This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer File: 9qiFSCQ7bikKBtKaKzcQS3et5vw.cer (raw, json) Hash identifier: Ybh4roATcXA/3TGpO2Z4Ah5Fi02dRQ+xBzPWa8psFjw= Subject key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7F50E7FCE12CA826536CF15C4817 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210734 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7f:50:e7:fc:e1:2c:a8:26:53:6c:f1:5c:48:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:32:88:a7:6d:54:e0:4a:43:16:d6:ff:52: 28:96:02:a0:32:8d:fb:48:ff:f3:25:49:b0:60:a8: 96:f1:77:ed:9e:7b:6d:b7:dc:30:60:0d:b3:1b:64: 2b:1c:bb:a4:5e:a1:68:fc:d6:57:67:67:bb:7e:ec: 30:ae:b4:2b:b1:ed:84:53:d6:0b:35:91:65:3b:46: 04:12:d2:97:1a:a4:e0:33:be:93:d5:44:aa:9b:0d: cb:87:53:b7:4a:d1:68:d0:48:e8:a6:e2:cf:41:22: d8:3b:75:f2:fc:a5:0f:7b:99:ea:eb:03:73:ed:fc: 64:e0:c1:3e:f9:90:c5:d3:ff:c7:3a:8a:b5:dd:2f: 82:8b:2b:e7:cd:79:f3:b4:13:6a:d5:30:e3:9b:52: b6:fb:15:ad:58:74:41:30:3c:a0:32:49:da:8d:8e: 1f:53:aa:42:47:83:92:03:dc:c5:f5:7a:4a:f3:da: ea:59:30:47:e9:ac:ea:77:2b:2e:de:6a:84:0e:d0: 94:0f:82:fc:8f:ab:b9:3d:04:09:c7:47:56:4c:26: 0c:08:93:8c:9a:a8:42:02:02:3c:82:f2:34:24:34: 17:b9:3c:24:74:c5:44:e8:c9:2d:0f:c9:dd:5c:67: 92:57:12:7b:8b:1f:01:e7:af:af:e6:8f:9e:4c:1d: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210734 Signature Algorithm: sha256WithRSAEncryption 41:09:90:78:0d:f8:df:76:c6:1a:9e:97:f4:92:44:44:9b:ae: 15:42:95:b8:57:c1:39:a8:61:20:bc:a2:3e:06:4d:32:fd:c6: 36:5c:50:9a:38:b1:8b:68:a1:99:52:f1:8b:49:2b:eb:30:42: af:8f:c2:65:21:14:8f:1f:9c:b0:79:fb:fc:73:02:c6:63:0c: 3c:22:3d:b7:49:ef:0b:b5:e7:79:65:0c:76:79:4c:e9:ba:3a: ef:4f:fe:6d:e2:f7:c9:d1:6f:3f:db:10:1d:1d:18:74:ad:7a: 33:f9:c4:e2:7f:e1:b7:58:e5:b3:ec:96:98:61:19:15:49:ba: d3:e2:99:da:01:8e:f6:79:f2:aa:dd:99:a2:b9:c5:ba:e2:69: 2d:b1:66:2a:5e:d7:40:50:d3:9f:d0:df:87:67:45:48:38:62: 8e:95:79:c0:f4:77:fc:84:ab:b5:19:ed:56:82:62:6b:76:47: a1:bd:dc:c7:4d:29:79:79:0c:00:93:e8:f6:7a:cf:a4:07:24: 71:24:5e:83:a0:eb:d9:ea:fd:fc:4d:dd:3c:20:f3:3d:7d:73: 7c:d7:69:24:c3:c9:1a:dd:ec:67:08:ab:48:42:49:40:a2:16: 50:e6:dc:f7:9d:eb:35:54:a8:f8:f5:1f:33:96:5f:8b:4b:44: 59:cb:d1:56 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fn9Q5/zhLKgmU2zxXEgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmE4ODU0ODI0M2I2ZTI5MGEwNmQyOWEyYjM3MTA0Yjc3YWRlNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnUyiKdtVOBKQxbW/1IolgKgMo37 SP/zJUmwYKiW8Xftnnttt9wwYA2zG2QrHLukXqFo/NZXZ2e7fuwwrrQrse2EU9YL NZFlO0YEEtKXGqTgM76T1USqmw3Lh1O3StFo0EjopuLPQSLYO3Xy/KUPe5nq6wNz 7fxk4ME++ZDF0//HOoq13S+CiyvnzXnztBNq1TDjm1K2+xWtWHRBMDygMknajY4f U6pCR4OSA9zF9XpK89rqWTBH6azqdysu3mqEDtCUD4L8j6u5PQQJx0dWTCYMCJOM mqhCAgI8gvI0JDQXuTwkdMVE6MktD8ndXGeSVxJ7ix8B56+v5o+eTB3oHwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPaohUgkO24pCgbSmis3EEt3reb8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2E4NGRi YS1kN2ExLTQyMDktYTIwZC05NGFkNDg3ZjJlMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvYTg0ZGJh LWQ3YTEtNDIwOS1hMjBkLTk0YWQ0ODdmMmUwMS8xLzlxaUZTQ1E3YmlrS0J0S2FL emNRUzNldDV2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3LjANBgkqhkiG9w0BAQsFAAOCAQEAQQmQeA3433bG Gp6X9JJERJuuFUKVuFfBOahhILyiPgZNMv3GNlxQmjixi2ihmVLxi0kr6zBCr4/C ZSEUjx+csHn7/HMCxmMMPCI9t0nvC7XneWUMdnlM6bo670/+beL3ydFvP9sQHR0Y dK16M/nE4n/ht1jls+yWmGEZFUm60+KZ2gGO9nnyqt2ZornFuuJpLbFmKl7XQFDT n9Dfh2dFSDhijpV5wPR3/ISrtRntVoJia3ZHob3cx00peXkMAJPo9nrPpAckcSRe g6Dr2er9/E3dPCDzPX1zfNdpJMPJGt3sZwirSEJJQKIWUObc953rNVSo+PUfM5Zf i0tEWcvRVg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:19 2026 by rpki-client