This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer (raw, json) Hash identifier: torlPrAv6WnFutHq0Rw5JzM+v+rO/tcugkwQ6fFjlDY= Subject key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36AB467F0869E3B2E2516269741931 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202966 IP: 45.137.228.0/22 IP: 2a0e:ac40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ab:46:7f:08:69:e3:b2:e2:51:62:69:74:19:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:39:63:1b:f8:aa:44:12:89:f6:dc:86:4d: ff:4f:d5:96:15:f1:35:c9:e8:7e:35:75:d8:71:6f: 4d:ba:2a:7f:7e:52:3d:2f:93:3b:24:d3:fb:bd:b0: 31:b4:28:28:5c:b3:64:e9:ea:c4:d4:bc:72:fb:60: d9:8c:e3:80:fb:53:98:3e:87:96:cb:58:36:ee:5d: fb:81:06:95:c0:1c:9d:c9:13:fc:ff:ef:52:95:66: 83:9c:b3:b6:dd:8a:1a:7a:f2:ab:c2:cf:76:cc:cf: 1c:81:bb:07:57:a2:5b:e3:75:67:0b:b3:04:f5:5d: c9:92:fd:e7:8a:dd:a6:69:3d:f8:5a:e0:dc:c9:51: 14:8c:db:83:87:05:f8:d3:c9:58:07:ca:2c:ef:d4: 55:1a:80:d2:5f:40:01:c5:8c:8f:84:31:b9:6f:5a: 2e:85:2e:76:9e:9a:85:0a:9d:70:60:ac:6f:07:c8: 1b:78:8f:19:a0:a8:86:d4:10:c9:78:07:02:4b:d0: 4d:78:34:0b:dc:34:15:55:d6:20:93:58:cd:96:f8: c4:f4:ca:a2:73:0d:ae:a2:29:26:d9:20:ae:3c:f2: cd:b7:ba:a8:0e:24:4f:86:bf:87:43:d1:74:18:3e: 5c:eb:7a:f4:61:c2:7d:9b:d8:f3:b4:87:13:a2:ca: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.228.0/22 IPv6: 2a0e:ac40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202966 Signature Algorithm: sha256WithRSAEncryption 78:95:2c:d5:f9:ff:00:09:3b:19:59:43:27:2f:67:ab:b2:23: bb:07:6f:66:d0:18:f1:8a:f1:c7:88:6d:23:5a:46:bf:24:ad: 49:a7:1f:00:2b:3e:9d:52:4d:91:b3:62:a0:e3:98:6a:b6:ed: 1f:f3:67:53:be:b0:44:17:60:8d:e1:12:91:2d:57:6c:1c:b0: b1:97:a3:f2:d4:ac:c6:63:ba:7c:fa:29:53:e0:84:e4:42:cb: 7d:4d:ab:cb:0b:59:27:cb:a1:b2:38:ed:95:fd:dc:0d:7f:66: 70:61:2b:52:35:f3:59:56:45:36:25:6a:17:26:2b:d7:8e:44: 40:9d:f2:4a:11:95:b4:72:89:f1:d0:bf:c9:02:d8:82:47:8d: f9:77:8c:4a:af:87:ea:36:c6:fc:43:3e:7c:dc:78:43:45:52: 48:6a:eb:a3:e5:8b:a1:26:97:55:6d:b2:36:45:99:f4:2f:e6: 11:16:bc:bd:31:b8:87:fc:34:b9:db:33:de:52:ca:8d:b0:19: 4b:20:6f:3a:cc:99:e2:f0:fd:e2:55:e2:d1:6b:4b:df:13:75: e7:7e:bf:f5:11:60:9a:13:e6:fa:cd:b5:cb:29:6c:fa:4f:58: 0a:72:31:03:2b:e7:37:03:d8:d8:e9:1e:3e:2b:dc:e2:b7:40: 99:f5:c8:fd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NqtGfwhp47LiUWJpdBkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2RjZDZmMTcxMjZkNGU5NTFkOTJiYzVmNGMwNmJhOTQ1MGZjOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB45Yxv4qkQSifbchk3/T9WWFfE1 yeh+NXXYcW9Nuip/flI9L5M7JNP7vbAxtCgoXLNk6erE1Lxy+2DZjOOA+1OYPoeW y1g27l37gQaVwBydyRP8/+9SlWaDnLO23YoaevKrws92zM8cgbsHV6Jb43VnC7ME 9V3Jkv3nit2maT34WuDcyVEUjNuDhwX408lYB8os79RVGoDSX0ABxYyPhDG5b1ou hS52npqFCp1wYKxvB8gbeI8ZoKiG1BDJeAcCS9BNeDQL3DQVVdYgk1jNlvjE9Mqi cw2uoikm2SCuPPLNt7qoDiRPhr+HQ9F0GD5c63r0YcJ9m9jztIcTosqJ5QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCPc1vFxJtTpUdkrxfTAa6lFD8jUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2ZkYTA1 OS0zNDM2LTQxNTgtYTFlNC00OWRhMDU5NzhhZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvZmRhMDU5 LTM0MzYtNDE1OC1hMWU0LTQ5ZGEwNTk3OGFkMC8xL0k5elc4WEVtMU9sUjJTdkY5 TUJycVVVUHlOUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYnkMA0EAgACMAcDBQMqDqxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMY1jANBgkqhkiG9w0BAQsFAAOCAQEAeJUs1fn/AAk7 GVlDJy9nq7IjuwdvZtAY8Yrxx4htI1pGvyStSacfACs+nVJNkbNioOOYarbtH/Nn U76wRBdgjeESkS1XbBywsZej8tSsxmO6fPopU+CE5ELLfU2rywtZJ8uhsjjtlf3c DX9mcGErUjXzWVZFNiVqFyYr145EQJ3yShGVtHKJ8dC/yQLYgkeN+XeMSq+H6jbG /EM+fNx4Q0VSSGrro+WLoSaXVW2yNkWZ9C/mERa8vTG4h/w0udsz3lLKjbAZSyBv OsyZ4vD94lXi0WtL3xN1536/9RFgmhPm+s21yyls+k9YCnIxAyvnNwPY2OkePivc 4rdAmfXI/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:02 2026 by rpki-client