This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.cer (raw, json) Hash identifier: t93Nv7gJ/Vi4rqrEvFd/Tw/mDAK5cCGkC89z9lohn/o= Subject key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B8AD8D54FD26F11B4CC574D39058 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209031 IP: 45.9.240.0/22 IP: 2a0e:1900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b8:ad:8d:54:fd:26:f1:1b:4c:c5:74:d3:90:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:19:f1:37:f3:83:9a:36:9b:11:1c:38:5a: 1d:a8:82:fe:0f:7f:57:ce:9d:16:1d:b2:0b:f3:59: db:9c:85:46:a0:10:15:4d:70:f2:85:f0:b3:05:6b: 65:3d:22:9b:b2:76:70:a1:4d:ad:37:5d:73:40:6e: b0:85:0f:80:1a:9c:a9:d1:df:5f:fa:13:af:6e:c9: 2c:73:7b:9a:62:88:74:91:81:03:f9:21:91:09:b7: 30:b8:b7:b7:11:67:3e:ac:a7:44:93:e5:a1:5f:c5: fa:4d:5c:98:ae:0f:9d:88:81:38:d3:f2:19:ea:50: 2e:86:a4:73:3f:0f:6c:b0:0b:b7:8f:ba:ab:49:3f: 5f:67:6d:75:64:0e:6b:a6:62:19:90:db:25:7e:c5: 96:87:4a:ed:69:cb:a6:56:8e:81:42:19:6c:ce:5c: eb:86:bc:c0:45:50:ec:22:70:9e:fa:10:8f:8e:c7: 07:26:30:07:ed:2d:5b:59:11:d7:72:c4:b1:57:20: bd:f5:6d:f5:86:6d:4c:00:70:cb:2c:c8:5e:c2:42: b2:bd:3a:dd:12:f9:d9:bf:f6:79:8e:42:44:36:51: 8e:8a:c0:41:1e:61:37:c8:b9:1f:35:74:99:dd:bf: 50:8a:a5:56:2d:ae:ce:e5:28:a8:4c:da:12:46:8d: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.240.0/22 IPv6: 2a0e:1900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209031 Signature Algorithm: sha256WithRSAEncryption 25:48:bd:e4:69:0a:c6:f0:88:85:e1:d9:8e:f6:d4:74:6e:db: 14:e9:f5:dc:ae:3c:6b:ff:74:31:2e:00:ba:2a:11:76:e6:39: a3:8b:7a:49:31:2a:fd:26:04:18:c0:4e:88:57:bd:38:5b:5a: db:d2:3b:1e:dd:b7:2d:c6:d9:0c:fc:96:ac:7d:9d:46:29:34: e4:3a:f3:cc:af:c8:92:6d:64:7d:d4:5a:a7:ba:db:2e:2b:9e: 50:0c:b7:03:9d:1d:fa:46:21:a6:e7:6f:eb:81:96:5c:68:0f: c6:b5:8e:5a:07:b6:29:eb:0c:d9:8a:81:13:7b:bc:d0:86:64: d8:97:cb:50:a9:45:fb:94:73:86:0f:94:9f:48:61:44:84:e3: 5b:98:a8:db:95:5b:92:17:c3:41:47:6e:86:f0:df:c6:4e:89: 0f:4b:f1:57:17:b2:90:67:ec:9a:d8:df:93:de:1d:84:29:f1: 01:35:75:f0:2a:85:4c:85:fe:40:dc:3c:0d:3f:29:e3:66:8c: f9:12:19:01:04:91:e8:95:4e:9f:cf:dc:25:e5:e5:a1:fb:d2: f4:33:ab:93:13:d3:87:24:71:82:cb:3c:20:e0:db:36:0c:d4: 38:f5:7d:c0:07:80:34:96:71:33:50:d9:22:ad:90:ee:bf:28: 9b:e3:34:6d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x7itjVT9JvEbTMV005BYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzAwYmI1OTFjMDI3Nzg4MTlhZWExZjViOGY2NDQxNjdiM2Q3YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtooZ8Tfzg5o2mxEcOFodqIL+D39X zp0WHbIL81nbnIVGoBAVTXDyhfCzBWtlPSKbsnZwoU2tN11zQG6whQ+AGpyp0d9f +hOvbsksc3uaYoh0kYED+SGRCbcwuLe3EWc+rKdEk+WhX8X6TVyYrg+diIE40/IZ 6lAuhqRzPw9ssAu3j7qrST9fZ211ZA5rpmIZkNslfsWWh0rtacumVo6BQhlszlzr hrzARVDsInCe+hCPjscHJjAH7S1bWRHXcsSxVyC99W31hm1MAHDLLMhewkKyvTrd EvnZv/Z5jkJENlGOisBBHmE3yLkfNXSZ3b9QiqVWLa7O5SioTNoSRo2vuwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPcAu1kcAneIGa6h9bj2RBZ7PXwuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzA1Zjdj NS1iMjFiLTQzNWUtOGViYy04MmE2ODExOGM3NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMDVmN2M1 LWIyMWItNDM1ZS04ZWJjLTgyYTY4MTE4Yzc1Mi8xLzl3QzdXUndDZDRnWnJxSDF1 UFpFRm5zOWZDNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQnwMA0EAgACMAcDBQMqDhkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwhzANBgkqhkiG9w0BAQsFAAOCAQEAJUi95GkKxvCI heHZjvbUdG7bFOn13K48a/90MS4AuioRduY5o4t6STEq/SYEGMBOiFe9OFta29I7 Ht23LcbZDPyWrH2dRik05DrzzK/Ikm1kfdRap7rbLiueUAy3A50d+kYhpudv64GW XGgPxrWOWge2KesM2YqBE3u80IZk2JfLUKlF+5Rzhg+Un0hhRITjW5io25VbkhfD QUduhvDfxk6JD0vxVxeykGfsmtjfk94dhCnxATV18CqFTIX+QNw8DT8p42aM+RIZ AQSR6JVOn8/cJeXlofvS9DOrkxPThyRxgss8IODbNgzUOPV9wAeANJZxM1DZIq2Q 7r8om+M0bQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:37 2026 by rpki-client