This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer File: 8n7hjEY57qoWphkIzLRcepjV3Ws.cer (raw, json) Hash identifier: QkH5yCfsjG2qDGK5SbPE9UbSHhylEXoAwnCLLN1zu9s= Subject key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123C16E96459EE52C3915138D880BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50036 IP: 193.104.72.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3c:16:e9:64:59:ee:52:c3:91:51:38:d8:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:77:97:b4:df:c2:9a:d9:80:df:e3:f6:b0:3d: 55:54:cb:17:6f:79:9e:53:41:92:02:93:1b:d4:c4: d5:50:78:09:9a:98:80:94:0f:b8:b7:2d:f3:81:37: 8a:94:71:60:ba:71:4f:76:a1:6b:34:33:6d:47:2f: 01:93:36:63:6e:ac:58:41:12:c6:1b:dc:9e:35:95: c6:e3:e9:81:d2:2e:8d:36:5f:5c:31:c9:97:d3:92: ee:a0:ae:4b:08:37:ad:d7:ab:41:6c:c0:6b:d2:7e: cf:a4:96:7a:47:8d:df:d7:17:b7:9d:2b:17:44:c8: 1b:84:95:3b:af:9c:59:ff:37:cb:7a:cd:88:9b:31: 2d:09:b9:f7:84:f4:48:e4:1f:76:13:e2:84:25:65: 80:74:08:57:8f:17:34:e1:c0:92:f2:57:41:53:90: f4:09:cf:99:98:25:3e:66:b3:ce:b0:fd:1d:c6:da: cd:7f:d3:e4:61:7a:7e:d0:20:22:0a:88:b7:99:10: 6b:4e:09:b0:f5:1a:64:2a:69:0a:49:87:f7:01:d1: 7a:cf:ca:be:97:a3:f3:b8:88:55:8d:b6:a5:61:a5: ba:1b:49:fb:c1:06:54:56:ee:b2:67:80:72:8b:40: c3:77:c2:a0:05:e7:4a:71:9c:ff:86:ef:fd:c5:c5: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.72.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50036 Signature Algorithm: sha256WithRSAEncryption 81:19:0a:98:4e:0c:bd:89:78:34:31:5a:2d:c6:76:b6:af:b3: aa:1a:3a:d6:e9:1b:12:fe:25:76:db:3d:37:13:18:e0:9c:8a: 02:93:27:77:48:00:03:0c:1a:4d:10:7f:05:50:8e:d4:b6:54: 6e:37:29:cf:fe:99:d5:11:db:af:07:ba:f9:80:d2:8d:6e:43: 8f:77:77:02:1b:63:ac:7d:59:2d:20:4a:3d:06:fd:9d:65:92: 4b:70:3f:b6:2e:0a:68:f5:8b:68:5f:ff:06:13:7b:58:29:5a: 71:87:6a:d5:2d:47:6e:02:17:f5:32:2b:52:a1:65:5d:96:78: 0e:c7:a9:bd:63:95:2c:cd:c3:31:92:aa:1e:d5:7d:08:80:07: 48:29:2a:cd:24:2f:e1:67:d1:75:ef:56:73:62:2f:e3:58:ab: 18:36:14:24:e6:28:c4:48:fc:9e:23:7f:5d:bf:fd:45:91:75: 94:ae:bd:87:94:d5:eb:5d:c0:d4:07:59:35:99:03:84:5a:fa: 24:59:09:59:b8:8f:e2:8c:ce:7a:86:cd:f0:95:11:17:e4:55: 2f:a5:7d:ac:f8:49:ee:40:d2:73:d9:e5:51:fd:b8:92:b4:de: e0:b5:ae:f7:67:fb:af:9f:7c:c5:9a:0b:10:b1:8d:92:ec:b5: ab:26:38:4b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EjwW6WRZ7lLDkVE42IC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjdlZTE4YzQ2MzllZWFhMTZhNjE5MDhjY2I0NWM3YTk4ZDVkZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHeXtN/CmtmA3+P2sD1VVMsXb3me U0GSApMb1MTVUHgJmpiAlA+4ty3zgTeKlHFgunFPdqFrNDNtRy8BkzZjbqxYQRLG G9yeNZXG4+mB0i6NNl9cMcmX05LuoK5LCDet16tBbMBr0n7PpJZ6R43f1xe3nSsX RMgbhJU7r5xZ/zfLes2ImzEtCbn3hPRI5B92E+KEJWWAdAhXjxc04cCS8ldBU5D0 Cc+ZmCU+ZrPOsP0dxtrNf9PkYXp+0CAiCoi3mRBrTgmw9RpkKmkKSYf3AdF6z8q+ l6PzuIhVjbalYaW6G0n7wQZUVu6yZ4Byi0DDd8KgBedKcZz/hu/9xcXPZQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPJ+4YxGOe6qFqYZCMy0XHqY1d1rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2Y1OGEy YS0wZjI1LTQ4MzEtYmIwOS1hMGRkM2I1ZjE1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZjU4YTJh LTBmMjUtNDgzMS1iYjA5LWEwZGQzYjVmMTVmOC8xLzhuN2hqRVk1N3FvV3Boa0l6 TFJjZXBqVjNXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWhIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDDdDANBgkqhkiG9w0BAQsFAAOCAQEAgRkKmE4MvYl4NDFaLcZ2tq+zqho61ukb Ev4ldts9NxMY4JyKApMnd0gAAwwaTRB/BVCO1LZUbjcpz/6Z1RHbrwe6+YDSjW5D j3d3AhtjrH1ZLSBKPQb9nWWSS3A/ti4KaPWLaF//BhN7WClacYdq1S1HbgIX9TIr UqFlXZZ4DsepvWOVLM3DMZKqHtV9CIAHSCkqzSQv4WfRde9Wc2Iv41irGDYUJOYo xEj8niN/Xb/9RZF1lK69h5TV613A1AdZNZkDhFr6JFkJWbiP4ozOeobN8JURF+RV L6V9rPhJ7kDSc9nlUf24krTe4LWu92f7r598xZoLELGNkuy1qyY4Sw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:10 2026 by rpki-client