This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.cer (raw, json) Hash identifier: Zs66gIjSv4GY83WDofZwyk3jBgOMQWPKQ4NoT4FyPeo= Subject key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37D6667DBAAC56AC07985376D07D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196883 IP: 109.196.112.0/20 IP: 2001:67c:11c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:66:67:db:aa:c5:6a:c0:79:85:37:6d:07:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:0f:e3:0e:31:ef:11:3f:ca:d5:a1:36:3b: d1:c2:91:bd:63:8e:ed:6f:1f:36:38:18:f5:cb:35: 50:39:96:a8:29:12:d4:da:0c:6f:7f:87:1d:5f:8a: ed:6a:36:14:aa:08:67:9c:db:a4:27:9d:d6:da:0a: d1:cd:1d:6b:64:d3:ce:16:6c:50:48:64:12:94:d4: ea:a0:1f:70:b4:f4:7a:cc:05:89:65:fd:eb:06:26: 33:ce:f8:a7:dc:82:46:e5:32:9e:6e:36:05:60:81: 75:85:b2:fe:bb:30:2e:fd:48:bc:90:63:4a:3b:b4: 17:9f:61:81:7e:c7:bc:95:06:43:2a:4d:94:56:c8: 96:98:35:d2:a6:55:6a:c0:17:9b:5c:74:22:97:32: bd:dd:dd:d7:8f:cc:79:f0:57:76:64:30:83:db:c8: 0d:ba:04:e4:d2:78:6a:4c:c3:d3:39:47:fa:47:4f: 58:76:c7:9d:28:26:11:13:aa:2b:7c:b4:b2:e3:80: ed:11:0a:75:05:ca:73:dc:71:78:58:c7:f0:31:10: 2e:92:5d:14:ae:0c:6f:85:ae:b1:5a:2a:31:38:92: f8:dc:9f:fd:e6:41:cb:e1:c1:77:fe:94:3a:b7:71: 23:be:eb:b0:73:b6:04:eb:a1:a6:43:c1:ee:09:94: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.196.112.0/20 IPv6: 2001:67c:11c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196883 Signature Algorithm: sha256WithRSAEncryption 44:85:1b:4a:9e:3d:47:ac:a0:60:c4:08:e1:09:45:33:ee:c5: a6:9c:fc:0c:e2:cc:b5:a8:5e:1d:a3:29:0c:e9:be:ee:52:d9: d8:92:2a:b2:c6:75:88:64:d1:28:cf:dd:94:53:5d:b8:e6:d8: 00:ef:39:ff:9a:fa:76:36:75:73:08:aa:16:ad:fc:ad:3c:63: ba:d2:c8:e1:21:01:b1:6a:f5:48:26:14:3b:07:4f:9d:bc:23: f5:8f:2c:c4:fe:8c:1f:29:98:d1:10:5b:3b:b8:ac:f3:93:84: f4:7b:40:66:f6:77:f7:44:6f:b5:78:20:46:c6:91:d5:9e:4d: ea:14:0a:ee:b1:51:e0:13:1d:f0:13:73:91:30:8d:34:88:22: d7:93:e9:1c:fc:43:3c:2d:69:83:10:9c:45:5f:1b:0b:eb:ab: 12:ff:4f:28:54:8e:58:b1:f8:13:05:fa:e9:27:10:8a:66:96: 52:26:31:b3:e0:7c:cc:1d:26:fe:63:88:40:30:1a:2a:e4:6f: 16:b4:3f:d7:16:b5:d3:10:44:86:ad:ee:9c:1e:17:11:ad:af: fd:9e:f4:fa:41:a2:a2:7b:b5:db:a7:c9:11:6e:3b:39:fa:3d: 93:7c:04:c3:1f:d6:0b:e8:cd:b0:d9:cc:8d:aa:23:6e:f0:98: 30:01:a9:7f -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4o31mZ9uqxWrAeYU3bQfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGExNmJmN2UwZTNiOTMzMGI1NDQ4M2UxOWY2MTNiMDJiNjI3YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyicP4w4x7xE/ytWhNjvRwpG9Y47t bx82OBj1yzVQOZaoKRLU2gxvf4cdX4rtajYUqghnnNukJ53W2grRzR1rZNPOFmxQ SGQSlNTqoB9wtPR6zAWJZf3rBiYzzvin3IJG5TKebjYFYIF1hbL+uzAu/Ui8kGNK O7QXn2GBfse8lQZDKk2UVsiWmDXSplVqwBebXHQilzK93d3Xj8x58Fd2ZDCD28gN ugTk0nhqTMPTOUf6R09YdsedKCYRE6orfLSy44DtEQp1Bcpz3HF4WMfwMRAukl0U rgxvha6xWioxOJL43J/95kHL4cF3/pQ6t3Ejvuuwc7YE66GmQ8HuCZT6ewIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFNCha/fg47kzC1RIPhn2E7ArYnvvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2NlYWZm Yi1hYzI1LTQ5MWQtYjNjYy00ZWYwM2MxMDgxZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvY2VhZmZi LWFjMjUtNDkxZC1iM2NjLTRlZjAzYzEwODFmOC8xLzBLRnI5LURqdVRNTFZFZy1H ZllUc0N0aWUtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQEbcRwMA8EAgACMAkDBwAgAQZ8ARwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwETMA0GCSqGSIb3DQEBCwUAA4IBAQBEhRtKnj1H rKBgxAjhCUUz7sWmnPwM4sy1qF4doykM6b7uUtnYkiqyxnWIZNEoz92UU1245tgA 7zn/mvp2NnVzCKoWrfytPGO60sjhIQGxavVIJhQ7B0+dvCP1jyzE/owfKZjREFs7 uKzzk4T0e0Bm9nf3RG+1eCBGxpHVnk3qFArusVHgEx3wE3ORMI00iCLXk+kc/EM8 LWmDEJxFXxsL66sS/08oVI5YsfgTBfrpJxCKZpZSJjGz4HzMHSb+Y4hAMBoq5G8W tD/XFrXTEESGre6cHhcRra/9nvT6QaKie7Xbp8kRbjs5+j2TfATDH9YL6M2w2cyN qiNu8JgwAal/ -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:56 2026 by rpki-client