This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer File: 8p5p65n-wSVjcxHUMFL3kx2P3TI.cer (raw, json) Hash identifier: k1oY1+icteJjz+GmQzct96Di3VG1pJgyOhY0h8gq5bA= Subject key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0BA17CF26DD53B837042C6778D72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.108.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0b:a1:7c:f2:6d:d5:3b:83:70:42:c6:77:8d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29e69eb99fec125637311d43052f7931d8fdd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:43:ca:a5:47:eb:f0:c9:54:c8:d6:ac:00: d8:47:98:4d:61:41:7d:b4:91:68:fc:7f:a2:aa:25: 09:ae:c6:f1:0f:f1:34:c5:86:36:b6:ac:e9:72:ca: 50:7f:ae:20:85:72:c2:2a:64:d6:c9:df:73:2c:95: f8:21:96:36:65:19:21:97:cb:98:12:c7:d4:45:20: cb:10:ff:09:2b:73:ae:68:94:8f:bb:32:d4:da:46: dd:64:13:5d:4c:69:82:ec:3b:75:1d:ab:fe:e2:ab: 1d:7c:12:30:7a:fa:04:fc:89:d7:0f:e9:4b:91:43: 89:6e:c8:d3:a8:6e:71:1b:eb:d6:14:97:53:88:6f: 7a:35:2c:c1:05:9a:b9:09:bc:ef:66:fb:66:d6:f3: da:a5:38:e6:a4:f1:ba:85:59:9e:1e:1d:ab:39:86: fb:45:54:67:75:a6:70:29:59:af:e9:92:15:48:d8: fc:92:3e:ad:a9:44:be:07:54:67:66:74:f1:09:28: 1b:9c:74:1f:c8:86:03:1d:f2:6d:9d:2e:70:8b:c0: 05:93:06:a3:ac:02:a1:9d:53:ff:4c:75:40:98:7b: 24:b2:3f:74:c5:61:6d:4b:3a:0e:02:2b:a1:ea:53: ad:d5:97:6f:13:1f:1f:c8:a9:5e:c5:da:aa:ad:bd: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.222.0/24 Signature Algorithm: sha256WithRSAEncryption 52:08:4a:32:cc:75:70:1e:cc:f0:12:e4:02:62:d4:1c:40:a2: 73:05:7b:76:d1:46:2a:2e:1b:1c:8f:43:74:5b:0a:a2:94:17: 07:9e:57:a1:a0:44:2f:a3:40:61:23:4b:5d:82:41:6c:20:88: 65:bd:86:47:5c:86:ee:74:e9:23:b7:71:22:57:e7:2d:f0:ac: f4:c5:9f:59:37:35:d5:f5:41:42:13:bf:4f:59:77:da:f9:32: 2a:43:7b:6b:7e:16:29:c1:59:81:72:8a:b0:4d:48:01:88:32: 5a:f0:11:dd:18:1e:1f:46:6a:64:0f:69:b0:94:4c:99:c1:81: 98:fd:98:04:30:d1:d6:0b:d7:cd:51:73:81:87:3a:e1:60:db: 6f:33:f3:c3:64:4a:bc:63:4f:c7:ec:6a:b7:c8:22:d4:c6:59: 40:cc:e8:95:8a:11:63:97:f1:4d:58:41:fe:bf:54:c4:be:81: c0:45:6b:ba:7d:31:33:33:ad:de:8e:67:c5:3a:19:f8:1d:d8: 47:29:b0:29:a9:ea:d9:2d:60:ff:92:11:92:a9:19:c1:67:a3: 27:04:90:df:fe:53:52:7a:47:d3:46:77:1e:ac:60:c7:15:4b: 0d:65:1f:cb:31:30:c6:bc:b8:c6:26:a0:e2:d0:95:e2:6a:e6: 4a:32:f4:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt26wuhfPJt1TuDcELGd41yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjllNjllYjk5ZmVjMTI1NjM3MzExZDQzMDUyZjc5MzFkOGZkZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlRDyqVH6/DJVMjWrADYR5hNYUF9 tJFo/H+iqiUJrsbxD/E0xYY2tqzpcspQf64ghXLCKmTWyd9zLJX4IZY2ZRkhl8uY EsfURSDLEP8JK3OuaJSPuzLU2kbdZBNdTGmC7Dt1Hav+4qsdfBIwevoE/InXD+lL kUOJbsjTqG5xG+vWFJdTiG96NSzBBZq5CbzvZvtm1vPapTjmpPG6hVmeHh2rOYb7 RVRndaZwKVmv6ZIVSNj8kj6tqUS+B1RnZnTxCSgbnHQfyIYDHfJtnS5wi8AFkwaj rAKhnVP/THVAmHsksj90xWFtSzoOAiuh6lOt1ZdvEx8fyKlexdqqrb3BtwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPKeaeuZ/sElY3MR1DBS95Mdj90yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzljODI2 ZC05M2I4LTRjM2EtYTIxZi01MTM0MDNlM2Q4MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvOWM4MjZk LTkzYjgtNGMzYS1hMjFmLTUxMzQwM2UzZDgyMC8xLzhwNXA2NW4td1NWamN4SFVN Rkwza3gyUDNUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWzeMA0GCSqGSIb3DQEBCwUAA4IBAQBSCEoy zHVwHszwEuQCYtQcQKJzBXt20UYqLhscj0N0WwqilBcHnlehoEQvo0BhI0tdgkFs IIhlvYZHXIbudOkjt3EiV+ct8Kz0xZ9ZNzXV9UFCE79PWXfa+TIqQ3trfhYpwVmB coqwTUgBiDJa8BHdGB4fRmpkD2mwlEyZwYGY/ZgEMNHWC9fNUXOBhzrhYNtvM/PD ZEq8Y0/H7Gq3yCLUxllAzOiVihFjl/FNWEH+v1TEvoHARWu6fTEzM63ejmfFOhn4 HdhHKbApqerZLWD/khGSqRnBZ6MnBJDf/lNSekfTRncerGDHFUsNZR/LMTDGvLjG JqDi0JXiauZKMvR0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:54 2026 by rpki-client