This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer File: 8R8omgChsRW386TRuAEb-Q0aL3I.cer (raw, json) Hash identifier: I2k2aXq6qfI4pFP+AERmq/UEiUgr0xMYFKf7oE0hGnA= Subject key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDF738E919396C6F00CAE5FCEA3F6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57720 IP: 91.234.149.0/24 IP: 2001:67c:7a8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f7:38:e9:19:39:6c:6f:00:ca:e5:fc:ea:3f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:62:ef:9c:b2:fb:cb:22:86:aa:ba:7d:aa: 15:40:9f:6f:ba:1f:35:cf:d2:9e:bd:54:af:6d:68: f4:4b:2e:ee:52:d8:7d:d8:b9:dd:24:ce:eb:c7:d5: a9:d9:0b:ed:ea:c1:c8:8c:17:c3:5a:01:88:51:03: 75:a7:d1:33:e9:18:1a:2c:65:e8:42:8c:e2:b2:62: cb:78:0f:41:f7:b4:a6:ef:11:a6:d9:aa:9c:7f:70: 89:56:e1:37:11:e1:0f:a5:9f:65:6a:3a:72:3c:83: b1:2d:96:0d:50:da:0a:d4:d0:b4:3d:c1:69:9f:20: 97:2b:31:37:ac:86:28:0c:a2:6b:8d:e7:2b:36:98: 13:71:08:05:3d:6e:46:32:de:a6:d8:b0:e5:bc:6d: ad:c0:fc:c1:fe:d0:95:d8:21:9b:9a:32:b5:31:eb: b8:c5:72:6a:52:aa:b6:79:a8:56:5f:e7:61:e8:61: c9:df:e5:1f:f0:0a:6a:65:38:75:cf:f1:6f:59:c8: 61:14:31:87:7a:95:5e:82:9d:28:29:41:08:50:3f: 3f:ed:23:71:2b:02:5a:21:22:07:0e:7a:f9:2c:3d: b7:02:2e:bc:0d:b0:8c:d4:42:0f:a5:eb:04:8a:3d: ef:27:6e:12:fb:2e:a4:b8:b2:2f:c4:48:8b:e3:d2: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.149.0/24 IPv6: 2001:67c:7a8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57720 Signature Algorithm: sha256WithRSAEncryption 58:ed:bd:02:72:dc:e0:62:9b:16:71:77:d8:28:db:01:68:48: 1f:86:f7:23:c1:49:f8:15:b8:30:b3:4c:5b:ec:04:83:c8:07: 01:ef:23:1a:75:7e:7b:92:f0:6f:8e:29:72:52:26:e6:a2:70: 91:1a:6e:a2:1a:a7:da:da:3d:c9:65:f0:9e:f9:ee:27:8e:cb: a7:ab:6a:80:82:b6:5f:df:3b:06:5f:51:2e:51:04:b9:3c:c0: 8c:8c:97:c3:b6:24:ec:57:77:8f:e4:e5:33:10:6f:b2:ce:20: 31:f7:44:a9:1c:2f:57:05:88:1b:99:c2:cb:28:17:fa:26:a3: 27:f5:73:4a:6d:af:13:bd:f2:d4:96:9e:f0:ff:91:ca:2c:cd: 70:7c:82:d8:f5:ed:fe:64:81:ee:b2:b8:b4:27:50:b3:64:53: 4c:bf:13:8c:0d:d9:66:ce:01:f8:c1:d7:2b:00:f8:0e:6b:c8: c2:9e:b9:e7:b7:81:75:01:e4:36:0a:6d:2e:8e:2e:82:fc:54: b0:ea:58:0d:02:49:c0:43:e3:6d:8b:e7:9e:29:22:88:89:c5: 2e:f3:d8:4a:83:35:75:74:5a:9f:4f:30:ce:14:0e:b6:6d:4e: c5:bc:1c:8c:bd:9d:3e:39:2e:a9:dc:c5:10:f2:c6:f0:06:f9: 1e:a5:8b:e4 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt87fc46Rk5bG8AyuX86j9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTFmMjg5YTAwYTFiMTE1YjdmM2E0ZDFiODAxMWJmOTBkMWEyZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypJi75yy+8sihqq6faoVQJ9vuh81 z9KevVSvbWj0Sy7uUth92LndJM7rx9Wp2Qvt6sHIjBfDWgGIUQN1p9Ez6RgaLGXo QozismLLeA9B97Sm7xGm2aqcf3CJVuE3EeEPpZ9lajpyPIOxLZYNUNoK1NC0PcFp nyCXKzE3rIYoDKJrjecrNpgTcQgFPW5GMt6m2LDlvG2twPzB/tCV2CGbmjK1Meu4 xXJqUqq2eahWX+dh6GHJ3+Uf8ApqZTh1z/FvWchhFDGHepVegp0oKUEIUD8/7SNx KwJaISIHDnr5LD23Ai68DbCM1EIPpesEij3vJ24S+y6kuLIvxEiL49KaPQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFPEfKJoAobEVt/Ok0bgBG/kNGi9yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzUxNTFl MS0zNmI3LTQyMDUtOWFmNy03NGU4NDk2NzE2OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvNTE1MWUx LTM2YjctNDIwNS05YWY3LTc0ZTg0OTY3MTY4Yi8xLzhSOG9tZ0Noc1JXMzg2VFJ1 QUViLVEwYUwzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+qVMA8EAgACMAkDBwAgAQZ8B6gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOF4MA0GCSqGSIb3DQEBCwUAA4IBAQBY7b0Cctzg YpsWcXfYKNsBaEgfhvcjwUn4Fbgws0xb7ASDyAcB7yMadX57kvBvjilyUibmonCR Gm6iGqfa2j3JZfCe+e4njsunq2qAgrZf3zsGX1EuUQS5PMCMjJfDtiTsV3eP5OUz EG+yziAx90SpHC9XBYgbmcLLKBf6JqMn9XNKba8TvfLUlp7w/5HKLM1wfILY9e3+ ZIHusri0J1CzZFNMvxOMDdlmzgH4wdcrAPgOa8jCnrnnt4F1AeQ2Cm0uji6C/FSw 6lgNAknAQ+Nti+eeKSKIicUu89hKgzV1dFqfTzDOFA62bU7FvByMvZ0+OS6p3MUQ 8sbwBvkepYvk -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:52 2026 by rpki-client