This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer File: J9VOSniNaWei7vOmaSYiYm9U760.cer (raw, json) Hash identifier: zMo6XQ45Ca6wX5dmqi3hCfq97hd/SSqceGw5Bm6BtAc= Subject key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12238B8AD0D7885E5FA609C8EFFD53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208871 IP: 185.156.24.0/22 IP: 2a07:9980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:23:8b:8a:d0:d7:88:5e:5f:a6:09:c8:ef:fd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27d54e4a788d6967a2eef3a6692622626f54efad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:a7:3d:59:e4:f9:b8:a1:4c:9a:e5:ed:cb: 70:89:4f:1a:4e:a5:c1:7b:14:b8:c9:8d:a6:ba:29: cd:75:e1:21:ff:aa:d2:83:46:8b:40:f6:dd:7d:7a: 61:04:63:76:64:58:43:fc:d9:8c:89:f2:54:8e:0b: 18:b3:93:5b:6b:c3:1a:17:b9:d2:c4:3c:57:23:9c: a1:16:fa:90:a7:83:37:e5:f9:34:57:08:c5:1b:cd: a9:18:b0:21:2f:92:3c:a4:de:3a:d7:d2:56:9f:04: e5:42:30:be:cf:2b:47:10:8f:bd:a8:ba:5e:64:cc: f7:28:d1:af:3f:55:d2:9b:b8:2a:d7:69:df:59:62: f1:0d:e9:28:ca:a8:f3:61:97:7b:4b:a2:ef:ab:7a: 08:b3:c4:19:84:1e:25:c9:be:2b:7e:34:8e:69:2c: 81:24:ec:c8:95:9c:58:6e:f2:e9:6a:62:4f:6d:57: 1c:76:a0:32:2d:fc:8b:49:03:22:48:55:65:8b:01: 2e:f1:1e:00:82:04:cd:7a:e2:2e:ec:ad:5a:3e:44: b7:9f:27:1a:78:e5:ca:f2:71:ec:20:1c:96:e4:e0: 58:0d:3c:94:ca:1f:f9:81:f4:ca:db:b1:d8:91:69: 99:41:d8:ee:da:fc:66:ef:91:53:eb:e2:e0:ff:ea: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.24.0/22 IPv6: 2a07:9980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208871 Signature Algorithm: sha256WithRSAEncryption 57:5f:cb:ad:2c:1e:a7:16:4d:6a:9a:c9:84:f9:2a:8b:c5:b4: 34:89:63:21:cd:77:93:c6:a3:40:38:70:a8:a9:9c:7e:77:52: 6e:e9:6f:59:2c:4b:c4:2e:dd:3c:59:52:fd:cf:2a:cd:3a:66: 7f:56:5f:72:d9:2d:96:75:96:f8:40:4e:78:ad:6d:d6:3b:92: ba:9d:76:6c:8f:0c:3a:2e:9c:f3:74:31:11:25:83:10:67:c8: 59:0c:bc:94:4a:c9:95:03:92:1d:5d:3f:65:56:e8:54:6d:8a: 65:d1:8c:c4:7a:a1:6d:d8:b1:e5:4e:07:60:1c:47:bd:6e:33: 66:42:73:ee:5c:bc:88:c3:72:9d:09:6e:43:85:21:54:83:88: df:7b:14:b4:57:db:78:ff:61:dc:eb:87:1a:44:99:62:cd:29: 48:97:05:af:3c:02:9d:72:4b:64:78:60:2c:2c:13:78:32:78: 76:76:67:03:57:74:13:f7:6f:d1:bf:6e:d7:34:34:1d:00:c2: c5:f1:bd:dc:bb:b4:39:0f:6c:fc:f7:ae:a0:cc:f4:9b:07:48: fd:4f:bd:ce:a3:04:3d:7d:37:36:d6:67:3b:31:48:44:6c:f1: ed:af:36:2b:bb:af:e4:6e:83:56:30:7f:8f:a0:c0:46:a8:03: 5c:d2:bb:16 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EiOLitDXiF5fpgnI7/1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Q1NGU0YTc4OGQ2OTY3YTJlZWYzYTY2OTI2MjI2MjZmNTRlZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoinPVnk+bihTJrl7ctwiU8aTqXB exS4yY2muinNdeEh/6rSg0aLQPbdfXphBGN2ZFhD/NmMifJUjgsYs5Nba8MaF7nS xDxXI5yhFvqQp4M35fk0VwjFG82pGLAhL5I8pN4619JWnwTlQjC+zytHEI+9qLpe ZMz3KNGvP1XSm7gq12nfWWLxDekoyqjzYZd7S6Lvq3oIs8QZhB4lyb4rfjSOaSyB JOzIlZxYbvLpamJPbVccdqAyLfyLSQMiSFVliwEu8R4AggTNeuIu7K1aPkS3nyca eOXK8nHsIByW5OBYDTyUyh/5gfTK27HYkWmZQdju2vxm75FT6+Lg/+r8QQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCfVTkp4jWlnou7zpmkmImJvVO+tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzgzMjE0 Ny0zMTBlLTRiYjUtOTlkYS1lOTlhOGRjMzAyNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvODMyMTQ3 LTMxMGUtNGJiNS05OWRhLWU5OWE4ZGMzMDI1NS8xL0o5Vk9TbmlOYVdlaTd2T21h U1lpWW05VTc2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZwYMA0EAgACMAcDBQMqB5mAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMv5zANBgkqhkiG9w0BAQsFAAOCAQEAV1/LrSwepxZN aprJhPkqi8W0NIljIc13k8ajQDhwqKmcfndSbulvWSxLxC7dPFlS/c8qzTpmf1Zf ctktlnWW+EBOeK1t1juSup12bI8MOi6c83QxESWDEGfIWQy8lErJlQOSHV0/ZVbo VG2KZdGMxHqhbdix5U4HYBxHvW4zZkJz7ly8iMNynQluQ4UhVIOI33sUtFfbeP9h 3OuHGkSZYs0pSJcFrzwCnXJLZHhgLCwTeDJ4dnZnA1d0E/dv0b9u1zQ0HQDCxfG9 3Lu0OQ9s/PeuoMz0mwdI/U+9zqMEPX03NtZnOzFIRGzx7a82K7uv5G6DVjB/j6DA RqgDXNK7Fg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:21 2026 by rpki-client