This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.cer (raw, json) Hash identifier: YROSxxqZM0meS40C+4Su+oOudJJJ1mUTfxatOnsTo2Y= Subject key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77590C0C470A12CFEE0901FA750B39C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47998 AS: 212931 IP: 94.228.64.0/20 IP: 185.227.196.0/22 IP: 2a00:1068::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0c:0c:47:0a:12:cf:ee:09:01:fa:75:0b:39:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:d8:96:a2:4b:df:a5:07:ab:26:f2:a0:9b: 78:99:18:b7:82:7c:28:21:e5:30:42:a8:e9:9e:c1: be:b5:00:f0:52:70:3b:c5:e3:e4:94:ac:71:de:58: 99:ae:f9:78:aa:fc:f8:df:28:21:4b:d9:b7:a5:d0: 26:5a:9f:76:ff:45:60:73:83:f4:23:d0:70:9e:35: 6b:f0:5f:e1:c7:94:a8:f9:4f:ed:90:c8:e6:69:db: df:01:e2:00:38:8e:3e:05:ff:0d:82:17:75:f3:2e: 63:43:7f:cb:7b:ef:e7:6e:ad:68:df:ef:aa:13:ba: f8:bd:c2:09:c5:5f:9d:59:96:46:d2:99:85:5b:68: 5e:a5:11:37:b7:d5:dd:ea:05:98:0d:18:a9:f4:d1: 17:1a:8d:8e:ec:c8:54:32:b7:19:71:4a:27:13:3e: 0c:3d:5a:05:6b:5a:06:6b:d1:a7:50:aa:60:6f:a6: 75:b1:0a:8d:3f:bf:ec:c5:f1:80:0a:af:cc:99:6c: 07:6c:1f:cb:9a:34:4d:8f:8e:11:fd:26:c8:87:34: 55:ff:9e:6c:2c:0b:62:2e:e8:fb:fd:0e:fd:38:ff: 8c:4d:eb:fb:50:a5:16:d6:5d:ce:bb:2d:59:bb:59: f9:3b:7e:30:73:6a:05:81:4f:44:54:7a:6d:65:36: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.64.0/20 185.227.196.0/22 IPv6: 2a00:1068::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47998 212931 Signature Algorithm: sha256WithRSAEncryption 26:cb:4f:e8:e3:2e:1e:ba:a6:b7:c2:62:77:50:30:98:07:d6: 6a:8b:ed:c3:7f:62:64:49:89:dc:c1:8b:fe:c8:8b:29:10:34: a3:74:eb:44:9b:23:15:db:48:01:14:59:e0:fb:fd:a4:c3:7e: 2b:3e:c0:ab:ac:d5:5a:3f:e7:d1:bd:bb:85:63:2c:b1:06:d2: a2:f4:37:a2:ae:24:01:74:df:2e:6d:99:d9:3b:fc:da:fa:6e: 2f:08:0e:f7:1a:79:6e:19:84:91:d7:84:2e:82:ab:6c:45:5c: f8:2f:1a:8b:5d:a4:fc:eb:3f:fd:25:8c:e6:a0:b6:a4:4b:e8: bc:6d:93:91:f2:79:ab:d9:ba:04:b8:42:f8:fb:a8:2a:18:d4: dd:9b:3e:e4:2f:bd:cc:4b:ca:ab:53:be:16:a8:95:4f:c0:1b: 04:4b:f2:6d:f6:f2:89:94:96:ce:9e:60:d4:5d:26:8e:bc:6c: 3d:cc:ba:7a:ef:63:39:9e:e2:26:75:6e:3b:eb:08:be:25:fe: 72:4a:4d:3c:08:ae:08:62:e4:2b:d6:8a:25:76:51:37:71:74: 45:7b:c9:85:43:5b:11:7e:d1:b9:32:f8:1a:5d:f9:61:f9:d7: c3:c3:ea:3a:87:40:70:ed:9e:7a:7d:92:c6:76:5f:a2:30:50: 18:39:dd:00 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3WQwMRwoSz+4JAfp1CznDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTY5OTAyYWQ2YjdiZjQ2MDFlZWFhNWU3MjNlZjIzZDcwZmE3NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj7YlqJL36UHqybyoJt4mRi3gnwo IeUwQqjpnsG+tQDwUnA7xePklKxx3liZrvl4qvz43yghS9m3pdAmWp92/0Vgc4P0 I9BwnjVr8F/hx5So+U/tkMjmadvfAeIAOI4+Bf8Nghd18y5jQ3/Le+/nbq1o3++q E7r4vcIJxV+dWZZG0pmFW2hepRE3t9Xd6gWYDRip9NEXGo2O7MhUMrcZcUonEz4M PVoFa1oGa9GnUKpgb6Z1sQqNP7/sxfGACq/MmWwHbB/LmjRNj44R/SbIhzRV/55s LAtiLuj7/Q79OP+MTev7UKUW1l3Ouy1Zu1n5O34wc2oFgU9EVHptZTYtZQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFPFpkCrWt79GAe6qXnI+8j1w+ncUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzRmMjgw MC1hNTU1LTRmODItODkzNi1mMjA4MzY1MDUxY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvNGYyODAw LWE1NTUtNGY4Mi04OTM2LWYyMDgzNjUwNTFjYi8xLzhXbVFLdGEzdjBZQjdxcGVj ajd5UFhENmR4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEXuRAAwQCuePEMA0EAgACMAcDBQAqABBoMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC7fgIDAz/DMA0GCSqGSIb3DQEBCwUAA4IB AQAmy0/o4y4euqa3wmJ3UDCYB9Zqi+3Df2JkSYncwYv+yIspEDSjdOtEmyMV20gB FFng+/2kw34rPsCrrNVaP+fRvbuFYyyxBtKi9DeiriQBdN8ubZnZO/za+m4vCA73 GnluGYSR14QugqtsRVz4LxqLXaT86z/9JYzmoLakS+i8bZOR8nmr2boEuEL4+6gq GNTdmz7kL73MS8qrU74WqJVPwBsES/Jt9vKJlJbOnmDUXSaOvGw9zLp672M5nuIm dW476wi+Jf5ySk08CK4IYuQr1ooldlE3cXRFe8mFQ1sRftG5MvgaXflh+dfDw+o6 h0Bw7Z56fZLGdl+iMFAYOd0A -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:31 2026 by rpki-client