This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer (raw, json) Hash identifier: KDzMp17T9V0UMH3tifgx3z61dkXdNKvWgnxabxJS5xc= Subject key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC977BD749EB0AC1CD1CD2B647E7001 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197973 IP: 128.140.232.0/21 IP: 2a02:6b80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:77:bd:74:9e:b0:ac:1c:d1:cd:2b:64:7e:70:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:b8:c5:be:9d:77:93:b2:0f:d8:83:c0:26: 59:ce:03:ba:6d:ed:27:0d:cc:30:33:90:b2:ae:e1: d1:36:eb:22:d0:94:44:f3:82:6c:35:92:27:a1:0f: 12:eb:64:13:29:aa:77:dd:4c:9a:0d:4c:1d:6b:d2: 99:7d:93:9a:ef:09:79:4e:a2:52:71:61:c8:5d:af: 38:6e:b3:66:d5:bc:a7:3c:d4:20:41:bc:63:a4:34: 3b:3e:ee:a6:06:ff:8e:9c:d8:5d:a4:fc:1a:ae:b8: 40:94:e0:6e:17:ec:64:9a:24:82:10:e9:2d:e3:a5: 23:6d:3b:09:3c:89:77:f6:ea:fc:03:9c:8f:6f:92: b5:5f:c4:38:34:e1:fc:17:ef:f1:b8:b3:5a:0f:d2: cb:9b:49:5c:1b:93:90:50:b9:44:45:87:b4:b6:41: 59:65:33:24:11:3a:29:2a:ea:df:a7:69:6b:00:93: 58:40:e7:70:2c:40:ae:6d:44:2d:98:cd:01:a1:53: 49:c7:a5:2f:93:72:70:7b:89:05:84:c0:89:a9:19: 0e:32:ff:67:24:b4:c6:83:d1:7d:62:95:63:e9:18: ab:45:4b:03:b6:79:6c:6f:f0:6d:c3:2d:96:20:45: aa:0a:36:2c:c9:13:fd:0e:a3:c5:b0:ec:cb:af:eb: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.140.232.0/21 IPv6: 2a02:6b80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197973 Signature Algorithm: sha256WithRSAEncryption 41:47:51:55:3f:e3:87:0b:29:0e:26:b9:cd:00:68:8a:7e:7b: 8f:3c:de:55:25:18:f3:64:51:53:07:c7:12:2e:c3:77:0d:74: b3:12:72:73:37:01:5a:e1:87:8a:4c:23:4c:76:10:3f:41:bc: 37:57:d6:18:65:e0:e5:f5:ab:8f:02:d4:99:d8:3a:a3:6e:9c: bf:78:fa:be:44:f1:e0:10:0c:63:08:16:6e:fc:e5:f8:c2:97: de:9c:0f:64:5f:8c:c6:38:5a:73:16:ca:14:22:8b:c5:c7:cb: 84:7f:2c:c2:ad:26:96:a9:c8:2f:20:d8:b7:4f:d0:3f:e8:1d: 06:d8:9a:6b:52:19:12:d1:29:3b:9d:0a:28:93:5b:81:b2:36: d1:4b:c4:5c:07:9d:5e:50:06:a6:32:28:90:89:87:46:65:9a: 87:de:f9:9f:2f:31:4d:a2:6d:51:14:37:79:66:71:f8:41:84: 17:e6:1b:27:5a:22:c2:99:b3:82:6c:a9:47:f4:58:fc:68:07: 61:7d:04:90:95:e3:b2:a2:2a:bf:48:bb:bb:03:25:13:b7:87: 59:a9:e2:22:7b:b7:bf:bd:44:bf:e3:54:9a:21:a7:e0:a7:07: 57:9f:b4:94:84:29:ce:ed:91:bd:15:61:20:d4:00:a4:31:ac: 7d:40:a7:78 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt9yXe9dJ6wrBzRzStkfnABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQwZWNmNjM1ZGQzZTlkMTZiMzYxZjhlM2UwZjUwNTMxYjFmYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFi4xb6dd5OyD9iDwCZZzgO6be0n DcwwM5CyruHRNusi0JRE84JsNZInoQ8S62QTKap33UyaDUwda9KZfZOa7wl5TqJS cWHIXa84brNm1bynPNQgQbxjpDQ7Pu6mBv+OnNhdpPwarrhAlOBuF+xkmiSCEOkt 46UjbTsJPIl39ur8A5yPb5K1X8Q4NOH8F+/xuLNaD9LLm0lcG5OQULlERYe0tkFZ ZTMkETopKurfp2lrAJNYQOdwLECubUQtmM0BoVNJx6Uvk3Jwe4kFhMCJqRkOMv9n JLTGg9F9YpVj6RirRUsDtnlsb/Btwy2WIEWqCjYsyRP9DqPFsOzLr+vk6QIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPvQ7PY13T6dFrNh+OPg9QUxsftOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2FiY2Y3 Mi1mMzBhLTRlYjItYWMzMi00MTQzYTg4ODRhMmUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYWJjZjcy LWYzMGEtNGViMi1hYzMyLTQxNDNhODg4NGEyZS8xLzEtOURzOWpYZFBwMFdzMkg0 NC1EMUJUR3gtMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEA4CM6DANBAIAAjAHAwUAKgJrgDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDBVUwDQYJKoZIhvcNAQELBQADggEBAEFHUVU/44cL KQ4muc0AaIp+e4883lUlGPNkUVMHxxIuw3cNdLMScnM3AVrhh4pMI0x2ED9BvDdX 1hhl4OX1q48C1JnYOqNunL94+r5E8eAQDGMIFm785fjCl96cD2RfjMY4WnMWyhQi i8XHy4R/LMKtJpapyC8g2LdP0D/oHQbYmmtSGRLRKTudCiiTW4GyNtFLxFwHnV5Q BqYyKJCJh0Zlmofe+Z8vMU2ibVEUN3lmcfhBhBfmGydaIsKZs4JsqUf0WPxoB2F9 BJCV47KiKr9Iu7sDJRO3h1mp4iJ7t7+9RL/jVJohp+CnB1eftJSEKc7tkb0VYSDU AKQxrH1Ap3g= -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:32 2026 by rpki-client