This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.cer (raw, json) Hash identifier: 4eK+yIIS394fQvwNNwJaPqsculroF+uldoedjtcDqqk= Subject key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECEB75B8C8AC12E41A605AE77366FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.67.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:eb:75:b8:c8:ac:12:e4:1a:60:5a:e7:73:66:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:17:e7:89:55:b6:10:a0:3c:ce:e7:aa:4f: 2e:16:22:d4:ac:61:08:0b:70:b8:6f:7f:ca:c9:bf: f8:92:4b:6f:b3:56:e0:5e:32:58:80:b8:ff:a7:8f: 2d:31:4e:d6:b1:00:36:07:e3:64:03:af:67:1d:76: 13:36:d4:93:d8:0e:01:87:19:32:52:5d:48:d6:63: c6:6a:40:f7:59:e6:28:ed:da:80:97:bf:96:cc:b7: 8f:06:fa:93:e8:d5:30:45:5f:8a:5c:c3:07:6a:94: 06:c3:74:d7:0a:70:1c:2f:8c:9b:8e:e8:12:28:c1: ed:e6:67:d5:82:b0:4f:a0:8a:5a:02:f2:6f:28:ce: c8:1c:06:bc:4d:84:93:33:9e:bc:26:15:7e:ab:46: 39:6d:9b:fb:74:98:6a:9e:4a:a3:be:7c:f4:59:48: ed:83:8c:d1:6a:80:a2:6f:50:0b:36:54:aa:19:0f: 72:27:22:ed:f3:53:4a:5b:39:2f:d9:40:50:b6:bf: 0f:e1:ee:2d:1a:fb:7a:f3:49:d8:0b:61:a5:08:07: 8d:56:02:c0:9b:6b:c7:f1:7b:97:55:e1:b2:cb:9e: 56:5f:ee:0c:e4:18:bb:db:c6:66:6a:d6:f7:e5:c0: 53:55:1c:fe:68:fb:33:17:37:7b:64:59:0b:54:0c: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.67.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:ca:98:a0:d6:8c:cd:e7:97:4e:9b:17:d3:8b:7f:32:be:bd: a8:ed:c5:48:f1:5f:09:14:bd:d2:3f:03:69:1f:9e:4c:9d:ad: 6f:e2:bc:6d:a8:1b:89:fb:1f:0e:5a:9b:ec:d9:66:7e:70:9f: 5c:00:33:da:b1:e7:fe:b0:ba:e0:0f:24:be:9a:d5:a8:bd:9d: de:2d:93:a6:ad:d7:57:4b:cd:c2:c4:57:43:02:b1:b4:61:7e: d4:ba:38:33:8f:f5:7a:77:66:c8:3c:67:3a:e5:24:23:dc:e0: 49:1a:4f:ed:35:99:b3:23:1d:d7:a8:0d:f6:90:72:5f:5c:88: 99:f5:f8:b6:71:65:a5:90:c2:28:23:5f:b6:e5:c8:8a:98:aa: d4:4a:11:8e:9a:e6:76:58:55:ad:53:c4:0b:1a:91:f1:81:3d: 2b:33:29:86:23:a1:d8:35:9e:94:0c:b6:4e:44:94:8d:de:c4: 1a:6e:1f:95:e6:9b:4d:81:20:f8:5c:87:8c:26:2f:35:e2:a9: 5f:d4:6f:cf:74:c2:de:b9:02:68:9b:93:09:02:cf:bc:ed:a0: e7:8c:4e:c3:c7:e0:8e:3a:53:10:40:1f:09:8f:59:74:ea:c8: 47:2b:05:52:0d:69:b6:f8:21:69:59:cb:7c:66:aa:0d:18:17: d5:24:6f:6c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt87Ot1uMisEuQaYFrnc2b/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjlhMGE1ZDFlOGQ1NDI0OGU4NzY2N2U5ODgzYzkwMmYxNzVlMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkoX54lVthCgPM7nqk8uFiLUrGEI C3C4b3/Kyb/4kktvs1bgXjJYgLj/p48tMU7WsQA2B+NkA69nHXYTNtST2A4Bhxky Ul1I1mPGakD3WeYo7dqAl7+WzLePBvqT6NUwRV+KXMMHapQGw3TXCnAcL4ybjugS KMHt5mfVgrBPoIpaAvJvKM7IHAa8TYSTM568JhV+q0Y5bZv7dJhqnkqjvnz0WUjt g4zRaoCib1ALNlSqGQ9yJyLt81NKWzkv2UBQtr8P4e4tGvt680nYC2GlCAeNVgLA m2vH8XuXVeGyy55WX+4M5Bi728Zmatb35cBTVRz+aPszFzd7ZFkLVAzijQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFPaaCl0ejVQkjodmfpiDyQLxdeLnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5Lzk0NDBh NC0wYjQyLTRhNTgtOTAwYS1lOTlmMjI3NzI2MjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTQ0MGE0 LTBiNDItNGE1OC05MDBhLWU5OWYyMjc3MjYyNC8xLzlwb0tYUjZOVkNTT2gyWi1t SVBKQXZGMTR1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjUMwDQYJKoZIhvcNAQELBQADggEBAEPKmKDW jM3nl06bF9OLfzK+vajtxUjxXwkUvdI/A2kfnkydrW/ivG2oG4n7Hw5am+zZZn5w n1wAM9qx5/6wuuAPJL6a1ai9nd4tk6at11dLzcLEV0MCsbRhftS6ODOP9Xp3Zsg8 ZzrlJCPc4EkaT+01mbMjHdeoDfaQcl9ciJn1+LZxZaWQwigjX7blyIqYqtRKEY6a 5nZYVa1TxAsakfGBPSszKYYjodg1npQMtk5ElI3exBpuH5Xmm02BIPhch4wmLzXi qV/Ub890wt65AmibkwkCz7ztoOeMTsPH4I46UxBAHwmPWXTqyEcrBVINabb4IWlZ y3xmqg0YF9Ukb2w= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:57 2026 by rpki-client