This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer File: 8cgdjkJn0tRetlJQoqSCULX7Uls.cer (raw, json) Hash identifier: L5fKykuc1SecJ65ZTyfq3eAoWTl5+gvt+pWfj77ZW6k= Subject key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED094333D171800FFBBFC929B139FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206464 IP: 185.165.72.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:09:43:33:d1:71:80:0f:fb:bf:c9:29:b1:39:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:24:2c:69:a7:5a:75:45:65:88:21:e7:b1: 87:11:5a:d9:4d:1d:84:50:5b:61:01:f9:b7:5d:d9: 2f:6b:0a:a1:13:81:46:2b:cc:92:03:eb:e8:c2:f8: 26:d6:51:2b:bd:18:8d:0d:ec:62:96:6c:bc:cb:f0: 8f:cf:0d:30:62:3c:16:bf:59:ac:93:ff:86:1f:21: 98:c8:62:52:81:95:76:38:7a:f8:a2:e6:91:0d:26: 62:20:f3:7b:1b:17:13:35:d0:70:74:cf:d9:86:d5: 80:0f:d9:ec:b7:4c:82:7a:9d:d4:fb:7e:03:1f:7d: 0f:3d:aa:34:ab:fa:18:cb:54:87:fe:b5:65:4b:c7: 7d:1b:87:23:5f:56:ea:48:4a:f7:7e:95:d2:65:1c: 0b:b9:69:7f:ba:b8:97:91:5e:8f:d9:d3:bc:52:60: 09:0a:f9:f7:71:57:b2:eb:63:29:94:72:22:0c:55: 7e:bc:4a:40:e1:f5:b7:3c:21:3d:38:8c:e2:53:c3: d5:9e:ca:17:bc:ac:a6:60:e5:ab:1b:5f:5f:61:65: 2a:86:f5:7b:a5:51:44:ed:1e:1f:f1:2a:c6:96:d6: a2:c3:9d:14:c7:53:b2:35:ee:1e:00:bb:0d:55:37: ca:0d:17:26:66:e7:35:7e:cb:36:fe:4d:63:79:29: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.72.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206464 Signature Algorithm: sha256WithRSAEncryption 06:76:33:a9:21:53:79:49:9c:71:11:5c:6b:68:6e:06:5d:0f: 67:c9:ea:20:1a:ab:37:90:57:20:cb:17:fc:e4:b1:b5:82:ba: e2:26:4a:fc:21:da:37:05:57:47:ca:be:03:f5:2e:6b:12:ee: d4:3f:98:33:46:4b:50:7a:d2:fd:2e:19:d5:ee:eb:b3:ff:a0: 2c:42:3b:d8:6b:73:eb:57:6c:47:a5:4d:7a:2d:27:94:d6:40: 13:03:35:c1:1b:05:b5:dd:97:19:6e:3b:74:a3:a3:c1:2e:04: fe:59:5b:95:1b:17:09:2a:61:f1:64:23:57:7a:16:17:5c:17: 9b:9a:a8:ec:08:bb:f5:4e:1b:4f:30:4c:51:c2:26:02:32:1f: 53:37:66:84:bf:e2:10:88:fd:84:55:44:47:72:51:89:d1:32: 5c:45:f9:b8:4a:76:cd:cd:f2:f3:e7:10:e0:a3:5e:0e:f5:68: 03:e7:a6:6a:62:8c:01:0b:ff:e0:03:ab:99:cc:ce:e7:ef:c4: 07:6f:db:a7:dd:51:51:5b:5b:3b:7c:c2:78:b0:7b:a0:9c:e6: f4:25:22:02:2b:f4:38:c7:32:ac:63:cc:4f:eb:dd:f5:8e:4f: 81:f4:59:80:6e:86:4e:80:d4:5c:3e:11:36:37:24:e4:23:d2: 76:b3:55:82 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87QlDM9FxgA/7v8kpsTn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM4MWQ4ZTQyNjdkMmQ0NWViNjUyNTBhMmE0ODI1MGI1ZmI1MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T0kLGmnWnVFZYgh57GHEVrZTR2E UFthAfm3XdkvawqhE4FGK8ySA+vowvgm1lErvRiNDexilmy8y/CPzw0wYjwWv1ms k/+GHyGYyGJSgZV2OHr4ouaRDSZiIPN7GxcTNdBwdM/ZhtWAD9nst0yCep3U+34D H30PPao0q/oYy1SH/rVlS8d9G4cjX1bqSEr3fpXSZRwLuWl/uriXkV6P2dO8UmAJ Cvn3cVey62MplHIiDFV+vEpA4fW3PCE9OIziU8PVnsoXvKymYOWrG19fYWUqhvV7 pVFE7R4f8SrGltaiw50Ux1OyNe4eALsNVTfKDRcmZuc1fss2/k1jeSkBbQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPHIHY5CZ9LUXrZSUKKkglC1+1JbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2ViYWI0 Ny02MDkxLTRiMTQtODAwOC0zNjJiYjU0NDYwODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZWJhYjQ3 LTYwOTEtNGIxNC04MDA4LTM2MmJiNTQ0NjA4NS8xLzhjZ2Rqa0puMHRSZXRsSlFv cVNDVUxYN1Vscy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuaVIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMmgDANBgkqhkiG9w0BAQsFAAOCAQEABnYzqSFTeUmccRFca2huBl0PZ8nqIBqr N5BXIMsX/OSxtYK64iZK/CHaNwVXR8q+A/UuaxLu1D+YM0ZLUHrS/S4Z1e7rs/+g LEI72Gtz61dsR6VNei0nlNZAEwM1wRsFtd2XGW47dKOjwS4E/llblRsXCSph8WQj V3oWF1wXm5qo7Ai79U4bTzBMUcImAjIfUzdmhL/iEIj9hFVER3JRidEyXEX5uEp2 zc3y8+cQ4KNeDvVoA+emamKMAQv/4AOrmczO5+/EB2/bp91RUVtbO3zCeLB7oJzm 9CUiAiv0OMcyrGPMT+vd9Y5PgfRZgG6GToDUXD4RNjck5CPSdrNVgg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:46 2026 by rpki-client