This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer File: 9XGHM6rUPvapm9jZUEog3YkCLo8.cer (raw, json) Hash identifier: qXg+o8au5IdVEDI53QH4DD5j19O+Imp4NKtrS7ulHCU= Subject key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35B787D12287FDB5EF533597526D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.28.120.0/22 IP: 195.206.248.0/23 IP: 2001:67c:22b8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5b:78:7d:12:28:7f:db:5e:f5:33:59:75:26:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:de:b4:5d:8e:b2:cd:e1:e6:26:01:93:eb:1e: 17:bb:f0:77:0e:1f:44:82:ae:b0:63:7d:5c:38:1d: 2e:d6:f9:06:07:4c:82:4d:3b:62:26:85:25:ee:b0: 36:8a:aa:a8:d6:97:34:0c:38:68:02:58:3e:20:cd: f0:e7:aa:9c:08:d6:78:c8:91:0c:9a:b0:3c:9b:81: ee:d8:0a:b6:3c:e7:6f:6f:20:2d:b9:f3:0f:1e:99: e5:cc:42:be:3a:f9:67:b6:6c:2b:4d:09:63:65:16: 70:d8:56:ca:d6:2d:c1:31:9e:9f:57:29:80:a9:61: bb:ea:78:d6:7c:b4:73:c4:ef:b3:10:bb:2d:d8:cb: 22:25:a8:47:60:52:da:a3:46:6a:0a:7f:0d:b2:a7: f4:d0:f2:bf:59:b7:fd:42:b9:b8:28:fe:d2:dc:7e: 2e:a7:93:1a:0f:b6:d0:aa:be:20:2d:44:bb:5d:84: b7:b8:7b:bc:04:2a:c9:a1:73:b6:21:47:c0:35:29: 26:f7:67:09:a7:9b:89:0f:02:e1:24:8d:07:59:68: 18:8e:92:fc:98:a7:94:ce:7b:8e:fd:0a:36:90:28: 1d:2f:f3:db:99:dd:0e:87:e3:81:6f:02:ff:9c:6f: e4:bb:e4:9a:2d:ce:1f:a2:b0:e7:ff:a8:f1:be:3f: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.120.0/22 195.206.248.0/23 IPv6: 2001:67c:22b8::/48 Signature Algorithm: sha256WithRSAEncryption 49:68:15:c5:b7:da:12:30:48:7e:01:58:5e:35:04:ef:60:c8: 35:a6:8d:3a:05:0c:cc:20:4f:b8:d9:10:47:0b:34:fb:0c:b4: 34:47:ea:55:86:4a:59:82:b4:e4:ad:e8:84:bf:60:87:a3:7c: 3a:9a:93:82:33:b5:4a:aa:95:95:95:d0:8a:73:8c:7b:2f:52: 2f:d1:1a:39:80:5b:15:3d:b5:54:36:b0:05:ca:ac:c0:44:02: ff:81:7b:36:b8:da:4f:b1:42:d4:af:6b:26:f7:7d:a4:af:dc: e8:b3:67:76:b5:ba:50:87:01:45:0b:c6:97:d7:aa:f7:2c:76: bc:02:ff:b6:b1:5d:eb:e0:85:02:e2:b2:b8:29:4a:48:57:07: fa:12:36:cf:fd:d6:c8:67:67:6d:5d:e7:29:d2:13:cc:80:e2: 43:d0:a9:6a:58:be:59:1e:86:ae:96:fe:e5:f5:c4:3b:49:ab: ff:bd:62:fd:76:ce:ef:66:54:8e:95:58:14:95:ac:17:c3:ac: 3b:ef:33:fc:fd:d3:c2:dc:85:2c:5b:da:79:a9:98:8d:26:16: 0b:ad:0a:52:2d:d4:bc:dc:e9:3f:a2:6b:35:8b:c8:6f:5c:ce: 48:5c:3f:bc:53:15:40:6e:09:75:13:71:66:91:bc:be:42:c6: 0c:f5:54:64 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt7o1t4fRIof9te9TNZdSbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTcxODczM2FhZDQzZWY2YTk5YmQ4ZDk1MDRhMjBkZDg5MDIyZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N60XY6yzeHmJgGT6x4Xu/B3Dh9E gq6wY31cOB0u1vkGB0yCTTtiJoUl7rA2iqqo1pc0DDhoAlg+IM3w56qcCNZ4yJEM mrA8m4Hu2Aq2POdvbyAtufMPHpnlzEK+OvlntmwrTQljZRZw2FbK1i3BMZ6fVymA qWG76njWfLRzxO+zELst2MsiJahHYFLao0ZqCn8Nsqf00PK/Wbf9Qrm4KP7S3H4u p5MaD7bQqr4gLUS7XYS3uHu8BCrJoXO2IUfANSkm92cJp5uJDwLhJI0HWWgYjpL8 mKeUznuO/Qo2kCgdL/Pbmd0Oh+OBbwL/nG/ku+SaLc4forDn/6jxvj+qXQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFPVxhzOq1D72qZvY2VBKIN2JAi6PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzIzMzM3 Yy0zNzU4LTQwYjYtYTljOC1kNzI1ZmE2NzMyYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMjMzMzdj LTM3NTgtNDBiNi1hOWM4LWQ3MjVmYTY3MzJiNi8xLzlYR0hNNnJVUHZhcG05alpV RW9nM1lrQ0xvOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCwhx4AwQBw874MA8EAgACMAkDBwAgAQZ8Irgw DQYJKoZIhvcNAQELBQADggEBAEloFcW32hIwSH4BWF41BO9gyDWmjToFDMwgT7jZ EEcLNPsMtDRH6lWGSlmCtOSt6IS/YIejfDqak4IztUqqlZWV0IpzjHsvUi/RGjmA WxU9tVQ2sAXKrMBEAv+Beza42k+xQtSvayb3faSv3OizZ3a1ulCHAUULxpfXqvcs drwC/7axXevghQLisrgpSkhXB/oSNs/91shnZ21d5ynSE8yA4kPQqWpYvlkehq6W /uX1xDtJq/+9Yv12zu9mVI6VWBSVrBfDrDvvM/z908LchSxb2nmpmI0mFgutClIt 1Lzc6T+iazWLyG9czkhcP7xTFUBuCXUTcWaRvL5Cxgz1VGQ= -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:05 2026 by rpki-client