This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.cer (raw, json) Hash identifier: uuakRU6r9C5jSUxHsRE3v/MeyO934wJetWcRYBxrVWA= Subject key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDB29124A2E8020C1D2C52677BCA4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30847 IP: 217.114.48.0/20 IP: 2a01:8900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b2:91:24:a2:e8:02:0c:1d:2c:52:67:7b:ca:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:24:8d:23:9e:b6:7a:fa:e7:36:b6:27:f9: 08:6f:ce:29:2c:d3:a3:d7:f3:2f:0c:d6:bc:f6:94: 2c:cf:dd:ef:ea:5f:1d:85:70:9d:19:c4:2e:c7:1e: b0:fb:ed:d3:5e:b4:31:74:02:c4:17:44:b2:ee:88: 3f:e7:3e:64:66:30:8b:7d:65:75:7c:d2:4c:24:18: 93:19:f8:56:cf:b1:0b:5a:4d:51:1c:6d:53:2f:16: 7a:03:d7:7f:e1:bb:d2:d5:b1:39:80:cb:4b:f6:d6: 93:91:10:77:c0:71:28:ce:c4:70:e0:32:6d:aa:da: 08:a0:3f:49:e4:da:ed:64:b5:4d:c3:b6:0a:3d:e9: 44:02:7f:dc:a4:0d:b2:15:63:90:e1:95:e8:c8:4e: ec:2b:e4:7f:11:e2:60:fe:3a:9b:07:99:fc:ce:53: 39:b3:1c:44:93:2d:3c:fd:d3:75:94:bf:0d:cc:06: bb:42:22:2b:78:17:83:b0:5e:66:55:3f:de:6b:b1: ac:28:4c:d7:f6:e9:3e:aa:8c:17:4f:a7:dc:1a:17: d6:7f:8f:87:4c:7a:11:38:5d:f5:75:8f:93:f0:1a: 07:d9:30:ce:f2:5e:be:fb:79:94:04:2f:c5:3b:c3: d3:52:9a:00:96:9c:83:d0:1c:37:52:da:ee:58:a3: 02:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.114.48.0/20 IPv6: 2a01:8900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30847 Signature Algorithm: sha256WithRSAEncryption 3a:f7:e9:c2:35:5a:1f:85:3d:11:d0:88:68:a6:b3:75:41:34: 25:c8:32:f3:98:15:73:5a:3d:13:74:e5:8f:12:30:41:6e:8e: e9:49:34:2a:31:3a:32:53:dc:68:25:48:5c:8e:0c:07:3c:00: d5:12:b9:9f:a7:b4:39:41:c3:44:90:d6:f4:58:82:2b:d3:a6: c4:5b:54:8e:73:0a:31:5b:37:9c:d0:06:53:9c:b5:2f:a6:fa: 04:15:3f:28:47:58:5c:b8:47:39:af:0d:87:96:00:1a:98:3b: 96:d0:05:44:da:d5:e3:6b:6a:2d:71:65:9d:8e:d4:77:e5:e5: 3a:cc:d1:a2:83:bf:e1:9d:43:93:34:70:47:a1:39:d6:84:04: e1:3f:dd:ab:eb:6b:69:43:b2:9d:a3:51:dc:73:f4:92:b1:9b: cf:8d:cf:5c:aa:a9:d5:87:15:8f:26:b0:da:ca:51:fa:a5:94: 26:9f:3e:7e:e3:f6:1b:0d:fb:4d:d2:b2:77:45:46:b2:e1:9f: 79:70:66:a2:f4:06:06:64:55:e3:d3:1e:5c:e1:bb:98:95:09: e6:49:b2:d8:2c:92:82:86:ff:b7:26:45:fd:ba:8c:1b:7b:e9: f5:78:e0:ca:5e:97:1e:b6:fe:48:62:f9:01:69:b8:f2:19:1f: 89:42:fc:8f -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt87bKRJKLoAgwdLFJne8pLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjc5YTNlODU0ZjAxMDE1ZTlkMGUwM2U4OWQ4MDcwY2M5ZWJjZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk8kjSOetnr65za2J/kIb84pLNOj 1/MvDNa89pQsz93v6l8dhXCdGcQuxx6w++3TXrQxdALEF0Sy7og/5z5kZjCLfWV1 fNJMJBiTGfhWz7ELWk1RHG1TLxZ6A9d/4bvS1bE5gMtL9taTkRB3wHEozsRw4DJt qtoIoD9J5NrtZLVNw7YKPelEAn/cpA2yFWOQ4ZXoyE7sK+R/EeJg/jqbB5n8zlM5 sxxEky08/dN1lL8NzAa7QiIreBeDsF5mVT/ea7GsKEzX9uk+qowXT6fcGhfWf4+H THoROF31dY+T8BoH2TDO8l6++3mUBC/FO8PTUpoAlpyD0Bw3UtruWKMCZwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFPJ5o+hU8BAV6dDgPonYBwzJ68+JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzgzOGRi Mi0wYzg4LTRmZjQtYjliYy04YmFlN2U5ZmQ3NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvODM4ZGIy LTBjODgtNGZmNC1iOWJjLThiYWU3ZTlmZDc1Yy8xLzhubWo2RlR3RUJYcDBPQS1p ZGdIRE1ucno0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQE2XIwMA0EAgACMAcDBQAqAYkAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnh/MA0GCSqGSIb3DQEBCwUAA4IBAQA69+nCNVofhT0R 0IhoprN1QTQlyDLzmBVzWj0TdOWPEjBBbo7pSTQqMToyU9xoJUhcjgwHPADVErmf p7Q5QcNEkNb0WIIr06bEW1SOcwoxWzec0AZTnLUvpvoEFT8oR1hcuEc5rw2HlgAa mDuW0AVE2tXja2otcWWdjtR35eU6zNGig7/hnUOTNHBHoTnWhAThP92r62tpQ7Kd o1Hcc/SSsZvPjc9cqqnVhxWPJrDaylH6pZQmnz5+4/YbDftN0rJ3RUay4Z95cGai 9AYGZFXj0x5c4buYlQnmSbLYLJKChv+3JkX9uowbe+n1eODKXpcetv5IYvkBabjy GR+JQvyP -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:32 2026 by rpki-client