This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer File: ET9u8WzirCilmQYD0folvUl1lN0.cer (raw, json) Hash identifier: F+SQ8sCVQ9HXzK6AYQRpjf7qCTGMkAqoicFuKmxsu/s= Subject key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA546D2D0DE54A3B6589011F7F55F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.226.232.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:54:6d:2d:0d:e5:4a:3b:65:89:01:1f:7f:55:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:29:6e:55:ff:d6:b7:3c:c5:5f:fc:e3:de: f5:ff:6f:11:51:ec:6b:70:18:42:54:50:78:67:25: 51:37:66:47:b8:ca:e5:ad:0b:9a:78:cf:42:17:60: 75:2e:bb:97:84:14:c4:5a:d1:08:82:fa:c3:1e:50: 02:6a:49:3f:d5:a3:33:c6:2f:7a:79:58:e0:07:72: f7:d6:6d:cd:c4:d6:bb:2b:03:87:8c:ef:11:f4:fc: eb:97:64:0e:cf:78:d2:e2:7f:99:4a:89:35:0a:04: d7:a8:05:6a:38:89:9b:33:39:c2:dd:e7:a5:95:c9: 8c:53:c5:c1:a3:30:68:5e:06:2d:10:6c:e4:0c:3f: bb:ac:41:56:b8:85:25:03:5d:37:40:d8:dd:34:a3: a4:93:7f:6a:7c:7d:43:7b:0e:d9:d1:f1:a4:85:02: ff:31:74:4f:45:03:16:92:b5:aa:29:ad:54:bb:1e: 09:8f:ce:cc:1c:ff:5d:b1:9c:a6:8d:05:ae:4c:4f: 12:f8:2a:99:a0:d1:73:1f:95:03:c8:63:c5:6b:2e: fa:4a:3c:73:35:36:91:d2:71:10:c2:98:28:77:2d: 15:03:e9:54:1d:46:81:aa:99:8e:f2:63:38:aa:07: 39:9c:82:e2:5e:eb:d7:5d:d3:50:1e:6c:a0:cd:4a: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:9a:3b:68:6f:cb:30:8d:f3:ff:72:b4:ca:bb:8e:71:95:9a: 03:51:3d:da:fb:54:92:d7:7b:4a:af:db:55:b0:5b:49:b4:76: 5b:7a:3a:7f:b4:f0:2b:98:d8:9e:30:45:12:86:2c:63:05:9e: 9e:61:ee:cf:ea:ec:9f:13:d0:3e:d7:98:ee:f5:0f:1b:31:4f: 95:32:4a:bc:8c:9b:ec:ca:56:75:a0:b8:44:38:28:ba:50:58: d0:ed:0d:3c:6b:4e:1f:90:06:08:ff:ef:10:05:d5:39:e7:00: b7:d1:8b:04:d0:8c:9d:6a:ea:e0:03:d7:0e:ec:46:2a:83:13: 8d:46:d1:6e:29:35:37:b9:07:d5:9b:17:e8:57:dd:f3:80:42: c4:53:18:d2:9b:8e:f8:6b:82:96:0b:ce:46:f1:0a:3d:aa:f1: 85:9b:60:d6:96:13:29:06:e1:7f:1d:39:b6:ee:2d:8b:5b:df: be:ad:3b:b4:77:c0:4b:89:aa:ce:ac:b1:d8:d8:af:ea:05:82: 85:a4:8d:99:d3:8e:c4:99:f7:78:78:43:3c:12:a8:46:2d:be: 6b:29:6a:05:49:32:e1:2a:66:8b:58:78:d3:3e:c6:f3:d0:d9: 16:55:d5:5a:9b:9a:1c:d3:05:16:52:74:2d:39:a4:90:01:e0: e4:cd:42:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ylRtLQ3lSjtliQEff1X3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTNmNmVmMTZjZTJhYzI4YTU5OTA2MDNkMWZhMjViZDQ5NzU5NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZUpblX/1rc8xV/84971/28RUexr cBhCVFB4ZyVRN2ZHuMrlrQuaeM9CF2B1LruXhBTEWtEIgvrDHlACakk/1aMzxi96 eVjgB3L31m3NxNa7KwOHjO8R9Pzrl2QOz3jS4n+ZSok1CgTXqAVqOImbMznC3eel lcmMU8XBozBoXgYtEGzkDD+7rEFWuIUlA103QNjdNKOkk39qfH1Dew7Z0fGkhQL/ MXRPRQMWkrWqKa1Uux4Jj87MHP9dsZymjQWuTE8S+CqZoNFzH5UDyGPFay76Sjxz NTaR0nEQwpgody0VA+lUHUaBqpmO8mM4qgc5nILiXuvXXdNQHmygzUpEnQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBE/bvFs4qwopZkGA9H6Jb1JdZTdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzNiNTg3 Ny1hYTY1LTQ5ZmMtODU5ZC05MDVkYmFiOGJkNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvM2I1ODc3 LWFhNjUtNDlmYy04NTlkLTkwNWRiYWI4YmQ1Ny8xL0VUOXU4V3ppckNpbG1RWUQw Zm9sdlVsMWxOMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCjeLoMA0GCSqGSIb3DQEBCwUAA4IBAQBNmjto b8swjfP/crTKu45xlZoDUT3a+1SS13tKr9tVsFtJtHZbejp/tPArmNieMEUShixj BZ6eYe7P6uyfE9A+15ju9Q8bMU+VMkq8jJvsylZ1oLhEOCi6UFjQ7Q08a04fkAYI /+8QBdU55wC30YsE0IydaurgA9cO7EYqgxONRtFuKTU3uQfVmxfoV93zgELEUxjS m474a4KWC85G8Qo9qvGFm2DWlhMpBuF/HTm27i2LW9++rTu0d8BLiarOrLHY2K/q BYKFpI2Z047Emfd4eEM8EqhGLb5rKWoFSTLhKmaLWHjTPsbz0NkWVdVam5oc0wUW UnQtOaSQAeDkzUIE -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:51 2026 by rpki-client