This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.cer (raw, json) Hash identifier: UYrXIEBI/LuaBwnIPv0PeEV9YzOunUwGgjdqGCNdrt0= Subject key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38CD0FFB8F8D63B05151B1DF577391 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215274 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cd:0f:fb:8f:8d:63:b0:51:51:b1:df:57:73:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f713d7df80570bccfb273793f00a5d46c853e49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:d2:1e:90:01:22:8f:ae:5e:1d:ee:fb:78: 0f:b2:fa:71:26:62:a5:5f:25:30:c2:76:a2:a9:69: d9:4b:51:4a:c9:b8:07:1f:c2:2c:b7:19:e2:d9:91: ae:3a:5d:41:9d:4c:3d:f7:86:2d:0b:e9:3e:20:3c: 89:0a:f8:10:ad:e9:fa:e5:cb:ef:89:98:0f:5b:b9: de:49:e7:38:c7:7f:41:b2:41:98:29:90:4c:d4:8b: 93:88:23:47:ae:01:26:05:db:7b:fe:69:5f:5c:53: d1:e1:c9:71:62:b9:bc:bd:bf:6d:f6:8e:15:8f:26: af:dd:e6:ad:52:1b:9d:b2:2b:b9:76:e7:eb:62:0f: 70:d2:6e:70:ee:53:79:32:82:83:52:b3:49:dd:c6: 1f:34:cb:04:2d:38:c8:37:69:68:fa:bb:91:57:40: b2:cc:ce:24:ee:8c:e6:f9:78:56:56:96:4f:85:c3: 97:ab:4f:32:36:ca:98:a1:b1:d8:5a:92:84:88:ff: 8d:e8:3c:80:14:83:bb:17:3e:bf:17:76:4b:84:c3: ab:52:e0:59:d5:9c:a9:4e:77:ee:04:3a:87:7a:33: ae:56:86:b4:94:43:4d:6b:7b:68:c9:a7:a2:ce:ed: ab:d1:f5:eb:ec:7a:a7:2d:43:de:25:8e:d3:66:f3: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215274 Signature Algorithm: sha256WithRSAEncryption 33:65:f2:a1:03:2c:45:e2:a1:91:ae:5c:57:4e:11:71:42:fb: 28:ec:f4:29:ae:79:b2:85:95:23:ed:09:cf:d2:b5:d2:27:86: 87:bc:51:1b:45:1d:9c:0c:43:b0:4c:d9:68:98:50:bf:da:99: 1a:65:f4:34:3d:b7:6b:fb:8c:40:74:23:b6:44:ee:dd:9e:a1: 96:00:61:df:7c:ec:d1:c4:c1:6d:97:2a:08:da:ef:e6:11:29: f7:28:ef:17:04:5e:eb:06:08:28:e0:c4:2e:19:2b:d5:22:f6: 87:4e:71:4f:cc:f5:5c:62:79:16:b0:dd:ab:93:7f:4f:bc:ac: da:fa:0d:e4:e5:86:6d:9c:d4:3b:ea:5b:bd:d3:08:a6:6e:48: 39:b4:f3:a2:cb:71:8b:a0:aa:0b:3d:0c:6b:bb:7f:6a:e4:3f: 6c:9d:2d:73:78:e6:99:5f:52:78:36:9e:31:b5:35:d4:6c:27: 9e:ed:96:f9:cb:93:9d:58:a5:b1:a0:e0:fa:b3:7f:7b:1a:32: 27:dc:25:d8:58:6d:49:8d:21:96:6f:3c:81:3a:35:7f:6a:2c: bf:cf:94:44:69:e5:0c:ba:68:7f:c6:d4:30:a6:6b:1e:ef:d6: 61:3c:94:d4:a4:1f:d1:94:20:68:9f:64:37:a6:54:3d:ff:cc: 4d:00:c8:93 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OM0P+4+NY7BRUbHfV3ORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzEzZDdkZjgwNTcwYmNjZmIyNzM3OTNmMDBhNWQ0NmM4NTNlNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQXSHpABIo+uXh3u+3gPsvpxJmKl XyUwwnaiqWnZS1FKybgHH8Istxni2ZGuOl1BnUw994YtC+k+IDyJCvgQren65cvv iZgPW7neSec4x39BskGYKZBM1IuTiCNHrgEmBdt7/mlfXFPR4clxYrm8vb9t9o4V jyav3eatUhudsiu5dufrYg9w0m5w7lN5MoKDUrNJ3cYfNMsELTjIN2lo+ruRV0Cy zM4k7ozm+XhWVpZPhcOXq08yNsqYobHYWpKEiP+N6DyAFIO7Fz6/F3ZLhMOrUuBZ 1ZypTnfuBDqHejOuVoa0lENNa3toyaeizu2r0fXr7HqnLUPeJY7TZvOJswIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPcT19+AVwvM+yc3k/AKXUbIU+SaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzIzYTE5 YS0zMGRiLTQ4NzItYWI3My01Mjg3YWZjMTBlNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMjNhMTlh LTMwZGItNDg3Mi1hYjczLTUyODdhZmMxMGU2OC8xLzl4UFgzNEJYQzh6N0p6ZVQ4 QXBkUnNoVDVKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNI6jANBgkqhkiG9w0BAQsFAAOCAQEAM2XyoQMsReKh ka5cV04RcUL7KOz0Ka55soWVI+0Jz9K10ieGh7xRG0UdnAxDsEzZaJhQv9qZGmX0 ND23a/uMQHQjtkTu3Z6hlgBh33zs0cTBbZcqCNrv5hEp9yjvFwRe6wYIKODELhkr 1SL2h05xT8z1XGJ5FrDdq5N/T7ys2voN5OWGbZzUO+pbvdMIpm5IObTzostxi6Cq Cz0Ma7t/auQ/bJ0tc3jmmV9SeDaeMbU11Gwnnu2W+cuTnVilsaDg+rN/exoyJ9wl 2FhtSY0hlm88gTo1f2osv8+URGnlDLpof8bUMKZrHu/WYTyU1KQf0ZQgaJ9kN6ZU Pf/MTQDIkw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:00 2026 by rpki-client