This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer File: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer (raw, json) Hash identifier: Yie81oOScqXQ8vpB6uGKqV22lrfImU7xkGhFJgNr77E= Subject key identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1FBE6647CB20E509A041EB98527605D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 19:04:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201770 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:be:66:47:cb:20:e5:09:a0:41:eb:98:52:76:05:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 19:04:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:83:6e:67:a1:4c:0e:46:e1:d7:a6:fe:7c: cf:e7:c6:81:8c:e4:30:53:09:d2:21:6f:2b:93:81: c6:b7:0e:53:9f:6a:16:8e:3a:23:24:5f:86:83:e9: c9:18:de:f9:93:22:10:00:a1:a8:77:17:bb:45:2d: b7:ce:ff:89:09:7d:0c:a4:df:bb:27:87:17:cf:66: 95:02:49:27:80:4b:3c:b2:b0:0c:0c:b4:34:c5:c1: 73:d9:fc:6d:a4:62:d0:91:35:63:38:ce:ca:cd:02: 34:20:5a:4a:51:d8:01:f1:ee:8c:54:9f:da:d8:41: 95:dd:76:e8:dd:00:73:bd:25:85:46:74:b9:d7:cc: 42:c3:8c:94:41:4a:4a:87:f6:98:ba:7b:d2:c4:8f: b0:91:8f:f6:59:52:00:dd:54:69:80:bb:14:39:ab: d6:5f:62:6f:b6:c6:b6:9d:b6:0c:71:fb:47:bc:ee: 6f:95:a4:9b:5c:ac:29:08:de:71:03:c2:6d:f8:1d: 1a:60:17:9d:11:51:48:09:f7:0c:8d:91:b3:2e:6f: d4:63:a1:ac:87:54:e4:2b:54:46:a5:a2:2d:89:f2: 93:6d:a5:27:d0:76:f1:45:82:2c:ea:73:1d:f5:ca: a9:21:b9:38:b4:96:08:e6:76:4c:d8:22:82:9f:af: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201770 Signature Algorithm: sha256WithRSAEncryption 06:45:f7:de:29:8f:3a:96:be:28:bb:21:5c:29:5d:04:04:3e: 43:e5:92:98:5d:b6:96:c5:6c:93:bd:68:f3:b0:ac:bd:6f:8d: 74:a1:2f:12:cd:9c:7c:72:96:12:1c:c1:27:be:d5:12:23:a5: 05:1c:46:d5:45:6e:82:98:ee:fc:ca:c9:e8:97:bb:18:26:55: 9b:7e:4f:b5:99:f9:98:c9:be:57:4c:7b:b1:e1:a9:90:5d:a4: 09:2c:e2:1b:86:19:5a:50:70:9b:b5:cd:db:bb:1c:9e:b1:3f: 01:20:8f:0f:40:d8:b3:75:35:77:60:f1:80:34:6b:eb:15:aa: 24:96:73:50:77:ca:ec:e4:90:e6:16:21:81:2f:81:c7:d1:61: a4:91:92:ad:69:49:cb:20:6d:49:aa:ba:0a:35:48:05:f2:13: 24:69:08:76:6c:62:48:7e:73:62:f4:a0:47:3f:f0:b3:d7:ae: e6:f0:e0:3c:6d:8a:c0:6b:1b:1b:02:fd:9d:a4:1a:db:62:1e: a1:52:7e:c5:5d:3d:57:e9:d0:9f:ed:e9:25:e7:06:16:56:ad: 99:91:ae:cb:dc:c1:24:0a:ca:c6:16:df:3d:4c:78:03:2f:28: a1:98:da:42:e1:26:ff:ea:90:3c:32:22:fb:e1:ab:e2:34:62: 16:6a:5f:09 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZwfvmZHyyDlCaBB65hSdgXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTkwNDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjVhYTBjNDhkMWM2ZTJkMDJmNTkzMjBmNWQzNDkzYTZlNTg3MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/SDbmehTA5G4dem/nzP58aBjOQw UwnSIW8rk4HGtw5Tn2oWjjojJF+Gg+nJGN75kyIQAKGodxe7RS23zv+JCX0MpN+7 J4cXz2aVAkkngEs8srAMDLQ0xcFz2fxtpGLQkTVjOM7KzQI0IFpKUdgB8e6MVJ/a 2EGV3Xbo3QBzvSWFRnS518xCw4yUQUpKh/aYunvSxI+wkY/2WVIA3VRpgLsUOavW X2Jvtsa2nbYMcftHvO5vlaSbXKwpCN5xA8Jt+B0aYBedEVFICfcMjZGzLm/UY6Gs h1TkK1RGpaItifKTbaUn0HbxRYIs6nMd9cqpIbk4tJYI5nZM2CKCn6+JHwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPJaoMSNHG4tAvWTIPXTSTpuWHBdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzVjZGNi OC1kMDBlLTRlY2UtYWVhMS1kNGM3NGQxMjVmNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNWNkY2I4 LWQwMGUtNGVjZS1hZWExLWQ0Yzc0ZDEyNWY2OC8xLzhscWd4STBjYmkwQzlaTWc5 ZE5KT201WWNGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMUKjANBgkqhkiG9w0BAQsFAAOCAQEABkX33imPOpa+ KLshXCldBAQ+Q+WSmF22lsVsk71o87CsvW+NdKEvEs2cfHKWEhzBJ77VEiOlBRxG 1UVugpju/MrJ6Je7GCZVm35PtZn5mMm+V0x7seGpkF2kCSziG4YZWlBwm7XN27sc nrE/ASCPD0DYs3U1d2DxgDRr6xWqJJZzUHfK7OSQ5hYhgS+Bx9FhpJGSrWlJyyBt Saq6CjVIBfITJGkIdmxiSH5zYvSgRz/ws9eu5vDgPG2KwGsbGwL9naQa22IeoVJ+ xV09V+nQn+3pJecGFlatmZGuy9zBJArKxhbfPUx4Ay8ooZjaQuEm/+qQPDIi++Gr 4jRiFmpfCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:25 2026 by rpki-client