This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer File: AV8OZlqcdCI8S_4nChZZreTO8x8.cer (raw, json) Hash identifier: QS/UxIAf0dzhnRAtsLny/JucuKScsmWDE8U5Gx/pmxo= Subject key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B872C5D726E117E67F957E6D621FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210601 IP: 80.244.1.0/24 IP: 185.137.167.0/24 IP: 2a05:2dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:87:2c:5d:72:6e:11:7e:67:f9:57:e6:d6:21:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:5b:71:1a:ae:ea:ee:de:0d:ab:42:23:18: c6:39:1b:d2:30:58:3e:d1:ee:19:7a:a4:c5:f8:1b: 85:74:33:32:8d:09:3c:d6:2e:bd:0f:19:44:e9:35: 18:8a:4f:81:32:71:71:1b:fe:46:99:3f:9d:e2:d6: df:72:f3:9a:3b:c0:d4:ba:b0:a7:83:5f:c4:42:ca: 8b:73:67:28:cd:72:78:cd:ec:f4:d3:0e:9c:7f:0e: a8:f2:c2:49:bb:08:64:14:1f:d5:fd:50:06:4b:32: cd:50:b7:dd:25:2c:ce:f6:73:d5:60:5e:b3:69:86: 0e:0d:26:1f:05:f1:7f:a7:d0:81:ec:4b:4c:a0:3b: 1c:a9:f7:f9:0b:0a:00:53:67:8f:d7:97:3e:f5:e7: 2e:e7:0c:d7:3e:df:06:c9:32:9b:e2:f4:cd:73:63: 73:96:1e:1c:b0:54:a7:25:ee:20:1f:e6:ef:e9:91: 6b:23:e2:1a:ef:b5:ea:fd:67:6e:bf:a0:ad:0e:83: 8e:74:dd:6f:c9:c0:e9:26:c7:a0:f6:8b:c8:28:48: 7f:2a:51:ed:5a:17:3b:4b:99:08:b1:10:9f:d6:23: ce:db:fa:21:d6:1b:77:93:2f:50:7d:6e:9e:9d:42: 67:2e:6a:ed:89:fe:35:2f:0f:8a:0c:49:2c:a8:c8: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.1.0/24 185.137.167.0/24 IPv6: 2a05:2dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210601 Signature Algorithm: sha256WithRSAEncryption 18:a2:c9:b3:6e:ad:e2:40:a3:ce:aa:47:8c:36:3b:83:47:23: 2f:21:f6:1c:73:f6:6d:a5:1f:6a:5b:1b:9d:c7:43:da:88:0b: 4c:b5:f2:d4:6e:a5:0e:5d:b7:27:29:75:89:5c:60:69:23:18: 8c:1f:50:5b:3b:62:28:a2:0f:d1:23:2a:28:24:44:65:b2:11: 9f:2b:90:b5:18:c2:10:66:09:ff:e5:d7:0c:f7:2c:e8:52:f1: 4a:0a:03:e2:9a:91:36:b4:d0:5d:b1:c5:ca:b8:02:15:a5:f6: 84:55:af:13:52:a2:0c:47:de:d7:e9:d7:db:6a:87:56:74:2e: 40:39:13:f5:7e:7c:12:2e:07:5b:bc:e2:f9:45:04:29:53:cc: fb:1c:36:79:a6:a2:29:07:d6:d6:38:e4:c9:9d:d4:6e:60:1f: 49:9d:c9:d5:3e:ae:aa:ce:93:bd:ff:4c:e6:76:9e:dc:d8:08: e6:df:ce:7e:3f:ad:ac:c6:17:d2:8f:3f:98:35:3a:ec:05:e7: 14:f9:55:33:cc:50:a3:6c:a3:22:79:d3:2d:7e:c7:75:e6:3d: e1:30:04:cb:63:39:73:8b:d6:26:76:f0:8d:5c:13:b4:ea:6f: 14:1c:ff:20:16:d9:fd:eb:b1:10:99:f0:14:c4:b3:e2:60:93: 00:15:bf:63 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9W4csXXJuEX5n+Vfm1iH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTVmMGU2NjVhOWM3NDIyM2M0YmZlMjcwYTE2NTlhZGU0Y2VmMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQdbcRqu6u7eDatCIxjGORvSMFg+ 0e4ZeqTF+BuFdDMyjQk81i69DxlE6TUYik+BMnFxG/5GmT+d4tbfcvOaO8DUurCn g1/EQsqLc2cozXJ4zez00w6cfw6o8sJJuwhkFB/V/VAGSzLNULfdJSzO9nPVYF6z aYYODSYfBfF/p9CB7EtMoDscqff5CwoAU2eP15c+9ecu5wzXPt8GyTKb4vTNc2Nz lh4csFSnJe4gH+bv6ZFrI+Ia77Xq/Wduv6CtDoOOdN1vycDpJseg9ovIKEh/KlHt Whc7S5kIsRCf1iPO2/oh1ht3ky9QfW6enUJnLmrtif41Lw+KDEksqMjV2QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAFfDmZanHQiPEv+JwoWWa3kzvMfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzQ2YmQz My1iNTI3LTQ2MmUtODFlMC04Njc3YjNkZDg3MDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNDZiZDMz LWI1MjctNDYyZS04MWUwLTg2NzdiM2RkODcwNy8xL0FWOE9abHFjZENJOFNfNG5D aFpacmVUTzh4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAUPQBAwQAuYmnMA0EAgACMAcDBQMqBS3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2qTANBgkqhkiG9w0BAQsFAAOCAQEAGKLJ s26t4kCjzqpHjDY7g0cjLyH2HHP2baUfalsbncdD2ogLTLXy1G6lDl23Jyl1iVxg aSMYjB9QWztiKKIP0SMqKCREZbIRnyuQtRjCEGYJ/+XXDPcs6FLxSgoD4pqRNrTQ XbHFyrgCFaX2hFWvE1KiDEfe1+nX22qHVnQuQDkT9X58Ei4HW7zi+UUEKVPM+xw2 eaaiKQfW1jjkyZ3UbmAfSZ3J1T6uqs6Tvf9M5nae3NgI5t/Ofj+trMYX0o8/mDU6 7AXnFPlVM8xQo2yjInnTLX7HdeY94TAEy2M5c4vWJnbwjVwTtOpvFBz/IBbZ/eux EJnwFMSz4mCTABW/Yw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:01 2026 by rpki-client