This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer File: ci8LM2ULfWSYufWKrFopfpJhSCI.cer (raw, json) Hash identifier: 6qr6nw0aPOA+LBrikTr5W9j6O0ASFCDlRLMRzvmpMZA= Subject key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B2EC312ADC3662ACA08C3FDB87C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56438 IP: 185.216.9.0/24 IP: 2a00:d700::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b2:ec:31:2a:dc:36:62:ac:a0:8c:3f:db:87:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722f0b33650b7d6498b9f58aac5a297e92614822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:be:48:cf:68:14:7f:c3:a2:5b:1e:5a:a3: e1:ff:c7:a5:4d:0d:53:64:9e:49:a0:90:cc:36:ca: fb:d0:da:7f:ce:11:69:46:5c:51:07:d5:44:44:a5: 4a:1b:7d:71:85:bc:28:53:ad:aa:f9:02:20:59:09: 95:14:7b:81:ac:93:6b:06:b7:20:e4:f1:f1:12:a5: cb:66:7d:1e:2d:38:19:8d:b4:bf:6c:f1:19:40:47: 48:5f:b9:30:6c:ab:2d:73:60:c8:c0:ed:5d:3d:37: b7:b8:bd:3b:e5:0b:3e:c8:15:5b:7c:1d:c2:40:e9: 9b:3e:ec:9f:65:fd:0e:27:f7:89:d4:e7:71:3d:73: 16:ee:58:82:36:a0:26:7c:1a:3e:0e:6c:4d:14:63: 1d:d5:56:ef:70:71:e0:98:f2:de:94:b3:7b:f0:f6: 33:a5:cf:4d:15:bf:fb:30:d4:eb:96:da:40:4c:79: dd:b7:4d:70:6d:98:41:eb:da:7d:bc:1f:f3:03:8b: 60:33:2c:25:6a:ed:a0:da:47:98:e6:4b:a5:f7:3a: 39:3f:e7:cd:39:29:cd:9b:75:2f:67:03:5a:0c:03: 92:65:46:43:e7:db:91:af:ca:1a:9c:7b:6b:51:78: fc:45:2d:f4:41:49:db:31:c5:a8:26:47:17:a7:9c: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.9.0/24 IPv6: 2a00:d700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56438 Signature Algorithm: sha256WithRSAEncryption 5f:a3:c7:59:45:be:24:b5:14:ef:b9:78:2b:20:c9:56:26:e9: 89:67:d0:62:bf:3f:62:f7:0c:38:a5:59:23:da:54:fe:16:90: e1:c2:96:5f:10:49:43:3f:43:c2:74:3b:fe:b5:e5:2c:9f:2d: e3:cf:40:a5:98:9a:71:83:46:b5:58:24:b8:6b:35:3b:f8:b8: e3:c7:8c:af:ef:6c:5b:29:ff:a6:ae:04:22:47:9a:a7:13:45: 55:3f:58:c4:a6:49:f5:00:2e:a1:a8:bf:49:6d:c4:73:97:b1: a4:e8:7e:1e:fd:59:7b:ba:65:cb:11:be:88:66:a8:34:97:c9: af:91:c6:31:f4:12:f1:96:c8:35:3b:83:bb:d4:7b:b6:2f:c4: 09:92:f9:12:63:fb:63:8a:b8:f2:e8:05:a5:3b:49:51:a6:00: 64:12:0f:b3:08:58:98:87:67:f9:af:10:3c:92:3f:0e:0e:fc: 3c:05:e7:b0:ab:50:c7:5e:b7:91:da:8f:40:7b:6e:2b:7f:77: 26:d1:cc:3a:08:2c:2c:ef:da:45:b1:59:e8:76:b0:dd:81:d2: de:d8:9a:25:e9:51:c6:f4:73:5f:d6:e2:ab:0a:29:08:7e:f8: 56:f5:39:f9:9d:9a:33:5e:fd:b6:e7:65:a8:24:6e:5e:5c:68: a4:4a:09:93 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WLLsMSrcNmKsoIw/24fFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJmMGIzMzY1MGI3ZDY0OThiOWY1OGFhYzVhMjk3ZTkyNjE0ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodS+SM9oFH/DolseWqPh/8elTQ1T ZJ5JoJDMNsr70Np/zhFpRlxRB9VERKVKG31xhbwoU62q+QIgWQmVFHuBrJNrBrcg 5PHxEqXLZn0eLTgZjbS/bPEZQEdIX7kwbKstc2DIwO1dPTe3uL075Qs+yBVbfB3C QOmbPuyfZf0OJ/eJ1OdxPXMW7liCNqAmfBo+DmxNFGMd1VbvcHHgmPLelLN78PYz pc9NFb/7MNTrltpATHndt01wbZhB69p9vB/zA4tgMywlau2g2keY5kul9zo5P+fN OSnNm3UvZwNaDAOSZUZD59uRr8oanHtrUXj8RS30QUnbMcWoJkcXp5zcDQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHIvCzNlC31kmLn1iqxaKX6SYUgiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2Lzk2ZDE0 Zi0xOGMyLTQzYTgtYmM1OC02NDcyODlhZDVhMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOTZkMTRm LTE4YzItNDNhOC1iYzU4LTY0NzI4OWFkNWEyMi8xL2NpOExNMlVMZldTWXVmV0ty Rm9wZnBKaFNDSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudgJMA0EAgACMAcDBQAqANcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDcdjANBgkqhkiG9w0BAQsFAAOCAQEAX6PHWUW+JLUU 77l4KyDJVibpiWfQYr8/YvcMOKVZI9pU/haQ4cKWXxBJQz9DwnQ7/rXlLJ8t489A pZiacYNGtVgkuGs1O/i448eMr+9sWyn/pq4EIkeapxNFVT9YxKZJ9QAuoai/SW3E c5expOh+Hv1Ze7plyxG+iGaoNJfJr5HGMfQS8ZbINTuDu9R7ti/ECZL5EmP7Y4q4 8ugFpTtJUaYAZBIPswhYmIdn+a8QPJI/Dg78PAXnsKtQx163kdqPQHtuK393JtHM OggsLO/aRbFZ6Haw3YHS3tiaJelRxvRzX9biqwopCH74VvU5+Z2aM179tudlqCRu XlxopEoJkw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:01 2026 by rpki-client