This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer File: 0u9GpBNBlOckI9VyobZtSp0uTBM.cer (raw, json) Hash identifier: u2zknay4/P5ZWiflbtxb8dhSrkDgYKCONm++grYY+HY= Subject key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835288DF637450957B4538F1881A437 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.235.28.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:28:8d:f6:37:45:09:57:b4:53:8f:18:81:a4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:c2:f1:25:55:91:54:5c:3e:5d:29:01:e7: 77:c8:4e:76:d3:52:18:7e:90:d9:3e:fe:df:d8:98: 50:77:cb:41:b2:05:7d:bf:08:a2:5a:55:fb:66:96: 4b:3b:70:0a:4b:74:eb:6f:03:06:a5:0c:75:34:30: 64:4e:03:8e:6c:a4:23:b5:3a:80:dc:88:f6:15:26: a4:41:ab:99:5a:ab:13:4e:17:b9:99:67:6e:0e:7d: 7f:5b:53:22:29:32:54:b8:80:3a:27:31:59:89:af: 30:ba:d7:c3:bf:7a:b6:05:30:a5:0a:d8:6f:8f:e5: 98:76:14:31:b3:6b:43:b6:4d:e8:37:12:0d:6e:0c: 63:54:6e:7e:5e:02:d1:da:2c:8c:79:6d:25:83:ed: 6e:a0:00:fb:f8:ff:e1:1c:4e:ca:04:3e:63:ed:0e: d9:cf:b3:94:dc:1a:3c:60:47:57:50:ed:0a:38:18: 69:bc:09:cc:65:ed:db:30:8c:0d:bb:88:7f:36:44: f5:68:b9:cf:39:73:02:be:5d:e6:86:5b:38:21:69: d9:a1:39:03:97:c4:cf:4f:bf:c7:2a:e0:21:f6:d5: 74:67:a7:f6:fc:ce:ff:9f:b0:63:c2:ac:76:5f:2a: 17:3c:29:17:15:45:e6:09:9d:5c:92:96:dc:fa:89: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.28.0/22 Signature Algorithm: sha256WithRSAEncryption 14:2f:41:c4:1d:59:96:3e:a6:c5:f1:67:6a:d4:2f:ef:a0:da: 58:7d:dc:fb:f7:a9:7d:6c:df:fb:ec:df:91:81:45:30:35:0e: 62:af:3e:a0:95:84:ad:59:c8:61:69:ce:b7:d5:ad:9d:04:00: 0b:91:7e:81:b0:c9:28:15:3c:e2:a6:f3:d3:41:48:dd:b0:34: d0:2c:bb:b8:4b:61:82:36:d8:3b:27:13:fc:92:f7:79:3e:54: 24:8b:4b:4a:ea:21:a2:95:01:59:c2:e7:1e:e1:0d:3a:c0:cf: 26:57:17:c7:48:2b:c9:da:3d:c0:76:a0:64:67:37:11:49:90: 33:47:43:97:84:a0:95:ae:f2:03:7e:ee:9e:4e:1b:95:7a:e2: 55:3b:83:d0:cd:8a:61:0b:23:ce:a5:f4:df:96:a2:44:4a:c8: 53:37:32:da:c7:a9:b3:15:2f:cf:67:22:94:04:0a:77:35:82: 26:eb:7a:ab:94:5c:6b:ac:ee:14:ac:cd:e1:b7:66:e0:2f:66: f7:4a:8a:38:ce:dc:82:89:6c:d6:44:08:75:7f:f4:1f:39:72: 4c:a5:08:fc:83:6b:ff:a2:73:3e:c6:64:86:16:23:43:8d:bc: 25:0e:07:be:b0:5e:b8:fc:b2:6d:b4:4d:71:11:1d:6f:40:9d: 20:87:f2:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NSiN9jdFCVe0U48YgaQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmVmNDZhNDEzNDE5NGU3MjQyM2Q1NzJhMWI2NmQ0YTlkMmU0YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x/C8SVVkVRcPl0pAed3yE5201IY fpDZPv7f2JhQd8tBsgV9vwiiWlX7ZpZLO3AKS3TrbwMGpQx1NDBkTgOObKQjtTqA 3Ij2FSakQauZWqsTThe5mWduDn1/W1MiKTJUuIA6JzFZia8wutfDv3q2BTClCthv j+WYdhQxs2tDtk3oNxINbgxjVG5+XgLR2iyMeW0lg+1uoAD7+P/hHE7KBD5j7Q7Z z7OU3Bo8YEdXUO0KOBhpvAnMZe3bMIwNu4h/NkT1aLnPOXMCvl3mhls4IWnZoTkD l8TPT7/HKuAh9tV0Z6f2/M7/n7Bjwqx2XyoXPCkXFUXmCZ1ckpbc+oneVwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNLvRqQTQZTnJCPVcqG2bUqdLkwTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzY0NTNj NC02Njg3LTRlZjktOWZkYy1hODhiYjc4MDViMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvNjQ1M2M0 LTY2ODctNGVmOS05ZmRjLWE4OGJiNzgwNWIwOS8xLzB1OUdwQk5CbE9ja0k5Vnlv Ylp0U3AwdVRCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuescMA0GCSqGSIb3DQEBCwUAA4IBAQAUL0HE HVmWPqbF8Wdq1C/voNpYfdz796l9bN/77N+RgUUwNQ5irz6glYStWchhac631a2d BAALkX6BsMkoFTzipvPTQUjdsDTQLLu4S2GCNtg7JxP8kvd5PlQki0tK6iGilQFZ wuce4Q06wM8mVxfHSCvJ2j3AdqBkZzcRSZAzR0OXhKCVrvIDfu6eThuVeuJVO4PQ zYphCyPOpfTflqJESshTNzLax6mzFS/PZyKUBAp3NYIm63qrlFxrrO4UrM3ht2bg L2b3Soo4ztyCiWzWRAh1f/QfOXJMpQj8g2v/onM+xmSGFiNDjbwlDge+sF64/LJt tE1xER1vQJ0gh/IB -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:01 2026 by rpki-client