This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer (raw, json) Hash identifier: uqD67MGL7fK1itQVXxn4tATR5v1ASOtHL9OhQLz/qE4= Subject key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F832EF71AC078B5F96F171145078729 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202877 IP: 185.151.252.0/22 IP: 185.251.14.0/24 IP: 2a07:7300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2e:f7:1a:c0:78:b5:f9:6f:17:11:45:07:87:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae7f187c12782fc4d844762235993329c4563a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:6c:58:a2:7c:05:7b:32:73:d9:24:f0:6c: 0b:9b:90:40:5c:4c:5d:f0:cb:53:79:6d:22:b2:4d: 2b:eb:79:27:61:e7:9e:be:0f:2f:4c:95:eb:93:de: 74:22:43:20:c7:e5:5f:e3:9e:69:c0:de:76:59:eb: 92:71:5b:f8:bc:1d:48:ba:fb:9c:80:ff:24:00:74: 8f:33:23:15:a0:54:1f:5a:25:41:8b:07:a0:eb:f7: c1:cb:76:b1:f4:f0:0c:e8:42:70:3f:d0:f0:4a:86: d9:20:d2:8e:dd:14:b9:ef:21:30:fb:be:b5:9c:a9: df:2c:c0:27:00:cb:6c:fc:ef:41:0f:f6:eb:8e:68: 7c:8d:d5:ed:77:9c:b9:35:b8:16:75:b8:29:cd:18: 91:7d:0b:13:38:36:ed:a0:ca:68:72:6b:00:00:92: 61:f8:57:40:a1:ae:0b:7a:37:44:f1:dd:ea:6b:c8: df:5c:96:6f:dc:e3:c3:fb:15:cf:93:81:9b:a8:6c: 1f:1f:00:e4:95:11:f3:13:93:b1:cc:76:ca:d7:ea: 99:91:53:19:a9:04:aa:98:ba:8d:89:a9:e9:2c:f1: 96:01:78:45:79:90:c6:f0:d6:0d:d4:b1:1a:f8:36: 6c:9d:e7:bb:ac:f5:29:2c:98:e5:5e:a8:82:47:e6: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.252.0/22 185.251.14.0/24 IPv6: 2a07:7300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202877 Signature Algorithm: sha256WithRSAEncryption 0e:1d:9c:f0:50:3e:fc:a2:1b:61:4d:6f:ec:9a:63:af:b4:47: a5:c8:2a:2f:bd:e5:42:27:dc:7a:0a:f8:c1:6d:8f:91:58:67: 6c:db:ae:3f:68:8a:aa:89:35:01:e3:28:29:cc:84:91:e1:09: 7e:4d:85:aa:96:5e:4b:7e:27:07:f9:e7:11:cb:bd:ab:af:1b: 11:3d:75:13:7c:46:4d:82:16:67:db:d5:6e:03:51:b2:31:cf: 9f:f3:e4:e2:0c:a5:b8:9a:ba:40:ac:c3:67:9f:e0:91:ac:d6: f3:ff:d0:f9:72:7e:b3:83:f1:fc:48:1f:ce:d8:9d:bd:14:77: 14:ff:ab:73:a2:ea:e6:eb:16:f0:3d:9f:dc:bc:96:1c:c0:cc: d6:23:55:25:d2:ba:a5:ba:e6:81:3d:30:40:1b:7a:59:ad:97: c9:6a:77:9b:77:36:56:13:9c:80:27:f8:6b:02:18:7d:de:ce: 8f:c5:af:7d:7e:be:a3:06:b5:70:6a:08:0c:f0:37:f0:ea:52: 4e:e1:41:3a:1d:02:12:0f:21:69:bb:77:25:9b:39:ab:66:26: 03:97:2f:ad:b8:7a:73:f8:5e:66:a9:cb:11:e0:d9:05:46:64: 59:ac:a5:4e:b2:e2:9e:50:b6:7e:ff:1b:cd:e3:1d:b1:3a:42: 55:e3:ba:b1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gy73GsB4tflvFxFFB4cpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTdmMTg3YzEyNzgyZmM0ZDg0NDc2MjIzNTk5MzMyOWM0NTYzYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwetsWKJ8BXsyc9kk8GwLm5BAXExd 8MtTeW0isk0r63knYeeevg8vTJXrk950IkMgx+Vf455pwN52WeuScVv4vB1Iuvuc gP8kAHSPMyMVoFQfWiVBiweg6/fBy3ax9PAM6EJwP9DwSobZINKO3RS57yEw+761 nKnfLMAnAMts/O9BD/brjmh8jdXtd5y5NbgWdbgpzRiRfQsTODbtoMpocmsAAJJh +FdAoa4LejdE8d3qa8jfXJZv3OPD+xXPk4GbqGwfHwDklRHzE5OxzHbK1+qZkVMZ qQSqmLqNianpLPGWAXhFeZDG8NYN1LEa+DZsnee7rPUpLJjlXqiCR+YaRQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK5/GHwSeC/E2ER2IjWZMynEVjoNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2M4ZjY0 Ny1lZDc5LTQyZDktOGRmNi0wNTg3NzYwNGEwMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvYzhmNjQ3 LWVkNzktNDJkOS04ZGY2LTA1ODc3NjA0YTAxZC8xL3JuOFlmQko0TDhUWVJIWWlO Wmt6S2NSV09nMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZf8AwQAufsOMA0EAgACMAcDBQMqB3MAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMYfTANBgkqhkiG9w0BAQsFAAOCAQEADh2c 8FA+/KIbYU1v7Jpjr7RHpcgqL73lQifcegr4wW2PkVhnbNuuP2iKqok1AeMoKcyE keEJfk2FqpZeS34nB/nnEcu9q68bET11E3xGTYIWZ9vVbgNRsjHPn/Pk4gyluJq6 QKzDZ5/gkazW8//Q+XJ+s4Px/EgfztidvRR3FP+rc6Lq5usW8D2f3LyWHMDM1iNV JdK6pbrmgT0wQBt6Wa2XyWp3m3c2VhOcgCf4awIYfd7Oj8WvfX6+owa1cGoIDPA3 8OpSTuFBOh0CEg8habt3JZs5q2YmA5cvrbh6c/heZqnLEeDZBUZkWaylTrLinlC2 fv8bzeMdsTpCVeO6sQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:35 2026 by rpki-client