This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95u9TEfb9fza_nkDH2kCWgI-W7s.cer File: 95u9TEfb9fza_nkDH2kCWgI-W7s.cer (raw, json) Hash identifier: kNz4iPxc44lzv4FtXSmkwI/neinYgnX0u2gplfDs2x8= Subject key identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA07AC8A702DF961C9B506C547C7C9CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 11:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.49.73.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:07:ac:8a:70:2d:f9:61:c9:b5:06:c5:47:c7:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 11:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f79bbd4c47dbf5fcdafe79031f69025a023e5bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:4b:00:b7:86:d5:39:b8:ba:2e:9b:0e:bf: aa:6b:a3:ab:3f:05:7a:8e:09:05:bf:3b:ab:f4:ac: 2f:15:c5:7f:f5:d7:b9:b8:c9:e3:95:7e:1b:3c:11: a0:23:af:79:a2:16:45:5c:67:12:10:66:7a:b9:a0: 07:3f:48:bf:1c:9d:fb:29:e4:d4:a9:7e:97:7e:43: bd:8d:9c:03:3a:65:4f:7c:d5:59:d0:da:8d:c3:37: 40:e1:6d:c1:08:f9:73:3c:41:4b:b6:86:36:54:f6: 9c:08:57:ab:09:d4:0f:87:1b:ef:1d:d5:06:0b:24: 35:5b:7d:36:c6:09:88:29:2d:88:62:c7:35:65:8e: 00:95:f9:3d:e3:1f:49:e2:7d:15:16:f7:25:f5:7c: ba:32:01:0e:b0:c6:11:2b:11:db:83:81:de:26:95: 23:dd:76:f0:92:2c:40:ac:64:24:d5:d9:16:5b:0a: 00:9b:1c:1b:27:66:63:ff:ba:61:cf:92:3d:43:11: e3:b7:3d:93:99:e0:71:21:c6:25:e5:73:0d:34:34: ea:61:1c:cf:09:bc:ac:ba:f4:ac:78:b0:66:01:4d: d0:8e:b2:d1:a0:e5:9a:e1:c1:b8:7c:94:f9:18:01: 16:73:99:b0:b2:53:dc:e4:e2:04:62:b5:c4:79:95: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9B:BD:4C:47:DB:F5:FC:DA:FE:79:03:1F:69:02:5A:02:3E:5B:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/72536f-743a-426e-b0eb-cfe4cb346111/1/95u9TEfb9fza_nkDH2kCWgI-W7s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.73.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f3:3a:7c:1c:fc:64:bf:26:81:a2:1e:c9:4f:04:d3:00:76: 90:5a:b5:7f:eb:e3:78:5a:41:89:1d:df:91:a0:e4:38:40:20: cd:7f:72:1e:a6:a9:ec:9f:f5:04:88:50:15:0b:7a:33:2d:ea: 19:ce:d0:25:37:2d:42:d9:24:75:46:37:fb:75:4e:8a:d3:60: 89:28:7c:1c:d8:23:c4:6c:fe:0a:5c:76:42:9a:5b:2e:e2:51: 86:7a:6e:fd:46:05:35:5d:c9:3e:d4:8f:3b:94:6b:66:04:38: 24:7f:6c:94:25:d2:ff:d0:a5:63:4a:a5:d7:be:e8:29:0c:f5: ae:e5:0d:a8:a6:c8:fd:28:3a:21:1c:d6:61:37:3c:e3:50:59: e2:d1:ba:d0:08:5b:fb:98:26:2b:bc:e7:88:35:ee:21:df:76: 27:d7:02:6b:bb:80:e6:cd:74:cb:cf:00:dd:84:b9:1d:71:44: a2:6c:4e:8d:49:2a:f9:ac:f0:5f:bb:53:17:71:d6:f1:d1:01: 7c:d1:91:bb:22:58:81:08:56:e6:1d:6c:b8:99:bf:2e:f5:90: a1:e8:72:ab:45:a5:4a:46:31:26:eb:bf:67:27:4c:6b:62:b6: 58:87:b9:8e:3c:e1:01:df:58:1b:57:15:60:c5:da:de:eb:94: 46:38:ef:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6B6yKcC35Ycm1BsVHx8nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTExOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzliYmQ0YzQ3ZGJmNWZjZGFmZTc5MDMxZjY5MDI1YTAyM2U1YmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCJLALeG1Tm4ui6bDr+qa6OrPwV6 jgkFvzur9KwvFcV/9de5uMnjlX4bPBGgI695ohZFXGcSEGZ6uaAHP0i/HJ37KeTU qX6XfkO9jZwDOmVPfNVZ0NqNwzdA4W3BCPlzPEFLtoY2VPacCFerCdQPhxvvHdUG CyQ1W302xgmIKS2IYsc1ZY4Alfk94x9J4n0VFvcl9Xy6MgEOsMYRKxHbg4HeJpUj 3XbwkixArGQk1dkWWwoAmxwbJ2Zj/7phz5I9QxHjtz2TmeBxIcYl5XMNNDTqYRzP CbysuvSseLBmAU3QjrLRoOWa4cG4fJT5GAEWc5mwslPc5OIEYrXEeZWALQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPebvUxH2/X82v55Ax9pAloCPlu7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzcyNTM2 Zi03NDNhLTQyNmUtYjBlYi1jZmU0Y2IzNDYxMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNzI1MzZm LTc0M2EtNDI2ZS1iMGViLWNmZTRjYjM0NjExMS8xLzk1dTlURWZiOWZ6YV9ua0RI MmtDV2dJLVc3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjFJMA0GCSqGSIb3DQEBCwUAA4IBAQAi8zp8 HPxkvyaBoh7JTwTTAHaQWrV/6+N4WkGJHd+RoOQ4QCDNf3Iepqnsn/UEiFAVC3oz LeoZztAlNy1C2SR1Rjf7dU6K02CJKHwc2CPEbP4KXHZCmlsu4lGGem79RgU1Xck+ 1I87lGtmBDgkf2yUJdL/0KVjSqXXvugpDPWu5Q2opsj9KDohHNZhNzzjUFni0brQ CFv7mCYrvOeINe4h33Yn1wJru4DmzXTLzwDdhLkdcUSibE6NSSr5rPBfu1MXcdbx 0QF80ZG7IliBCFbmHWy4mb8u9ZCh6HKrRaVKRjEm679nJ0xrYrZYh7mOPOEB31gb VxVgxdre65RGOO9Z -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:34 2026 by rpki-client