This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer File: 8fQjYKOXCoCAFv342NujlsWh0DQ.cer (raw, json) Hash identifier: omFPFSAEQg21lkDavZdK9ZBjV6C2mTIA3ajKVZQg7K4= Subject key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA543D74FEA100DF09EBC9B47FB2E80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61149 IP: 45.82.106.0/23 IP: 86.104.226.0/24 IP: 91.235.107.0/24 IP: 185.16.88.0/22 IP: 2a03:cac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:d7:4f:ea:10:0d:f0:9e:bc:9b:47:fb:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:72:92:fe:d7:eb:60:6c:2f:27:49:08:8c: 46:a7:e7:a8:ce:52:79:d5:ee:41:36:f3:1f:92:78: 4a:31:1d:fc:74:79:ac:66:08:0c:01:39:67:1d:38: 2f:d4:76:88:58:63:dc:a8:2c:b4:64:3d:54:10:82: d2:01:e3:76:61:64:bb:e2:ce:84:7d:4f:28:d5:80: f7:c5:76:86:48:05:21:78:67:b4:5e:15:b8:19:db: fe:67:1e:dc:c6:3c:7b:78:02:7e:28:fe:8d:e3:f8: 5d:cb:6b:4c:8f:50:6b:5f:de:e8:4f:eb:d4:f0:ec: ae:86:ac:32:5b:59:bc:7a:01:d5:7a:92:20:55:8b: 2a:ef:88:6d:ef:f7:ee:2b:e8:b4:ee:84:41:4b:5e: e2:c7:1f:23:ec:8b:6d:9d:f7:1d:81:b9:39:4a:77: ba:03:de:d3:fc:d1:f5:66:9c:c6:ca:64:b1:20:fa: 8f:97:3b:62:5a:d2:b4:95:23:08:7d:6f:9e:cf:68: 0f:65:fc:f7:7d:2b:06:95:0e:85:94:89:c7:b5:3b: 99:24:31:a3:01:41:88:21:36:d0:3f:7f:5d:f6:59: 54:33:eb:c5:14:f6:5d:d7:17:23:4b:43:c5:d7:cb: fb:8c:85:cc:04:50:9b:a3:69:9a:fb:28:ac:63:d3: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.106.0/23 86.104.226.0/24 91.235.107.0/24 185.16.88.0/22 IPv6: 2a03:cac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61149 Signature Algorithm: sha256WithRSAEncryption 18:12:8e:c1:84:e3:7a:91:25:87:6c:f8:22:b8:21:70:79:46: 68:ec:56:e6:be:a0:d3:8f:b0:8d:85:92:b7:fc:c9:a0:f0:98: 97:46:da:de:e3:eb:15:57:d1:ca:ab:33:26:f3:be:74:9f:f6: 45:4c:32:8d:82:cb:11:89:a4:32:12:41:64:6b:fd:04:9d:1f: 33:8f:6c:1d:74:ac:17:f3:b7:b6:1c:5c:44:71:42:dc:e8:26: ca:7f:a8:fa:c0:47:03:67:a4:b3:42:29:7e:d4:e6:18:d0:0e: 98:45:48:57:31:1f:eb:e0:c9:08:9c:61:37:d6:07:13:c5:51: da:c0:a3:a6:b2:42:42:9d:73:64:65:a5:fc:c4:62:db:80:c5: 83:ae:3a:cc:15:33:ae:54:da:1d:53:6c:9e:2a:bd:f7:6e:55: 3f:5c:b1:65:1e:eb:5b:90:e4:ed:99:44:fb:b3:54:6d:67:cc: 75:88:f7:03:64:c1:0d:42:1b:cb:38:18:0a:80:3c:04:5d:8d: 04:3b:7e:09:7e:0c:03:18:28:f6:2b:a1:ae:87:6c:19:6a:36: 5d:88:72:02:e5:24:af:cd:b5:c6:6b:97:a8:3e:10:0f:9b:48: 6e:56:d9:6b:93:64:7f:9d:c2:64:fc:99:80:f8:6f:94:9b:28: f8:02:7f:08 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7pUPXT+oQDfCevJtH+y6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWY0MjM2MGEzOTcwYTgwODAxNmZkZjhkOGRiYTM5NmM1YTFkMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJJykv7X62BsLydJCIxGp+eozlJ5 1e5BNvMfknhKMR38dHmsZggMATlnHTgv1HaIWGPcqCy0ZD1UEILSAeN2YWS74s6E fU8o1YD3xXaGSAUheGe0XhW4Gdv+Zx7cxjx7eAJ+KP6N4/hdy2tMj1BrX97oT+vU 8OyuhqwyW1m8egHVepIgVYsq74ht7/fuK+i07oRBS17ixx8j7Ittnfcdgbk5Sne6 A97T/NH1ZpzGymSxIPqPlztiWtK0lSMIfW+ez2gPZfz3fSsGlQ6FlInHtTuZJDGj AUGIITbQP39d9llUM+vFFPZd1xcjS0PF18v7jIXMBFCbo2ma+yisY9OstQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFPH0I2CjlwqAgBb9+Njbo5bFodA0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzMxZGNh NC0xY2U4LTQzMTgtOTU2Yy1kNGYwOGJlMDUwZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMzFkY2E0 LTFjZTgtNDMxOC05NTZjLWQ0ZjA4YmUwNTBkNS8xLzhmUWpZS09YQ29DQUZ2MzQy TnVqbHNXaDBEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBLVJqAwQAVmjiAwQAW+trAwQCuRBYMA0EAgAC MAcDBQAqA8rAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDu3TANBgkqhkiG9w0B AQsFAAOCAQEAGBKOwYTjepElh2z4IrghcHlGaOxW5r6g04+wjYWSt/zJoPCYl0ba 3uPrFVfRyqszJvO+dJ/2RUwyjYLLEYmkMhJBZGv9BJ0fM49sHXSsF/O3thxcRHFC 3Ogmyn+o+sBHA2eks0IpftTmGNAOmEVIVzEf6+DJCJxhN9YHE8VR2sCjprJCQp1z ZGWl/MRi24DFg646zBUzrlTaHVNsniq9925VP1yxZR7rW5Dk7ZlE+7NUbWfMdYj3 A2TBDUIbyzgYCoA8BF2NBDt+CX4MAxgo9iuhrodsGWo2XYhyAuUkr821xmuXqD4Q D5tIblbZa5Nkf53CZPyZgPhvlJso+AJ/CA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:09 2026 by rpki-client