This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer (raw, json) Hash identifier: 0lNNoQVh3lsX+DXYr49Ot6iqV7QQVxCJc7Y1nEiZI6U= Subject key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA52436411ADFF852EE88F2EF9B4684 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60171 IP: 185.10.164.0/22 IP: 185.35.140.0/22 IP: 2a00:dd60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:24:36:41:1a:df:f8:52:ee:88:f2:ef:9b:46:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:55:fe:e3:6f:9a:a9:be:46:5a:c9:35:94: 7d:e4:f4:a1:78:8a:a4:01:14:81:f0:f5:d9:e8:0a: 6c:11:ef:1a:70:b0:a0:6c:38:35:c1:d9:b5:af:b7: 84:67:81:fe:98:ef:fc:a5:cb:02:b5:b0:68:49:a3: 1e:f3:15:25:6e:a4:d2:01:f3:5a:14:c9:89:14:df: 93:61:a7:7a:86:d6:8c:2d:8f:7f:09:0d:6c:2e:a1: f1:f3:d7:55:60:44:7d:90:da:b1:be:a4:3e:4b:15: a1:22:41:f0:08:8b:07:8b:ee:29:2f:3d:a2:01:35: e5:67:fd:6e:04:a8:2e:4a:28:9f:e5:ed:22:75:b6: 37:15:19:0d:94:73:7b:c1:5f:b3:8c:60:d8:a8:ed: 1b:55:34:0b:82:b9:fe:cb:01:82:4e:b9:c8:68:05: b4:1a:95:26:39:a3:3e:d6:57:74:bb:82:ad:e1:a5: 49:e4:7b:65:44:19:fc:84:eb:2b:b3:71:5b:7b:72: 4b:cd:fe:69:60:0d:43:00:6a:4d:1b:12:c3:34:80: b5:9e:1e:0e:db:f4:c2:01:e5:b3:bf:7f:04:37:12: fe:34:cc:66:04:24:10:ed:98:ba:cb:f5:dc:9b:a6: 7a:43:f5:9c:0b:87:5b:21:a6:59:10:71:e6:f3:0f: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.164.0/22 185.35.140.0/22 IPv6: 2a00:dd60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60171 Signature Algorithm: sha256WithRSAEncryption 3d:cd:7e:6e:4f:b4:b5:41:37:e5:67:1b:08:1c:49:74:a3:17: 88:33:98:ee:df:be:50:36:16:e5:cf:ed:67:80:80:31:39:09: 19:e5:52:e5:c2:db:58:bc:72:5d:85:c7:04:8b:6b:d7:cb:c2: c8:ce:44:dc:63:92:de:f2:c2:a8:88:df:b9:83:2d:40:c9:e1: 33:33:ef:dc:8e:90:bb:b1:a6:bf:3d:64:07:29:46:a4:dc:4b: ad:77:81:34:2d:78:5c:6c:db:62:d5:3a:27:b4:5d:f0:ed:48: 31:97:a9:fd:68:4f:62:a6:fa:39:3f:ce:f7:09:47:4b:01:30: 37:52:02:80:b8:fb:df:77:00:48:c3:3b:ce:f8:71:91:bf:ec: 4b:97:2c:59:d2:1c:a8:80:38:91:f1:e1:f6:8e:4d:8f:0b:43: be:23:60:f6:04:00:c5:48:ce:7f:49:82:c1:41:43:ee:4d:97: 78:d8:d4:bf:54:89:1e:d8:c9:75:cc:2b:e3:ef:8b:0f:3a:ae: f6:ec:8c:25:fd:0d:77:c5:6d:e7:0f:18:1e:e9:c0:8b:54:4a: 18:2d:76:0e:95:58:cb:25:0d:86:dc:ed:40:ee:76:95:b9:de: b6:06:ea:77:fb:98:11:94:40:12:46:d8:b0:4e:95:1a:22:54: e1:56:9f:e4 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pSQ2QRrf+FLuiPLvm0aEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzdmMjUxYWMxMTkwYzlkZWRjOGU1YmUwODVkNTQzODdmNDAxYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNVV/uNvmqm+RlrJNZR95PSheIqk ARSB8PXZ6ApsEe8acLCgbDg1wdm1r7eEZ4H+mO/8pcsCtbBoSaMe8xUlbqTSAfNa FMmJFN+TYad6htaMLY9/CQ1sLqHx89dVYER9kNqxvqQ+SxWhIkHwCIsHi+4pLz2i ATXlZ/1uBKguSiif5e0idbY3FRkNlHN7wV+zjGDYqO0bVTQLgrn+ywGCTrnIaAW0 GpUmOaM+1ld0u4Kt4aVJ5HtlRBn8hOsrs3Fbe3JLzf5pYA1DAGpNGxLDNIC1nh4O 2/TCAeWzv38ENxL+NMxmBCQQ7Zi6y/Xcm6Z6Q/WcC4dbIaZZEHHm8w+9VwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIx/JRrBGQyd7cjlvghdVDh/QBo3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2IyZTM1 MC1hZjkwLTRmOWItOGZiZi01MDBjN2M0NWY0MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvYjJlMzUw LWFmOTAtNGY5Yi04ZmJmLTUwMGM3YzQ1ZjQxOS8xL2pIOGxHc0VaREozdHlPVy1D RjFVT0g5QUdqYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuQqkAwQCuSOMMA0EAgACMAcDBQAqAN1gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDrCzANBgkqhkiG9w0BAQsFAAOCAQEAPc1+ bk+0tUE35WcbCBxJdKMXiDOY7t++UDYW5c/tZ4CAMTkJGeVS5cLbWLxyXYXHBItr 18vCyM5E3GOS3vLCqIjfuYMtQMnhMzPv3I6Qu7Gmvz1kBylGpNxLrXeBNC14XGzb YtU6J7Rd8O1IMZep/WhPYqb6OT/O9wlHSwEwN1ICgLj733cASMM7zvhxkb/sS5cs WdIcqIA4kfHh9o5NjwtDviNg9gQAxUjOf0mCwUFD7k2XeNjUv1SJHtjJdcwr4++L Dzqu9uyMJf0Nd8Vt5w8YHunAi1RKGC12DpVYyyUNhtztQO52lbnetgbqd/uYEZRA EkbYsE6VGiJU4Vaf5A== -----END CERTIFICATE-----Generated at Sat Feb 7 05:45:31 2026 by rpki-client