This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer File: 8runwtAt4Uiqno-gmhx6K3cKGdw.cer (raw, json) Hash identifier: /p7Kn9z2FQPBDXhBtnGdfueTV/bDI+IFa/FDwYMi1jo= Subject key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2938F94C8BCBAEA0C42361D7625AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51080 IP: 178.249.176.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:93:8f:94:c8:bc:ba:ea:0c:42:36:1d:76:25:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:aa:0a:f8:bf:69:2a:39:33:28:20:8e:c5: 57:a7:29:2e:0c:78:14:10:2a:76:db:d5:7b:a8:de: 4c:7f:90:d0:7a:4a:f3:61:ec:7c:5a:90:21:1e:8f: dd:57:e1:10:85:d9:43:58:4c:36:19:93:18:97:35: b6:0a:79:c7:b1:28:18:58:c0:4c:16:69:5d:5a:f1: cb:0a:cc:fc:08:6f:8e:4b:1e:f3:2d:8d:13:08:d3: f5:f7:0f:29:6a:bf:f3:06:28:33:67:fc:57:28:7b: 39:fb:b1:e6:4c:31:2f:6d:b0:d3:31:a3:1c:92:09: 24:fa:95:62:2b:63:e2:60:6a:d5:a0:7a:9d:14:5a: cb:e3:84:96:1c:b1:89:37:be:4d:f3:c1:e6:ce:49: 79:d8:83:40:79:23:2b:32:60:44:de:99:45:48:58: dd:87:08:30:43:70:bc:2c:4f:a4:41:f5:83:ed:0d: 4f:54:8c:32:86:ed:09:88:51:11:f2:5b:09:fa:03: e1:3e:c1:88:e0:14:42:ee:38:56:27:3e:16:47:38: 02:e6:ea:59:9a:b1:78:19:76:a6:47:63:43:3b:97: b9:8c:36:c5:e8:5b:31:38:cc:bb:56:99:c7:03:57: 1c:5d:56:89:e3:8c:3b:63:37:82:86:9b:c8:0f:8a: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.249.176.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51080 Signature Algorithm: sha256WithRSAEncryption 34:38:1f:d3:6f:64:06:18:9d:52:39:3a:59:7f:c2:b3:8b:f8: 3b:dd:0f:76:3a:ed:68:0b:be:a1:60:82:04:f6:79:05:6a:c3: 54:e1:95:02:21:3d:5e:13:54:b7:36:4c:71:bd:b0:78:80:72: 00:af:d2:4f:4d:c0:5d:3d:de:e5:f8:1c:7f:6f:50:a0:02:13: f2:c8:a0:e7:8e:cd:c6:c3:0f:8a:4e:15:56:07:13:07:c6:11: 82:fc:2a:c9:77:24:de:5e:48:fe:ca:16:42:b4:35:d5:4a:83: a7:63:03:92:db:e6:dc:d7:5e:7e:94:cf:ef:35:d9:96:35:3b: 4f:44:c2:dc:47:71:25:0f:94:e2:f9:2b:3e:e9:6e:79:58:07: e0:0d:0c:5d:ca:f9:f7:54:f9:79:66:d9:07:0f:48:6d:c0:e1: 00:5e:7d:7e:bb:25:fb:4c:6b:84:36:64:5e:78:80:5f:b1:e5: cf:85:7b:48:d8:62:b8:f1:59:09:36:98:67:2b:33:44:85:3a: 06:52:11:d1:08:6d:4d:8d:0a:92:3b:44:2f:77:d3:dd:75:5d: 6a:12:e1:46:63:44:9f:e6:45:33:6f:4a:3c:b5:67:af:86:70: 8f:91:6c:b7:e7:df:bb:bc:45:ac:1d:05:e1:91:4a:35:fd:fe: 95:a1:0a:5a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4opOPlMi8uuoMQjYddiWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmJiYTdjMmQwMmRlMTQ4YWE5ZThmYTA5YTFjN2EyYjc3MGExOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc2qCvi/aSo5MyggjsVXpykuDHgU ECp229V7qN5Mf5DQekrzYex8WpAhHo/dV+EQhdlDWEw2GZMYlzW2CnnHsSgYWMBM FmldWvHLCsz8CG+OSx7zLY0TCNP19w8par/zBigzZ/xXKHs5+7HmTDEvbbDTMaMc kgkk+pViK2PiYGrVoHqdFFrL44SWHLGJN75N88Hmzkl52INAeSMrMmBE3plFSFjd hwgwQ3C8LE+kQfWD7Q1PVIwyhu0JiFER8lsJ+gPhPsGI4BRC7jhWJz4WRzgC5upZ mrF4GXamR2NDO5e5jDbF6FsxOMy7VpnHA1ccXVaJ44w7YzeChpvID4qwzwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPK7p8LQLeFIqp6PoJoceit3ChncMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzk1NzEw OS0zODkyLTRkYzQtODE2YS01YmRkMTQyYmFlNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvOTU3MTA5 LTM4OTItNGRjNC04MTZhLTViZGQxNDJiYWU3NC8xLzhydW53dEF0NFVpcW5vLWdt aHg2SzNjS0dkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDsvmwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHiDANBgkqhkiG9w0BAQsFAAOCAQEANDgf029kBhidUjk6WX/Cs4v4O90Pdjrt aAu+oWCCBPZ5BWrDVOGVAiE9XhNUtzZMcb2weIByAK/ST03AXT3e5fgcf29QoAIT 8sig547NxsMPik4VVgcTB8YRgvwqyXck3l5I/soWQrQ11UqDp2MDktvm3NdefpTP 7zXZljU7T0TC3EdxJQ+U4vkrPulueVgH4A0MXcr591T5eWbZBw9IbcDhAF59frsl +0xrhDZkXniAX7Hlz4V7SNhiuPFZCTaYZyszRIU6BlIR0QhtTY0KkjtEL3fT3XVd ahLhRmNEn+ZFM29KPLVnr4Zwj5Fst+ffu7xFrB0F4ZFKNf3+laEKWg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:01 2026 by rpki-client