This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer (raw, json) Hash identifier: PYpFEu5pgoUEw/UhY0qx6vW7q1V2L9qdwYnEAJovcTI= Subject key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA0600ED6E6E071B36C105E385191E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8856 IP: 195.214.192.0/22 IP: 212.42.64.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:06:00:ed:6e:6e:07:1b:36:c1:05:e3:85:19:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:58:e2:c1:15:94:31:fe:b3:4c:5b:c9:1d: c3:40:0c:38:bd:83:7d:ac:29:bc:ae:29:32:c8:56: 83:57:af:79:40:1e:bb:02:d3:2e:e9:87:70:74:47: c4:0f:1b:1c:d2:87:3d:f0:a0:c4:f0:06:77:db:07: ef:2b:91:cf:6c:c8:ab:7b:0e:bd:0d:fe:94:af:15: 76:bd:ff:78:19:4e:cd:f0:bf:f6:f5:55:b7:09:e8: 72:ff:82:85:2e:fc:39:ee:96:e0:6d:6b:c2:6a:97: 76:ab:30:ea:8a:fb:a5:b7:cf:91:23:61:86:3a:e4: 77:24:6c:5e:d2:5e:75:92:f9:aa:fa:e6:cb:f9:10: bc:6a:3a:bd:10:5a:0f:9c:5b:88:63:77:fc:16:67: be:0c:04:2e:32:ce:d5:59:eb:f9:72:50:06:c3:44: 55:55:42:fb:8f:e4:87:57:c7:52:e4:3f:a8:c8:35: 06:00:22:e2:a7:86:4a:fd:2a:8e:53:3c:fb:b2:69: 83:e3:41:fd:02:29:85:41:0b:5f:e3:b0:cc:47:a0: ad:c4:32:51:89:7b:d0:70:dc:02:93:16:34:4e:c6: 6d:65:f8:70:18:7f:21:23:0b:77:24:7f:8a:a8:1c: 91:db:a7:eb:42:37:f5:a3:2a:08:f9:d1:e2:da:43: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.192.0/22 212.42.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8856 Signature Algorithm: sha256WithRSAEncryption a5:00:a2:d4:24:20:b7:d5:14:f0:dc:91:7e:8b:dc:ee:15:82: b6:0e:5e:0a:38:db:ab:bf:56:e1:f1:ad:ef:d7:46:a8:ec:3e: 82:8a:77:ca:51:66:79:cc:db:e0:27:31:8d:b0:73:32:c2:f9: b1:5e:36:b1:17:c1:e2:77:66:2d:65:b9:12:f2:52:0d:28:79: 03:85:72:16:3a:29:2c:7d:14:b6:3d:c1:93:af:f4:d1:1b:0d: bc:0f:96:1a:b0:a4:18:24:ed:ef:b4:e9:63:ee:c5:22:02:ae: 0d:d8:be:52:bf:a4:04:d3:b7:78:ba:95:ce:d3:23:d0:b4:36: 4c:50:2b:b0:6c:84:7e:a9:66:2d:29:76:81:da:dc:06:1f:97: c6:20:10:3a:eb:83:cf:de:fa:11:19:e8:42:44:05:ea:67:24: 6a:db:87:eb:84:6c:04:a7:a6:5f:9d:a0:63:55:a6:88:c4:71: 12:bb:5a:57:73:2c:ac:80:39:dc:78:d6:7d:22:44:c2:18:44: f8:1d:3f:04:d8:46:6c:5f:80:01:4d:62:bd:2f:11:02:48:29: 8d:a8:d9:fe:f6:2b:c3:95:1c:0f:00:e5:5c:74:99:5c:a3:0d: 4f:06:5d:96:39:62:cb:bc:28:72:79:ae:ab:3b:19:0a:b3:46: 62:52:13:9a -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt9ygYA7W5uBxs2wQXjhRkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2QwOGRmOGJjN2EzODNlOTc2ZGJiMDNkMmEwZWI5ZmUwZDc4NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfJY4sEVlDH+s0xbyR3DQAw4vYN9 rCm8rikyyFaDV695QB67AtMu6YdwdEfEDxsc0oc98KDE8AZ32wfvK5HPbMirew69 Df6UrxV2vf94GU7N8L/29VW3Cehy/4KFLvw57pbgbWvCapd2qzDqivult8+RI2GG OuR3JGxe0l51kvmq+ubL+RC8ajq9EFoPnFuIY3f8Fme+DAQuMs7VWev5clAGw0RV VUL7j+SHV8dS5D+oyDUGACLip4ZK/SqOUzz7smmD40H9AimFQQtf47DMR6CtxDJR iXvQcNwCkxY0TsZtZfhwGH8hIwt3JH+KqByR26frQjf1oyoI+dHi2kPE7wIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFAfQjfi8ejg+l227A9Kg65/g14bnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzAzMTgx OC0wNDYzLTRiYWItYmI1Ni01MTQ4NWZlMjIyZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvMDMxODE4 LTA0NjMtNGJhYi1iYjU2LTUxNDg1ZmUyMjJkYi8xL0I5Q04tTHg2T0Q2WGJic0Qw cURybi1EWGh1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCw9bAAwQF1CpAMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAiKYMA0GCSqGSIb3DQEBCwUAA4IBAQClAKLUJCC31RTw3JF+i9zuFYK2 Dl4KONurv1bh8a3v10ao7D6CinfKUWZ5zNvgJzGNsHMywvmxXjaxF8Hid2YtZbkS 8lINKHkDhXIWOiksfRS2PcGTr/TRGw28D5YasKQYJO3vtOlj7sUiAq4N2L5Sv6QE 07d4upXO0yPQtDZMUCuwbIR+qWYtKXaB2twGH5fGIBA664PP3voRGehCRAXqZyRq 24frhGwEp6ZfnaBjVaaIxHESu1pXcyysgDnceNZ9IkTCGET4HT8E2EZsX4ABTWK9 LxECSCmNqNn+9ivDlRwPAOVcdJlcow1PBl2WOWLLvChyea6rOxkKs0ZiUhOa -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:08 2026 by rpki-client