This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer File: 9yR1sGTeionxUD6u_H1yrczzihY.cer (raw, json) Hash identifier: bZoZ8glXVUy+r5WPNRu4EShTif+GCfElfs2+/RgKhfs= Subject key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C122781C782612F5D9BC5EC0A03D597 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43599 IP: 5.172.48.0/20 IP: 37.153.72.0/21 IP: 78.155.224.0/19 IP: 2a02:1340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:27:81:c7:82:61:2f:5d:9b:c5:ec:0a:03:d5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:61:61:67:62:9f:ae:91:0b:8e:ee:0f:cd: 55:72:54:e2:86:04:10:29:18:f8:cf:4a:c0:c1:c7: 7d:92:49:0c:fd:d9:2f:03:81:7c:23:99:45:9e:07: ed:59:18:0f:21:61:6b:f3:33:3a:b6:ed:2e:48:73: 65:28:5b:9a:fa:fc:4c:6f:4b:ef:22:8d:0c:4d:d4: fa:80:ca:42:e4:3e:3f:18:b5:52:b1:ed:6e:4c:25: 32:08:cf:ec:e2:36:71:0f:7b:62:b7:dc:ed:c7:54: 47:97:19:ad:26:7d:0c:7c:d8:db:cd:39:fc:78:c7: 32:d6:5b:0c:7d:b9:8e:0f:cc:11:df:cd:25:ae:ae: 6c:37:7f:62:94:31:02:0b:99:a4:17:dc:b5:70:e3: 28:7b:9d:8c:af:1c:2c:74:b4:11:15:9f:fe:db:b1: 58:e2:62:5e:b5:60:4d:a8:81:48:da:db:06:39:3f: ab:b4:07:04:c9:56:70:87:78:f9:b9:30:c0:88:e5: 78:1b:16:6d:a2:70:8e:93:d4:22:ee:11:3d:8b:49: 1c:6e:f5:c8:02:4c:e1:cf:f8:e9:6a:17:a9:8a:15: 07:8c:ad:d6:27:08:68:12:11:22:cb:cf:aa:3a:ac: c8:43:8f:aa:db:1b:48:5a:9f:1b:60:80:50:90:bc: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.48.0/20 37.153.72.0/21 78.155.224.0/19 IPv6: 2a02:1340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43599 Signature Algorithm: sha256WithRSAEncryption af:7f:e7:fb:9f:28:94:b0:af:1d:66:3a:71:2d:5a:5e:ed:fc: be:c7:ca:f5:c4:5f:61:20:28:c9:7e:f8:49:b4:cf:b5:c7:bc: e7:f5:c1:2d:5a:81:ca:ef:a8:5a:00:31:9d:86:7b:c8:01:83: 52:bf:6f:81:c2:bd:1e:2e:92:1f:e8:81:e1:50:ea:57:0f:21: 80:e6:67:87:30:a2:18:e9:5c:eb:d8:00:66:ae:86:60:00:fc: db:06:a6:dd:39:6c:68:48:ff:cc:2d:36:6b:e5:03:0e:9c:d5: c3:e5:2b:cd:85:71:53:2b:82:fa:81:b6:b4:93:8a:e7:6c:a0: d4:85:fe:4d:24:e7:d1:f0:ee:9f:1a:a3:5a:3d:18:aa:06:21: b9:12:4a:d1:c0:47:dc:60:4e:b9:45:42:92:c7:fa:fb:04:3b: 28:d5:26:67:85:2f:f3:62:69:e0:f9:e6:96:29:df:0e:ed:7b: 64:75:cb:b2:1d:5d:18:0f:82:51:72:fd:28:b3:33:f0:62:9d: ff:22:2d:88:6c:43:a2:4f:04:6e:1d:a9:dc:83:7d:c0:63:e1: 9e:62:26:99:22:fa:d8:50:7d:4a:2e:76:03:f5:92:2d:b5:26: b8:c2:06:df:8d:00:95:24:c4:30:b8:b2:a5:07:7c:b5:2a:0d: 21:b1:bb:ca -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8EieBx4JhL12bxewKA9WXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzI0NzViMDY0ZGU4YTg5ZjE1MDNlYWVmYzdkNzJhZGNjZjM4YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ZhYWdin66RC47uD81VclTihgQQ KRj4z0rAwcd9kkkM/dkvA4F8I5lFngftWRgPIWFr8zM6tu0uSHNlKFua+vxMb0vv Io0MTdT6gMpC5D4/GLVSse1uTCUyCM/s4jZxD3tit9ztx1RHlxmtJn0MfNjbzTn8 eMcy1lsMfbmOD8wR380lrq5sN39ilDECC5mkF9y1cOMoe52MrxwsdLQRFZ/+27FY 4mJetWBNqIFI2tsGOT+rtAcEyVZwh3j5uTDAiOV4GxZtonCOk9Qi7hE9i0kcbvXI Akzhz/jpahepihUHjK3WJwhoEhEiy8+qOqzIQ4+q2xtIWp8bYIBQkLyIqwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFPckdbBk3oqJ8VA+rvx9cq3M84oWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzkwZjM2 ZS1kMzhmLTRlZTktYWNlYi0yODMyMGE1YzA3N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvOTBmMzZl LWQzOGYtNGVlOS1hY2ViLTI4MzIwYTVjMDc3Yi8xLzl5UjFzR1RlaW9ueFVENnVf SDF5cmN6emloWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEBawwAwQDJZlIAwQFTpvgMA0EAgACMAcDBQAq AhNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqTzANBgkqhkiG9w0BAQsFAAOC AQEAr3/n+58olLCvHWY6cS1aXu38vsfK9cRfYSAoyX74SbTPtce85/XBLVqByu+o WgAxnYZ7yAGDUr9vgcK9Hi6SH+iB4VDqVw8hgOZnhzCiGOlc69gAZq6GYAD82wam 3TlsaEj/zC02a+UDDpzVw+UrzYVxUyuC+oG2tJOK52yg1IX+TSTn0fDunxqjWj0Y qgYhuRJK0cBH3GBOuUVCksf6+wQ7KNUmZ4Uv82Jp4PnmlinfDu17ZHXLsh1dGA+C UXL9KLMz8GKd/yItiGxDok8Ebh2p3IN9wGPhnmImmSL62FB9Si52A/WSLbUmuMIG 340AlSTEMLiypQd8tSoNIbG7yg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:26 2026 by rpki-client