This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer (raw, json) Hash identifier: jO6RDJz7rdNRvHTcA1t75KUDS3K0ynkGajPeM6vojws= Subject key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13BF8E80EB1D6299C445439B1A5517 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208943 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:bf:8e:80:eb:1d:62:99:c4:45:43:9b:1a:55:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2a8516704f57492835b94d007027328c22fa40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:e9:53:c9:76:c8:03:fc:c7:d9:69:25:a4: 9c:76:b7:e9:b9:8b:f2:d1:e5:98:cc:bf:6e:9a:29: 1a:72:36:ec:c9:34:e0:f0:28:e5:ed:59:b7:81:27: 99:3c:70:bd:d0:ec:31:3f:d6:68:3a:0c:b2:b9:2d: 64:35:d8:3f:aa:98:2b:d7:72:6c:79:fd:de:8c:2d: aa:9e:32:20:ed:ff:c9:a1:3a:90:54:39:f6:15:9d: 47:18:fc:5c:07:6c:f2:32:c4:cb:9f:47:19:03:ef: bf:5f:70:37:a1:54:b7:af:9d:c4:04:49:a2:72:bd: 4f:d7:d8:5c:b9:33:87:a0:25:70:f1:20:8a:20:16: ba:57:ce:c7:3a:70:01:44:21:9f:b6:8b:a3:bc:7c: a1:1a:b2:f1:11:4c:ff:b2:01:6b:3e:a7:72:9f:f7: 0b:ca:c6:50:bd:08:d1:e7:30:51:99:8c:fe:e8:53: 25:51:e5:22:c8:69:1f:bc:62:b0:65:b0:9e:54:41: ca:eb:fb:39:cc:d7:66:ae:4b:c6:cd:d7:4f:0e:85: c8:c3:45:b3:29:92:51:36:e6:0a:dd:4c:19:5d:ca: 6d:bc:4d:41:d1:da:82:4d:c1:8f:fe:f5:30:11:6a: a9:08:ee:c5:06:e9:ad:cc:00:1e:f4:e2:0a:ba:e3: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208943 Signature Algorithm: sha256WithRSAEncryption 1f:06:94:97:fb:b5:28:8b:56:c2:e9:05:46:fd:f8:3d:69:3b: 65:ac:20:a1:23:25:4f:3d:4d:de:05:96:46:ca:ca:53:13:a9: 6f:44:55:70:95:8c:64:d4:48:83:f2:aa:5f:34:3c:95:28:08: 25:49:a5:b7:39:20:93:88:76:7c:8a:27:a1:ea:d5:ac:24:1f: 48:01:f3:eb:a4:82:10:10:80:1f:49:7a:89:34:11:3f:48:24: 98:65:1e:79:a3:c6:46:2d:50:40:7d:da:26:a6:82:a2:cd:56: e1:c0:a1:11:5d:e7:da:73:03:09:f7:3a:87:ec:3b:f3:08:98: 14:b3:5b:ff:44:7a:27:1d:cd:1b:24:89:f1:45:ea:35:ef:fb: be:a7:90:c9:30:c7:85:ec:ec:81:1f:ea:bf:eb:82:35:68:e5: e5:6e:9b:9a:a2:85:97:1f:e8:a2:27:70:44:c2:aa:d2:8b:af: f7:e8:3b:59:c6:1a:83:4e:b5:45:e0:eb:b1:5a:a1:0b:62:98: ff:54:d5:5d:a9:2d:e2:3b:c6:dd:ea:35:a7:2b:d7:a3:c4:b0: 86:58:bf:4a:aa:98:f5:af:c6:ac:e5:c4:1b:65:2d:47:77:04: 0e:4d:a7:28:64:df:1a:22:7a:d2:ef:d3:29:4c:99:86:99:83: 11:07:02:9b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/E7+OgOsdYpnERUObGlUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmE4NTE2NzA0ZjU3NDkyODM1Yjk0ZDAwNzAyNzMyOGMyMmZhNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXvpU8l2yAP8x9lpJaScdrfpuYvy 0eWYzL9umikacjbsyTTg8Cjl7Vm3gSeZPHC90OwxP9ZoOgyyuS1kNdg/qpgr13Js ef3ejC2qnjIg7f/JoTqQVDn2FZ1HGPxcB2zyMsTLn0cZA++/X3A3oVS3r53EBEmi cr1P19hcuTOHoCVw8SCKIBa6V87HOnABRCGftoujvHyhGrLxEUz/sgFrPqdyn/cL ysZQvQjR5zBRmYz+6FMlUeUiyGkfvGKwZbCeVEHK6/s5zNdmrkvGzddPDoXIw0Wz KZJRNuYK3UwZXcptvE1B0dqCTcGP/vUwEWqpCO7FBumtzAAe9OIKuuMx5wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPKoUWcE9XSSg1uU0AcCcyjCL6QOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzI0N2Vi Ny00YmIwLTRhMWItOTU4OS03ZDRkOTQxYTM3ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMjQ3ZWI3 LTRiYjAtNGExYi05NTg5LTdkNGQ5NDFhMzdkMS8xLzhxaFJad1QxZEpLRFc1VFFC d0p6S01JdnBBNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwLzANBgkqhkiG9w0BAQsFAAOCAQEAHwaUl/u1KItW wukFRv34PWk7ZawgoSMlTz1N3gWWRsrKUxOpb0RVcJWMZNRIg/KqXzQ8lSgIJUml tzkgk4h2fIonoerVrCQfSAHz66SCEBCAH0l6iTQRP0gkmGUeeaPGRi1QQH3aJqaC os1W4cChEV3n2nMDCfc6h+w78wiYFLNb/0R6Jx3NGySJ8UXqNe/7vqeQyTDHhezs gR/qv+uCNWjl5W6bmqKFlx/ooidwRMKq0ouv9+g7WcYag061ReDrsVqhC2KY/1TV Xakt4jvG3eo1pyvXo8Swhli/SqqY9a/GrOXEG2UtR3cEDk2nKGTfGiJ60u/TKUyZ hpmDEQcCmw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:13 2026 by rpki-client