This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.cer (raw, json) Hash identifier: Z/yPp14uDYuqV9QI90xAS//cOf17aP1+HSRNc2qDzZg= Subject key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103C2A4B80E9599CF58401D9474585 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57626 IP: 37.9.216.0/21 IP: 45.158.240.0/22 IP: 2a07:b700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3c:2a:4b:80:e9:59:9c:f5:84:01:d9:47:45:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:8a:a5:b5:66:63:59:8b:a9:ce:89:68:98: ec:75:a7:f3:79:06:20:b4:5d:95:36:a2:d0:e7:9f: 5a:7d:1f:1f:f2:f5:0b:cf:29:f3:a3:f4:3e:b3:5f: 8f:b8:71:b4:78:1f:da:c4:a8:77:04:a0:e1:5b:fe: 3f:9e:0c:79:06:6e:47:34:c7:23:bc:7a:c3:ba:b3: 52:9d:c4:90:8b:9f:9b:23:57:e3:14:6e:64:13:66: 0c:0a:6e:2c:84:10:bc:d6:1c:cd:5d:d7:47:4d:7a: fd:8a:19:c7:a6:89:d3:54:77:73:39:13:38:d9:bb: f1:76:19:0c:8e:1c:14:bc:9c:ec:10:4e:0b:86:97: d8:70:58:fc:17:02:ca:5a:3b:df:81:79:44:45:f0: f4:33:71:d1:e8:d2:26:09:76:6c:da:7f:32:cc:9b: 87:e7:36:c2:53:bb:68:85:40:e2:fc:e7:91:0f:00: ef:01:a7:28:6d:a4:20:ea:1c:2d:c2:41:f0:0b:70: 43:1b:b9:c9:ea:fe:c4:c3:6c:8b:d1:43:9e:65:2f: f3:36:20:0c:c6:46:54:39:40:82:6c:b9:bd:da:d9: 29:77:73:23:73:68:5a:be:ca:8c:5a:7d:a5:4d:26: 0d:4f:78:2a:80:05:75:3a:09:66:ee:36:b9:fa:a4: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.216.0/21 45.158.240.0/22 IPv6: 2a07:b700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57626 Signature Algorithm: sha256WithRSAEncryption ab:f2:cb:ce:5d:03:2c:c9:9f:78:77:78:ab:84:c5:91:b2:08: 0b:fb:ad:10:11:8e:18:fc:7e:9b:0f:3e:09:e7:9a:f9:82:08: 12:55:1c:d1:e6:ae:e2:af:81:a2:8d:87:9f:73:9a:f2:ba:2e: 7c:77:2d:f0:47:c3:ef:8e:dc:4c:ac:a9:70:e8:36:3c:1d:23: bc:e0:91:2e:a1:2c:1f:78:e4:97:91:09:2e:bd:fc:64:13:92: cc:6f:69:8c:d1:66:07:39:e7:c0:56:c2:1d:89:5a:31:9e:2a: ba:7b:23:a5:18:9a:94:a3:4f:ed:3c:0c:54:68:6b:19:f8:e5: 59:56:da:ca:58:37:fb:ce:08:78:29:f0:6e:5f:ce:8d:59:45: 30:40:35:ab:55:95:67:f6:d4:f6:81:a1:60:d7:0f:85:78:4a: 09:b2:e5:e4:9a:80:84:48:9e:7f:7e:91:d1:12:de:6e:bb:ba: e0:d2:24:a7:9a:75:23:67:9e:a5:04:71:e5:58:c5:03:89:b2: 15:c2:14:87:f4:73:08:00:8d:f2:d0:f1:54:4c:7f:a1:85:1b: 19:80:b8:ae:04:c6:da:aa:e1:aa:63:9e:6d:37:b4:9f:09:17: e5:fb:06:fa:0d:51:01:cb:fc:f0:f4:8d:ae:b7:51:ba:50:79: 63:81:1d:81 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EDwqS4DpWZz1hAHZR0WFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmRlOGViZGRkMDg0MTYzYTkwYjlhZTUwMzk3YjJkYjQ5Y2IxN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCeKpbVmY1mLqc6JaJjsdafzeQYg tF2VNqLQ559afR8f8vULzynzo/Q+s1+PuHG0eB/axKh3BKDhW/4/ngx5Bm5HNMcj vHrDurNSncSQi5+bI1fjFG5kE2YMCm4shBC81hzNXddHTXr9ihnHponTVHdzORM4 2bvxdhkMjhwUvJzsEE4LhpfYcFj8FwLKWjvfgXlERfD0M3HR6NImCXZs2n8yzJuH 5zbCU7tohUDi/OeRDwDvAacobaQg6hwtwkHwC3BDG7nJ6v7Ew2yL0UOeZS/zNiAM xkZUOUCCbLm92tkpd3Mjc2havsqMWn2lTSYNT3gqgAV1Oglm7ja5+qQBDQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPLejr3dCEFjqQua5QOXsttJyxetMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2M1MjY4 Mi03ZWExLTQyZjctODRkYi1hZjFhYzBmMDA0MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvYzUyNjgy LTdlYTEtNDJmNy04NGRiLWFmMWFjMGYwMDQxNy8xLzh0Nk92ZDBJUVdPcEM1cmxB NWV5MjBuTEY2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJQnYAwQCLZ7wMA0EAgACMAcDBQMqB7cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDhGjANBgkqhkiG9w0BAQsFAAOCAQEAq/LL zl0DLMmfeHd4q4TFkbIIC/utEBGOGPx+mw8+Ceea+YIIElUc0eau4q+Boo2Hn3Oa 8roufHct8EfD747cTKypcOg2PB0jvOCRLqEsH3jkl5EJLr38ZBOSzG9pjNFmBznn wFbCHYlaMZ4qunsjpRialKNP7TwMVGhrGfjlWVbaylg3+84IeCnwbl/OjVlFMEA1 q1WVZ/bU9oGhYNcPhXhKCbLl5JqAhEief36R0RLebru64NIkp5p1I2eepQRx5VjF A4myFcIUh/RzCACN8tDxVEx/oYUbGYC4rgTG2qrhqmOebTe0nwkX5fsG+g1RAcv8 8PSNrrdRulB5Y4EdgQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:57 2026 by rpki-client