This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer File: 9p8HIQsohLT-pQe94id5WyZAYu0.cer (raw, json) Hash identifier: BbsmZCHGrllhTiPeNYavxrj3vp/l5MVXgAMfTFq7NuU= Subject key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF27EDC5E387F5F20BC6EB959D0F41D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214700 IP: 185.255.31.0/24 IP: 193.26.221.0/24 IP: 2a11:e0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7e:dc:5e:38:7f:5f:20:bc:6e:b9:59:d0:f4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f69f07210b2884b4fea507bde227795b264062ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a9:73:fa:6d:35:64:20:98:dc:af:ea:39:3a: 92:46:49:b8:fe:d7:d3:9b:32:a4:f3:ed:ba:e9:61: 39:6f:71:12:60:85:4c:dc:fa:4c:7b:17:fc:7b:6f: 7e:16:4a:b8:c5:f3:50:ea:f3:a1:d6:93:71:84:d0: 84:c0:53:e0:01:2a:f9:94:45:e5:7a:ad:80:57:5d: 55:96:9e:86:14:af:b0:a5:fa:f3:4b:2b:a0:12:31: 64:b7:3c:af:f5:38:d6:bb:81:e8:f8:b3:28:a8:f0: 5b:fb:86:9a:b2:a4:05:45:73:ba:40:77:28:35:a9: 0b:2b:0b:04:91:f3:03:33:0f:b2:32:70:62:9e:7f: dc:82:33:8e:23:df:ee:47:9b:f7:80:46:ad:5c:56: 17:74:de:f3:53:82:f1:cb:bb:4a:2c:87:c5:5d:c0: bc:2f:54:99:31:9a:ad:d7:14:e9:16:fb:25:a2:2d: f2:6b:e8:5c:62:4c:ba:22:95:ea:b9:2b:dd:b4:9b: b8:d3:fd:c7:71:12:7b:2f:2c:ba:e4:5e:c0:a5:45: 80:be:7b:0e:89:66:e9:10:30:a8:a2:02:b6:9c:60: a1:9e:85:b9:1d:0f:12:a4:0d:f2:f8:38:68:00:fc: 35:4b:70:d8:4f:71:53:02:c1:47:f3:c2:09:c5:7e: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.31.0/24 193.26.221.0/24 IPv6: 2a11:e0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214700 Signature Algorithm: sha256WithRSAEncryption 07:20:46:49:8e:2a:e3:70:4b:5a:09:9e:12:be:a9:9c:bf:63: a2:55:48:d3:28:76:ee:84:04:34:77:ed:12:87:2c:7c:8b:b0: 88:a5:62:80:93:59:5c:d3:23:f7:2c:82:f7:e8:a2:fd:ac:bf: cd:b1:d3:92:5c:43:8d:16:fc:b3:56:9d:9a:f1:d2:1b:0b:7d: 14:bb:65:cb:c9:09:ad:3f:6f:1e:46:ba:40:ac:6f:b1:0e:7a: 0e:3b:a5:4d:6a:86:3e:51:cf:9d:45:4a:8b:50:d9:ea:95:1e: c9:8a:3b:2f:78:12:10:0a:cd:0b:33:b3:43:00:32:89:a5:59: 1c:68:2a:ea:12:e0:ba:0d:57:08:d3:d7:9d:00:08:bf:b3:e3: 0a:6f:df:b2:f6:3b:68:0f:be:b5:26:16:0c:d0:af:2d:d6:af: d9:d7:f5:7f:db:25:8f:8c:70:27:70:bc:69:2a:5b:6e:04:6b: 07:7d:db:2c:59:26:50:11:17:06:df:ba:74:ac:09:96:c2:9f: 45:b4:dd:79:e5:c8:63:0f:2d:41:3f:30:aa:2d:68:c5:28:3a: e1:73:f6:65:8d:8e:a3:9d:77:f6:cb:c7:7e:c9:e2:cd:7c:33: 5f:b2:4b:f9:48:b0:09:3c:8c:fb:00:9d:8a:3d:ed:5e:e4:e9: ad:10:3a:87 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/8n7cXjh/XyC8brlZ0PQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjlmMDcyMTBiMjg4NGI0ZmVhNTA3YmRlMjI3Nzk1YjI2NDA2MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Klz+m01ZCCY3K/qOTqSRkm4/tfT mzKk8+266WE5b3ESYIVM3PpMexf8e29+Fkq4xfNQ6vOh1pNxhNCEwFPgASr5lEXl eq2AV11Vlp6GFK+wpfrzSyugEjFktzyv9TjWu4Ho+LMoqPBb+4aasqQFRXO6QHco NakLKwsEkfMDMw+yMnBinn/cgjOOI9/uR5v3gEatXFYXdN7zU4Lxy7tKLIfFXcC8 L1SZMZqt1xTpFvsloi3ya+hcYky6IpXquSvdtJu40/3HcRJ7Lyy65F7ApUWAvnsO iWbpEDCoogK2nGChnoW5HQ8SpA3y+DhoAPw1S3DYT3FTAsFH88IJxX5gBQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPafByELKIS0/qUHveIneVsmQGLtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzZiZjUy OC1iZDM0LTQwZWUtYjBkYy00NWY2MGY0MTRmZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNmJmNTI4 LWJkMzQtNDBlZS1iMGRjLTQ1ZjYwZjQxNGZmNy8xLzlwOEhJUXNvaExULXBRZTk0 aWQ1V3laQVl1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuf8fAwQAwRrdMA0EAgACMAcDBQMqEeDAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGrDANBgkqhkiG9w0BAQsFAAOCAQEAByBG SY4q43BLWgmeEr6pnL9jolVI0yh27oQENHftEocsfIuwiKVigJNZXNMj9yyC9+ii /ay/zbHTklxDjRb8s1admvHSGwt9FLtly8kJrT9vHka6QKxvsQ56DjulTWqGPlHP nUVKi1DZ6pUeyYo7L3gSEArNCzOzQwAyiaVZHGgq6hLgug1XCNPXnQAIv7PjCm/f svY7aA++tSYWDNCvLdav2df1f9slj4xwJ3C8aSpbbgRrB33bLFkmUBEXBt+6dKwJ lsKfRbTdeeXIYw8tQT8wqi1oxSg64XP2ZY2Oo5139svHfsnizXwzX7JL+UiwCTyM +wCdij3tXuTprRA6hw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:01 2026 by rpki-client