This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.cer (raw, json) Hash identifier: Xy0rUlCfksFCP+M8f2tEr3owOssFDrs7yWQ9cDaivyk= Subject key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CD9E28106369BF6B1D7B7BBF05F0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.88.228.0/22 IP: 2001:3500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d9:e2:81:06:36:9b:f6:b1:d7:b7:bb:f0:5f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:f5:bf:14:df:fd:19:cb:36:a8:b7:15:c1: c4:42:7d:b6:f5:ba:76:0c:a0:c3:1d:d7:ec:e8:62: 38:19:81:1a:f7:25:3b:3c:bc:20:02:27:d5:91:bf: 6b:26:ef:76:e4:00:58:7d:45:a4:4e:fd:b2:61:2a: d9:0b:b1:b4:ca:9e:b6:03:2c:65:96:e8:00:7c:3f: fb:1f:a3:72:10:db:1e:bb:18:45:43:66:7a:e9:bf: d0:e5:33:fc:b7:64:2d:3c:9b:00:86:5d:11:14:e3: 52:1d:fe:02:e4:6f:b4:86:05:5f:f4:0e:76:37:ab: b0:8f:70:3c:df:60:09:74:da:98:0e:ff:1a:1d:f9: 93:f5:92:29:c4:0b:d0:ee:65:42:43:18:e0:da:f1: ff:de:81:80:fd:26:3f:4d:90:9c:6c:f0:d3:cc:f1: 7a:3c:f2:f6:28:58:46:72:ae:e5:3d:1f:02:d9:ee: e6:ca:8c:5a:41:a2:ee:ae:1f:46:b7:bf:03:9c:4b: cc:91:d6:32:75:55:48:b1:12:d8:69:f8:93:66:e1: 53:1d:a4:32:32:ab:c4:6e:32:92:c2:b6:a2:61:ff: f8:50:fd:ba:23:94:ca:19:ea:c3:85:c1:b3:8d:8a: cb:76:99:69:5f:b5:71:93:fa:7a:d5:ba:e9:00:9a: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.228.0/22 IPv6: 2001:3500::/29 Signature Algorithm: sha256WithRSAEncryption 25:43:ad:b8:94:fa:32:aa:74:68:ed:ad:cb:9d:dd:40:ce:1b: 98:10:fe:93:98:1f:08:cc:cb:a9:cb:ef:5e:b0:bb:ab:7b:68: 01:f8:c0:07:b1:4b:0a:63:41:60:de:39:c9:4a:00:fd:ba:ce: 6f:f1:07:56:96:f3:18:5d:2b:e4:ef:6d:6a:96:76:13:7f:05: d2:3f:e0:33:16:47:05:0a:22:98:67:f7:27:b7:f4:51:e6:ff: dd:cb:61:69:71:d9:05:18:a3:46:ae:fc:20:8b:ad:52:a9:16: d8:3a:ce:ac:fd:98:41:1e:0c:f8:29:5d:13:a7:62:34:fc:70: 0a:41:f7:71:2c:1e:94:5e:79:20:38:5b:b5:9d:3c:e1:30:53: 18:2c:24:29:92:c7:dc:fa:1f:04:4c:ca:a8:2f:25:31:84:17: e0:d2:b0:35:cf:cd:5f:ca:cc:e4:08:c8:06:4b:23:1f:67:84: 39:b3:55:fe:b6:9d:24:7e:82:15:b8:c0:3b:7e:59:d4:d8:33: d5:1a:01:90:91:8f:88:90:cf:ca:61:9c:f0:2d:b7:72:00:92: 06:bb:c9:b0:17:04:33:0d:07:8b:16:10:0f:e5:f8:55:af:fe: dc:c6:e5:d7:cb:d3:c1:b0:05:71:67:c4:4c:8b:54:51:97:13: 9f:3b:33:b8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XNnigQY2m/ax17e78F8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmEyNTNjZGY1MDdhMDNlMWY1NzlkMjAyZDhkZjExZDY4ZjVjM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGD1vxTf/RnLNqi3FcHEQn229bp2 DKDDHdfs6GI4GYEa9yU7PLwgAifVkb9rJu925ABYfUWkTv2yYSrZC7G0yp62Ayxl lugAfD/7H6NyENseuxhFQ2Z66b/Q5TP8t2QtPJsAhl0RFONSHf4C5G+0hgVf9A52 N6uwj3A832AJdNqYDv8aHfmT9ZIpxAvQ7mVCQxjg2vH/3oGA/SY/TZCcbPDTzPF6 PPL2KFhGcq7lPR8C2e7myoxaQaLurh9Gt78DnEvMkdYydVVIsRLYafiTZuFTHaQy MqvEbjKSwraiYf/4UP26I5TKGerDhcGzjYrLdplpX7Vxk/p61brpAJpnKQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPKiU831B6A+H1edIC2N8R1o9cPXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzEwZWJl Yy0yNzg0LTRkYWEtOGRmNy1iZTRkNWQwOWQ3MTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMTBlYmVj LTI3ODQtNGRhYS04ZGY3LWJlNGQ1ZDA5ZDcxMC8xLzhxSlR6ZlVIb0Q0ZlY1MGdM WTN4SFdqMXc5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVjkMA0EAgACMAcDBQMgATUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAlQ624lPoyqnRo7a3Lnd1AzhuYEP6TmB8IzMupy+9esLure2gB +MAHsUsKY0Fg3jnJSgD9us5v8QdWlvMYXSvk721qlnYTfwXSP+AzFkcFCiKYZ/cn t/RR5v/dy2FpcdkFGKNGrvwgi61SqRbYOs6s/ZhBHgz4KV0Tp2I0/HAKQfdxLB6U XnkgOFu1nTzhMFMYLCQpksfc+h8ETMqoLyUxhBfg0rA1z81fyszkCMgGSyMfZ4Q5 s1X+tp0kfoIVuMA7flnU2DPVGgGQkY+IkM/KYZzwLbdyAJIGu8mwFwQzDQeLFhAP 5fhVr/7cxuXXy9PBsAVxZ8RMi1RRlxOfOzO4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:20 2026 by rpki-client