This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer (raw, json) Hash identifier: sJCBIpuhlb7CO+FxHmKNJ8g5J5JU4lEyuTSojcWmNd4= Subject key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5C6E4BC247609F822595EF73C298 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.208.220.0/22 IP: 2a09:8ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5c:6e:4b:c2:47:60:9f:82:25:95:ef:73:c2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:f6:9a:12:a9:09:3f:0f:1a:26:a3:ca:df: 5b:8a:3f:65:5e:25:5b:b6:b6:76:95:b7:3d:00:24: f0:37:c8:09:19:a2:9a:17:53:57:d6:1d:74:7e:d8: c4:96:a5:4e:17:0c:bc:54:35:dd:89:b7:7d:75:f4: 68:de:0a:ac:cc:9f:7a:82:af:5e:95:0c:0a:ed:fb: 07:91:af:89:18:11:a1:3d:c5:6a:fb:db:cd:1c:1c: 3d:37:d5:0f:2d:80:b1:a2:10:0e:10:0e:49:89:16: 31:1d:80:1a:d5:ef:b6:4a:b8:a2:7e:41:15:1b:c6: 8d:04:c0:cd:7e:e8:19:7b:ef:d1:ad:13:5f:03:b7: 8d:ff:b8:cf:75:09:79:af:f7:44:c2:72:fd:d3:fc: 94:00:79:b3:0d:1a:7a:91:fc:9b:e0:37:fb:40:05: 9f:53:ea:cd:7b:22:c1:dd:32:11:3f:c9:7e:36:ff: be:1e:df:90:12:96:c4:0b:57:eb:51:9a:1c:5e:d8: b9:f5:fc:95:c5:f4:d7:74:ed:7e:eb:d6:e2:78:81: 9c:f0:91:f2:84:9d:df:fe:b3:f7:6e:e2:c3:02:0e: 47:85:a6:77:ee:69:2a:cc:96:be:d0:12:c8:1d:3d: b4:ae:c0:1b:e2:5a:9e:a4:82:10:22:9a:5f:a1:5e: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.220.0/22 IPv6: 2a09:8ac0::/29 Signature Algorithm: sha256WithRSAEncryption 6e:90:d7:9b:6f:37:4d:84:67:fa:f2:4b:57:7b:c0:fa:37:8a: c1:6e:ee:06:ae:fc:01:4f:02:5a:c1:50:e2:d3:b0:5d:da:bf: 2c:12:76:e4:74:1a:ab:74:70:9f:63:93:41:ba:19:d8:42:67: be:2d:90:8b:8f:3f:6c:35:a4:16:96:fd:27:ec:0a:50:d1:5e: 8e:56:3d:03:8a:35:fb:2b:be:2c:96:e2:82:8a:f3:42:13:f4: 5d:60:e6:ea:86:ac:f9:c9:86:cd:71:82:bd:47:36:2a:39:fd: de:b6:68:0a:45:77:08:9e:80:ec:b6:8c:1b:f9:1a:28:0a:2f: 59:19:f2:04:48:4e:3d:2e:e2:26:29:59:f0:f1:28:94:bd:fb: 4e:b5:27:f9:ba:91:a4:1a:dc:93:6e:c8:15:ed:87:c5:41:75: f1:34:c8:85:b8:88:75:4b:89:ec:b1:d3:55:e1:e3:41:e4:4c: 5e:f8:c3:18:0c:ab:d2:92:2d:41:a0:83:1b:51:1b:b9:ce:f9: 20:91:f9:a0:c0:92:5f:45:fb:be:95:b3:ac:1a:54:4b:de:f3: 82:b0:48:45:7d:cd:3e:bf:ce:d2:8c:16:d2:1f:79:a2:b2:ef: cb:f4:67:e5:35:77:c1:a6:0b:e4:eb:a0:60:a6:68:b0:69:9f: 96:89:cc:19 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57VxuS8JHYJ+CJZXvc8KYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjI0NjM0NmRkYjNlNmJhNmU4OTAwMDViODgxNDhkMmQ2Y2U5OTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtL2mhKpCT8PGiajyt9bij9lXiVb trZ2lbc9ACTwN8gJGaKaF1NX1h10ftjElqVOFwy8VDXdibd9dfRo3gqszJ96gq9e lQwK7fsHka+JGBGhPcVq+9vNHBw9N9UPLYCxohAOEA5JiRYxHYAa1e+2SriifkEV G8aNBMDNfugZe+/RrRNfA7eN/7jPdQl5r/dEwnL90/yUAHmzDRp6kfyb4Df7QAWf U+rNeyLB3TIRP8l+Nv++Ht+QEpbEC1frUZocXti59fyVxfTXdO1+69bieIGc8JHy hJ3f/rP3buLDAg5HhaZ37mkqzJa+0BLIHT20rsAb4lqepIIQIppfoV5bQQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPIkY0bds+a6bokABbiBSNLWzplxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2VlYTlk MS0yMzliLTQzNDktOGI0NS1iNWJhY2RkMDc3OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZWVhOWQx LTIzOWItNDM0OS04YjQ1LWI1YmFjZGQwNzc5ZC8xLzhpUmpSdDJ6NXJwdWlRQUZ1 SUZJMHRiT21YRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudDcMA0EAgACMAcDBQMqCYrAMA0GCSqGSIb3 DQEBCwUAA4IBAQBukNebbzdNhGf68ktXe8D6N4rBbu4GrvwBTwJawVDi07Bd2r8s EnbkdBqrdHCfY5NBuhnYQme+LZCLjz9sNaQWlv0n7ApQ0V6OVj0DijX7K74sluKC ivNCE/RdYObqhqz5yYbNcYK9RzYqOf3etmgKRXcInoDstowb+RooCi9ZGfIESE49 LuImKVnw8SiUvftOtSf5upGkGtyTbsgV7YfFQXXxNMiFuIh1S4nssdNV4eNB5Exe +MMYDKvSki1BoIMbURu5zvkgkfmgwJJfRfu+lbOsGlRL3vOCsEhFfc0+v87SjBbS H3misu/L9GflNXfBpgvk66BgpmiwaZ+WicwZ -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:04 2026 by rpki-client