This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer File: 9q2iC9mLq990w9Vs14raZu2HoUg.cer (raw, json) Hash identifier: S9gKPTQROezd+lGdG9kTuPCL+3jmjfuoLX/0TSEocRw= Subject key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A74288C8875B5F36202AD9F1322C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208537 IP: 91.230.237.0/24 IP: 94.101.104.0/24 IP: 192.83.120.0/24 IP: 194.102.239.0/24 IP: 195.138.39.0/24 IP: 213.159.24.0/23 IP: 2a11:800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a7:42:88:c8:87:5b:5f:36:20:2a:d9:f1:32:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:10:f7:9a:bf:36:9b:08:0c:d2:19:d5:94: bb:a7:b6:7e:6b:e9:7a:02:71:d7:2a:31:4f:aa:be: 0c:ae:a1:a3:db:23:2f:62:29:08:e3:50:b9:20:3a: e1:32:af:da:df:41:ae:8f:3b:6b:9d:13:16:da:11: fc:b5:7b:b4:20:e8:78:38:89:be:2e:4e:27:90:18: e4:1b:a9:e8:51:a4:26:d9:99:f8:af:3d:69:fe:8f: ca:bb:16:c4:1b:c3:b9:7f:f8:6c:93:33:ce:f9:0c: 1b:db:0e:f7:f0:57:33:27:05:ca:a6:7a:75:de:71: a5:bb:9c:3f:3f:62:ad:0c:a7:be:08:bb:e7:a3:25: cf:26:19:7c:41:43:02:b9:c1:78:f6:06:d4:47:8a: 62:db:07:93:df:08:3d:14:4f:76:5f:e3:40:0d:eb: 39:13:fd:d9:9c:b0:a7:3e:16:93:f0:8f:5a:ad:a6: 4f:0e:c5:86:f9:28:a9:03:69:63:f8:a3:96:94:b1: a4:cd:bd:64:13:7c:63:ec:18:ad:76:f4:f2:23:6d: a2:a0:36:79:ee:36:5d:da:0d:ce:24:bd:ab:72:35: 25:fa:b2:99:6a:a7:95:07:61:d5:1c:7a:cf:03:ee: 7f:ef:b1:76:a2:a9:49:62:c4:14:a5:11:f2:8e:ca: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.237.0/24 94.101.104.0/24 192.83.120.0/24 194.102.239.0/24 195.138.39.0/24 213.159.24.0/23 IPv6: 2a11:800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208537 Signature Algorithm: sha256WithRSAEncryption 85:84:63:87:b0:db:75:ea:1f:41:be:2c:f3:1f:b6:45:33:72: b5:d2:87:29:84:b1:59:e1:7a:54:81:b8:78:46:b7:05:b5:62: 47:5b:c3:99:8f:7e:3e:54:35:56:a7:0e:4e:70:db:c2:4e:a1: 57:a3:24:ac:36:88:19:f8:bc:56:fb:95:84:6f:05:85:21:f2: 19:6b:63:c3:36:26:5e:ee:26:4d:ce:9e:e4:c6:a0:6f:64:e0: 03:69:76:c2:65:c7:7b:d6:3f:ae:6b:26:28:74:7d:cf:03:a5: 1d:41:07:57:24:de:34:9c:02:69:8f:8d:62:be:54:81:f1:54: 9f:a6:97:f7:d0:de:49:ac:49:d3:3d:fb:99:a9:34:00:ca:c5: 5d:f1:79:5d:e4:2c:d1:1f:a0:8a:32:0f:43:15:f1:0f:f7:e2: cb:71:d4:41:b0:70:64:42:d9:79:b6:14:d7:66:a6:6d:6e:ac: ef:cb:6d:e3:cc:3b:d0:cc:19:37:d3:63:9d:75:85:bd:2e:50: ae:f2:72:aa:76:db:9b:1f:4a:14:a0:63:1f:48:69:98:1b:8a: c1:58:ba:7c:5b:ca:2b:2e:18:d9:85:54:c5:38:c9:c6:a2:80: c3:ee:38:e8:ba:af:9b:d1:dc:87:03:a9:76:4d:72:d0:97:d0: c4:91:b6:de -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt7NqdCiMiHW182ICrZ8TIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmFkYTIwYmQ5OGJhYmRmNzRjM2Q1NmNkNzhhZGE2NmVkODdhMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy4Q95q/NpsIDNIZ1ZS7p7Z+a+l6 AnHXKjFPqr4MrqGj2yMvYikI41C5IDrhMq/a30GujztrnRMW2hH8tXu0IOh4OIm+ Lk4nkBjkG6noUaQm2Zn4rz1p/o/KuxbEG8O5f/hskzPO+Qwb2w738FczJwXKpnp1 3nGlu5w/P2KtDKe+CLvnoyXPJhl8QUMCucF49gbUR4pi2weT3wg9FE92X+NADes5 E/3ZnLCnPhaT8I9araZPDsWG+SipA2lj+KOWlLGkzb1kE3xj7BitdvTyI22ioDZ5 7jZd2g3OJL2rcjUl+rKZaqeVB2HVHHrPA+5/77F2oqlJYsQUpRHyjspcHQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFPatogvZi6vfdMPVbNeK2mbth6FIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzRkNTRi Ni1lMDNjLTQzMTAtOWIzOS05ZGIxN2E1ZGU0NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvNGQ1NGI2 LWUwM2MtNDMxMC05YjM5LTlkYjE3YTVkZTQ2My8xLzlxMmlDOW1McTk5MHc5VnMx NHJhWnUySG9VZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAW+btAwQAXmVoAwQAwFN4AwQAwmbvAwQAw4on AwQB1Z8YMA0EAgACMAcDBQMqEQgAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMu mTANBgkqhkiG9w0BAQsFAAOCAQEAhYRjh7DbdeofQb4s8x+2RTNytdKHKYSxWeF6 VIG4eEa3BbViR1vDmY9+PlQ1VqcOTnDbwk6hV6MkrDaIGfi8VvuVhG8FhSHyGWtj wzYmXu4mTc6e5Magb2TgA2l2wmXHe9Y/rmsmKHR9zwOlHUEHVyTeNJwCaY+NYr5U gfFUn6aX99DeSaxJ0z37mak0AMrFXfF5XeQs0R+gijIPQxXxD/fiy3HUQbBwZELZ ebYU12ambW6s78tt48w70MwZN9NjnXWFvS5QrvJyqnbbmx9KFKBjH0hpmBuKwVi6 fFvKKy4Y2YVUxTjJxqKAw+446Lqvm9HchwOpdk1y0JfQxJG23g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:43 2026 by rpki-client