This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer (raw, json) Hash identifier: qIjzIMy+DrAPFYtQzVY8yOhRdW8snhsLwooGE8eeFPQ= Subject key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B363D898B10E0278310BAA10AEFFE01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8880 IP: 193.111.194.0/23 IP: 193.194.140.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3d:89:8b:10:e0:27:83:10:ba:a1:0a:ef:fe:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:b1:3b:65:72:74:92:aa:d9:66:6d:52:be: 79:ba:81:b7:3b:22:75:12:5f:4b:1d:3a:aa:4f:97: 6a:82:40:5f:5a:55:21:a7:5d:ca:50:90:32:ad:92: 79:64:4c:e6:c1:1a:80:7d:6a:c8:5d:1b:02:d6:7f: 8d:4a:90:77:73:b6:f3:73:98:3c:16:89:00:2f:b4: 1d:af:7c:ed:13:65:fe:42:a4:3e:ac:de:b1:31:10: 8e:c7:10:29:21:72:6e:ae:ad:a5:a5:89:fc:76:b6: 79:ee:a8:34:95:9c:e0:9d:34:36:5d:84:60:f7:3f: 62:9d:c4:6c:aa:ee:6c:c1:f9:a3:26:b5:01:bb:4d: 73:f0:4a:89:87:70:05:66:7a:55:43:6d:c0:6e:e5: 6a:ee:7a:d5:9d:6f:01:29:f0:49:a2:54:fd:5a:fb: 2d:7c:cf:df:42:a3:c5:d3:eb:b9:52:dd:65:c1:92: a4:59:0f:5c:5c:ec:29:10:9b:67:21:97:80:98:42: 59:9b:4f:b3:58:ea:00:93:51:9d:6d:28:3b:f0:b8: 54:ae:9a:79:fb:85:14:69:59:ea:69:99:87:10:58: 7e:a1:00:80:e4:6c:6c:fb:45:f7:f0:cb:7f:77:29: 82:19:c5:eb:36:ae:20:6e:7e:c9:9f:0b:78:b8:32: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.194.0/23 193.194.140.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8880 Signature Algorithm: sha256WithRSAEncryption 65:35:56:a0:40:dc:02:98:d4:bc:47:41:b8:94:68:3c:c1:2d: fe:75:c8:70:4c:d0:d2:b0:bd:e3:e6:5b:c1:80:1c:6d:ba:b7: 23:85:23:0f:a1:1a:c1:72:17:5f:24:34:5c:b7:4f:f8:62:76: e5:e8:17:c3:32:26:7c:64:88:c6:c3:25:a1:60:8d:f3:25:79: 8a:09:ac:a8:d4:43:93:28:b1:90:88:1e:d4:6c:a5:b9:a6:ca: d7:33:2d:cb:b3:13:4b:77:4b:7e:2c:ea:96:ac:2c:89:7b:6f: 38:ae:0f:97:e3:4e:f3:81:d2:5d:01:67:82:19:f5:b1:8d:b8: 37:c5:1f:23:42:20:c5:ff:65:4d:25:95:e2:5a:07:cd:bb:e6: 18:3a:f3:ac:c5:31:bc:42:a5:ec:0d:8f:8f:35:03:84:95:a4: 9e:6a:5a:e8:2a:1a:f6:76:64:60:32:69:e1:df:69:41:a1:44: 4c:8a:ea:70:8e:b8:53:d7:0c:74:0c:f9:a1:df:40:a5:a9:4b: c0:e3:63:5f:ed:68:ef:f6:09:11:c3:56:5a:36:71:d9:14:21: e3:37:41:b3:52:23:19:3b:0a:e1:b3:fd:00:b5:9e:a1:24:ee: e0:cf:53:04:c7:a3:9e:9f:be:81:c3:f9:28:f8:a3:26:4f:29: 3b:d1:6e:b3 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7Nj2JixDgJ4MQuqEK7/4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWFmMzhhZDQ0MDY5YmU2NTRkMmU3ODdmOTZjNGU4ZmQyNmE1MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvguxO2VydJKq2WZtUr55uoG3OyJ1 El9LHTqqT5dqgkBfWlUhp13KUJAyrZJ5ZEzmwRqAfWrIXRsC1n+NSpB3c7bzc5g8 FokAL7Qdr3ztE2X+QqQ+rN6xMRCOxxApIXJurq2lpYn8drZ57qg0lZzgnTQ2XYRg 9z9incRsqu5swfmjJrUBu01z8EqJh3AFZnpVQ23AbuVq7nrVnW8BKfBJolT9Wvst fM/fQqPF0+u5Ut1lwZKkWQ9cXOwpEJtnIZeAmEJZm0+zWOoAk1GdbSg78LhUrpp5 +4UUaVnqaZmHEFh+oQCA5Gxs+0X38Mt/dymCGcXrNq4gbn7Jnwt4uDJSGwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFPGvOK1EBpvmVNLnh/lsTo/SalEyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzBmYzNh OC0wY2YxLTRlMDUtOGU2Yy1kN2ExYjNkZjlhMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvMGZjM2E4 LTBjZjEtNGUwNS04ZTZjLWQ3YTFiM2RmOWEwMy8xLzhhODRyVVFHbS1aVTB1ZUgt V3hPajlKcVVUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwW/CAwQBwcKMMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAiKwMA0GCSqGSIb3DQEBCwUAA4IBAQBlNVagQNwCmNS8R0G4lGg8wS3+ dchwTNDSsL3j5lvBgBxturcjhSMPoRrBchdfJDRct0/4Ynbl6BfDMiZ8ZIjGwyWh YI3zJXmKCayo1EOTKLGQiB7UbKW5psrXMy3LsxNLd0t+LOqWrCyJe284rg+X407z gdJdAWeCGfWxjbg3xR8jQiDF/2VNJZXiWgfNu+YYOvOsxTG8QqXsDY+PNQOElaSe alroKhr2dmRgMmnh32lBoURMiupwjrhT1wx0DPmh30ClqUvA42Nf7Wjv9gkRw1Za NnHZFCHjN0GzUiMZOwrhs/0AtZ6hJO7gz1MEx6Oen76Bw/ko+KMmTyk70W6z -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:40 2026 by rpki-client