This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer (raw, json) Hash identifier: quwhcmG7OGi5/eDnwVC6L2NHUIwIn3L/4BzIq5J9dG4= Subject key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA67C122E8C36A9D989167223DC698B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.164.236.0/24 IP: 2a14:34c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7c:12:2e:8c:36:a9:d9:89:16:72:23:dc:69:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:ac:be:de:62:88:a2:90:96:e6:86:2a:b1: 01:9a:3c:2b:4b:ad:d6:51:40:85:7c:84:b8:9c:48: 46:24:b2:73:13:60:60:d9:40:b3:45:cb:b0:5b:ad: 80:dd:b7:ef:af:ff:d9:f7:83:8b:75:c2:ab:1d:7e: 7b:a3:b7:2b:ab:6c:f3:9c:e9:15:09:32:b3:40:4d: 0d:de:6f:71:fd:c2:34:61:07:9b:35:f5:39:60:56: ee:59:74:0b:43:95:a6:ca:1c:ba:85:62:ad:8e:06: e3:f0:be:ae:a3:76:dc:5c:18:0b:05:ef:38:dd:13: 78:6a:69:7b:e0:6e:47:05:5b:41:6a:3e:eb:02:70: 8e:c6:fb:0d:9a:a0:e1:ef:91:0d:5c:35:4b:27:07: 4a:bf:02:da:8a:e3:9e:64:b5:e0:25:34:81:d5:93: 87:8e:ff:2c:1f:4a:2e:ed:1c:cc:ab:ee:43:2b:94: 3b:6a:c5:e1:36:e6:62:9e:d8:75:ae:62:13:95:98: 70:66:8b:30:77:88:56:97:90:56:f2:94:6d:bb:73: 97:e1:7e:78:64:86:73:b7:cf:8c:14:17:43:47:a5: 88:f4:7b:d0:c7:9c:77:1f:d8:b5:d1:bc:22:72:73: a0:60:13:e3:f4:37:0a:4e:83:bb:f2:2c:0f:3a:a2: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.236.0/24 IPv6: 2a14:34c0::/29 Signature Algorithm: sha256WithRSAEncryption 32:07:21:38:66:63:f9:28:61:0a:23:e0:5a:3b:fe:fb:e8:55: 96:bb:35:1d:8e:cf:31:17:9b:89:85:49:0a:42:1d:2f:28:de: 5c:e0:c2:a3:8c:d6:29:54:e6:74:2f:ca:25:08:17:ba:8c:78: db:13:a7:bf:4f:0d:9c:fe:23:d2:a7:5e:af:a1:65:2c:31:4b: c3:d5:d8:c9:da:2d:8a:50:19:96:11:93:35:0e:ec:74:0d:8b: 61:92:b6:c2:e3:23:aa:5a:ea:8f:1f:ba:90:cc:93:35:6b:a4: 47:9f:c6:13:84:69:0c:d7:90:e5:08:6d:19:04:3d:a6:a6:99: 0d:5d:e8:6b:70:be:44:94:e2:56:d4:98:01:cd:61:94:2e:67: 95:86:1b:46:60:8e:ef:7d:59:f1:e7:10:d2:4e:b6:b7:cb:f1: c9:e1:95:c6:e9:d4:ec:b7:17:1a:3e:f3:01:80:e3:67:4c:ea: 0c:21:91:e7:04:e1:fc:8f:10:ad:0b:83:7a:64:31:50:7d:1f: 19:06:33:c3:cc:e6:86:81:c8:ef:cc:90:0c:ce:69:01:79:2d: 43:78:da:36:62:90:63:9e:12:ab:7e:5e:03:cb:e6:d9:ae:dc: e4:da:45:a5:35:80:a3:d2:7b:fc:73:24:f7:f5:b9:83:54:17: 5a:d8:bc:d7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pnwSLow2qdmJFnIj3GmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDNlZDRmZWRmNTZkMGIwMmIxNzJjOGY4OWVjMzc2NTEwY2QzMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH+svt5iiKKQluaGKrEBmjwrS63W UUCFfIS4nEhGJLJzE2Bg2UCzRcuwW62A3bfvr//Z94OLdcKrHX57o7crq2zznOkV CTKzQE0N3m9x/cI0YQebNfU5YFbuWXQLQ5Wmyhy6hWKtjgbj8L6uo3bcXBgLBe84 3RN4aml74G5HBVtBaj7rAnCOxvsNmqDh75ENXDVLJwdKvwLaiuOeZLXgJTSB1ZOH jv8sH0ou7RzMq+5DK5Q7asXhNuZinth1rmITlZhwZoswd4hWl5BW8pRtu3OX4X54 ZIZzt8+MFBdDR6WI9HvQx5x3H9i10bwicnOgYBPj9DcKToO78iwPOqIEbwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPA+1P7fVtCwKxcsj4nsN2UQzTF0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2U2Mzk1 MC03NmU4LTRmMmItODczMS1mYjRmZDA3ZTI2YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZTYzOTUw LTc2ZTgtNGYyYi04NzMxLWZiNGZkMDdlMjZhMC8xLzhEN1VfdDlXMExBckZ5eVBp ZXczWlJETk1YUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwqTsMA0EAgACMAcDBQMqFDTAMA0GCSqGSIb3 DQEBCwUAA4IBAQAyByE4ZmP5KGEKI+BaO/776FWWuzUdjs8xF5uJhUkKQh0vKN5c 4MKjjNYpVOZ0L8olCBe6jHjbE6e/Tw2c/iPSp16voWUsMUvD1djJ2i2KUBmWEZM1 Dux0DYthkrbC4yOqWuqPH7qQzJM1a6RHn8YThGkM15DlCG0ZBD2mppkNXehrcL5E lOJW1JgBzWGULmeVhhtGYI7vfVnx5xDSTra3y/HJ4ZXG6dTstxcaPvMBgONnTOoM IZHnBOH8jxCtC4N6ZDFQfR8ZBjPDzOaGgcjvzJAMzmkBeS1DeNo2YpBjnhKrfl4D y+bZrtzk2kWlNYCj0nv8cyT39bmDVBda2LzX -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:24 2026 by rpki-client