This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer (raw, json) Hash identifier: cG1DziTdInyNInA/RyuWSl7j+lutbQBkIzKCgNiKYGc= Subject key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB759827A8F066025CEC80A007FF64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.133.204.0/22 IP: 2a0e:78c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:75:98:27:a8:f0:66:02:5c:ec:80:a0:07:ff:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:85:5d:ec:c1:41:fa:a8:56:aa:55:1c:da: 31:7c:60:0b:04:e0:00:bb:8c:99:9c:c5:03:59:0c: 18:a9:dc:30:c1:7c:60:5c:8b:eb:cd:3b:e9:bd:3c: e0:ad:6e:50:34:42:82:08:fe:d1:c9:a9:3c:2e:32: b6:69:3e:f7:a4:79:1c:de:87:64:71:73:47:f6:d9: c4:75:4f:d5:7d:7d:b3:c0:67:0b:f2:61:9d:6f:76: d1:01:8b:3c:24:31:6f:61:2d:5e:21:69:72:0e:40: 73:ee:f3:35:8d:10:ae:2a:c7:d2:04:1b:26:b0:8f: 5a:ac:c3:16:a6:41:4d:90:6c:e2:45:d7:8d:44:84: dc:15:34:c9:a0:e5:fb:eb:4d:cf:62:09:7e:c1:b5: 5b:f2:9b:30:8a:cb:bc:1d:7f:02:47:19:92:bf:49: df:64:89:79:c0:62:1a:be:fa:1b:54:cf:85:24:86: 05:57:90:3a:41:67:ea:60:66:f7:7e:0a:47:72:9f: 29:be:fa:d4:f3:6f:a2:37:33:dc:83:11:ac:5c:71: 6d:a8:b9:4f:7a:13:64:ce:36:7b:55:cf:86:cc:55: 45:5a:33:c4:de:17:f4:16:a4:47:0c:5a:cc:6b:00: 64:b9:71:53:1a:41:a7:5b:56:11:f1:ad:55:75:4a: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.204.0/22 IPv6: 2a0e:78c0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:5b:b6:a7:6b:e6:8c:6a:05:a0:bd:60:5a:aa:66:8a:c5:ab: 43:47:34:23:29:b0:ab:f1:1d:a1:f7:c2:93:36:d0:af:82:d7: de:70:6f:a0:65:b4:9d:07:ab:fb:f0:0a:85:2f:d9:e2:55:b1: 3f:62:4d:0e:17:1e:5d:85:26:7e:b6:4e:6f:3a:59:e6:c1:74: 02:c4:b8:5b:7d:eb:d1:aa:0d:1e:32:4a:9b:0e:83:d7:38:2c: 1f:53:38:41:01:4a:f9:28:37:f9:1e:45:6e:5c:39:35:1c:1e: 56:dd:47:94:0d:88:65:96:2a:61:0c:ae:72:97:f2:c2:00:9f: 13:50:4d:9e:67:65:1f:23:b5:97:38:3a:bd:ac:f6:25:87:61: 17:aa:46:c2:39:6d:94:2d:72:33:1e:f9:ca:b2:2a:58:71:f4: d3:46:8e:5c:44:2d:04:02:a3:4c:ef:4c:f9:44:fe:e5:d9:92: 85:84:e1:55:3b:a8:93:63:cd:5f:de:92:ec:43:6a:48:76:8c: ce:0b:59:24:b5:36:71:90:88:80:06:18:eb:7e:9d:c2:f9:44: ae:e7:c7:da:74:98:05:9f:80:a7:5f:3f:2b:4e:66:ce:bb:ed: 9a:1d:31:e7:bd:3b:5b:7c:c7:46:15:4d:4b:0a:f5:b5:da:36: 4d:22:29:44 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt263WYJ6jwZgJc7ICgB/9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjVjNmRjZDlmZGJkMjRjMTZlNTBhZTE1NTFlZThmNDNhYzhiZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU2FXezBQfqoVqpVHNoxfGALBOAA u4yZnMUDWQwYqdwwwXxgXIvrzTvpvTzgrW5QNEKCCP7Ryak8LjK2aT73pHkc3odk cXNH9tnEdU/VfX2zwGcL8mGdb3bRAYs8JDFvYS1eIWlyDkBz7vM1jRCuKsfSBBsm sI9arMMWpkFNkGziRdeNRITcFTTJoOX7603PYgl+wbVb8pswisu8HX8CRxmSv0nf ZIl5wGIavvobVM+FJIYFV5A6QWfqYGb3fgpHcp8pvvrU82+iNzPcgxGsXHFtqLlP ehNkzjZ7Vc+GzFVFWjPE3hf0FqRHDFrMawBkuXFTGkGnW1YR8a1VdUoLIQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPZcbc2f29JMFuUK4VUe6PQ6yL/UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzY1YTkz ZS0zM2VmLTQ3NjAtYmQ0ZS0xOTczNjM1MTY3YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNjVhOTNl LTMzZWYtNDc2MC1iZDRlLTE5NzM2MzUxNjdiMi8xLzlseHR6Wl9iMGt3VzVRcmhW UjdvOURySXY5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYXMMA0EAgACMAcDBQMqDnjAMA0GCSqGSIb3 DQEBCwUAA4IBAQCdW7ana+aMagWgvWBaqmaKxatDRzQjKbCr8R2h98KTNtCvgtfe cG+gZbSdB6v78AqFL9niVbE/Yk0OFx5dhSZ+tk5vOlnmwXQCxLhbfevRqg0eMkqb DoPXOCwfUzhBAUr5KDf5HkVuXDk1HB5W3UeUDYhlliphDK5yl/LCAJ8TUE2eZ2Uf I7WXODq9rPYlh2EXqkbCOW2ULXIzHvnKsipYcfTTRo5cRC0EAqNM70z5RP7l2ZKF hOFVO6iTY81f3pLsQ2pIdozOC1kktTZxkIiABhjrfp3C+USu58fadJgFn4CnXz8r TmbOu+2aHTHnvTtbfMdGFU1LCvW12jZNIilE -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:49 2026 by rpki-client