This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer File: B9oznlzTwb4CzmgCoEIYVqoLVHs.cer (raw, json) Hash identifier: R8uSUknE3pKAG6yNroLCHa2RN9fpM4dHUKf0WO8iIsY= Subject key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36C87443EE5722F670972F1F15FEC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.1.160.0/21 IP: 37.252.104.0/21 IP: 185.19.36.0/22 IP: 2a00:4320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c8:74:43:ee:57:22:f6:70:97:2f:1f:15:fe:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:e8:0c:ca:ac:b5:70:0a:66:b6:fa:28:1c: 5f:6b:39:98:c6:f4:17:d1:fd:c3:4c:a4:8f:e4:a0: 2f:d2:e9:e6:9d:15:e7:31:bf:28:29:5a:28:d3:4f: 83:53:1c:70:c2:5c:1d:7a:1b:4b:53:2b:ea:36:b7: 33:93:31:86:77:c9:93:94:ad:cb:f1:ae:a1:4e:e0: ec:f8:bc:35:16:9b:df:7a:26:00:0c:53:84:3c:13: e5:ea:c7:66:84:49:84:21:a7:ee:dd:28:79:f2:ef: b8:0b:d6:d5:11:e0:0b:f8:42:11:6a:82:9f:22:ab: 64:1e:23:fa:7f:cb:20:fd:39:89:dd:38:f0:c3:4f: f6:64:af:bc:7e:53:93:16:69:b7:da:35:3d:bf:59: d9:f0:c8:2f:a7:10:4f:ce:6a:44:c2:96:d1:c2:6d: 00:79:6c:41:44:36:76:c6:01:0a:2f:d5:da:a6:52: 1c:39:67:95:73:7a:27:b2:53:69:4a:1e:27:cb:c9: f7:af:14:fa:82:a6:9f:80:42:1b:6c:55:c0:43:f9: 09:6c:ce:40:94:60:55:19:df:27:e3:44:b2:2e:6d: 65:16:fe:d1:26:ec:67:89:62:56:1e:88:32:01:55: 3e:e8:62:dc:02:04:c0:38:76:2f:3a:6b:d0:31:ff: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.160.0/21 37.252.104.0/21 185.19.36.0/22 IPv6: 2a00:4320::/32 Signature Algorithm: sha256WithRSAEncryption ab:75:0c:bd:fd:ff:0f:ff:d0:55:ea:19:ed:5f:22:43:cd:1b: c2:cb:02:ad:c1:b0:5d:f2:eb:a9:89:39:52:36:03:27:13:f6: 58:4b:66:16:5b:19:79:b0:7e:c1:17:66:ba:12:f4:f9:9c:47: 96:b9:85:87:ab:6b:ad:24:36:57:92:2d:14:38:f5:30:b8:23: d7:85:48:49:f2:91:57:ef:b8:8d:a7:52:50:c9:aa:e9:94:2a: c6:a1:a0:ab:f2:65:40:f7:f6:8d:50:42:63:c8:77:66:6c:d9: 52:75:4d:68:54:cc:03:94:fc:f5:f5:07:ed:e5:a4:2a:1a:44: 2c:ac:8d:18:df:ad:98:94:2b:a2:84:f3:13:4d:5f:ce:e1:3d: 22:78:36:2e:75:96:9c:09:38:5d:fd:30:48:3b:0f:51:26:fd: 45:4b:34:91:ee:eb:32:6d:2d:e6:86:8b:e1:f9:0c:d3:6c:81: c4:90:3c:69:0e:e1:80:71:b8:a5:52:3b:64:d7:8b:17:58:0f: 64:61:2d:d0:a2:08:d1:26:8f:ed:af:a2:4e:9f:eb:11:c9:82: ad:30:84:07:ed:28:48:b4:96:e9:b9:e3:b7:b6:91:d2:db:3e: 6e:c2:79:08:94:04:b7:33:84:6c:6d:d4:46:80:3c:8e:b0:8b: cc:9d:8b:08 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7Nsh0Q+5XIvZwly8fFf7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2RhMzM5ZTVjZDNjMWJlMDJjZTY4MDJhMDQyMTg1NmFhMGI1NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbDoDMqstXAKZrb6KBxfazmYxvQX 0f3DTKSP5KAv0unmnRXnMb8oKVoo00+DUxxwwlwdehtLUyvqNrczkzGGd8mTlK3L 8a6hTuDs+Lw1FpvfeiYADFOEPBPl6sdmhEmEIafu3Sh58u+4C9bVEeAL+EIRaoKf IqtkHiP6f8sg/TmJ3Tjww0/2ZK+8flOTFmm32jU9v1nZ8MgvpxBPzmpEwpbRwm0A eWxBRDZ2xgEKL9XaplIcOWeVc3onslNpSh4ny8n3rxT6gqafgEIbbFXAQ/kJbM5A lGBVGd8n40SyLm1lFv7RJuxniWJWHogyAVU+6GLcAgTAOHYvOmvQMf+kBwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFAfaM55c08G+As5oAqBCGFaqC1R7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2M2MmUw Yy00NDU0LTQzYzgtOTdiYy04MTY3NGQ5NTNkNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvYzYyZTBj LTQ0NTQtNDNjOC05N2JjLTgxNjc0ZDk1M2Q1Ni8xL0I5b3pubHpUd2I0Q3ptZ0Nv RUlZVnFvTFZIcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJQGgAwQDJfxoAwQCuRMkMA0EAgACMAcDBQAq AEMgMA0GCSqGSIb3DQEBCwUAA4IBAQCrdQy9/f8P/9BV6hntXyJDzRvCywKtwbBd 8uupiTlSNgMnE/ZYS2YWWxl5sH7BF2a6EvT5nEeWuYWHq2utJDZXki0UOPUwuCPX hUhJ8pFX77iNp1JQyarplCrGoaCr8mVA9/aNUEJjyHdmbNlSdU1oVMwDlPz19Qft 5aQqGkQsrI0Y362YlCuihPMTTV/O4T0ieDYudZacCThd/TBIOw9RJv1FSzSR7usy bS3mhovh+QzTbIHEkDxpDuGAcbilUjtk14sXWA9kYS3QogjRJo/tr6JOn+sRyYKt MIQH7ShItJbpueO3tpHS2z5uwnkIlAS3M4RsbdRGgDyOsIvMnYsI -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:30 2026 by rpki-client