This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.cer (raw, json) Hash identifier: bwOgFWjddiJoQxtX73KOyJQBqzkqPGOEbZHEi/IKbN0= Subject key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F6D8AA6A0B7A503D7762F35ACA26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47794 AS: 48695 IP: 37.99.128.0/18 IP: 46.184.0.0/17 IP: 94.77.192.0/18 IP: 185.139.120.0/22 IP: 188.248.0.0/15 IP: 2a02:888::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f6:d8:aa:6a:0b:7a:50:3d:77:62:f3:5a:ca:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13219221cc0a21326ce006c42825bac2be31e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:bc:4a:d6:7d:7c:86:f2:f7:38:d7:03:66: 6d:ad:e8:e1:e0:12:5a:24:0d:54:f8:34:c8:36:af: 41:39:5a:cd:f1:a3:da:8e:55:52:de:ab:99:02:28: 1e:e6:23:58:5e:ee:95:ab:c4:16:8e:3b:83:74:a8: a5:5f:a1:7c:96:8c:49:1e:2a:cf:a3:e9:06:ac:15: bd:cf:75:0e:68:e3:52:76:90:8d:fe:9e:28:1f:f8: dd:e0:5d:be:7b:0f:3a:b4:2a:31:69:12:6d:c3:df: ae:55:97:b4:f0:9f:1a:88:c9:c2:83:fd:1f:12:f1: 9a:69:8d:99:a5:1b:74:96:d9:4e:bf:fd:be:cc:ee: 54:2d:2d:ea:41:77:3d:7d:c3:7f:14:47:bd:98:a2: 1a:15:3a:8d:29:be:d9:66:57:84:fb:30:bc:18:a0: 7f:92:9f:a5:f8:26:42:c7:0a:a2:43:65:d3:02:c5: 3e:c6:e3:b6:dc:12:b8:d7:48:17:9e:83:46:77:26: 0f:8a:c9:4c:4f:14:79:4d:05:8c:5a:5f:bd:c1:97: d3:e9:d5:de:a7:73:51:6b:a4:27:55:4a:94:b0:8b: 44:f2:01:86:89:95:5b:d0:cf:ca:ca:13:4f:65:82: cb:8f:a9:bf:4c:02:1a:da:2c:8e:ea:15:90:73:05: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.99.128.0/18 46.184.0.0/17 94.77.192.0/18 185.139.120.0/22 188.248.0.0/15 IPv6: 2a02:888::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47794 48695 Signature Algorithm: sha256WithRSAEncryption 57:ec:2e:36:fd:fc:8b:82:43:82:9f:f9:9e:cc:36:e6:bb:d8: 49:6a:80:1c:63:f2:94:fc:f7:7e:6d:5f:03:aa:23:e0:ce:53: 73:ab:b2:41:22:86:f3:5f:b6:bb:c5:d6:d4:fa:7a:60:00:86: 9c:0c:d9:0d:2b:14:ce:48:84:5e:ea:f9:be:70:43:87:47:3f: 49:70:d5:f6:ff:1b:56:fd:c8:91:6c:64:33:a5:4a:de:a3:d4: fe:67:a3:c4:fe:6a:73:09:6b:dc:cd:2d:b3:71:b3:77:ec:76: 20:64:d0:12:14:47:0a:21:3d:07:44:c7:0f:2f:27:7e:06:a4: 6f:18:a8:3e:f9:0c:b4:8f:9a:ba:41:16:d0:f1:19:3c:1a:08: 15:60:81:4e:d0:92:b9:bb:4b:1b:c4:06:d8:d6:a7:98:bc:33: 2b:7d:3b:79:60:9b:15:c9:42:ee:ff:50:14:70:b5:87:57:9c: 5f:cf:18:08:06:44:3b:38:b3:24:bc:d5:bf:41:d4:32:5e:64: 2f:7e:e3:4d:e6:4a:11:dd:81:68:e5:c5:99:ee:ed:b7:9c:3b: 08:49:fe:d7:c2:bc:62:3a:47:9c:9e:40:62:20:3b:9c:1c:45: 7e:98:fb:7f:05:79:03:3e:65:99:ad:17:de:18:14:e9:7c:be: 82:f3:8e:d8 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt4ovbYqmoLelA9d2LzWsomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTMyMTkyMjFjYzBhMjEzMjZjZTAwNmM0MjgyNWJhYzJiZTMxZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9q8StZ9fIby9zjXA2Ztrejh4BJa JA1U+DTINq9BOVrN8aPajlVS3quZAige5iNYXu6Vq8QWjjuDdKilX6F8loxJHirP o+kGrBW9z3UOaONSdpCN/p4oH/jd4F2+ew86tCoxaRJtw9+uVZe08J8aiMnCg/0f EvGaaY2ZpRt0ltlOv/2+zO5ULS3qQXc9fcN/FEe9mKIaFTqNKb7ZZleE+zC8GKB/ kp+l+CZCxwqiQ2XTAsU+xuO23BK410gXnoNGdyYPislMTxR5TQWMWl+9wZfT6dXe p3NRa6QnVUqUsItE8gGGiZVb0M/KyhNPZYLLj6m/TAIa2iyO6hWQcwWg1QIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFPEyGSIcwKITJs4AbEKCW6wr4x4XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzM0MjQ0 ZC0wM2M4LTQ3ODAtODdjMy00NWU2OTZhNWFlNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMzQyNDRk LTAzYzgtNDc4MC04N2MzLTQ1ZTY5NmE1YWU0NS8xLzhUSVpJaHpBb2hNbXpnQnNR b0pickN2akhoYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAjBAIAATAdAwQGJWOAAwQHLrgAAwQGXk3AAwQCuYt4AwMBvPgw DQQCAAIwBwMFAyoCCIgwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDALqyAgMAvjcw DQYJKoZIhvcNAQELBQADggEBAFfsLjb9/IuCQ4Kf+Z7MNua72ElqgBxj8pT8935t XwOqI+DOU3OrskEihvNftrvF1tT6emAAhpwM2Q0rFM5IhF7q+b5wQ4dHP0lw1fb/ G1b9yJFsZDOlSt6j1P5no8T+anMJa9zNLbNxs3fsdiBk0BIURwohPQdExw8vJ34G pG8YqD75DLSPmrpBFtDxGTwaCBVggU7Qkrm7SxvEBtjWp5i8Myt9O3lgmxXJQu7/ UBRwtYdXnF/PGAgGRDs4syS81b9B1DJeZC9+403mShHdgWjlxZnu7becOwhJ/tfC vGI6R5yeQGIgO5wcRX6Y+38FeQM+ZZmtF94YFOl8voLzjtg= -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:41 2026 by rpki-client