This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer File: d8jZS9834PkAzWqMQizbFNl860Y.cer (raw, json) Hash identifier: Nod9/3S103qxcyVbO4GqYD0m0gHNIDXGJfNz2XdNQwU= Subject key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CC0B0C1752CFE7579C51CAD4ED553 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.53.16.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c0:b0:c1:75:2c:fe:75:79:c5:1c:ad:4e:d5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:c2:ff:af:3b:ca:24:d7:e2:f1:c3:e4:5a: 63:6b:f6:ea:7a:dc:18:7d:65:37:83:be:ae:46:9c: 24:56:e7:38:af:e0:92:a3:57:34:0e:b7:a5:70:91: cb:52:52:50:71:33:39:c6:2d:a8:95:a1:f3:6c:aa: 82:80:df:f3:fd:19:a8:d3:d8:20:4e:98:8d:2d:16: ac:65:40:86:4f:71:cc:8f:70:60:b3:bf:9c:43:53: 52:c5:d7:c7:1d:14:d7:94:9e:ab:62:c3:e5:d6:07: c2:58:1e:3a:fa:b7:5c:47:b6:29:11:45:24:14:cc: 0c:40:09:95:9e:fe:38:23:26:e9:a7:a2:21:dc:01: 36:aa:b4:ed:d9:d3:b9:d2:a3:99:c8:84:ee:a0:1f: bc:e3:b0:70:4b:e2:ca:0f:3b:a2:6f:a3:a9:66:34: 4a:03:17:ce:29:ae:fe:70:5d:13:37:c3:5e:7d:ae: b6:b7:16:b5:41:4c:18:d6:bb:20:87:f2:80:0b:9e: ab:db:5e:14:3a:dd:ba:34:c9:ce:31:c1:8f:d6:64: f4:ca:25:92:01:67:b6:fc:2e:77:bd:61:7c:15:76: a8:c5:11:5c:dc:02:f0:d3:48:69:92:e3:2f:d5:24: 52:f9:64:6c:ae:1e:92:9d:f0:16:fa:4e:e9:f9:0b: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.16.0/20 Signature Algorithm: sha256WithRSAEncryption 11:a4:d0:81:7f:93:ac:e1:fc:ee:20:b4:78:3b:83:5c:11:eb: 69:83:fd:4a:1f:c5:d5:b4:eb:90:f0:fd:ec:1c:52:06:46:a8: 41:53:4b:11:6d:4a:5f:ba:67:f1:39:08:de:39:21:be:58:7f: 48:94:56:90:fd:5c:b4:a2:9e:33:41:71:61:03:89:11:b5:27: 7b:75:d8:c3:83:21:2c:b5:0b:8c:49:10:f1:b0:e9:68:d8:6a: 46:51:19:57:ec:86:93:95:78:bc:79:30:fe:10:50:9e:07:6e: 42:39:8a:e1:8d:4e:a8:16:96:6d:f0:90:3b:1e:74:7b:89:f0: 36:6e:b8:9a:12:da:49:4c:ad:ce:a7:6c:ff:f8:a8:9b:09:45: e2:c5:bb:23:13:24:4b:fa:0e:62:1a:fa:ea:83:35:2b:a0:73: b7:af:eb:c1:4b:77:c7:0f:b8:ad:2f:21:5e:21:a9:be:db:c2: a2:25:0e:a9:7e:2a:dd:c0:2b:8c:1d:e6:c5:50:06:14:8e:3d: 87:08:c8:9d:77:b9:c8:0e:d1:2f:5f:b6:32:02:4c:30:b0:a4: 96:66:c6:51:ff:27:44:87:42:37:03:d2:35:bf:87:e8:ea:90: 9c:79:4f:29:3c:bc:0a:59:ba:03:e8:ce:df:d2:f8:4d:c2:0d: 6d:10:4e:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XMCwwXUs/nV5xRytTtVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2M4ZDk0YmRmMzdlMGY5MDBjZDZhOGM0MjJjZGIxNGQ5N2NlYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDHC/687yiTX4vHD5Fpja/bqetwY fWU3g76uRpwkVuc4r+CSo1c0DrelcJHLUlJQcTM5xi2olaHzbKqCgN/z/Rmo09gg TpiNLRasZUCGT3HMj3Bgs7+cQ1NSxdfHHRTXlJ6rYsPl1gfCWB46+rdcR7YpEUUk FMwMQAmVnv44Iybpp6Ih3AE2qrTt2dO50qOZyITuoB+847BwS+LKDzuib6OpZjRK AxfOKa7+cF0TN8Nefa62txa1QUwY1rsgh/KAC56r214UOt26NMnOMcGP1mT0yiWS AWe2/C53vWF8FXaoxRFc3ALw00hpkuMv1SRS+WRsrh6SnfAW+k7p+QtR7wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHfI2UvfN+D5AM1qjEIs2xTZfOtGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzZjZTUz Yy03NjcwLTQ3YTctODFhZS01NGMwYWU2MTc2ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvNmNlNTNj LTc2NzAtNDdhNy04MWFlLTU0YzBhZTYxNzZkNC8xL2Q4alpTOTgzNFBrQXpXcU1R aXpiRk5sODYwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEwjUQMA0GCSqGSIb3DQEBCwUAA4IBAQARpNCB f5Os4fzuILR4O4NcEetpg/1KH8XVtOuQ8P3sHFIGRqhBU0sRbUpfumfxOQjeOSG+ WH9IlFaQ/Vy0op4zQXFhA4kRtSd7ddjDgyEstQuMSRDxsOlo2GpGURlX7IaTlXi8 eTD+EFCeB25COYrhjU6oFpZt8JA7HnR7ifA2briaEtpJTK3Op2z/+KibCUXixbsj EyRL+g5iGvrqgzUroHO3r+vBS3fHD7itLyFeIam+28KiJQ6pfirdwCuMHebFUAYU jj2HCMidd7nIDtEvX7YyAkwwsKSWZsZR/ydEh0I3A9I1v4fo6pCceU8pPLwKWboD 6M7f0vhNwg1tEE59 -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:21 2026 by rpki-client