This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer (raw, json) Hash identifier: 1xnLMaW0v7uKtrwUva7CWlqsi5EOHEh1Grhr6bCdnjY= Subject key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9219F9C1A535BBC60AD813A33E039 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211194 IP: 2001:67c:b28::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:21:9f:9c:1a:53:5b:bc:60:ad:81:3a:33:e0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:9f:fd:a4:0f:03:46:b9:3e:44:1a:6a:d0: d8:f6:1a:48:c5:c8:42:ce:f2:d8:c1:17:f7:d4:de: 24:29:cf:ea:eb:cf:6e:af:40:13:a4:be:56:48:87: 0a:f2:93:c5:2e:70:95:13:b5:40:87:41:86:67:ae: 62:16:17:9a:2d:8b:46:37:9f:17:9d:fe:54:be:8e: 58:1a:fc:f5:86:33:05:14:1b:59:4e:0e:61:57:c5: f9:92:ba:8a:db:a6:0f:52:a3:e6:07:77:7b:03:17: 15:a4:b5:d0:5f:c3:67:45:fa:71:da:93:a5:7f:5a: 67:48:5f:04:b6:4f:a1:f5:0b:c0:a7:cb:e7:15:74: 7c:3a:02:a3:1a:eb:32:78:b0:55:b3:a2:af:48:cf: c8:9d:4c:f9:ea:5d:83:99:5b:a3:b7:98:3b:9e:2f: ca:ac:b0:6f:71:15:b0:be:2a:33:08:25:1c:2c:58: 4b:c7:3d:1f:54:99:17:09:85:1f:c3:9c:51:ff:cd: 81:8a:85:59:53:b3:9d:d7:b8:71:47:55:ba:98:1b: 56:f5:87:cd:8f:dd:f9:ce:2f:0e:a2:0e:0e:1a:f9: 8a:b0:05:4d:2c:fc:5c:6a:2b:08:1f:f9:59:8a:ee: 77:3c:66:d6:3c:c6:a7:c4:4b:bf:55:c4:65:c6:c2: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b28::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211194 Signature Algorithm: sha256WithRSAEncryption 07:ec:31:14:1b:ac:8a:b8:d9:ac:09:16:24:4b:45:7b:e5:da: 9e:34:9c:f2:55:91:69:ca:1d:cd:fc:e1:c1:e6:ab:8d:cc:e2: 3f:e6:d8:06:c0:bc:3a:e4:6c:f8:bb:a6:10:a5:cb:b0:87:93: 57:fd:6e:b2:16:58:56:60:78:d0:e4:9d:c2:78:65:40:a4:57: a6:da:e6:a7:dd:3d:d0:2d:ec:9f:29:94:e8:4e:98:63:74:2f: 9f:3b:6b:a9:9e:5b:01:d8:62:b3:3b:78:ce:4d:0b:ea:ca:dd: 9b:be:e5:ff:f5:99:8c:c8:97:d6:ab:17:90:01:7a:87:21:3a: a5:71:da:e9:41:37:02:4c:3f:70:cc:9b:78:6e:d4:6f:62:c7: 5c:2c:02:24:f5:bf:d1:fe:e0:58:54:65:ed:e7:39:b1:20:b5: ad:52:f6:11:27:53:aa:b1:ee:86:db:a7:73:f6:5c:ab:b6:04: db:19:49:4c:7b:92:fc:85:50:a2:37:2f:00:65:9d:79:e1:a2: 01:92:1f:54:86:7b:20:6f:9c:20:7a:df:7a:54:95:6b:37:ae: 49:74:ee:30:4c:ce:d0:94:b5:df:73:0b:a5:ab:5f:51:45:d1: 64:c1:a7:38:59:ed:0d:f3:08:e7:6d:ba:9d:95:9e:89:3a:d7: 08:92:ed:bb -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6ySGfnBpTW7xgrYE6M+A5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2ZhYzJjMjFiMmRiYzgxMmRkMjVkMWNiNzljM2ZiYTU0MTllNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2f/aQPA0a5PkQaatDY9hpIxchC zvLYwRf31N4kKc/q689ur0ATpL5WSIcK8pPFLnCVE7VAh0GGZ65iFheaLYtGN58X nf5Uvo5YGvz1hjMFFBtZTg5hV8X5krqK26YPUqPmB3d7AxcVpLXQX8NnRfpx2pOl f1pnSF8Etk+h9QvAp8vnFXR8OgKjGusyeLBVs6KvSM/InUz56l2DmVujt5g7ni/K rLBvcRWwviozCCUcLFhLxz0fVJkXCYUfw5xR/82BioVZU7Od17hxR1W6mBtW9YfN j935zi8Oog4OGvmKsAVNLPxcaisIH/lZiu53PGbWPManxEu/VcRlxsIRBwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFPf6wsIbLbyBLdJdHLecP7pUGeWTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzZhZjZi Mi01NzhjLTRhMjUtYTJjYy1mZmFkNGZiMGE3MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNmFmNmIy LTU3OGMtNGEyNS1hMmNjLWZmYWQ0ZmIwYTcxMy8xLzlfckN3aHN0dklFdDBsMGN0 NXdfdWxRWjVaTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsoMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM4+jANBgkqhkiG9w0BAQsFAAOCAQEAB+wxFBusirjZrAkWJEtFe+XanjSc 8lWRacodzfzhwearjcziP+bYBsC8OuRs+LumEKXLsIeTV/1ushZYVmB40OSdwnhl QKRXptrmp9090C3snymU6E6YY3QvnztrqZ5bAdhiszt4zk0L6srdm77l//WZjMiX 1qsXkAF6hyE6pXHa6UE3Akw/cMybeG7Ub2LHXCwCJPW/0f7gWFRl7ec5sSC1rVL2 ESdTqrHuhtunc/Zcq7YE2xlJTHuS/IVQojcvAGWdeeGiAZIfVIZ7IG+cIHrfelSV azeuSXTuMEzO0JS133MLpatfUUXRZMGnOFntDfMI5226nZWeiTrXCJLtuw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:37 2026 by rpki-client