This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer File: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer (raw, json) Hash identifier: itysIdnhbEEVICU6HAPKW8ITcRY3zz2dQN2AJHj2bFs= Subject key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3B30276A212BFD3CED1592239DEB9D14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 20 Dec 2025 09:56:10 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202532 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:30:27:6a:21:2b:fd:3c:ed:15:92:23:9d:eb:9d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 20 09:56:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:de:eb:72:61:ae:d2:25:e3:ab:54:be:4f: 47:44:49:cb:a0:08:26:8a:30:ba:26:e4:2d:cd:bc: 62:62:4b:9f:6c:f7:7d:d3:16:9f:5b:e1:99:de:7a: 9a:c2:30:5b:32:46:30:2e:2b:f7:9a:1b:b3:ac:b0: 4d:d7:e9:e1:4e:70:35:32:aa:c5:ab:3c:e4:a8:e6: a4:16:76:25:ce:da:64:2e:9e:56:f4:2e:d3:fa:d1: f0:7b:c3:15:1e:fe:d4:ae:dd:f6:08:ae:c3:99:3b: c7:7d:da:95:e9:7c:37:bd:62:c7:a6:91:b2:b5:b9: 1c:d1:30:80:96:1b:c7:88:6e:01:36:d6:4d:d5:81: 39:8e:78:a0:a0:5b:b9:44:28:e2:66:f1:ff:b6:ad: 4b:e3:36:52:13:90:4e:d0:ed:18:7e:84:b3:c0:a8: 57:23:e2:3e:b5:c7:42:76:1b:ae:da:5e:f9:c5:d1: df:da:e0:6e:0f:81:88:30:6b:41:0c:76:e3:05:88: a9:c1:29:73:26:d6:8b:e9:35:53:72:2b:6f:d3:42: e5:ea:52:ef:d8:34:30:ba:2b:49:6d:96:0a:79:e4: b5:e9:41:92:b8:17:56:57:93:a2:67:01:e7:f3:31: 79:d7:2c:9c:c9:f7:59:39:f6:49:b8:23:bb:ad:aa: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202532 Signature Algorithm: sha256WithRSAEncryption ab:f5:b4:f0:de:31:e6:98:bc:53:07:e4:e7:4f:70:3f:e9:e9: 1b:5c:e8:1a:e1:a1:8d:76:66:08:c5:cd:55:46:93:ac:b9:52: 86:f2:69:b0:44:b0:cd:d9:af:97:f6:98:c5:70:34:db:2e:65: de:df:cb:61:fe:b4:3f:46:42:4b:97:62:d9:45:b1:04:07:cd: 65:c7:2e:0a:9f:5f:2d:0d:c2:9f:9e:02:d3:bb:81:2f:43:10: 77:10:db:56:a7:c4:ea:25:75:94:c2:b9:0d:90:5a:e8:63:1a: 0a:43:b2:6c:59:21:09:3b:c3:d2:c7:a9:4d:1b:f6:75:8d:90: e8:fe:0c:6a:76:3b:f3:9c:9e:4f:83:16:ce:5a:69:5f:a6:d1: 10:87:f8:f8:fe:5a:4e:30:69:4e:fa:fb:bd:7d:47:0b:4a:95: 06:8b:fe:e2:f9:f9:0a:4b:3f:7a:cb:30:f5:4d:da:ee:20:5b: 69:12:6e:65:05:65:89:d6:16:a1:2c:3f:c1:e7:c4:3f:93:b0: 67:72:90:f7:83:b1:8f:e3:be:fb:6d:1e:d2:a5:35:04:86:11: d8:00:a9:a9:b8:f0:47:5c:14:b7:b8:7b:6a:41:b4:a3:79:6b: 00:1e:04:c1:5f:88:2b:9b:f0:55:57:21:f0:c1:8e:96:35:11: f3:2a:ab:ec -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZs7MCdqISv9PO0VkiOd650UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIwMDk1NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmJiN2ViOTdjODEzMGY4ODdkYmU2OTZiNTc5NjYyY2Y5YWEwNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHLe63JhrtIl46tUvk9HREnLoAgm ijC6JuQtzbxiYkufbPd90xafW+GZ3nqawjBbMkYwLiv3mhuzrLBN1+nhTnA1MqrF qzzkqOakFnYlztpkLp5W9C7T+tHwe8MVHv7Urt32CK7DmTvHfdqV6Xw3vWLHppGy tbkc0TCAlhvHiG4BNtZN1YE5jnigoFu5RCjiZvH/tq1L4zZSE5BO0O0YfoSzwKhX I+I+tcdCdhuu2l75xdHf2uBuD4GIMGtBDHbjBYipwSlzJtaL6TVTcitv00Ll6lLv 2DQwuitJbZYKeeS16UGSuBdWV5OiZwHn8zF51yycyfdZOfZJuCO7rap7zwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPK7frl8gTD4h9vmlrV5Ziz5qgamMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzE2NmFl NC0wOWNlLTQ2NjAtYjY5Yi04MzZjOTI5NjMwMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvMTY2YWU0 LTA5Y2UtNDY2MC1iNjliLTgzNmM5Mjk2MzAzNy8xLzhydC11WHlCTVBpSDItYVd0 WGxtTFBtcUJxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXJDANBgkqhkiG9w0BAQsFAAOCAQEAq/W08N4x5pi8 Uwfk509wP+npG1zoGuGhjXZmCMXNVUaTrLlShvJpsESwzdmvl/aYxXA02y5l3t/L Yf60P0ZCS5di2UWxBAfNZccuCp9fLQ3Cn54C07uBL0MQdxDbVqfE6iV1lMK5DZBa 6GMaCkOybFkhCTvD0sepTRv2dY2Q6P4ManY785yeT4MWzlppX6bREIf4+P5aTjBp Tvr7vX1HC0qVBov+4vn5Cks/essw9U3a7iBbaRJuZQVlidYWoSw/wefEP5OwZ3KQ 94Oxj+O++20e0qU1BIYR2ACpqbjwR1wUt7h7akG0o3lrAB4EwV+IK5vwVVch8MGO ljUR8yqr7A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:32 2025 by rpki-client