This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer File: 9rLInTH2F1Fqhgp4IrumgkinaaA.cer (raw, json) Hash identifier: lerTIuAAATfmdqmGWNaNR6lg9aP75b3EPsM1USo2ass= Subject key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF29C2158F9ABB9C156641183DAAD26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204465 IP: 94.199.6.0/24 IP: 2a13:4600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9c:21:58:f9:ab:b9:c1:56:64:11:83:da:ad:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6b2c89d31f617516a860a7822bba68248a769a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:b4:66:bb:53:b4:05:95:d5:f6:5f:e1:19: ac:4d:c9:24:fe:12:8b:e3:81:ed:75:b9:e9:46:aa: 2b:a4:e0:eb:c6:f0:92:29:bc:c1:60:b0:67:43:72: 93:e8:92:0e:6a:14:42:e3:48:90:d6:2d:e8:a6:06: ae:8c:59:d8:89:0f:19:4b:5b:d8:f6:83:98:81:ec: de:7a:9f:58:c2:0a:73:c2:fb:25:35:44:61:16:c6: 2c:dd:12:45:73:f1:40:c3:34:c2:70:8d:70:fd:97: 8c:8a:b3:49:e8:79:b4:95:39:78:08:1c:14:61:12: d5:d8:b7:1f:f5:a0:fd:c1:f9:07:e3:8c:fd:b3:6d: 58:5b:05:bd:15:62:c3:c6:2d:aa:29:89:03:a2:27: d8:cf:55:c5:89:0a:60:a0:b3:ef:03:97:fe:ab:94: cb:90:d2:74:4f:31:03:0d:63:dd:e8:37:d1:6c:cb: 57:b2:c4:77:5d:42:e0:c7:8a:9a:7b:c9:a5:6e:db: 22:dc:17:bd:d1:ab:98:16:ed:81:ca:ca:fc:70:66: a0:59:f8:25:e5:bb:2e:88:a0:e3:f9:09:e4:68:8c: 15:ff:64:43:14:af:71:51:70:59:45:39:48:95:9d: d5:1e:d7:42:2d:76:58:04:eb:e7:be:3e:2f:f5:69: 3b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.6.0/24 IPv6: 2a13:4600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204465 Signature Algorithm: sha256WithRSAEncryption 04:bf:32:97:43:1d:aa:12:e4:c7:bb:72:30:a6:f2:6c:67:d4: ed:44:98:d0:2a:97:95:5d:55:e7:92:f9:c5:a3:9f:12:44:a2: f8:26:63:d0:9c:c8:43:8c:d4:30:45:07:28:a5:c2:e7:c5:3a: c5:a0:c6:03:ee:e6:86:2d:1f:e2:27:cd:98:ac:c5:04:03:4b: 8d:86:73:84:5a:43:32:c2:40:2b:50:6d:f1:9e:9a:da:d4:5e: fe:10:52:3f:e3:e4:17:f3:37:ba:6a:ef:b5:8d:fa:84:bc:f3: 2a:c9:f0:3d:0c:bc:1c:fc:7c:5f:c0:ff:bd:fb:de:04:a6:bc: af:6e:c7:4b:27:03:88:2e:a3:0a:1e:ee:e6:54:6a:2f:e6:f6: 36:96:bd:67:0b:66:b9:75:69:9d:7c:bd:ed:ea:84:05:17:32: c3:3c:22:2d:f7:a7:c5:da:29:ea:b2:96:0e:0a:62:a4:6b:16: a6:9d:73:22:7c:2a:f4:ba:56:2b:b8:5a:ad:ff:20:07:33:f2: 97:f9:c8:aa:dc:c5:3e:99:ea:f7:90:19:39:1a:01:99:8f:33: b9:77:4a:45:fa:79:70:91:02:eb:f1:0c:de:05:ca:00:a7:87: 8e:1a:3f:8e:25:ba:b7:43:8f:f5:2e:d6:7b:95:17:7d:62:43: b8:32:c4:cf -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8pwhWPmrucFWZBGD2q0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmIyYzg5ZDMxZjYxNzUxNmE4NjBhNzgyMmJiYTY4MjQ4YTc2OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGO0ZrtTtAWV1fZf4RmsTckk/hKL 44HtdbnpRqorpODrxvCSKbzBYLBnQ3KT6JIOahRC40iQ1i3opgaujFnYiQ8ZS1vY 9oOYgezeep9YwgpzwvslNURhFsYs3RJFc/FAwzTCcI1w/ZeMirNJ6Hm0lTl4CBwU YRLV2Lcf9aD9wfkH44z9s21YWwW9FWLDxi2qKYkDoifYz1XFiQpgoLPvA5f+q5TL kNJ0TzEDDWPd6DfRbMtXssR3XULgx4qae8mlbtsi3Be90auYFu2Bysr8cGagWfgl 5bsuiKDj+QnkaIwV/2RDFK9xUXBZRTlIlZ3VHtdCLXZYBOvnvj4v9Wk7zwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPayyJ0x9hdRaoYKeCK7poJIp2mgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzkxN2Jk Ni04YmQzLTRjMjgtODI1Zi0xNDc1ZDIyZGMxNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvOTE3YmQ2 LThiZDMtNGMyOC04MjVmLTE0NzVkMjJkYzE2Mi8xLzlyTEluVEgyRjFGcWhncDRJ cnVtZ2tpbmFhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXscGMA0EAgACMAcDBQMqE0YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMesTANBgkqhkiG9w0BAQsFAAOCAQEABL8yl0MdqhLk x7tyMKbybGfU7USY0CqXlV1V55L5xaOfEkSi+CZj0JzIQ4zUMEUHKKXC58U6xaDG A+7mhi0f4ifNmKzFBANLjYZzhFpDMsJAK1Bt8Z6a2tRe/hBSP+PkF/M3umrvtY36 hLzzKsnwPQy8HPx8X8D/vfveBKa8r27HSycDiC6jCh7u5lRqL+b2Npa9ZwtmuXVp nXy97eqEBRcywzwiLfenxdop6rKWDgpipGsWpp1zInwq9LpWK7harf8gBzPyl/nI qtzFPpnq95AZORoBmY8zuXdKRfp5cJEC6/EM3gXKAKeHjho/jiW6t0OP9S7We5UX fWJDuDLEzw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:46:58 2026 by rpki-client