This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer File: 9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer (raw, json) Hash identifier: BToiD25eUtDoJuFkBPH0U5rmO1VvRaPbbPMCNlVRUzE= Subject key identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EA89E2B20A2B563535D839AC80869 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214299 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a8:9e:2b:20:a2:b5:63:53:5d:83:9a:c8:08:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f69066348cbbd67e19e5c1cfed53765401498b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:54:f1:7d:29:59:fa:e0:da:b9:e9:a7:2a: 40:f4:d2:ba:85:26:d3:fe:0a:76:18:8b:43:57:8f: f3:93:d7:a3:a0:d5:5f:f8:e1:e7:38:d8:99:e7:69: a6:d3:71:fd:e4:fe:cc:a7:9d:e7:19:55:29:65:e2: ac:0e:13:6b:a3:7b:03:d6:65:6b:da:89:38:6f:c8: 12:5e:c0:ac:d0:38:8c:a2:2e:66:09:15:c9:52:ed: a5:cd:15:3f:2e:49:50:37:14:e6:b9:b2:19:77:09: 96:91:19:ff:0d:a2:17:b6:57:70:a3:c8:9a:de:68: 61:62:c9:ab:4b:35:42:45:0c:5b:d1:d9:e4:83:df: 80:9c:bd:3e:20:ec:5e:77:53:d8:58:bc:a5:e9:ae: 3b:a2:b9:4a:d5:19:04:5d:9a:35:6d:39:87:bb:23: 53:bd:d9:22:0f:32:11:69:b0:d9:99:83:ec:74:1f: 25:49:ac:c6:a7:fa:3a:bf:0c:ab:16:d1:23:33:6d: 13:af:4f:c9:73:af:a2:6e:fc:47:56:e4:8b:ee:15: 3c:fa:d7:89:fa:c0:a6:9b:95:ac:3f:e6:23:00:eb: bd:20:16:8a:99:89:e1:a5:f1:97:f1:9d:12:ec:3a: 31:5a:2b:63:52:62:6f:41:7e:d8:4c:3f:d1:9d:8b: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214299 Signature Algorithm: sha256WithRSAEncryption 67:a5:dd:e6:55:65:6f:9d:eb:55:2a:2d:cc:23:4b:ec:59:e0: 01:e3:68:1f:42:99:5d:4e:40:76:c9:08:02:a4:6c:49:53:2b: d0:22:e2:64:43:2b:5c:49:10:e3:a4:e9:fc:cb:b9:5f:a9:9c: d9:04:25:4b:5c:92:3f:ab:e0:b6:20:b3:49:06:de:55:14:92: 07:28:cf:e5:1e:68:48:88:00:b0:50:49:45:2f:7f:24:e2:71: fa:9f:0c:0e:70:c8:24:b4:46:9a:eb:51:36:e8:dd:a7:00:cb: 58:27:2c:9c:70:33:ce:5d:d6:2c:ef:d5:1c:69:06:e2:ee:5d: ef:6a:40:36:b9:9c:34:d9:26:3a:7d:cd:f1:4e:a6:24:23:55: cd:41:c8:16:ed:7c:2b:e9:25:12:d4:d9:21:84:2e:2f:6a:4e: 52:44:97:13:47:f1:eb:ec:d9:0a:14:61:b4:11:89:96:6f:dd: 02:e9:d6:a5:cb:fa:3c:b9:80:64:7b:bd:1a:67:96:90:0e:b8: bd:ff:a6:d3:bc:69:39:a7:e9:0b:25:88:58:d5:f0:dc:68:79: b8:4e:a4:52:1f:00:2c:36:3b:3e:f4:27:37:b5:90:55:52:f7: fe:cc:4e:e2:7b:5c:24:db:7a:7d:a2:c7:5b:9b:1a:0b:6c:0e: 7f:cd:e4:ed -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt5fqieKyCitWNTXYOayAhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjkwNjYzNDhjYmJkNjdlMTllNWMxY2ZlZDUzNzY1NDAxNDk4YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+hU8X0pWfrg2rnppypA9NK6hSbT /gp2GItDV4/zk9ejoNVf+OHnONiZ52mm03H95P7Mp53nGVUpZeKsDhNro3sD1mVr 2ok4b8gSXsCs0DiMoi5mCRXJUu2lzRU/LklQNxTmubIZdwmWkRn/DaIXtldwo8ia 3mhhYsmrSzVCRQxb0dnkg9+AnL0+IOxed1PYWLyl6a47orlK1RkEXZo1bTmHuyNT vdkiDzIRabDZmYPsdB8lSazGp/o6vwyrFtEjM20Tr0/Jc6+ibvxHVuSL7hU8+teJ +sCmm5WsP+YjAOu9IBaKmYnhpfGX8Z0S7DoxWitjUmJvQX7YTD/RnYtVdQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFPaQZjSMu9Z+GeXBz+1TdlQBSYsmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NmODFl MjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2Y4 MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1N2EyLzAvRjY5MDY2MzQ4Q0JC RDY3RTE5RTVDMUNGRUQ1Mzc2NTQwMTQ5OEIyNi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRRsw DQYJKoZIhvcNAQELBQADggEBAGel3eZVZW+d61UqLcwjS+xZ4AHjaB9CmV1OQHbJ CAKkbElTK9Ai4mRDK1xJEOOk6fzLuV+pnNkEJUtckj+r4LYgs0kG3lUUkgcoz+Ue aEiIALBQSUUvfyTicfqfDA5wyCS0RprrUTbo3acAy1gnLJxwM85d1izv1RxpBuLu Xe9qQDa5nDTZJjp9zfFOpiQjVc1ByBbtfCvpJRLU2SGELi9qTlJElxNH8evs2QoU YbQRiZZv3QLp1qXL+jy5gGR7vRpnlpAOuL3/ptO8aTmn6QsliFjV8NxoebhOpFIf ACw2Oz70Jze1kFVS9/7MTuJ7XCTben2ix1ubGgtsDn/N5O0= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:26 2026 by rpki-client