This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.cer (raw, json) Hash identifier: DnbD5g6ZOdiIHSyBn8HW7YU5mkrjxBOBho9J9pTJ94o= Subject key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6ABE45A20C53854A2F2B4D2AF3DCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.246.40.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ab:e4:5a:20:c5:38:54:a2:f2:b4:d2:af:3d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f521e174f84f7165961d41b68ea7262e28337d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:1c:be:f0:d6:bb:90:39:59:a5:3c:f1:65: 31:58:9f:76:81:ca:16:15:78:d2:bc:6c:ee:36:da: 5c:3f:0d:36:3d:c1:bf:1a:1c:bf:6b:0a:33:e8:d5: 2e:33:d2:04:4d:c3:07:4b:04:bb:6d:5f:ed:72:60: 5f:68:44:b6:01:6a:83:ac:46:a0:0e:4f:b1:a3:ae: ed:ed:c6:cc:9b:19:38:18:34:22:c6:fc:4c:eb:a9: b2:1f:3e:e8:ca:bb:35:15:e8:8f:66:55:28:8c:57: e6:0d:37:8d:fc:4c:13:5e:d9:0e:99:79:2d:c4:8e: 52:35:6a:67:29:6e:f9:31:c7:39:5e:b0:a3:5e:21: 43:ce:e0:66:5b:3a:02:d4:17:cc:8c:e8:a1:9d:eb: dc:e1:56:85:75:4b:38:96:df:0c:55:91:a7:6b:dd: 18:fd:24:f6:c6:3d:35:a9:a5:ac:69:d1:7d:e5:f7: 61:9f:3e:ff:87:5a:dc:65:23:2d:e7:5e:74:a2:3b: 1d:d5:d9:c4:0e:ab:2a:30:10:44:e9:e2:b0:75:7c: 06:91:9f:74:52:dd:9c:bf:35:12:be:81:86:08:44: 10:80:7d:93:c4:d0:5a:b3:b4:dd:45:c7:cd:ef:b3: f6:46:b4:9e:b5:33:18:da:09:80:c6:6a:28:99:a0: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.40.0/22 Signature Algorithm: sha256WithRSAEncryption 33:66:92:f3:26:8d:1d:01:3f:d0:a2:f2:71:61:ab:cd:d5:2f: c0:a3:da:39:d4:ca:28:24:6f:07:7d:7c:6f:c9:20:01:dc:a9: 5a:ff:99:e6:e4:67:e6:fa:ee:06:7a:4c:65:ef:ee:5a:69:5e: 7f:61:77:63:cd:f8:30:df:1e:98:a7:ae:a5:8a:40:84:fb:b6: 09:b8:cb:d4:77:96:0c:c7:3f:f9:6c:09:1d:08:c1:73:44:a7: b3:38:15:14:16:26:f1:c8:38:37:92:c1:a5:17:f3:ba:bb:03: fb:29:7a:7f:2e:1b:70:81:84:51:7a:4e:be:89:13:93:90:8c: 7c:48:e4:e5:85:11:6c:f3:cc:c1:c2:e6:66:2f:dc:be:c5:48: f0:57:39:e7:d4:fc:e6:c8:f1:14:10:07:1b:d8:ce:76:86:83: 1a:2b:33:f7:e4:b0:9e:72:76:f2:df:51:ba:9f:08:95:2d:65: 62:e2:76:d2:76:a0:84:61:19:bf:68:19:7a:4d:ca:fd:0b:7e: 39:58:bf:75:91:d2:d5:ac:45:90:eb:f9:ce:19:b9:a5:70:dc: 4c:19:c1:6e:22:4e:1d:5b:60:1b:4c:3a:ea:38:4e:e4:86:88: 1a:a4:cf:ba:a8:17:1f:e5:04:71:9d:59:84:03:0e:c9:31:9d: 35:d7:55:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pqvkWiDFOFSi8rTSrz3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTIxZTE3NGY4NGY3MTY1OTYxZDQxYjY4ZWE3MjYyZTI4MzM3ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eAcvvDWu5A5WaU88WUxWJ92gcoW FXjSvGzuNtpcPw02PcG/Ghy/awoz6NUuM9IETcMHSwS7bV/tcmBfaES2AWqDrEag Dk+xo67t7cbMmxk4GDQixvxM66myHz7oyrs1FeiPZlUojFfmDTeN/EwTXtkOmXkt xI5SNWpnKW75Mcc5XrCjXiFDzuBmWzoC1BfMjOihnevc4VaFdUs4lt8MVZGna90Y /ST2xj01qaWsadF95fdhnz7/h1rcZSMt5150ojsd1dnEDqsqMBBE6eKwdXwGkZ90 Ut2cvzUSvoGGCEQQgH2TxNBas7TdRcfN77P2RrSetTMY2gmAxmoomaCm1wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPUh4XT4T3Fllh1Bto6nJi4oM31pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2Q5YTAx MC1kNWY3LTQ2NjEtOGQzMi1kZDA2MTExZjNmOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZDlhMDEw LWQ1ZjctNDY2MS04ZDMyLWRkMDYxMTFmM2Y5Ni8xLzlTSGhkUGhQY1dXV0hVRzJq cWNtTGlnemZXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufYoMA0GCSqGSIb3DQEBCwUAA4IBAQAzZpLz Jo0dAT/QovJxYavN1S/Ao9o51MooJG8HfXxvySAB3Kla/5nm5Gfm+u4Gekxl7+5a aV5/YXdjzfgw3x6Yp66likCE+7YJuMvUd5YMxz/5bAkdCMFzRKezOBUUFibxyDg3 ksGlF/O6uwP7KXp/LhtwgYRRek6+iROTkIx8SOTlhRFs88zBwuZmL9y+xUjwVznn 1PzmyPEUEAcb2M52hoMaKzP35LCecnby31G6nwiVLWVi4nbSdqCEYRm/aBl6Tcr9 C345WL91kdLVrEWQ6/nOGbmlcNxMGcFuIk4dW2AbTDrqOE7khogapM+6qBcf5QRx nVmEAw7JMZ0111Us -----END CERTIFICATE-----Generated at Sat Jan 10 07:09:46 2026 by rpki-client