This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.cer (raw, json) Hash identifier: RkPbVS8MB3QcLHjctxAZ3tA0cqWwQHTBXKAHvwVvrXg= Subject key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6877E7B8E7A816317C49F0983C28D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51606 IP: 46.16.136.0/21 IP: 2a04:f140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:7e:7b:8e:7a:81:63:17:c4:9f:09:83:c2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:4c:45:f5:b6:ee:c5:27:55:b2:41:c0:ad: 8a:7c:ac:ff:7a:e0:0b:6e:0b:62:dc:0f:b7:0e:23: b6:4a:b1:c3:8b:09:08:37:ea:53:b6:2d:da:0e:91: 4d:2e:5a:7b:ab:c9:b9:dd:e9:c4:61:47:7a:9d:70: ab:da:10:c6:c9:43:f5:eb:b6:59:0a:30:19:69:37: 29:df:91:85:88:24:8e:a1:01:36:a9:38:3a:c9:ea: b5:3a:86:6e:ab:66:94:c7:ca:03:93:64:5d:28:93: d4:57:93:9d:23:bb:93:81:e2:4d:50:df:86:ee:b2: ee:96:56:68:93:64:55:4c:83:d4:7a:8b:c8:25:a9: 7b:cc:83:42:75:82:01:5c:3e:8b:64:d1:6e:d7:4b: 6a:d1:d0:65:22:ea:25:6a:9f:ab:c8:94:b3:b1:1d: df:f0:a7:b1:dc:8a:f6:af:8a:be:6b:4e:77:7e:a7: 30:52:1c:cb:7c:fc:30:c7:9c:35:79:59:b8:d9:ba: f4:b3:57:74:fe:40:7e:c2:e4:53:16:74:41:be:50: b0:54:62:c6:b6:05:39:7b:0e:04:fb:f6:9d:ac:54: 0a:d7:78:27:30:44:c6:8f:ab:87:44:75:9f:a5:8a: 57:ea:26:72:92:79:ae:7d:8d:f6:ea:f0:61:d4:50: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.136.0/21 IPv6: 2a04:f140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51606 Signature Algorithm: sha256WithRSAEncryption 8b:dc:6d:0a:50:f5:d6:cb:4a:02:de:3e:37:b6:30:b2:4b:ac: 1c:68:21:6d:9a:3d:b0:2f:85:64:9f:01:72:71:49:7d:66:4b: c6:36:ec:90:39:e3:f6:e2:82:95:81:9a:51:09:34:2d:57:3f: 2e:72:b5:d7:09:ef:ca:19:d2:55:b4:96:18:51:bc:57:78:1b: ae:70:bd:8f:2c:f6:e4:e4:4f:47:3f:67:b6:c0:3c:24:46:d0: 73:f6:78:e9:78:d5:48:a3:69:24:97:1d:f9:52:64:44:ea:dd: b9:2d:f2:4b:58:93:04:70:a8:de:74:f5:12:fd:19:7a:ac:67: ac:af:98:bc:8b:72:7e:d9:1c:fc:21:94:0d:8b:e3:ab:b0:7d: 36:ff:b6:8e:3b:6e:d6:63:45:99:eb:39:da:09:63:fc:34:f7: 59:17:57:ad:96:cf:33:2a:82:09:86:81:ee:41:4f:c8:88:d1: dc:51:d3:92:61:07:f3:26:48:1d:ab:27:b1:20:0a:5a:66:e7: 29:af:3c:7e:57:03:9f:41:ad:d3:cd:5c:65:9c:aa:c8:6e:01: b6:75:69:33:77:a3:09:90:7a:92:b7:8f:27:10:36:77:d8:61: 63:85:af:ee:d5:7e:03:58:75:36:76:a9:97:13:97:0c:a5:78: 15:0f:b8:04 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xod+e456gWMXxJ8Jg8KNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjcwNDBjNzQyOWU3YjllMjFhNWZmYzg4ZDkzMmI0NzA3Y2MzYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRlMRfW27sUnVbJBwK2KfKz/euAL bgti3A+3DiO2SrHDiwkIN+pTti3aDpFNLlp7q8m53enEYUd6nXCr2hDGyUP167ZZ CjAZaTcp35GFiCSOoQE2qTg6yeq1OoZuq2aUx8oDk2RdKJPUV5OdI7uTgeJNUN+G 7rLullZok2RVTIPUeovIJal7zINCdYIBXD6LZNFu10tq0dBlIuolap+ryJSzsR3f 8Kex3Ir2r4q+a053fqcwUhzLfPwwx5w1eVm42br0s1d0/kB+wuRTFnRBvlCwVGLG tgU5ew4E+/adrFQK13gnMETGj6uHRHWfpYpX6iZyknmufY326vBh1FBuxwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPJwQMdCnnueIaX/yI2TK0cHzDoAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzU0M2Q0 Yy1hNGQ5LTQxOTYtODkyYy03ZWNhYmFlMThkOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNTQzZDRj LWE0ZDktNDE5Ni04OTJjLTdlY2FiYWUxOGQ4YS8xLzhuQkF4MEtlZTU0aHBmX0lq Wk1yUndmTU9nQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDLhCIMA0EAgACMAcDBQMqBPFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJljANBgkqhkiG9w0BAQsFAAOCAQEAi9xtClD11stK At4+N7YwskusHGghbZo9sC+FZJ8BcnFJfWZLxjbskDnj9uKClYGaUQk0LVc/LnK1 1wnvyhnSVbSWGFG8V3gbrnC9jyz25ORPRz9ntsA8JEbQc/Z46XjVSKNpJJcd+VJk ROrduS3yS1iTBHCo3nT1Ev0ZeqxnrK+YvItyftkc/CGUDYvjq7B9Nv+2jjtu1mNF mes52glj/DT3WRdXrZbPMyqCCYaB7kFPyIjR3FHTkmEH8yZIHasnsSAKWmbnKa88 flcDn0Gt081cZZyqyG4BtnVpM3ejCZB6krePJxA2d9hhY4Wv7tV+A1h1NnaplxOX DKV4FQ+4BA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:34 2026 by rpki-client