This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.cer (raw, json) Hash identifier: vrP4OPbMuragkpLGOPw2NmRyeDgl3UeUcVRRpkQjlxU= Subject key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB658CAC595F6EB507A788AF426F33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216159 IP: 83.171.192.0/22 IP: 193.201.155.0/26 IP: 2001:7f8:2::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:8c:ac:59:5f:6e:b5:07:a7:88:af:42:6f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d11f6d924d6f6cc0e940837d9301fce732065771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:43:68:f6:21:58:ed:f3:bb:79:7c:8c:ee: 81:83:d0:f0:7e:58:6a:95:da:7b:b6:f6:d4:b3:64: c5:65:bd:39:35:5f:b2:d0:52:b9:5c:6b:9a:a3:ee: 36:8a:73:a6:8a:37:91:99:f6:22:6d:47:83:eb:f9: 15:22:62:38:14:05:f4:aa:86:58:36:53:bd:e2:06: 2a:82:c2:f1:0b:21:0b:7d:35:39:98:33:ab:5b:21: ed:60:b3:2b:28:b8:b6:07:15:af:9c:46:8a:34:35: ff:96:42:03:d9:1e:1f:e2:f6:85:24:75:c9:4d:69: 54:bd:9d:f5:a9:5d:84:45:b2:90:8f:2e:7b:e4:32: b2:d5:ef:b2:bf:a2:7e:60:6a:3b:b1:26:be:4c:84: 5a:f2:7c:43:27:9c:53:2c:d5:23:d8:00:e7:00:30: 25:4d:04:c1:b3:4d:0e:eb:2c:cb:1d:45:64:b7:d1: c8:64:bf:df:3b:d3:27:7e:6a:18:f2:be:9c:68:31: 6d:be:66:6d:e3:bf:95:e2:3b:8b:f0:70:bf:1e:88: 0a:fa:5c:78:f9:12:28:b2:59:7c:b0:62:18:0e:7e: 45:e3:a5:5c:d0:17:bf:c4:95:c9:b0:8b:69:ce:40: e3:f8:01:09:57:13:07:11:d2:5c:bb:0f:0b:49:90: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.192.0/22 193.201.155.0/26 IPv6: 2001:7f8:2::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216159 Signature Algorithm: sha256WithRSAEncryption 2b:e7:e1:93:61:d5:de:38:be:85:fb:00:26:5f:11:38:1c:27: ec:73:70:39:32:d6:2a:d0:aa:c9:5b:b3:fd:90:fb:0d:5c:61: 60:f4:9a:53:df:20:dc:6d:b6:24:ca:c5:d7:90:72:f0:e2:80: b2:e9:07:42:c8:a0:24:88:91:43:5d:76:50:84:c8:58:0c:e6: 00:a8:39:35:4a:72:ae:b0:b8:ad:09:6b:4c:ba:db:02:b0:b2: 37:b6:fe:12:56:81:a8:1a:b8:68:3f:74:8a:ee:65:38:43:57: 82:2b:c1:a9:62:01:a9:d6:04:7d:0d:04:48:38:c2:08:1d:8c: 8d:17:f9:bf:87:0c:5c:64:0b:19:e7:70:16:eb:da:21:3e:b0: bd:a6:b4:da:ca:e5:d0:99:7a:53:1a:26:04:a4:8b:3e:45:93: 77:6b:4f:e1:d1:54:4b:56:38:5b:bd:27:20:b7:e0:44:f4:4a: d1:43:29:07:c5:05:5c:a9:96:82:d4:e3:36:8b:ff:4a:12:96: ed:95:36:19:d9:42:7b:dd:94:f2:5a:7c:cc:76:24:2c:22:1d: 7c:e6:74:05:a6:92:c5:ce:7d:c2:f2:95:c9:db:32:63:76:4e: c6:23:39:ed:39:61:ab:e6:db:d2:df:b7:58:8b:e3:44:a6:97: 4e:69:6f:8d -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt9y2WMrFlfbrUHp4ivQm8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTFmNmQ5MjRkNmY2Y2MwZTk0MDgzN2Q5MzAxZmNlNzMyMDY1NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMBDaPYhWO3zu3l8jO6Bg9Dwflhq ldp7tvbUs2TFZb05NV+y0FK5XGuao+42inOmijeRmfYibUeD6/kVImI4FAX0qoZY NlO94gYqgsLxCyELfTU5mDOrWyHtYLMrKLi2BxWvnEaKNDX/lkID2R4f4vaFJHXJ TWlUvZ31qV2ERbKQjy575DKy1e+yv6J+YGo7sSa+TIRa8nxDJ5xTLNUj2ADnADAl TQTBs00O6yzLHUVkt9HIZL/fO9MnfmoY8r6caDFtvmZt47+V4juL8HC/HogK+lx4 +RIosll8sGIYDn5F46Vc0Be/xJXJsItpzkDj+AEJVxMHEdJcuw8LSZDZewIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFNEfbZJNb2zA6UCDfZMB/OcyBldxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzgzYzli OS1hMWFjLTQ1MTYtYWJlOC05ZWQ5NzEwZDZlYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvODNjOWI5 LWExYWMtNDUxNi1hYmU4LTllZDk3MTBkNmVhMi8xLzBSOXRrazF2Yk1EcFFJTjlr d0g4NXpJR1YzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjATBAIAATANAwQCU6vAAwUGwcmbADAPBAIAAjAJAwcAIAEH+AAC MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMXzANBgkqhkiG9w0BAQsFAAOCAQEA K+fhk2HV3ji+hfsAJl8ROBwn7HNwOTLWKtCqyVuz/ZD7DVxhYPSaU98g3G22JMrF 15By8OKAsukHQsigJIiRQ112UITIWAzmAKg5NUpyrrC4rQlrTLrbArCyN7b+ElaB qBq4aD90iu5lOENXgivBqWIBqdYEfQ0ESDjCCB2MjRf5v4cMXGQLGedwFuvaIT6w vaa02srl0Jl6UxomBKSLPkWTd2tP4dFUS1Y4W70nILfgRPRK0UMpB8UFXKmWgtTj Nov/ShKW7ZU2GdlCe92U8lp8zHYkLCIdfOZ0BaaSxc59wvKVydsyY3ZOxiM57Tlh q+bb0t+3WIvjRKaXTmlvjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:59 2026 by rpki-client