This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer File: 9RDHudzJJZg-WbWGzVmrVUviWYI.cer (raw, json) Hash identifier: /Lg0rrh553IMN+ICFPrWnnvZ9BCeCiyMq5zfJg6+c1o= Subject key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0180796BD1B813A991BA392FEEB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213675 IP: 2001:3c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:01:80:79:6b:d1:b8:13:a9:91:ba:39:2f:ee:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:d4:ce:cc:ca:d7:6b:fa:9d:0c:11:db:07: 04:ea:eb:bb:9d:a7:a3:ba:6e:36:b6:7b:23:80:ad: 0c:14:ee:c9:03:c0:dc:27:87:43:92:fc:a1:41:b6: 60:64:40:f8:9f:97:ac:47:64:58:d7:b5:ad:1b:60: 76:c4:97:53:87:ec:46:d3:52:3e:1a:b8:59:3e:72: 26:81:f2:e3:af:82:3b:e2:ce:90:f3:2d:6a:20:c4: 5c:1b:23:a1:e4:f6:e7:39:b1:c1:ff:c1:9f:24:00: 58:41:6b:b3:fb:4f:ea:13:53:90:da:e4:1c:ce:20: e9:6e:7f:15:5f:2e:4b:15:d6:1b:2d:67:80:d7:d8: d6:ab:dc:df:5a:4b:59:f9:40:c4:59:4b:78:b5:74: 95:15:58:3b:85:dc:50:ee:c3:ca:37:10:86:b1:9e: 31:f5:78:43:70:b0:0c:d1:f2:53:55:78:af:14:70: 44:01:f4:e1:dd:ef:dc:7f:5c:77:0e:2b:68:0d:4a: 38:84:91:8c:bd:64:d8:cb:af:5c:90:88:7a:b0:8c: ab:56:97:16:52:d7:c8:8e:e9:9b:9a:cc:83:03:8d: 4a:61:af:26:f1:d0:f6:bd:dc:1a:46:22:2e:26:68: e4:cb:e0:08:13:bb:c3:87:9c:f0:3c:63:4c:68:d7: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213675 Signature Algorithm: sha256WithRSAEncryption 49:a8:76:0e:84:58:1f:7b:28:18:f4:f3:e3:f9:28:28:3e:01: 99:65:9d:0b:3f:ed:40:79:70:b3:7c:54:65:76:06:14:5d:ef: 39:82:da:e5:4c:e5:04:4b:e2:7d:5f:c6:e7:6f:c0:09:86:f6: 3c:0d:70:71:cd:a6:f9:8e:4c:67:f2:4e:b9:75:a2:ea:c3:09: d3:8b:57:ec:19:e6:30:c2:8a:aa:75:92:38:6f:a0:e0:c8:65: 79:c9:f3:2e:0c:98:f7:c7:47:cf:e3:dd:ee:41:67:a0:24:0b: 71:29:70:ad:31:af:20:05:c8:79:c1:d0:c2:d0:66:37:94:f3: 32:be:c8:eb:ca:1e:03:79:2c:82:66:4d:40:9c:ef:38:9a:ac: ed:3f:5a:f3:f7:b3:02:7e:c0:e6:ef:36:db:66:0d:7b:69:c8: 52:11:8d:2c:24:93:93:a5:ba:da:45:37:02:88:90:e0:6c:a0: cf:d1:a8:24:54:57:4e:ca:59:b7:26:98:f2:c0:07:1d:cf:a1: e7:f1:f8:58:30:6e:f7:a0:19:d2:66:6b:b5:e4:a4:37:c0:63: 75:59:5b:b0:fe:09:ad:27:6d:a3:04:b7:9b:88:81:fb:0e:99: a3:0d:8e:fe:fc:cc:51:fa:de:fe:49:9a:11:fd:53:17:fd:ee: 9e:e5:6e:22 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt26wGAeWvRuBOpkbo5L+6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTEwYzdiOWRjYzkyNTk4M2U1OWI1ODZjZDU5YWI1NTRiZTI1OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo03UzszK12v6nQwR2wcE6uu7naej um42tnsjgK0MFO7JA8DcJ4dDkvyhQbZgZED4n5esR2RY17WtG2B2xJdTh+xG01I+ GrhZPnImgfLjr4I74s6Q8y1qIMRcGyOh5PbnObHB/8GfJABYQWuz+0/qE1OQ2uQc ziDpbn8VXy5LFdYbLWeA19jWq9zfWktZ+UDEWUt4tXSVFVg7hdxQ7sPKNxCGsZ4x 9XhDcLAM0fJTVXivFHBEAfTh3e/cf1x3DitoDUo4hJGMvWTYy69ckIh6sIyrVpcW UtfIjumbmsyDA41KYa8m8dD2vdwaRiIuJmjky+AIE7vDh5zwPGNMaNdsewIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPUQx7ncySWYPlm1hs1Zq1VL4lmCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2EwYjU4 Yy0zNzE5LTQ3NzMtOTIwNi1hMWIyYjZhNzAyNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYTBiNThj LTM3MTktNDc3My05MjA2LWExYjJiNmE3MDI3Mi8xLzlSREh1ZHpKSlpnLVdiV0d6 Vm1yVlV2aVdZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDIAE8gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQqswDQYJKoZIhvcNAQELBQADggEBAEmodg6EWB97KBj08+P5KCg+AZllnQs/ 7UB5cLN8VGV2BhRd7zmC2uVM5QRL4n1fxudvwAmG9jwNcHHNpvmOTGfyTrl1ourD CdOLV+wZ5jDCiqp1kjhvoODIZXnJ8y4MmPfHR8/j3e5BZ6AkC3EpcK0xryAFyHnB 0MLQZjeU8zK+yOvKHgN5LIJmTUCc7ziarO0/WvP3swJ+wObvNttmDXtpyFIRjSwk k5OlutpFNwKIkOBsoM/RqCRUV07KWbcmmPLABx3Poefx+FgwbvegGdJma7XkpDfA Y3VZW7D+Ca0nbaMEt5uIgfsOmaMNjv78zFH63v5JmhH9Uxf97p7lbiI= -----END CERTIFICATE-----Generated at Fri Jan 30 20:11:05 2026 by rpki-client