This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9hIk1mcGg4CkT-L8BWwD48KVI2g.cer File: 9hIk1mcGg4CkT-L8BWwD48KVI2g.cer (raw, json) Hash identifier: vzGvdXAXyf/VMbFkSgjZBjIc/10oRAfWSEUBC8ddwfY= Subject key identifier: F6:12:24:D6:67:06:83:80:A4:4F:E2:FC:05:6C:03:E3:C2:95:23:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2428387A06695975181B3746801F1F6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 22:36:14 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210464 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:28:38:7a:06:69:59:75:18:1b:37:46:80:1f:1f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 22:36:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f61224d667068380a44fe2fc056c03e3c2952368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:65:6c:31:4a:0e:6e:b4:00:d2:de:f5:ae: 92:d6:62:2f:30:24:73:d5:97:66:a4:28:1e:0d:a5: 61:2a:05:af:27:2c:99:fe:4e:d8:25:3f:1e:55:72: be:7b:89:2f:e7:65:2c:16:40:6e:05:6c:9a:1b:e7: 15:39:5e:2b:da:a9:fa:7e:39:c9:b5:de:02:ff:3c: d1:30:5d:29:1d:90:ea:cd:06:00:47:38:56:c0:ad: 32:16:1c:43:a0:6a:6c:cc:54:b8:40:55:ba:90:49: 70:c1:4c:5a:0b:7d:b2:9a:32:e6:ea:c8:e2:cb:2e: 86:e7:35:5f:38:a8:47:df:b9:00:39:dd:49:65:d1: 5b:b9:15:f8:92:00:05:d8:22:88:2f:bd:93:62:9d: 81:36:f4:8d:96:f1:6d:35:85:8d:f9:f3:f4:d0:a7: cc:a6:fa:29:2c:ab:52:30:0b:9c:17:45:b0:1a:45: 96:07:fc:b3:fd:17:1f:4d:b3:33:df:eb:c4:07:b4: 52:99:f3:02:ee:11:4e:3f:bc:d0:53:04:11:5d:7d: c3:8a:8a:21:40:81:f0:40:88:6f:5c:8c:78:65:13: 04:17:bc:db:ff:8a:1a:70:85:26:cc:e8:c3:fc:32: d2:eb:85:8b:3e:3b:b1:a3:42:28:93:aa:e3:87:d4: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:12:24:D6:67:06:83:80:A4:4F:E2:FC:05:6C:03:E3:C2:95:23:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210464 Signature Algorithm: sha256WithRSAEncryption a9:8e:9c:c0:0d:13:62:ae:9e:10:ae:09:42:db:9f:a9:b0:36: fe:90:3c:a2:41:83:22:9b:bc:0f:59:5c:18:e3:5b:8d:4d:55: fe:a0:cd:14:17:4a:17:e8:ac:a7:e9:f1:bf:2c:cb:42:bf:09: 6a:0c:77:f2:21:74:89:44:bc:91:b6:54:39:77:c4:f2:be:5c: ad:28:79:95:bc:f8:03:85:4c:52:0e:39:49:43:63:7e:69:18: e8:41:ca:16:b8:23:88:2a:e5:30:f1:19:0c:ba:49:e6:7b:25: 91:62:27:3a:52:64:dc:a9:8b:f8:99:e7:7f:68:7d:20:28:52: 8b:77:79:61:9c:42:76:a8:dc:68:b0:b9:fb:e9:66:ca:68:16: 6a:03:14:8d:8f:06:ed:5a:36:49:70:f6:6b:8f:03:29:52:8e: 35:53:fb:9d:a8:81:a3:50:87:da:91:b0:05:6d:78:e6:eb:2f: 11:0c:86:7e:7a:45:fc:9d:1e:6f:b4:e9:49:96:80:50:86:89: 51:75:f4:bc:e6:e7:8c:d0:32:35:17:20:71:e8:a6:ca:25:4c: c8:00:5f:2b:b9:71:6c:48:e6:7e:58:12:87:94:85:dc:15:98: 03:b3:1c:f9:d8:12:c3:76:a9:ad:3b:74:9d:73:ce:1e:83:3c: ab:f7:36:26 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZskKDh6BmlZdRgbN0aAHx9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MjIzNjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjEyMjRkNjY3MDY4MzgwYTQ0ZmUyZmMwNTZjMDNlM2MyOTUyMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48llbDFKDm60ANLe9a6S1mIvMCRz 1ZdmpCgeDaVhKgWvJyyZ/k7YJT8eVXK+e4kv52UsFkBuBWyaG+cVOV4r2qn6fjnJ td4C/zzRMF0pHZDqzQYARzhWwK0yFhxDoGpszFS4QFW6kElwwUxaC32ymjLm6sji yy6G5zVfOKhH37kAOd1JZdFbuRX4kgAF2CKIL72TYp2BNvSNlvFtNYWN+fP00KfM pvopLKtSMAucF0WwGkWWB/yz/RcfTbMz3+vEB7RSmfMC7hFOP7zQUwQRXX3Diooh QIHwQIhvXIx4ZRMEF7zb/4oacIUmzOjD/DLS64WLPjuxo0Iok6rjh9TwfQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFPYSJNZnBoOApE/i/AVsA+PClSNoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4NDE4 NWI3LTAzNDMtNGE2NC1hYTM0LTgyZjYxZWMwZGZkYy8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTg0 MTg1YjctMDM0My00YTY0LWFhMzQtODJmNjFlYzBkZmRjLzMvRjYxMjI0RDY2NzA2 ODM4MEE0NEZFMkZDMDU2QzAzRTNDMjk1MjM2OC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNiAw DQYJKoZIhvcNAQELBQADggEBAKmOnMANE2KunhCuCULbn6mwNv6QPKJBgyKbvA9Z XBjjW41NVf6gzRQXShforKfp8b8sy0K/CWoMd/IhdIlEvJG2VDl3xPK+XK0oeZW8 +AOFTFIOOUlDY35pGOhByha4I4gq5TDxGQy6SeZ7JZFiJzpSZNypi/iZ539ofSAo Uot3eWGcQnao3GiwufvpZspoFmoDFI2PBu1aNklw9muPAylSjjVT+52ogaNQh9qR sAVteObrLxEMhn56RfydHm+06UmWgFCGiVF19Lzm54zQMjUXIHHopsolTMgAXyu5 cWxI5n5YEoeUhdwVmAOzHPnYEsN2qa07dJ1zzh6DPKv3NiY= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:43 2025 by rpki-client