9:90:c7:eb:7f:ca:b1:65:94:9e: 63:be:24:a1:12:00:dc:d1:14:29:c3:93:2a:ed:b5: 57:0b:5c:cc:0e:42:21:14:74:55:ee:ac:d3:ce:5d: ec:76:c6:8e:d2:9f:87:10:a1:c5:27:c0:02:a9:c6: ab:14:3c:1e:3f:18:c2:e6:ee:b9:a2:aa:04:ae:3f: ae:45:d8:33:e4:0c:72:ea:d1:6b:08:70:4a:f0:6f: 5d:70:d1:c9:34:d4:21:55:74:b5:bd:9e:69:c2:58: 19:39:96:cd:3b:06:f6:c9:c4:d0:91:65:26:ef:ae: ff:f9:52:57:01:1a:ba:49:10:36:b8:3a:1c:ce:1e: cf:36:35:4a:3b:41:8c:94:e0:b0:ab:39:7c:5c:d7: e5:9d:b9:17:ac:04:67:f3:9d:84:c9:29:a2:4e:4f: d4:2d:79:7b:a9:08:d4:27:23:68:5a:ed:c1:0f:c6: f2:29:65:46:92:05:3d:5f:79:94:7a:66:10:0e:66: 80:c6:85:9b:ef:9e:e0:b3:df:8f:a1:21:3c:65:61: 72:ce:5d:7f:31:65:3b:5a:d7:f1:bd:cf:b3:c9:77: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.232.0/24 IPv6: 2a14:fa80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209925 Signature Algorithm: sha256WithRSAEncryption 67:3a:1d:c9:00:4a:ac:fc:b2:7b:5c:6d:9d:e7:6f:d7:e9:9e: 02:c5:e0:0c:74:b4:05:97:78:b2:89:3b:a6:59:58:e1:44:b8: 48:ff:c6:47:70:2f:07:17:11:80:a9:53:f2:53:5a:31:72:ad: a6:d7:2a:5d:d1:21:1f:55:ab:d0:03:af:67:7f:85:11:d8:c6: 61:f9:92:f5:94:bb:13:8f:23:6e:f2:7a:7a:b8:70:ee:db:71: 42:0c:7a:73:25:a7:b7:48:50:bb:1a:32:9a:c6:7e:86:76:3b: 2d:f5:78:05:f2:62:4e:a3:dd:8a:8d:31:16:11:cc:74:83:45: ee:c7:df:56:c9:a9:c9:3b:71:64:2c:ad:52:41:4c:2b:6a:cc: 8a:a4:ad:5b:0e:42:f9:11:0e:f0:51:87:e7:ee:58:a4:b4:f3: 0b:d7:4e:76:ee:ec:23:64:d9:a2:18:7e:4e:41:be:9d:ae:3b: 9b:f5:4d:2d:af:37:d8:ba:0e:95:96:e1:9a:fd:c2:b9:75:04: 1f:8c:a7:1a:54:78:c0:fa:6e:42:3b:65:78:cc:40:2a:a0:3a: 0a:8b:20:67:b0:c7:82:d4:ff:45:59:2e:6e:c9:93:13:a1:8d: b2:e6:99:23:ca:36:97:7a:87:ab:03:9b:ba:9b:0c:11:2f:46: 4a:b7:f0:d3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f3h2lmFtxWq/Ws74g8C3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBiNzM0ZGY0ZmE2YWVlMTJlYTk5MDY1N2IwMzVhMTYyYjRhOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm0DQJGcoCfiF5eeafaoAPAoMobv wOmwlfcqdp4Z1FxzZ9mQx+t/yrFllJ5jviShEgDc0RQpw5Mq7bVXC1zMDkIhFHRV 7qzTzl3sdsaO0p+HEKHFJ8ACqcarFDwePxjC5u65oqoErj+uRdgz5Axy6tFrCHBK 8G9dcNHJNNQhVXS1vZ5pwlgZOZbNOwb2ycTQkWUm767/+VJXARq6SRA2uDoczh7P NjVKO0GMlOCwqzl8XNflnbkXrARn852EySmiTk/ULXl7qQjUJyNoWu3BD8byKWVG kgU9X3mUemYQDmaAxoWb757gs9+PoSE8ZWFyzl1/MWU7Wtfxvc+zyXen2wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPELc030+mruEuqZBlewNaFitKnmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzAyYmQ4 ZS0yZWI4LTQ1MTUtOTU2Yi1lMTUyNTAzOTI4ODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMDJiZDhl LTJlYjgtNDUxNS05NTZiLWUxNTI1MDM5Mjg4Ny8xLzhRdHpUZlQ2YXU0UzZwa0dW N0Exb1dLMHFlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXToMA0EAgACMAcDBQMqFPqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0BTANBgkqhkiG9w0BAQsFAAOCAQEAZzodyQBKrPyy e1xtnedv1+meAsXgDHS0BZd4sok7pllY4US4SP/GR3AvBxcRgKlT8lNaMXKtptcq XdEhH1Wr0AOvZ3+FEdjGYfmS9ZS7E48jbvJ6erhw7ttxQgx6cyWnt0hQuxoymsZ+ hnY7LfV4BfJiTqPdio0xFhHMdINF7sffVsmpyTtxZCytUkFMK2rMiqStWw5C+REO 8FGH5+5YpLTzC9dOdu7sI2TZohh+TkG+na47m/VNLa832LoOlZbhmv3CuXUEH4yn GlR4wPpuQjtleMxAKqA6CosgZ7DHgtT/RVkubsmTE6GNsuaZI8o2l3qHqwObupsM ES9GSrfw0w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:50 2026 by rpki-client