This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.cer (raw, json) Hash identifier: 6ENLsPlTM3q0BtKx5yiJvvvXhXpcuixVjVX30Se7yf0= Subject key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38D7A3F8F3457B0F5CBCCDB29DCB9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12581 IP: 185.27.252.0/22 IP: 212.79.160.0/19 IP: 2a00:c940::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d7:a3:f8:f3:45:7b:0f:5c:bc:cd:b2:9d:cb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:62:61:3b:24:dc:f6:f9:39:b2:2d:55:a8: de:09:52:5b:18:3a:fb:e6:9a:1d:eb:3e:fb:a4:fa: a2:0f:d2:80:79:a1:a4:70:f5:ea:88:57:23:b4:79: 5e:09:19:50:15:63:29:f5:df:33:2e:40:ad:61:d3: b8:3d:d2:45:4b:7a:b3:9a:9f:0c:03:d7:da:cc:66: ca:3e:2d:57:8f:f8:44:2f:cf:5d:d5:96:a3:c9:d1: c8:77:fd:97:03:1b:fb:c4:36:05:6f:5a:1c:77:8b: 00:01:d5:10:37:9f:77:c1:17:58:df:a0:d0:60:2b: d5:56:30:1e:7e:d9:17:14:cd:69:b6:3a:c3:2a:f3: 68:da:23:a9:aa:b1:43:bf:7e:76:b3:6d:3c:08:08: fc:41:b1:24:d5:50:1b:5e:4a:d5:e4:b1:78:13:4c: 30:f5:ec:96:ef:0a:31:ff:f2:0f:b0:89:a7:c8:5a: 0d:d2:9f:43:44:9a:d1:a4:1f:4a:4b:a0:3f:b1:8c: d5:75:1d:e8:84:6a:43:de:1a:b6:73:66:a1:61:4e: 76:d0:f5:52:ef:87:ca:9a:89:55:e2:09:97:45:f1: dd:49:bf:a8:9e:5e:db:7a:b2:40:00:9f:bc:76:39: af:a8:3a:6d:8f:a4:2c:c5:f3:1e:49:cb:e3:5f:d8: 11:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.252.0/22 212.79.160.0/19 IPv6: 2a00:c940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12581 Signature Algorithm: sha256WithRSAEncryption 22:64:4c:69:34:b9:45:65:8c:ae:44:e3:1e:2e:d1:03:2b:e1: 8a:96:30:5e:82:b3:dc:4b:82:70:e0:8a:34:fc:f4:0f:5c:41: db:c5:b9:68:10:13:ad:23:8b:c0:7c:e3:55:30:66:1f:0d:f1: cf:6a:2b:84:dc:75:01:96:ac:a2:bc:e4:d1:ce:85:74:bd:e9: 23:2e:68:17:94:49:53:fa:e1:af:4d:ee:b5:fa:10:8a:45:3f: 31:d6:10:5d:e1:62:4c:8b:42:ec:06:11:46:ea:d7:ea:16:94: 62:35:96:23:1a:8f:34:b7:20:ef:56:61:9d:46:87:ca:13:ee: 68:b2:86:44:4c:f3:f5:e8:cd:48:c7:75:b3:17:8b:59:a2:27: 90:14:84:4d:29:3c:32:4a:89:39:21:be:e7:28:c3:e6:73:2d: 42:bb:0f:96:05:b6:e7:20:41:e7:04:df:a4:ef:af:5e:9f:87: 22:01:bf:5e:1b:20:62:f1:87:12:ee:0c:28:cd:ee:1d:0c:d7: 76:72:ce:5b:e6:16:d4:53:6e:96:33:69:8f:05:60:20:99:df: 77:51:8c:ce:cb:1f:05:34:3f:d2:53:2e:94:b6:a7:01:1e:7f: 09:f3:fd:48:16:d6:d2:11:7b:0c:48:37:d4:59:ff:c9:d0:f7: 02:c0:eb:21 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+ONej+PNFew9cvM2yncueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGFiY2M3OWEzNjdkOWMwMTJjMTY4NGE4NDIyOTk2Y2RjNDNkZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOJiYTsk3Pb5ObItVajeCVJbGDr7 5pod6z77pPqiD9KAeaGkcPXqiFcjtHleCRlQFWMp9d8zLkCtYdO4PdJFS3qzmp8M A9fazGbKPi1Xj/hEL89d1ZajydHId/2XAxv7xDYFb1ocd4sAAdUQN593wRdY36DQ YCvVVjAeftkXFM1ptjrDKvNo2iOpqrFDv352s208CAj8QbEk1VAbXkrV5LF4E0ww 9eyW7wox//IPsImnyFoN0p9DRJrRpB9KS6A/sYzVdR3ohGpD3hq2c2ahYU520PVS 74fKmolV4gmXRfHdSb+onl7berJAAJ+8djmvqDptj6QsxfMeScvjX9gRtQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFPSrzHmjZ9nAEsFoSoQimWzcQ952MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzg4YmYx ZS1kOWM1LTRkMjQtOTRiOC1kZTQ0ZWU4MTQ3MGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvODhiZjFl LWQ5YzUtNGQyNC05NGI4LWRlNDRlZTgxNDcwYi8xLzlLdk1lYU5uMmNBU3dXaEto Q0taYk54RDNuWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRv8AwQF1E+gMA0EAgACMAcDBQAqAMlAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjElMA0GCSqGSIb3DQEBCwUAA4IBAQAiZExp NLlFZYyuROMeLtEDK+GKljBegrPcS4Jw4Io0/PQPXEHbxbloEBOtI4vAfONVMGYf DfHPaiuE3HUBlqyivOTRzoV0vekjLmgXlElT+uGvTe61+hCKRT8x1hBd4WJMi0Ls BhFG6tfqFpRiNZYjGo80tyDvVmGdRofKE+5osoZETPP16M1Ix3WzF4tZoieQFIRN KTwySok5Ib7nKMPmcy1Cuw+WBbbnIEHnBN+k769en4ciAb9eGyBi8YcS7gwoze4d DNd2cs5b5hbUU26WM2mPBWAgmd93UYzOyx8FND/SUy6UtqcBHn8J8/1IFtbSEXsM SDfUWf/J0PcCwOsh -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:19 2026 by rpki-client