This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer (raw, json) Hash identifier: sIDlGb3y6x2tVIs94H1KpIQbohgljp0S+9H4q21mAJI= Subject key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1E707D4180EECB81846733158CDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62169 IP: 46.235.78.0/23 IP: 185.77.236.0/22 IP: 185.138.76.0/22 IP: 2a05:6540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1e:70:7d:41:80:ee:cb:81:84:67:33:15:8c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:34:62:fd:cc:39:ec:3f:42:f9:25:09:d0: 2e:e0:b6:cb:d9:c5:41:e9:0b:a2:c1:cb:c9:ea:b9: a9:12:3b:2b:40:a9:c1:27:24:a0:70:9b:9d:7b:e5: a7:1b:44:e5:ad:90:ef:fd:2b:39:2b:df:be:ef:f4: 15:2d:6e:89:e5:22:9e:37:92:51:41:2b:2f:f7:9f: a8:ea:01:69:6a:3e:59:c8:6f:35:87:bd:20:10:64: b0:89:9d:d3:6e:74:57:7e:a7:e2:dc:5c:50:de:15: ef:9a:37:10:35:25:79:a9:13:22:cc:79:10:e5:93: dd:85:41:5c:77:66:6f:7a:e4:ca:fc:06:1e:70:79: 71:1b:40:51:11:89:e7:9e:c5:b3:ff:fd:8f:a8:95: 64:51:f0:18:89:48:4d:9b:e1:63:e8:6e:b9:34:c5: 9b:c7:76:45:16:6c:42:40:38:8b:fb:cc:c2:14:62: a8:6c:f7:3c:4e:fe:7e:ad:45:95:30:a5:67:ab:02: ee:b2:6f:f5:1e:aa:26:50:a0:15:8c:b4:6f:cd:9f: cf:5a:99:ad:bc:55:a6:b5:06:74:73:f8:27:38:be: f4:b2:ca:7b:53:fc:27:f3:27:2c:29:b2:2b:6c:db: 0c:2f:a3:e6:1f:e4:c0:c9:cf:b8:30:17:7e:30:5e: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.78.0/23 185.77.236.0/22 185.138.76.0/22 IPv6: 2a05:6540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62169 Signature Algorithm: sha256WithRSAEncryption 77:0b:c1:8e:02:d2:ac:82:21:0b:da:67:75:c1:3e:27:1b:ac: ab:4f:b5:8e:5f:62:55:ef:db:c6:c6:85:4b:25:5a:83:c7:46: 15:fe:85:25:3a:97:c9:3d:d7:28:47:85:07:d4:18:ba:95:ae: 75:6e:7c:61:b6:8d:65:7c:43:22:5f:09:cb:5d:fe:a5:37:79: 62:46:dc:2a:9c:0d:f1:be:e3:5a:1c:3e:f2:75:19:9b:87:f4: 0e:74:fe:d5:85:f5:10:81:6d:c7:23:b2:e1:35:02:81:2b:ae: 1d:7d:24:6f:ef:9e:f2:58:14:9d:9a:a0:6e:c4:fe:2e:34:54: e9:1a:f8:54:b6:b3:b5:0d:27:d5:fb:26:f2:69:07:1b:58:92: 57:df:f9:ee:07:31:20:a6:e3:6c:9e:a4:c9:d5:01:37:0c:41: 42:39:2f:79:a9:11:bc:a2:56:e2:36:a7:ae:38:04:f0:c8:90: 1f:ab:38:08:b1:c9:61:0e:dd:97:b1:c7:c2:a2:13:ea:9d:ce: 47:76:80:f9:39:98:2d:a4:92:9d:3b:f3:a5:48:01:18:42:87: 6e:2f:ac:8d:c2:95:b4:09:80:69:2f:53:c6:6b:57:3d:6a:a7: 65:99:a7:66:60:99:46:41:66:52:10:7c:5c:ba:cb:21:23:07: c6:fb:84:37 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt87h5wfUGA7suBhGczFYzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmRiMWI2OTFiMzBkYmU0OGU3ODhiN2NjYTRhZDMxZGNkYzg1Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoY0Yv3MOew/QvklCdAu4LbL2cVB 6QuiwcvJ6rmpEjsrQKnBJySgcJude+WnG0TlrZDv/Ss5K9++7/QVLW6J5SKeN5JR QSsv95+o6gFpaj5ZyG81h70gEGSwiZ3TbnRXfqfi3FxQ3hXvmjcQNSV5qRMizHkQ 5ZPdhUFcd2ZveuTK/AYecHlxG0BREYnnnsWz//2PqJVkUfAYiUhNm+Fj6G65NMWb x3ZFFmxCQDiL+8zCFGKobPc8Tv5+rUWVMKVnqwLusm/1HqomUKAVjLRvzZ/PWpmt vFWmtQZ0c/gnOL70ssp7U/wn8ycsKbIrbNsML6PmH+TAyc+4MBd+MF49rwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFPbbG2kbMNvkjniLfMpK0x3NyFx2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2UzNGZh NS00ZThkLTRiNDEtYmJiOC1lMzFjZTFiOTY3ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZTM0ZmE1 LTRlOGQtNGI0MS1iYmI4LWUzMWNlMWI5NjdlOS8xLzl0c2JhUnN3Mi1TT2VJdDh5 a3JUSGMzSVhIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBLutOAwQCuU3sAwQCuYpMMA0EAgACMAcDBQMq BWVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDy2TANBgkqhkiG9w0BAQsFAAOC AQEAdwvBjgLSrIIhC9pndcE+Jxusq0+1jl9iVe/bxsaFSyVag8dGFf6FJTqXyT3X KEeFB9QYupWudW58YbaNZXxDIl8Jy13+pTd5YkbcKpwN8b7jWhw+8nUZm4f0DnT+ 1YX1EIFtxyOy4TUCgSuuHX0kb++e8lgUnZqgbsT+LjRU6Rr4VLaztQ0n1fsm8mkH G1iSV9/57gcxIKbjbJ6kydUBNwxBQjkveakRvKJW4janrjgE8MiQH6s4CLHJYQ7d l7HHwqIT6p3OR3aA+TmYLaSSnTvzpUgBGEKHbi+sjcKVtAmAaS9TxmtXPWqnZZmn ZmCZRkFmUhB8XLrLISMHxvuENw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:59 2026 by rpki-client