This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer File: jH8yX5quuTqDw554FFxBk31Ya3c.cer (raw, json) Hash identifier: SSOZrZRo31ulxq7Jev9qiF7Wv/qvgOdLAoglEdKRER4= Subject key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B8D8BCECD7E2C354608FC8F40C82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16039 IP: 31.177.48.0/21 IP: 82.199.32.0/19 IP: 193.42.28.0/22 IP: 2a02:5b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b8:d8:bc:ec:d7:e2:c3:54:60:8f:c8:f4:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:8f:a2:c6:45:be:b1:9e:bc:f4:11:65:4b: e5:0e:49:26:04:5a:2c:11:48:2d:b2:e0:fa:4c:95: 15:b6:7c:33:54:05:38:8c:6f:47:07:08:59:81:96: 0e:7c:75:bb:81:e1:e7:9a:f4:b2:3f:cc:fd:46:e5: 77:58:b4:4e:96:37:1f:17:93:75:ad:c8:fb:12:b5: 73:5c:57:3a:14:27:a7:ed:92:e5:a2:92:3f:16:c2: 4b:7d:6a:23:82:d0:17:d7:a7:0a:c6:61:f0:5b:8b: b9:9c:df:3d:b6:a8:34:e6:b9:06:db:89:7e:80:f4: 1a:00:56:56:7b:5a:0b:cb:8f:e8:f4:39:44:e9:00: fa:64:75:5a:f8:76:6c:41:4b:47:43:35:6a:28:bb: 31:4a:d9:24:f8:cf:b0:38:b9:0a:02:89:0a:7a:01: 16:c6:2b:0c:80:2f:b1:4d:5d:64:bc:70:5a:14:f7: 18:77:27:95:48:be:ab:c5:20:09:98:d7:0e:35:e4: 59:8d:5e:25:ac:0b:ff:8f:5d:e4:80:10:a5:9e:6b: 99:9d:07:36:1f:ae:e3:21:b1:d8:f3:9c:ec:fa:f5: ea:6b:37:fd:fe:1d:8d:83:14:2d:34:8a:04:1c:cf: 31:09:8e:03:63:96:d8:7f:4f:fc:39:40:f6:b9:e8: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.48.0/21 82.199.32.0/19 193.42.28.0/22 IPv6: 2a02:5b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16039 Signature Algorithm: sha256WithRSAEncryption 2e:72:05:76:5a:99:eb:13:90:94:d0:a5:0b:05:2c:9b:b5:e2: ed:c9:11:19:b7:25:3d:4a:c0:f3:7e:d0:f7:68:d2:0c:fc:8e: 10:df:61:d7:86:9a:8d:2c:d5:b8:bd:83:40:b7:2b:44:c7:04: 98:62:fd:c1:bf:f7:b6:43:e7:94:15:1b:31:b6:88:28:18:32: 66:e6:65:8c:24:09:20:40:92:bb:16:54:af:3e:04:3e:74:35: 06:a4:51:e4:79:59:4b:15:7a:bd:a6:3d:12:68:ce:20:76:42: 88:c1:ab:0d:f9:dd:10:eb:a8:50:e8:c4:a9:fb:44:8c:0f:25: fa:35:8c:45:aa:d9:a5:59:77:93:c8:e1:ee:46:fa:da:6a:12: 36:d4:ad:75:4c:4c:70:fc:74:fd:1b:a7:58:4b:5a:4d:d0:cf: ca:bf:f0:95:9c:5f:1c:4a:5b:65:11:0a:e4:da:3a:77:f2:d3: cf:b6:d6:c9:0f:c3:a1:29:6f:cd:21:58:d4:81:9a:71:d7:74: d1:4d:ce:6e:19:c9:6f:20:be:27:53:68:e8:69:1c:55:69:cd: 45:97:c9:f8:53:8b:5f:65:9b:51:de:32:67:9e:91:57:2c:64: c8:64:0c:f1:41:26:8b:7a:5f:c8:cf:5e:63:b7:34:0e:27:f9: 66:d5:8d:1a -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt3WLjYvOzX4sNUYI/I9AyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzdmMzI1ZjlhYWViOTNhODNjMzllNzgxNDVjNDE5MzdkNTg2Yjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkyPosZFvrGevPQRZUvlDkkmBFos EUgtsuD6TJUVtnwzVAU4jG9HBwhZgZYOfHW7geHnmvSyP8z9RuV3WLROljcfF5N1 rcj7ErVzXFc6FCen7ZLlopI/FsJLfWojgtAX16cKxmHwW4u5nN89tqg05rkG24l+ gPQaAFZWe1oLy4/o9DlE6QD6ZHVa+HZsQUtHQzVqKLsxStkk+M+wOLkKAokKegEW xisMgC+xTV1kvHBaFPcYdyeVSL6rxSAJmNcONeRZjV4lrAv/j13kgBClnmuZnQc2 H67jIbHY85zs+vXqazf9/h2NgxQtNIoEHM8xCY4DY5bYf0/8OUD2uejDfwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFIx/Ml+arrk6g8OeeBRcQZN9WGt3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2E0YzI5 NC02YjUyLTQ4NGUtODI2NS1mYzJmNWZhNzc1NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvYTRjMjk0 LTZiNTItNDg0ZS04MjY1LWZjMmY1ZmE3NzU1NS8xL2pIOHlYNXF1dVRxRHc1NTRG RnhCazMxWWEzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDH7EwAwQFUscgAwQCwSocMA0EAgACMAcDBQAq AlsAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj6nMA0GCSqGSIb3DQEBCwUAA4IB AQAucgV2WpnrE5CU0KULBSybteLtyREZtyU9SsDzftD3aNIM/I4Q32HXhpqNLNW4 vYNAtytExwSYYv3Bv/e2Q+eUFRsxtogoGDJm5mWMJAkgQJK7FlSvPgQ+dDUGpFHk eVlLFXq9pj0SaM4gdkKIwasN+d0Q66hQ6MSp+0SMDyX6NYxFqtmlWXeTyOHuRvra ahI21K11TExw/HT9G6dYS1pN0M/Kv/CVnF8cSltlEQrk2jp38tPPttbJD8OhKW/N IVjUgZpx13TRTc5uGclvIL4nU2joaRxVac1Fl8n4U4tfZZtR3jJnnpFXLGTIZAzx QSaLel/Iz15jtzQOJ/lm1Y0a -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:30 2026 by rpki-client