This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer (raw, json) Hash identifier: 6Ve73vSWAAdQrPFhU+6h37X57dg6n2AlnQIo3gX8OIo= Subject key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82CBDF1F6A13EF483BA099105BACEA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59951 IP: 185.234.84.0/22 IP: 2001:67c:2cf4::/48 IP: 2a0d:900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cb:df:1f:6a:13:ef:48:3b:a0:99:10:5b:ac:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:c0:ed:fb:23:df:3e:88:08:18:76:5e:82: b7:dc:0b:c9:54:9f:1f:84:b6:9e:e6:18:4e:20:20: c9:04:04:c9:61:c6:b0:12:5e:e4:2d:80:b3:44:bf: 1f:d3:82:44:fd:e7:0e:28:d9:31:ef:5a:fb:99:89: cd:9e:33:2b:53:91:c3:12:cc:d0:04:ab:e2:0f:a6: e3:31:89:54:15:8b:a2:15:fe:c7:c5:d9:49:1b:70: e5:a5:b8:28:73:4a:6b:4a:0e:27:f8:23:d1:4f:6f: 0b:e0:ab:5e:fe:5c:f1:f7:ae:fe:30:4b:b6:b9:82: 6b:3f:10:a2:0d:2b:ca:7e:29:61:e9:1e:72:51:f7: f3:77:ca:08:a7:c7:8c:91:5b:09:5e:a5:2a:fb:26: 45:fe:fd:2f:f3:db:fe:3f:e8:5f:0e:02:89:63:c4: 58:53:2f:2a:c4:81:ea:dd:90:be:02:fd:4c:47:2c: 4f:92:85:7a:9c:61:02:c1:2a:c5:9c:e0:4b:d8:4a: 99:68:67:94:f2:be:65:28:61:96:cd:9a:58:a3:f7: 45:65:47:37:f1:85:13:cf:a3:7c:35:21:e6:b0:67: e0:e2:87:b9:8c:66:78:00:ff:a8:77:0f:2f:36:60: 94:0e:5f:eb:0f:bb:5b:dd:bb:a9:23:e7:0b:16:64: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.84.0/22 IPv6: 2001:67c:2cf4::/48 2a0d:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59951 Signature Algorithm: sha256WithRSAEncryption 61:d8:fe:fe:3b:a6:0e:37:cc:ec:15:46:3a:18:a1:8a:3a:93: c2:e6:86:90:b6:a6:33:7a:f5:c2:48:6c:d6:6f:b2:28:15:9c: 4a:28:e7:0a:44:21:5b:7a:98:a6:59:62:38:8d:3d:df:9d:71: 5b:ae:bc:b5:39:08:57:ab:c1:6e:5c:fd:76:ed:2b:83:93:1d: f3:03:6f:d0:fe:6b:79:a8:08:93:32:b9:77:17:51:16:08:50: 2a:52:c7:f2:46:04:aa:43:df:c7:b4:59:31:be:78:dc:ff:f0: 7b:22:42:fa:c1:ae:48:d6:fe:47:a4:f1:fd:d8:b6:de:c8:8e: fe:c1:bd:33:3d:bd:9e:74:c1:1b:74:f6:64:27:bb:a1:5c:fe: 12:a0:dd:a7:39:07:72:1b:2d:5b:41:63:52:0e:1f:cb:7b:5f: 54:65:88:f2:b7:21:0b:fe:5d:79:54:04:f6:2e:49:67:00:5c: 1e:b0:f5:4c:50:5e:02:7e:b5:69:6f:4f:67:5b:3c:ed:83:30: 93:87:7a:a9:a7:3e:ce:ec:fc:88:b0:c2:ea:2e:87:d0:8c:b8: 39:b0:8e:e8:b2:27:ab:44:59:fd:da:1b:30:20:f0:9d:cc:32: bd:5d:33:08:2a:4c:08:5e:4f:1a:66:34:e6:0b:65:db:5f:f2: 48:8b:f1:5e -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt/gsvfH2oT70g7oJkQW6zqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTJmNDE1OTEyMGFhNTFiYjFjZGYxMTZkMDZhNGZjMDI5MmZmOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu33A7fsj3z6ICBh2XoK33AvJVJ8f hLae5hhOICDJBATJYcawEl7kLYCzRL8f04JE/ecOKNkx71r7mYnNnjMrU5HDEszQ BKviD6bjMYlUFYuiFf7HxdlJG3Dlpbgoc0prSg4n+CPRT28L4Kte/lzx967+MEu2 uYJrPxCiDSvKfilh6R5yUffzd8oIp8eMkVsJXqUq+yZF/v0v89v+P+hfDgKJY8RY Uy8qxIHq3ZC+Av1MRyxPkoV6nGECwSrFnOBL2EqZaGeU8r5lKGGWzZpYo/dFZUc3 8YUTz6N8NSHmsGfg4oe5jGZ4AP+odw8vNmCUDl/rD7tb3bupI+cLFmQ8gwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFNEvQVkSCqUbsc3xFtBqT8ApL/lsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3Lzk4OTY3 YS1kMzk2LTQ5MjEtYTA5Zi1mYzRhNmFiNzg4YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvOTg5Njdh LWQzOTYtNDkyMS1hMDlmLWZjNGE2YWI3ODhhZC8xLzBTOUJXUklLcFJ1eHpmRVcw R3BQd0Nrdi1Xdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQCuepUMBYEAgACMBADBwAgAQZ8LPQDBQAqDQkA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDqLzANBgkqhkiG9w0BAQsFAAOCAQEA Ydj+/jumDjfM7BVGOhihijqTwuaGkLamM3r1wkhs1m+yKBWcSijnCkQhW3qYplli OI09351xW668tTkIV6vBblz9du0rg5Md8wNv0P5reagIkzK5dxdRFghQKlLH8kYE qkPfx7RZMb543P/weyJC+sGuSNb+R6Tx/di23siO/sG9Mz29nnTBG3T2ZCe7oVz+ EqDdpzkHchstW0FjUg4fy3tfVGWI8rchC/5deVQE9i5JZwBcHrD1TFBeAn61aW9P Z1s87YMwk4d6qac+zuz8iLDC6i6H0Iy4ObCO6LInq0RZ/dobMCDwncwyvV0zCCpM CF5PGmY05gtl21/ySIvxXg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:04 2026 by rpki-client