This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.cer (raw, json) Hash identifier: rLi0HsPIuvnG4/QEX6FTz0AgnM8668e7cS6EoDso4bM= Subject key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC83ED6DB17FA450D34BAA44CF7ED68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9215 IP: 43.229.92.0/22 IP: 103.132.128.0/22 IP: 185.57.64.0/22 IP: 2a02:5920::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3e:d6:db:17:fa:45:0d:34:ba:a4:4c:f7:ed:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:f6:d8:01:75:d5:7f:c9:0d:a8:31:18:84: e9:5a:12:34:b0:b7:b3:a2:da:29:c5:e6:f6:43:d1: 0b:fd:a3:c8:1e:40:98:68:bc:91:f3:b6:a3:35:15: c2:0e:40:2a:cc:53:2a:58:17:1e:13:e7:9e:c3:d4: 61:fe:66:0a:dc:16:73:db:4f:02:cd:92:8c:9e:d4: 92:e9:bb:68:95:04:5a:7f:9d:d3:96:26:66:8e:5b: e9:6c:76:f0:47:b0:f2:4e:45:8c:9e:72:82:73:27: 12:c2:3f:e0:b0:f6:94:f1:87:df:7d:86:23:83:b2: 43:18:aa:18:14:a0:2e:8b:69:ff:cf:5f:e8:7a:f8: 69:93:e7:36:85:30:f9:d8:6c:4a:a9:c1:ea:e1:f4: 7e:10:6e:c5:e4:7e:2b:69:8d:59:26:1c:f7:84:ec: f7:a2:5d:7b:bb:67:68:81:0e:36:82:64:8d:4f:f0: 20:a5:18:e0:fd:b3:4c:09:d0:46:b9:2d:a7:48:79: f8:e1:23:d0:39:ed:ca:eb:05:40:21:8d:17:96:3e: f1:48:7d:a2:79:40:39:f7:2b:e5:52:5c:0c:e9:b3: 4e:74:e4:12:55:6f:4e:43:7e:c2:95:64:c1:4c:56: 35:44:68:5b:43:fc:13:12:02:16:78:cd:5e:0e:63: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.92.0/22 103.132.128.0/22 185.57.64.0/22 IPv6: 2a02:5920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9215 Signature Algorithm: sha256WithRSAEncryption 7b:2b:aa:92:e0:83:0e:f8:69:cc:06:b8:62:ca:ee:ff:53:77: 1e:0d:1b:d5:59:c3:3b:b8:fa:65:32:4f:d2:13:a5:78:0f:3c: 86:73:89:c9:0f:2b:cf:ab:dd:7a:b4:f2:fe:41:25:5e:16:84: 38:e6:dc:dc:b5:c1:0a:a5:2b:b5:cf:33:11:78:ac:a4:58:73: 0d:38:48:37:c3:78:f0:5f:d1:7d:08:1d:52:c0:57:f4:d3:c5: d6:c6:a8:a7:b3:fd:1f:d6:3b:02:d9:46:31:5f:86:23:72:aa: 5e:fa:fe:71:1c:e6:dd:83:7d:41:6d:17:0f:b5:cf:4f:7f:9a: c7:81:07:0e:ca:6a:97:d4:49:ae:e5:7a:ab:de:c1:28:80:df: b6:12:95:06:ad:34:56:e6:2a:28:b5:2b:4c:b9:48:8d:2b:88: 02:72:81:75:71:8c:b7:b8:b0:20:78:80:5e:df:19:a3:3a:58: 0e:16:66:53:38:6d:a6:b7:5c:46:77:ef:cd:8c:2b:3e:1e:66: 8f:d0:24:f5:2e:90:5f:d0:20:d0:97:6b:dd:fd:83:77:28:c0: cd:80:17:99:68:4c:0d:60:0e:1b:c1:3c:ab:7e:5d:72:97:0e: 00:94:96:82:d6:ae:d8:72:e2:0f:43:cd:ad:57:2e:5b:e5:71: 52:44:53:79 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt6yD7W2xf6RQ00uqRM9+1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmNhOTk3ZDM5MGNkNmU0NmUwMTI4ZTUwZDcwYjg0ZTdhYjY3NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFf22AF11X/JDagxGITpWhI0sLez otopxeb2Q9EL/aPIHkCYaLyR87ajNRXCDkAqzFMqWBceE+eew9Rh/mYK3BZz208C zZKMntSS6btolQRaf53TliZmjlvpbHbwR7DyTkWMnnKCcycSwj/gsPaU8YfffYYj g7JDGKoYFKAui2n/z1/oevhpk+c2hTD52GxKqcHq4fR+EG7F5H4raY1ZJhz3hOz3 ol17u2dogQ42gmSNT/AgpRjg/bNMCdBGuS2nSHn44SPQOe3K6wVAIY0Xlj7xSH2i eUA59yvlUlwM6bNOdOQSVW9OQ37ClWTBTFY1RGhbQ/wTEgIWeM1eDmPWtwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFP/KmX05DNbkbgEo5Q1wuE56tnQPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2FmMGEy YS03ZWJmLTRkYzAtYTMxOS04MTliN2E3ZWM0MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYWYwYTJh LTdlYmYtNGRjMC1hMzE5LTgxOWI3YTdlYzQzNC8xL184cVpmVGtNMXVSdUFTamxE WEM0VG5xMmRBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCK+VcAwQCZ4SAAwQCuTlAMA0EAgACMAcDBQAq AlkgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiP/MA0GCSqGSIb3DQEBCwUAA4IB AQB7K6qS4IMO+GnMBrhiyu7/U3ceDRvVWcM7uPplMk/SE6V4DzyGc4nJDyvPq916 tPL+QSVeFoQ45tzctcEKpSu1zzMReKykWHMNOEg3w3jwX9F9CB1SwFf008XWxqin s/0f1jsC2UYxX4Yjcqpe+v5xHObdg31BbRcPtc9Pf5rHgQcOymqX1Emu5Xqr3sEo gN+2EpUGrTRW5iootStMuUiNK4gCcoF1cYy3uLAgeIBe3xmjOlgOFmZTOG2mt1xG d+/NjCs+HmaP0CT1LpBf0CDQl2vd/YN3KMDNgBeZaEwNYA4bwTyrfl1ylw4AlJaC 1q7YcuIPQ82tVy5b5XFSRFN5 -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:32 2026 by rpki-client