This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer File: tI8GPSnpEPAzvstlbouZAfaeyXQ.cer (raw, json) Hash identifier: UHfkBxVbjnpiqbg+Y9bqOZpVGaLgL+3fO08Fa4b2los= Subject key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911060C18D39F32ADEAFA0CD4C4BF0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207013 IP: 176.126.107.0/24 IP: 185.168.176.0/22 IP: 2a0b:ffc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:06:0c:18:d3:9f:32:ad:ea:fa:0c:d4:c4:bf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48f063d29e910f033becb656e8b9901f69ec974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:54:bc:53:6b:1c:2a:65:d0:d9:9e:1b:ae: f3:1c:8b:f3:48:2c:3d:2f:a0:6c:30:72:3f:4f:8a: 10:10:7f:e9:24:20:bc:52:5d:d2:7e:2d:af:75:69: d1:db:f5:78:62:04:cc:30:31:8f:c3:60:76:b7:eb: b7:78:85:be:9a:73:51:d2:b7:39:d0:4b:7b:13:1b: d6:a7:91:4d:ae:d0:3a:8f:25:96:3f:8f:7c:5c:00: 16:34:41:e2:0e:21:28:83:61:ba:a9:d4:00:4e:26: e9:a2:7b:45:6d:6d:7a:fa:f1:34:a4:50:fd:4b:1c: b1:82:57:41:64:ae:a7:9b:fb:d0:80:1d:4a:42:d3: ad:3a:0d:1f:5f:1b:47:b6:d2:69:fc:af:6b:74:62: 95:c0:d1:97:37:c8:dd:d4:14:b1:55:46:4f:5b:4a: 7f:75:7e:eb:62:27:41:d6:0a:a2:94:30:da:e5:b9: 0d:ac:69:a1:12:dd:c9:87:70:d3:c0:59:86:c1:a7: ab:5b:e6:17:80:99:6b:0a:c3:6d:51:7d:8b:d8:4c: a6:02:fb:cd:17:92:e6:28:f4:e9:56:94:63:6e:05: d6:67:7a:dc:2c:28:38:da:9e:4d:3f:54:b9:a0:72: 31:51:4a:66:24:a3:d4:14:64:3f:f7:1a:81:b4:d3: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.107.0/24 185.168.176.0/22 IPv6: 2a0b:ffc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207013 Signature Algorithm: sha256WithRSAEncryption 2d:9f:b6:81:f6:12:0e:4d:c8:ae:1a:f1:6e:7e:ad:f5:99:4f: 65:1a:aa:fc:f0:dd:90:07:37:b7:dc:ac:68:cd:6a:d4:6a:9a: 12:3e:de:3c:86:4b:6c:c5:19:ae:63:10:b2:06:17:34:98:e9: d1:a1:67:0d:48:89:88:d7:3b:5e:32:99:f0:b2:ba:9e:9e:3a: 61:c1:63:42:52:e2:0c:2e:11:35:b0:f0:5e:50:0c:22:65:61: 98:18:06:74:fc:b2:ee:ec:2f:f2:1a:39:f5:d7:ba:96:0d:6a: d5:7e:6c:23:45:6a:19:3c:e6:4e:bc:a2:eb:a9:c6:5d:24:74: fc:b3:22:02:b7:c7:7e:44:59:c0:e7:db:23:a3:b3:25:11:27: be:c8:d3:07:3b:0a:91:cb:a5:b8:39:05:78:00:ee:da:fe:6b: 02:2b:92:ac:ed:81:fb:80:c7:1c:bb:df:58:87:b0:6d:44:a3: d8:78:ee:dc:b8:cb:55:1c:09:b1:48:6e:9e:89:b1:be:ab:19: 06:b9:01:df:41:48:58:7a:06:b0:82:1f:8d:4a:b6:f4:1a:b9: 4f:ff:30:59:b5:62:30:47:8a:23:62:35:65:de:e5:1d:21:b0: a3:40:1b:a3:06:a8:3a:21:74:d8:51:cd:1d:b8:99:6c:f8:c3: 09:f2:60:91 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EQYMGNOfMq3q+gzUxL8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDhmMDYzZDI5ZTkxMGYwMzNiZWNiNjU2ZThiOTkwMWY2OWVjOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLdUvFNrHCpl0NmeG67zHIvzSCw9 L6BsMHI/T4oQEH/pJCC8Ul3Sfi2vdWnR2/V4YgTMMDGPw2B2t+u3eIW+mnNR0rc5 0Et7ExvWp5FNrtA6jyWWP498XAAWNEHiDiEog2G6qdQATibpontFbW16+vE0pFD9 SxyxgldBZK6nm/vQgB1KQtOtOg0fXxtHttJp/K9rdGKVwNGXN8jd1BSxVUZPW0p/ dX7rYidB1gqilDDa5bkNrGmhEt3Jh3DTwFmGwaerW+YXgJlrCsNtUX2L2EymAvvN F5LmKPTpVpRjbgXWZ3rcLCg42p5NP1S5oHIxUUpmJKPUFGQ/9xqBtNMSGwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLSPBj0p6RDwM77LZW6LmQH2nsl0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzI2Yzdm Zi05OThlLTQxMzEtYTc0Ny0zYzQzYzNkMzVlZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMjZjN2Zm LTk5OGUtNDEzMS1hNzQ3LTNjNDNjM2QzNWVmMy8xL3RJOEdQU25wRVBBenZzdGxi b3VaQWZhZXlYUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAsH5rAwQCuaiwMA0EAgACMAcDBQMqC//AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMopTANBgkqhkiG9w0BAQsFAAOCAQEALZ+2 gfYSDk3Irhrxbn6t9ZlPZRqq/PDdkAc3t9ysaM1q1GqaEj7ePIZLbMUZrmMQsgYX NJjp0aFnDUiJiNc7XjKZ8LK6np46YcFjQlLiDC4RNbDwXlAMImVhmBgGdPyy7uwv 8ho59de6lg1q1X5sI0VqGTzmTryi66nGXSR0/LMiArfHfkRZwOfbI6OzJREnvsjT BzsKkculuDkFeADu2v5rAiuSrO2B+4DHHLvfWIewbUSj2Hju3LjLVRwJsUhunomx vqsZBrkB30FIWHoGsIIfjUq29Bq5T/8wWbViMEeKI2I1Zd7lHSGwo0AbowaoOiF0 2FHNHbiZbPjDCfJgkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:50 2026 by rpki-client