This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer File: 8XUAF9wNk26aoWaTGTffeJKv6fE.cer (raw, json) Hash identifier: flv9I4Tpk1PsXXFPDWkJhn/ZoawTNsRTCrpKHz2XIvA= Subject key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E3B822ACE31430FCE10F95A3DB59D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205413 IP: 2001:67c:2a28::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3b:82:2a:ce:31:43:0f:ce:10:f9:5a:3d:b5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1750017dc0d936e9aa166931937df7892afe9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:05:95:31:02:8d:87:90:91:9a:64:2d:cf: 8d:95:7d:b6:a8:0f:e1:10:a8:35:99:f4:05:f8:ab: 36:76:28:9f:8c:d2:d8:b3:33:14:1b:57:6a:0b:48: b5:3c:40:0c:b9:8c:c3:13:80:b0:20:f3:f0:fa:14: a7:91:55:ca:4d:ca:c8:00:c3:1b:0f:a7:ea:4a:0c: a7:17:6f:a0:b9:b0:5c:a5:b4:f0:fe:ed:92:86:e6: e8:42:e8:ba:ad:bf:8f:0f:b8:cb:56:71:ac:0e:c4: 86:27:b7:14:3e:bb:ec:f1:45:3b:72:86:5f:84:df: bd:86:b0:f4:68:02:e3:1d:92:f2:3e:8b:bb:05:e6: 0d:73:20:79:19:77:fe:2d:94:b3:96:a1:3f:03:96: f2:db:d6:42:2a:e0:9f:46:3d:74:59:3a:72:16:e4: 75:0c:6b:e5:12:2d:51:a2:84:01:99:2e:06:5e:07: 3a:e9:42:14:2c:27:f8:98:f1:69:55:84:ca:51:62: a4:ce:57:35:4f:14:54:15:13:30:db:d4:55:d6:bc: 59:36:cc:0f:fb:65:15:16:0b:a8:20:e2:49:75:c7: 29:c0:ef:74:e5:40:75:73:d0:57:35:79:5a:12:3a: cc:6c:8e:15:e2:c0:c9:0a:c5:1b:b3:23:ae:37:38: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2a28::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205413 Signature Algorithm: sha256WithRSAEncryption 04:36:e2:21:53:3a:e0:cf:f2:b5:c4:e8:0c:6e:04:a5:51:a5: 1c:db:fe:64:83:46:7f:76:6b:1b:e7:ac:fe:d3:e7:50:e6:38: c8:51:53:d6:a2:5f:92:fd:96:c8:07:c9:5e:92:87:9e:43:24: d5:5a:8a:6a:e4:37:92:34:f5:4a:15:d4:d4:2f:0b:2b:96:ef: f6:ef:07:fc:51:21:1a:5e:d9:58:9a:25:df:c4:d6:31:e7:23: 82:6b:18:04:20:88:96:48:e3:01:92:54:72:64:95:15:d2:c0: c2:18:43:ff:de:03:f7:5f:5d:07:74:9d:25:d4:ea:02:3b:45: c9:9d:1b:e2:2e:bb:f5:87:d6:ed:99:51:06:d8:93:2e:f4:ba: 2d:3d:10:e1:ee:30:b8:21:23:c7:28:e2:4c:21:1e:2f:7b:e9: 70:e6:8d:10:e6:2e:b4:f2:49:36:cc:57:ae:e0:39:9f:69:9a: b3:1a:f6:39:a7:91:a3:21:bc:db:38:41:d5:ee:e1:f9:83:6e: ec:e4:26:9d:89:18:16:5f:90:05:4d:02:a7:5f:d9:d0:bb:e4: 58:d8:00:e9:12:5f:48:18:95:b2:b5:d6:e3:37:5b:02:a9:04: 90:f3:31:92:22:a9:fa:52:fb:90:84:46:71:b4:b7:c2:a1:85: 21:0f:f6:93 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5fjuCKs4xQw/OEPlaPbWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTc1MDAxN2RjMGQ5MzZlOWFhMTY2OTMxOTM3ZGY3ODkyYWZlOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlkFlTECjYeQkZpkLc+NlX22qA/h EKg1mfQF+Ks2diifjNLYszMUG1dqC0i1PEAMuYzDE4CwIPPw+hSnkVXKTcrIAMMb D6fqSgynF2+gubBcpbTw/u2ShuboQui6rb+PD7jLVnGsDsSGJ7cUPrvs8UU7coZf hN+9hrD0aALjHZLyPou7BeYNcyB5GXf+LZSzlqE/A5by29ZCKuCfRj10WTpyFuR1 DGvlEi1RooQBmS4GXgc66UIULCf4mPFpVYTKUWKkzlc1TxRUFRMw29RV1rxZNswP +2UVFguoIOJJdccpwO905UB1c9BXNXlaEjrMbI4V4sDJCsUbsyOuNzgYqwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFPF1ABfcDZNumqFmkxk333iSr+nxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2Y2MTRl Zi01NmFlLTRkZGYtYTNmYy05Mjk5NWZjZjU3YzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvZjYxNGVm LTU2YWUtNGRkZi1hM2ZjLTkyOTk1ZmNmNTdjNi8xLzhYVUFGOXdOazI2YW9XYVRH VGZmZUpLdjZmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCooMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMiZTANBgkqhkiG9w0BAQsFAAOCAQEABDbiIVM64M/ytcToDG4EpVGlHNv+ ZINGf3ZrG+es/tPnUOY4yFFT1qJfkv2WyAfJXpKHnkMk1VqKauQ3kjT1ShXU1C8L K5bv9u8H/FEhGl7ZWJol38TWMecjgmsYBCCIlkjjAZJUcmSVFdLAwhhD/94D919d B3SdJdTqAjtFyZ0b4i679YfW7ZlRBtiTLvS6LT0Q4e4wuCEjxyjiTCEeL3vpcOaN EOYutPJJNsxXruA5n2masxr2OaeRoyG82zhB1e7h+YNu7OQmnYkYFl+QBU0Cp1/Z 0LvkWNgA6RJfSBiVsrXW4zdbAqkEkPMxkiKp+lL7kIRGcbS3wqGFIQ/2kw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:44 2026 by rpki-client