This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer File: 1-c9m7XQoo55j8NJzYDf0McQao08.cer (raw, json) Hash identifier: 3inAPgyjcAk3rg1JdQHAtQhru3q6x8HBGWh9VSaeW+U= Subject key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38B1AB8C8845F76FDB0EFB62B6B524 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208378 IP: 193.138.29.0/24 IP: 2001:67c:c4c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:ab:8c:88:45:f7:6f:db:0e:fb:62:b6:b5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d4:32:6a:35:01:d3:5e:25:46:13:9f:e2:64: ca:5a:87:cd:1e:2b:f2:36:4b:84:6f:ed:73:39:c0: 6c:71:8b:b4:34:10:0b:fc:93:f3:5f:0a:22:05:69: f0:5e:37:74:95:c0:c6:b8:b9:fd:31:70:53:bc:42: 86:de:0a:85:29:3f:5e:69:e1:22:48:97:b4:46:de: ec:25:7f:c4:bc:74:4f:cd:9c:43:38:a8:f2:1e:51: 9f:e1:98:e5:fb:7f:66:3a:df:a4:50:f2:88:31:f7: 16:a4:ea:45:c9:2c:ad:96:7f:19:f9:3b:69:ff:b1: 46:8e:1d:f9:27:45:9e:33:d3:1a:23:d3:5e:df:18: f4:07:e4:38:b0:ef:b7:fd:91:71:e2:2a:9d:50:63: ab:dd:62:c3:79:f1:2f:42:1c:57:f1:cf:b4:7d:ed: 8c:e9:58:53:57:0c:fe:31:54:59:e5:55:1c:6b:70: 78:86:58:7b:9a:79:d3:e1:bb:bc:20:15:b0:40:d0: 35:47:96:41:49:a8:89:b1:08:d8:0d:42:85:ad:d9: 92:07:02:68:2a:47:cb:92:dd:0f:b6:f9:d1:dc:96: 18:6d:9d:ae:61:33:d8:ac:14:89:f4:7d:81:fe:b9: b8:e0:76:36:67:fd:40:9f:0b:80:6d:be:59:a0:9b: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.29.0/24 IPv6: 2001:67c:c4c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208378 Signature Algorithm: sha256WithRSAEncryption 49:ff:f1:c3:69:09:c2:2b:5e:d7:fb:9a:75:eb:8e:5b:62:a7: a2:64:92:5b:d4:17:86:30:91:c8:4c:d0:c4:f9:69:be:ec:aa: 08:80:b6:1e:4b:9c:ba:c2:b1:c2:56:dd:6c:0c:ca:7c:e8:fa: d2:f7:f8:d5:11:66:d8:40:a1:b1:01:df:61:36:ce:3e:79:c2: 0d:47:b6:7b:72:41:15:a6:67:98:86:ae:1f:90:03:34:50:dd: 9f:8c:c9:3a:3f:dd:79:e7:0e:a6:cd:b0:aa:13:91:e3:4f:2f: 53:6d:99:ca:28:68:d5:fd:0b:2c:78:4e:c3:0c:e9:4d:1f:85: f5:f6:87:f2:c9:36:db:98:2a:4d:31:d8:cc:89:d1:37:13:0c: e5:e5:3f:3c:12:fe:dc:03:7c:ef:92:74:19:1f:d9:3e:a8:72: ed:59:ee:ee:1b:e7:93:27:ec:ca:0d:9c:32:39:d0:76:85:d2: e7:ca:29:a3:21:d3:8c:61:b5:80:56:ea:12:f4:81:73:7f:f8: 7d:7d:69:9d:fe:bc:b9:9c:df:12:ee:ce:2e:d3:b1:cc:be:71: a8:01:2a:c8:d4:71:1e:09:82:28:2f:c1:3b:b7:07:a9:12:6a: eb:93:19:a0:18:37:9e:d8:cc:e9:93:98:c0:13:c1:71:ce:f2: 5e:60:94:ae -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt+OLGrjIhF92/bDvtitrUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWNmNjZlZDc0MjhhMzllNjNmMGQyNzM2MDM3ZjQzMWM0MWFhMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dQyajUB014lRhOf4mTKWofNHivy NkuEb+1zOcBscYu0NBAL/JPzXwoiBWnwXjd0lcDGuLn9MXBTvEKG3gqFKT9eaeEi SJe0Rt7sJX/EvHRPzZxDOKjyHlGf4Zjl+39mOt+kUPKIMfcWpOpFySytln8Z+Ttp /7FGjh35J0WeM9MaI9Ne3xj0B+Q4sO+3/ZFx4iqdUGOr3WLDefEvQhxX8c+0fe2M 6VhTVwz+MVRZ5VUca3B4hlh7mnnT4bu8IBWwQNA1R5ZBSaiJsQjYDUKFrdmSBwJo KkfLkt0PtvnR3JYYbZ2uYTPYrBSJ9H2B/rm44HY2Z/1AnwuAbb5ZoJtHQQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFPnPZu10KKOeY/DSc2A39DHEGqNPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2Q3ODRl ZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNiZWQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVk LWJlNzUtNDA3Mi1hNzgwLWU2MzM3MDNmY2JlZC8xLzEtYzltN1hRb281NWo4Tkp6 WURmME1jUWFvMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEF BQcBBwEB/wQhMB8wDAQCAAEwBgMEAMGKHTAPBAIAAjAJAwcAIAEGfAxMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMt+jANBgkqhkiG9w0BAQsFAAOCAQEASf/xw2kJ wite1/uadeuOW2KnomSSW9QXhjCRyEzQxPlpvuyqCIC2HkucusKxwlbdbAzKfOj6 0vf41RFm2EChsQHfYTbOPnnCDUe2e3JBFaZnmIauH5ADNFDdn4zJOj/deecOps2w qhOR408vU22Zyiho1f0LLHhOwwzpTR+F9faH8sk225gqTTHYzInRNxMM5eU/PBL+ 3AN875J0GR/ZPqhy7Vnu7hvnkyfsyg2cMjnQdoXS58opoyHTjGG1gFbqEvSBc3/4 fX1pnf68uZzfEu7OLtOxzL5xqAEqyNRxHgmCKC/BO7cHqRJq65MZoBg3ntjM6ZOY wBPBcc7yXmCUrg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:59 2026 by rpki-client