This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.cer (raw, json) Hash identifier: O3yqPOxCinKpJRc6potWG7JMxCBKlQspaiJB1jbDIq4= Subject key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FEA3B4F688E3BD62B6A7F768F4D31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209347 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ea:3b:4f:68:8e:3b:d6:2b:6a:7f:76:8f:4d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f648b15582d34bd5170a9dd13b81325babae5e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:92:df:46:1f:a0:c6:7d:0e:63:c9:a3:d1: f1:ab:be:8b:3e:88:d8:a9:79:15:97:11:82:5c:11: 59:48:76:99:eb:06:33:42:a8:19:70:d2:10:bb:39: 0d:c9:92:83:f2:10:2a:28:8a:b9:76:02:e6:d8:3e: 0f:09:75:f0:3f:47:fd:c6:28:d5:55:fb:cc:f9:e2: fc:eb:a6:3e:39:da:5c:c5:e7:81:73:62:d5:d6:e0: 39:f2:5b:9d:0f:b4:af:31:de:b1:35:f0:2f:36:88: 20:34:13:dd:0b:9e:5d:41:9d:7c:c6:86:d7:5c:db: 0f:61:08:96:3d:90:1f:8b:3a:ea:b9:c1:4b:81:42: 37:4b:0a:c4:d1:54:f7:dc:2b:e3:99:4f:86:11:69: 9f:4e:82:92:22:0c:69:0c:4f:fd:74:56:27:b7:e9: 1f:e3:18:07:71:67:29:f5:12:e9:f5:ab:63:4d:0f: e1:9c:74:e2:2c:76:2e:a0:9e:4c:30:7b:de:6d:c6: 43:23:7b:ad:5c:68:5f:f3:70:03:74:75:ba:a7:73: 6c:2c:7c:77:26:ff:92:b0:50:16:98:85:2c:50:86: 1e:ea:7c:18:f5:8c:46:58:97:d3:69:88:b1:48:26: 69:b4:18:3d:6d:96:02:d8:79:b5:b1:3c:1a:2d:1e: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209347 Signature Algorithm: sha256WithRSAEncryption 37:cb:51:5b:54:12:c3:4a:e6:56:4e:8b:e1:02:77:84:eb:b4: 04:c2:dc:f5:83:0d:c3:24:93:af:5b:1e:d2:dd:9a:4a:35:3c: 41:40:7d:98:85:90:55:ab:97:4e:e0:9a:ab:f0:19:16:c9:71: 9c:55:83:f0:c9:31:cf:70:fd:1f:d4:4c:8d:6d:f8:26:e4:93: cb:72:59:d7:8a:74:e3:00:e0:aa:c5:4c:5f:63:bc:11:2c:cd: d8:1c:00:be:a8:2c:05:4e:bf:d0:02:23:6a:99:70:31:ad:d7: f5:a7:5b:e1:23:5b:b7:0b:e3:b0:29:a2:d9:fd:63:7a:d2:61: 37:49:78:4b:4b:06:b7:86:b8:8d:f2:11:ef:33:50:6d:ff:2a: 77:25:f0:14:8a:df:82:19:44:fa:c4:ba:a3:d3:6d:3d:4c:f2: b7:e8:66:39:1d:1d:48:ef:a0:66:97:46:73:f0:8c:04:8c:dd: 96:08:e9:fe:2f:91:e1:f1:93:27:da:c3:1a:6e:e1:19:08:c2: 23:fd:f7:c2:ae:00:d3:f9:17:51:4f:2d:81:5b:29:69:1f:a1: 11:b8:e7:84:38:97:6c:64:be:41:a9:62:59:68:46:c6:97:66: c0:a7:f5:4c:3a:24:d7:9f:8c:0d:68:36:63:86:ee:59:0d:d4: 59:f1:29:7e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8f+o7T2iOO9Yran92j00xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQ4YjE1NTgyZDM0YmQ1MTcwYTlkZDEzYjgxMzI1YmFiYWU1ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs2S30YfoMZ9DmPJo9Hxq76LPojY qXkVlxGCXBFZSHaZ6wYzQqgZcNIQuzkNyZKD8hAqKIq5dgLm2D4PCXXwP0f9xijV VfvM+eL866Y+OdpcxeeBc2LV1uA58ludD7SvMd6xNfAvNoggNBPdC55dQZ18xobX XNsPYQiWPZAfizrqucFLgUI3SwrE0VT33CvjmU+GEWmfToKSIgxpDE/9dFYnt+kf 4xgHcWcp9RLp9atjTQ/hnHTiLHYuoJ5MMHvebcZDI3utXGhf83ADdHW6p3NsLHx3 Jv+SsFAWmIUsUIYe6nwY9YxGWJfTaYixSCZptBg9bZYC2Hm1sTwaLR6vBQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPZIsVWC00vVFwqd0TuBMlurrl46MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2Q4ZjY3 Mi01MzlmLTQwMWQtOWRjNy02Mjc5OWI5MDIzMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZDhmNjcy LTUzOWYtNDAxZC05ZGM3LTYyNzk5YjkwMjMxYi8xLzlraXhWWUxUUzlVWENwM1JP NEV5VzZ1dVhqby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxwzANBgkqhkiG9w0BAQsFAAOCAQEAN8tRW1QSw0rm Vk6L4QJ3hOu0BMLc9YMNwySTr1se0t2aSjU8QUB9mIWQVauXTuCaq/AZFslxnFWD 8Mkxz3D9H9RMjW34JuSTy3JZ14p04wDgqsVMX2O8ESzN2BwAvqgsBU6/0AIjaplw Ma3X9adb4SNbtwvjsCmi2f1jetJhN0l4S0sGt4a4jfIR7zNQbf8qdyXwFIrfghlE +sS6o9NtPUzyt+hmOR0dSO+gZpdGc/CMBIzdlgjp/i+R4fGTJ9rDGm7hGQjCI/33 wq4A0/kXUU8tgVspaR+hEbjnhDiXbGS+QaliWWhGxpdmwKf1TDok15+MDWg2Y4bu WQ3UWfEpfg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:47 2026 by rpki-client