This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.cer (raw, json) Hash identifier: RX5kEnN23OMzN326+MKJDlODIV45mK3O7S5/n5hx4Ww= Subject key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA51015330B32CC2D298A72C5303875 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.105.14.0/24 IP: 2a13:4100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:10:15:33:0b:32:cc:2d:29:8a:72:c5:30:38:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2c:14:84:46:5e:7e:18:52:d8:fa:aa:c1:df: 65:f8:2d:4c:87:9e:33:25:84:d7:5e:81:b6:87:99: 43:de:ad:dd:3e:86:5a:bd:ee:46:31:13:46:2e:2d: 03:5c:f4:76:f3:33:eb:22:3b:fa:8d:8d:0b:d5:82: 2e:cd:76:9b:06:f8:d4:0b:33:c2:a4:be:a8:e6:ac: 41:c5:f8:21:14:30:79:f3:40:b3:0f:92:a4:0b:d5: 52:67:dd:d8:c9:02:2d:fe:55:17:5d:7e:ba:b9:56: 23:ee:2d:76:cb:eb:69:5f:29:2b:68:2d:dc:4f:c0: c1:09:6c:8c:78:6e:8c:c0:47:58:0e:82:0c:78:a1: f7:82:f4:20:68:0f:d7:91:6f:d1:68:5b:a1:92:42: a3:21:fb:6f:70:82:18:80:de:8a:78:0e:b8:3e:b7: 16:46:cd:9b:98:d4:65:9d:cb:5a:dd:e7:bc:bc:94: 80:c8:dc:ed:b9:6f:67:a9:4a:0f:02:f1:f1:3d:9e: a0:1c:61:3a:24:ae:d4:a1:b0:17:e8:0e:e3:13:c8: 46:0a:4e:29:7f:ff:a7:5d:d8:cd:42:8d:b8:3b:0d: 00:88:b8:97:d9:05:c2:aa:cb:0d:b1:33:26:3d:3e: 87:93:3b:f9:0f:9e:5d:ac:8f:1a:8d:66:e1:5d:13: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.14.0/24 IPv6: 2a13:4100::/29 Signature Algorithm: sha256WithRSAEncryption 11:5a:22:87:b6:85:23:59:ab:9e:f6:a4:5d:d8:d1:34:cf:a4: 49:bb:f5:32:b8:56:0b:fe:de:6d:e3:1d:e6:69:86:11:51:2c: bc:b1:96:49:f1:95:0d:e8:b4:15:64:c1:21:16:d2:f3:f6:87: ba:81:d4:63:6a:78:2d:21:ff:0c:54:b2:3c:38:03:01:9e:0d: 38:71:b6:79:d3:db:ea:0c:03:41:09:38:52:3a:a5:86:59:54: 1b:32:2f:ec:9b:4c:4b:b9:1e:cd:eb:9a:3b:b8:e7:e4:21:77: 13:3b:40:62:db:17:2b:30:ed:2e:30:84:c0:c9:07:fa:e3:16: 4e:76:e0:d1:72:74:6d:ca:fc:4a:14:c8:78:03:e5:f1:51:ec: 5c:2e:2b:22:9d:0a:22:44:c2:5f:e5:de:e2:27:40:7b:46:d4: 00:86:76:22:c7:1f:b5:fd:52:22:1f:57:e1:3e:2b:5c:a4:55: c0:21:bf:8d:b6:36:70:ec:09:a5:d4:51:31:c0:69:1d:1a:55: 28:7f:a8:72:bc:05:e7:19:20:ca:6f:04:75:73:36:6d:04:17: 40:47:41:72:51:1c:57:e0:0f:9f:76:cd:9b:44:53:64:ad:b2: db:a9:38:ed:f2:0c:cd:b9:80:be:22:25:2f:fb:e5:95:0f:d6: 09:f9:6b:39 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pRAVMwsyzC0pinLFMDh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWQyYmE4YTJhOTZhMDdiNWI2NGNhZjg3MzI5MGUyMDc4ZDk2NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoywUhEZefhhS2Pqqwd9l+C1Mh54z JYTXXoG2h5lD3q3dPoZave5GMRNGLi0DXPR28zPrIjv6jY0L1YIuzXabBvjUCzPC pL6o5qxBxfghFDB580CzD5KkC9VSZ93YyQIt/lUXXX66uVYj7i12y+tpXykraC3c T8DBCWyMeG6MwEdYDoIMeKH3gvQgaA/XkW/RaFuhkkKjIftvcIIYgN6KeA64PrcW Rs2bmNRlncta3ee8vJSAyNztuW9nqUoPAvHxPZ6gHGE6JK7UobAX6A7jE8hGCk4p f/+nXdjNQo24Ow0AiLiX2QXCqssNsTMmPT6Hkzv5D55drI8ajWbhXRM0ZwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPHSuooqlqB7W2TK+HMpDiB42WSmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzgwNzVh MC0wYzVlLTRjNzgtYmRiMS1kMTY4OTgwMTZjZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvODA3NWEw LTBjNWUtNGM3OC1iZGIxLWQxNjg5ODAxNmNmZS8xLzhkSzZpaXFXb0h0YlpNcjRj eWtPSUhqWlpLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwWkOMA0EAgACMAcDBQMqE0EAMA0GCSqGSIb3 DQEBCwUAA4IBAQARWiKHtoUjWaue9qRd2NE0z6RJu/UyuFYL/t5t4x3maYYRUSy8 sZZJ8ZUN6LQVZMEhFtLz9oe6gdRjangtIf8MVLI8OAMBng04cbZ509vqDANBCThS OqWGWVQbMi/sm0xLuR7N65o7uOfkIXcTO0Bi2xcrMO0uMITAyQf64xZOduDRcnRt yvxKFMh4A+XxUexcLisinQoiRMJf5d7iJ0B7RtQAhnYixx+1/VIiH1fhPitcpFXA Ib+NtjZw7Aml1FExwGkdGlUof6hyvAXnGSDKbwR1czZtBBdAR0FyURxX4A+fds2b RFNkrbLbqTjt8gzNuYC+IiUv++WVD9YJ+Ws5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:59 2026 by rpki-client