This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer (raw, json) Hash identifier: gWgqIDq1KZrGWAS/CNOdUZ+ObIoQB5xLQY3oKEiKqMU= Subject key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F813821FAA7FBBA244B3074048B036E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49206 IP: 185.24.172.0/22 IP: 2a00:6fa0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:38:21:fa:a7:fb:ba:24:4b:30:74:04:8b:03:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:b5:b7:95:aa:55:e3:e7:91:48:1d:c8:80: 16:6f:ca:ce:53:cb:cc:ce:45:c3:a1:9a:1b:79:ba: 8f:7b:9e:b9:d3:18:00:5f:f4:d3:0f:54:0d:9e:22: d9:5f:da:c4:c8:b9:eb:8b:a7:5e:75:4b:ee:45:65: 03:67:a5:0e:9a:d9:55:4f:5a:71:f8:e9:52:a1:c3: c6:4b:62:de:b0:ba:07:3f:c3:46:eb:f0:e6:3e:c9: 9e:dc:fd:8d:f4:da:ca:1f:ca:d4:cc:f3:26:6b:00: 16:4f:de:1b:a4:c7:f4:f8:22:19:93:24:d6:e4:95: 6c:5a:90:0e:13:42:b4:06:07:34:5b:fd:b4:2f:81: d5:ae:e4:dc:22:9e:0d:3a:ac:b1:e8:a9:c8:d4:f5: 7d:01:c5:b6:63:54:f2:f6:07:d7:a5:d8:ac:43:03: 52:08:81:46:f5:6f:d9:10:bb:59:8a:91:59:33:fe: cb:d6:c5:e9:24:4f:d8:90:22:8b:be:35:fa:ec:db: 91:f4:69:9d:5a:e8:ac:bc:28:e7:52:38:2b:7c:18: d2:06:c5:63:48:38:9b:74:40:f9:4b:38:e5:4c:b2: 50:c7:b0:a3:57:9c:d9:97:3c:84:3f:3b:b2:ab:1e: 54:cc:bd:05:7c:51:e8:f9:2e:7e:59:84:1d:f7:7e: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.172.0/22 IPv6: 2a00:6fa0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49206 Signature Algorithm: sha256WithRSAEncryption 44:d9:4e:ab:f8:d2:d8:e5:c1:d6:a7:2a:08:b2:30:7d:79:a6: f8:dc:4d:6f:d4:8c:37:07:bc:67:7c:11:ac:d5:9f:10:f3:c5: 12:4a:1a:e9:3f:d9:e3:5a:40:3a:fd:e5:39:ad:47:c0:48:f3: 5b:d2:d8:0e:37:8b:ec:44:f4:05:f7:80:07:c7:48:48:e9:44: 63:5a:81:74:f4:8a:0c:d8:11:23:1c:6a:83:a7:82:1e:19:83: 17:f8:97:16:2a:5a:85:35:c2:b3:a6:a5:51:f1:e2:b2:dc:84: e3:de:d1:d0:28:eb:12:a5:85:4e:ae:f3:31:62:84:0c:c7:42: 9a:61:29:c7:21:95:63:f6:b3:79:3e:4c:0c:c6:86:40:83:8a: 5b:a4:f0:88:99:34:e7:0c:4b:0b:66:3f:fb:19:5d:07:32:35: 52:05:15:86:0d:c9:54:a0:e6:a2:c9:2c:78:ac:e3:2e:fc:90: 32:b1:8c:05:dc:f1:6a:e4:3d:9d:d8:5a:7b:e4:4c:bd:79:13: 68:78:42:db:1d:19:ea:19:bc:92:49:e1:c2:3b:61:b6:3c:05: de:7d:cd:28:69:92:be:5e:5f:32:d4:b8:ff:83:69:d3:34:70: ac:a3:98:5a:bc:2c:0d:4a:4b:6a:54:e2:53:ef:00:91:cf:51: f7:af:a6:c7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gTgh+qf7uiRLMHQEiwNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDJiMDg0ZjliOWM5OGNmZDkwNDEwYjgzMDVjYzZjYjQ2ZGNjZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUy1t5WqVePnkUgdyIAWb8rOU8vM zkXDoZobebqPe5650xgAX/TTD1QNniLZX9rEyLnri6dedUvuRWUDZ6UOmtlVT1px +OlSocPGS2LesLoHP8NG6/DmPsme3P2N9NrKH8rUzPMmawAWT94bpMf0+CIZkyTW 5JVsWpAOE0K0Bgc0W/20L4HVruTcIp4NOqyx6KnI1PV9AcW2Y1Ty9gfXpdisQwNS CIFG9W/ZELtZipFZM/7L1sXpJE/YkCKLvjX67NuR9GmdWuisvCjnUjgrfBjSBsVj SDibdED5SzjlTLJQx7CjV5zZlzyEPzuyqx5UzL0FfFHo+S5+WYQd937n1QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPQrCE+bnJjP2QQQuDBcxstG3M7YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2Y5NDlh NS04NGFjLTQ1OWQtYjlhMC02YTljZDk0MjAyZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZjk0OWE1 LTg0YWMtNDU5ZC1iOWEwLTZhOWNkOTQyMDJmZi8xLzlDc0lUNXVjbU1fWkJCQzRN RnpHeTBiY3p0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRisMA0EAgACMAcDBQMqAG+gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDANjANBgkqhkiG9w0BAQsFAAOCAQEARNlOq/jS2OXB 1qcqCLIwfXmm+NxNb9SMNwe8Z3wRrNWfEPPFEkoa6T/Z41pAOv3lOa1HwEjzW9LY DjeL7ET0BfeAB8dISOlEY1qBdPSKDNgRIxxqg6eCHhmDF/iXFipahTXCs6alUfHi styE497R0CjrEqWFTq7zMWKEDMdCmmEpxyGVY/azeT5MDMaGQIOKW6TwiJk05wxL C2Y/+xldBzI1UgUVhg3JVKDmoskseKzjLvyQMrGMBdzxauQ9ndhae+RMvXkTaHhC 2x0Z6hm8kknhwjthtjwF3n3NKGmSvl5fMtS4/4Np0zRwrKOYWrwsDUpLalTiU+8A kc9R96+mxw== -----END CERTIFICATE-----Generated at Mon Jan 12 23:22:00 2026 by rpki-client