This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer File: J9TWlrrbEJTKoV176Gw5pxLg7hI.cer (raw, json) Hash identifier: PuIHAuM868nFBA0A8/2IxavLUwH2DJ1iiWVZ8j/kuoo= Subject key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C111C0F067A41683DF4D4398553E6C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.160.116.0/23 IP: 193.161.207.0/24 IP: 193.161.224.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1c:0f:06:7a:41:68:3d:f4:d4:39:85:53:e6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27d4d696badb1094caa15d7be86c39a712e0ee12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:e2:79:3c:ab:7b:85:d4:df:01:b1:1e:78: 3c:65:6f:5e:18:41:8f:37:bc:9f:29:bf:32:ec:53: 4a:e0:a7:a8:99:98:a4:13:a0:99:a8:2c:48:42:48: 0e:c5:09:a5:c2:4f:27:c8:27:a4:ef:bf:a2:53:c1: ff:ef:29:e0:5b:36:4c:dd:18:51:84:81:df:3c:9a: 4a:f1:d4:e9:17:dc:46:a6:43:03:1c:1c:a2:04:51: 09:0a:e3:9a:19:30:43:5e:69:7a:0f:78:46:4a:3c: 2c:2f:b1:ef:b9:f1:f2:5c:ec:d6:8d:97:1c:cb:aa: 30:56:25:b3:4a:84:c8:ee:3d:41:9e:1a:2a:05:fe: 39:5a:a6:36:c3:42:05:72:85:01:b8:b4:39:87:83: 93:a8:f4:cc:53:47:70:69:f1:df:8e:7e:30:1b:e4: 17:fb:3b:b5:06:91:d6:b6:c4:d2:99:4d:34:cf:74: a7:0c:59:b9:cc:60:30:84:fe:aa:59:dc:48:76:13: 78:4b:4c:78:b5:93:ed:b9:a9:0a:87:e8:24:24:77: ba:00:c0:f0:72:63:c8:0d:6d:a7:0a:11:b1:b1:3a: 6f:5a:95:2d:54:86:f1:e3:52:f6:97:42:de:1e:b7: 21:29:81:3e:47:0f:bc:29:3e:25:59:91:86:34:55: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.116.0/23 193.161.207.0/24 193.161.224.0/21 Signature Algorithm: sha256WithRSAEncryption 90:9c:fe:65:09:aa:95:fb:12:aa:17:9b:da:5c:7a:12:1c:a5: 44:f3:b7:64:a3:6f:70:c2:ab:19:8d:ac:9f:49:2c:30:f3:1c: b0:80:ba:ed:05:6b:ac:b1:0b:63:e8:8f:cd:4c:f1:d5:94:74: 65:f1:a2:b4:13:3e:8b:ca:ac:e3:80:fa:46:4b:29:b2:c2:d8: 33:c3:ef:3b:7e:0a:19:53:6f:4f:d2:e4:a3:91:b5:30:48:49: b9:da:d4:b0:74:4c:e3:df:a0:0f:48:e4:ce:56:7e:b0:53:22: 1f:f3:be:78:74:36:47:bd:9e:3a:81:7d:66:56:2c:1e:23:97: ba:d4:e3:7e:9f:5e:dc:b8:44:d6:ed:22:fc:b0:3f:3d:12:6c: 3b:ad:b6:6f:a3:82:c3:8b:d9:c4:a7:a2:65:d9:db:1a:41:78: 47:2a:34:f7:5e:ee:1b:8b:43:8a:91:99:d5:37:93:b8:98:eb: fc:28:53:b2:ff:20:0b:16:b5:19:26:9e:2a:a7:72:8f:7d:c0: 48:58:11:2c:08:f1:56:2f:83:76:c5:d8:a9:52:8f:96:6e:74: a8:f1:78:64:38:c7:16:76:8b:04:a1:23:1f:43:ba:25:36:54: 99:f5:3b:96:b0:4c:3d:71:b3:8a:dd:8f:c2:6d:53:ca:76:ff: 61:de:4b:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt8ERwPBnpBaD301DmFU+bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Q0ZDY5NmJhZGIxMDk0Y2FhMTVkN2JlODZjMzlhNzEyZTBlZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15fieTyre4XU3wGxHng8ZW9eGEGP N7yfKb8y7FNK4KeomZikE6CZqCxIQkgOxQmlwk8nyCek77+iU8H/7yngWzZM3RhR hIHfPJpK8dTpF9xGpkMDHByiBFEJCuOaGTBDXml6D3hGSjwsL7HvufHyXOzWjZcc y6owViWzSoTI7j1BnhoqBf45WqY2w0IFcoUBuLQ5h4OTqPTMU0dwafHfjn4wG+QX +zu1BpHWtsTSmU00z3SnDFm5zGAwhP6qWdxIdhN4S0x4tZPtuakKh+gkJHe6AMDw cmPIDW2nChGxsTpvWpUtVIbx41L2l0LeHrchKYE+Rw+8KT4lWZGGNFVKNwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFCfU1pa62xCUyqFde+hsOacS4O4SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5L2QwY2Vk OC1mMWI1LTRjZjUtYjQ0ZC1lOGE0ZWNlOTNhMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvZDBjZWQ4 LWYxYjUtNGNmNS1iNDRkLWU4YTRlY2U5M2EzNS8xL0o5VFdscnJiRUpUS29WMTc2 R3c1cHhMZzdoSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBwaB0AwQAwaHPAwQDwaHgMA0GCSqGSIb3DQEB CwUAA4IBAQCQnP5lCaqV+xKqF5vaXHoSHKVE87dko29wwqsZjayfSSww8xywgLrt BWussQtj6I/NTPHVlHRl8aK0Ez6LyqzjgPpGSymywtgzw+87fgoZU29P0uSjkbUw SEm52tSwdEzj36APSOTOVn6wUyIf8754dDZHvZ46gX1mViweI5e61ON+n17cuETW 7SL8sD89Emw7rbZvo4LDi9nEp6Jl2dsaQXhHKjT3Xu4bi0OKkZnVN5O4mOv8KFOy /yALFrUZJp4qp3KPfcBIWBEsCPFWL4N2xdipUo+WbnSo8XhkOMcWdosEoSMfQ7ol NlSZ9TuWsEw9cbOK3Y/CbVPKdv9h3ksv -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:50 2026 by rpki-client