This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer File: n8IY9nJDtH2gIf2j_rRBR0s865Q.cer (raw, json) Hash identifier: 5Ltj0v6BfYqWAk+wk659BxmkQlnvKRxcf4FbwpG9Nhg= Subject key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110A725C8B61F9B36090B90AE2C6F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41760 AS: 51675 IP: 46.17.112.0/21 IP: 185.20.20.0/22 IP: 2a02:2680::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0a:72:5c:8b:61:f9:b3:60:90:b9:0a:e2:c6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fc218f67243b47da021fda3feb441474b3ceb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:b6:d5:55:f7:e1:a0:7e:ff:b1:06:20:c8: 9d:e0:f8:f2:fe:76:54:1a:19:03:e5:a1:41:d4:5c: 92:31:73:bf:44:6a:e3:1a:20:5d:99:fa:7b:cf:61: 2e:fb:96:a0:f4:ca:84:db:21:ea:a0:45:75:8b:f6: 9a:57:75:31:88:93:b7:ab:37:74:ee:24:fb:e3:03: 34:be:3a:b6:83:94:56:88:d5:6e:51:51:87:41:a9: 9c:4d:f5:7f:5b:ad:50:96:59:98:32:a5:bb:5c:ad: 5a:61:4c:8e:c7:b8:7a:0b:32:f9:a4:62:7a:44:43: db:a0:f6:69:00:df:69:4b:7a:89:08:f0:8e:9b:b6: 7f:2b:10:0b:71:93:6f:92:a7:8e:ed:aa:43:f9:be: 75:84:a4:05:18:19:15:ae:5d:e0:13:64:9a:35:68: d1:e3:d1:c4:91:59:06:7f:90:2b:2c:e6:4e:c5:fa: 2c:e5:ef:34:c4:ca:10:78:ab:17:4d:71:d4:2d:ec: 32:73:2f:3d:b0:63:00:49:db:0a:7f:49:63:da:a3: c5:a4:ec:8e:d8:69:1c:37:28:fb:f5:5c:5c:79:84: ef:ad:e1:a5:1a:31:e1:af:f4:a3:66:5f:95:5b:7c: 37:ab:50:9e:42:9a:49:ce:8a:65:58:ae:1d:db:6e: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.112.0/21 185.20.20.0/22 IPv6: 2a02:2680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41760 51675 Signature Algorithm: sha256WithRSAEncryption 57:70:29:39:be:c9:38:25:6b:6e:fb:db:d4:34:75:a4:35:2c: 6d:ef:b8:a2:e0:b6:41:26:1c:ff:b4:28:ed:fb:b3:0b:38:3f: 46:24:23:dc:e9:f5:13:0b:9e:ab:c4:15:9c:b1:f6:18:06:fe: 58:f4:24:5c:70:bd:15:fd:eb:13:cb:57:84:ce:1e:25:b4:f8: f2:c0:f4:7e:dd:09:9b:fe:27:e9:2c:85:c2:6e:51:93:b6:39: 01:17:7c:64:6f:b8:54:47:72:0a:8c:67:4b:07:61:52:0b:4a: 10:08:09:90:2f:5a:54:ce:f6:56:3a:98:0b:b5:47:e9:8e:5d: 9b:f2:70:30:aa:aa:d0:fb:c5:c5:35:e8:ca:e5:62:d3:ff:4c: 66:f4:b0:c9:84:2d:40:4a:de:80:12:5f:5d:ae:26:71:49:e0: 8e:b5:75:02:1a:ab:89:21:7a:fd:7e:f9:c6:db:8f:fb:0a:b8: 9c:4c:b5:c1:be:92:dc:3c:d3:72:29:36:fa:93:ed:cc:78:89: 2e:1f:25:74:c9:16:fc:2e:05:a6:27:d8:0b:4f:87:27:43:3a: 8c:d8:b9:84:18:7d:5f:a7:92:90:69:8d:da:23:ca:af:56:90: 8b:f7:0b:75:de:1a:2e:4d:37:48:99:94:01:45:f5:67:62:58: 44:05:eb:4f -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt5EQpyXIth+bNgkLkK4sb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmMyMThmNjcyNDNiNDdkYTAyMWZkYTNmZWI0NDE0NzRiM2NlYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRW21VX34aB+/7EGIMid4Pjy/nZU GhkD5aFB1FySMXO/RGrjGiBdmfp7z2Eu+5ag9MqE2yHqoEV1i/aaV3UxiJO3qzd0 7iT74wM0vjq2g5RWiNVuUVGHQamcTfV/W61QllmYMqW7XK1aYUyOx7h6CzL5pGJ6 REPboPZpAN9pS3qJCPCOm7Z/KxALcZNvkqeO7apD+b51hKQFGBkVrl3gE2SaNWjR 49HEkVkGf5ArLOZOxfos5e80xMoQeKsXTXHULewycy89sGMASdsKf0lj2qPFpOyO 2GkcNyj79VxceYTvreGlGjHhr/SjZl+VW3w3q1CeQppJzoplWK4d226wlwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFJ/CGPZyQ7R9oCH9o/60QUdLPOuUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzY3YWFl Mi1jOGZjLTRhZDAtYmM2MC1kZWY5YjJlMmRmZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNjdhYWUy LWM4ZmMtNGFkMC1iYzYwLWRlZjliMmUyZGZkMy8xL244SVk5bkpEdEgyZ0lmMmpf clJCUjBzODY1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLhFwAwQCuRQUMA0EAgACMAcDBQAqAiaAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCjIAIDAMnbMA0GCSqGSIb3DQEBCwUAA4IB AQBXcCk5vsk4JWtu+9vUNHWkNSxt77ii4LZBJhz/tCjt+7MLOD9GJCPc6fUTC56r xBWcsfYYBv5Y9CRccL0V/esTy1eEzh4ltPjywPR+3Qmb/ifpLIXCblGTtjkBF3xk b7hUR3IKjGdLB2FSC0oQCAmQL1pUzvZWOpgLtUfpjl2b8nAwqqrQ+8XFNejK5WLT /0xm9LDJhC1ASt6AEl9driZxSeCOtXUCGquJIXr9fvnG24/7CricTLXBvpLcPNNy KTb6k+3MeIkuHyV0yRb8LgWmJ9gLT4cnQzqM2LmEGH1fp5KQaY3aI8qvVpCL9wt1 3houTTdImZQBRfVnYlhEBetP -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:07 2026 by rpki-client