This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.cer (raw, json) Hash identifier: jIjetOEC7rhMe6RP5F69CuESSEmq0r5YoLP9US5+/wg= Subject key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2BCEBC315DC640BDBE051EF861C6D2BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 10:15:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 35107 IP: 87.247.136.0/22 IP: 89.124.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:ce:bc:31:5d:c6:40:bd:be:05:1e:f8:61:c6:d2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 10:15:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f47d03377cc108f4409126b9a0c201632421c64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:2a:e3:e0:28:84:3f:e3:e3:f5:8f:c9:59: 19:7e:c5:80:16:49:bd:e0:fb:03:9d:1a:a2:64:5f: 8c:5f:63:a1:63:b6:b0:17:eb:8f:93:23:91:11:8f: 04:18:90:2d:28:dd:fb:6d:47:51:4b:b1:c6:b1:0a: 2c:1e:9c:39:37:a6:46:61:ff:90:9b:9c:91:c1:d3: f0:e3:84:c1:06:6e:3c:f5:54:c9:04:2b:d7:7e:2a: 42:09:45:cf:b2:b5:e3:36:40:39:a0:24:51:c9:a3: 59:d5:fd:73:c2:e4:d8:7c:a8:16:3f:ff:c2:23:a7: 65:eb:2a:7a:85:35:78:57:1e:ee:c1:fb:10:81:67: 39:3a:3f:13:ab:04:6a:ae:18:9b:e0:e8:ea:95:28: 8f:07:fc:52:10:bb:d4:34:21:15:d3:29:a2:b4:97: 7e:0e:9b:80:da:17:99:9d:3f:3d:5e:0f:cb:db:ca: 4f:c7:e5:ee:8e:22:2b:f4:bd:c3:31:eb:65:22:62: bc:1e:d7:a9:46:ce:ff:30:25:65:51:cf:9d:fd:32: 39:0a:0a:43:19:a8:d7:18:b7:8f:44:22:c0:3d:4c: df:52:d1:80:25:84:7a:b0:2c:6a:d0:25:a5:84:71: 5d:f0:b4:e5:7c:2a:98:36:87:54:e9:92:f4:71:14: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.247.136.0/22 89.124.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35107 Signature Algorithm: sha256WithRSAEncryption 21:b7:c2:20:80:8d:39:6c:f5:dd:4e:d8:d0:01:41:b0:a4:03: f8:ab:ce:21:7a:04:19:41:a0:56:1c:52:6e:07:6f:38:d7:42: c3:8b:f3:14:1d:bf:69:f8:78:cb:77:be:0c:d9:b3:c9:a9:a3: c3:99:6c:3d:6a:b2:02:94:3e:50:a3:fa:37:9f:bf:5f:cc:f2: 89:60:21:ba:b1:63:ca:40:9b:9e:bf:c2:7f:03:7e:3c:65:5f: 00:15:c5:e6:c3:f3:5c:0a:5e:d4:19:cd:45:6e:2a:06:a2:db: 13:1d:41:fd:a9:08:c8:c0:6a:6d:d0:38:78:3c:f1:e8:a5:b4: d0:7c:fa:08:8d:b5:1d:b2:36:60:7f:65:ea:08:49:4d:62:26: 00:ec:2f:3e:42:ac:33:84:8d:b3:60:bf:b1:f9:e4:97:4f:3f: 1b:48:71:d1:3e:1b:82:ec:c8:8b:b0:13:1b:ad:ca:39:a7:5f: 7d:08:3b:a4:64:d6:5a:53:6a:54:58:37:b6:47:bc:3e:1e:c6: db:f7:a4:8e:9e:71:e8:d5:71:98:d3:ab:d7:c9:59:ab:dd:f2: 4a:01:f7:7b:0d:9b:39:a1:fb:de:04:b6:de:cc:c4:46:26:38: 61:69:ce:c9:c8:70:d6:68:e2:4d:06:16:a9:1e:69:28:13:d0: 5b:d7:18:59 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZsrzrwxXcZAvb4FHvhhxtK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MTAxNTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDdkMDMzNzdjYzEwOGY0NDA5MTI2YjlhMGMyMDE2MzI0MjFjNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14kq4+AohD/j4/WPyVkZfsWAFkm9 4PsDnRqiZF+MX2OhY7awF+uPkyOREY8EGJAtKN37bUdRS7HGsQosHpw5N6ZGYf+Q m5yRwdPw44TBBm489VTJBCvXfipCCUXPsrXjNkA5oCRRyaNZ1f1zwuTYfKgWP//C I6dl6yp6hTV4Vx7uwfsQgWc5Oj8TqwRqrhib4OjqlSiPB/xSELvUNCEV0ymitJd+ DpuA2heZnT89Xg/L28pPx+XujiIr9L3DMetlImK8HtepRs7/MCVlUc+d/TI5CgpD GajXGLePRCLAPUzfUtGAJYR6sCxq0CWlhHFd8LTlfCqYNodU6ZL0cRQy1QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFPR9Azd8wQj0QJEmuaDCAWMkIcZKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzhiYzQ2 OS1mN2UzLTQwYzQtYWZjOC1lMWQwZmRkNWJmZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvOGJjNDY5 LWY3ZTMtNDBjNC1hZmM4LWUxZDBmZGQ1YmZmNS8xLzlIMEROM3pCQ1BSQWtTYTVv TUlCWXlRaHhrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCV/eIAwQCWXwMMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCJIzANBgkqhkiG9w0BAQsFAAOCAQEAIbfCIICNOWz13U7Y0AFBsKQD +KvOIXoEGUGgVhxSbgdvONdCw4vzFB2/afh4y3e+DNmzyamjw5lsPWqyApQ+UKP6 N5+/X8zyiWAhurFjykCbnr/CfwN+PGVfABXF5sPzXApe1BnNRW4qBqLbEx1B/akI yMBqbdA4eDzx6KW00Hz6CI21HbI2YH9l6ghJTWImAOwvPkKsM4SNs2C/sfnkl08/ G0hx0T4bguzIi7ATG63KOadffQg7pGTWWlNqVFg3tke8Ph7G2/ekjp5x6NVxmNOr 18lZq93ySgH3ew2bOaH73gS23szERiY4YWnOychw1mjiTQYWqR5pKBPQW9cYWQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:33 2025 by rpki-client