This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer File: Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer (raw, json) Hash identifier: G2z9gC0DZtM/V83aaeo9OsHktT0X+OkZbOafQkRB1Nk= Subject key identifier: 27:1F:6C:17:70:31:3C:09:8A:C3:FC:CA:40:9F:A0:A8:5F:7A:EC:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9D516B66CF4B14A5129C29AEFA888A81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 08 Jan 2026 11:15:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47863 IP: 93.191.0.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:51:6b:66:cf:4b:14:a5:12:9c:29:ae:fa:88:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 8 11:15:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=271f6c1770313c098ac3fcca409fa0a85f7aec1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:4c:32:a2:06:fb:48:ca:54:91:e9:58:45: e8:9e:7c:7e:81:4c:d1:53:9a:c0:1f:70:95:62:6c: a1:7b:8e:bd:b6:72:d1:20:6e:b0:da:c7:bf:4d:60: ea:be:c8:82:5f:4e:61:a7:f1:e5:54:17:10:07:10: 3c:47:9a:a6:f0:61:63:73:08:0a:53:e5:26:52:69: b4:0c:fd:ef:e0:ab:3d:56:59:61:57:8b:35:2c:a1: 2d:fc:c4:c7:5e:88:aa:89:0f:88:2a:1b:42:60:4d: c7:72:08:63:53:27:57:76:53:61:92:75:29:86:b8: d2:27:a9:42:c6:8c:ab:98:29:fc:80:42:b8:35:c3: 4c:e0:05:9f:24:a9:cf:6c:40:38:aa:e6:35:39:ba: 57:d4:59:ac:4e:b4:28:2f:67:f0:f2:a5:eb:3d:fe: 6a:86:ad:b3:a4:db:94:a7:1c:54:aa:8b:21:42:34: 97:0e:b7:dc:c4:14:01:6f:23:3c:a9:8d:02:88:a1: 9d:b4:14:a5:36:be:40:ee:a2:f7:75:ac:bf:ca:cb: 53:b2:7f:f7:cd:40:85:c4:f7:19:cd:e4:1d:b8:10: 56:22:40:64:5b:2a:a1:e5:fe:af:32:03:f6:fe:2f: 9d:5b:a9:ee:84:46:59:d6:ab:34:7e:1d:b9:30:5d: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:6C:17:70:31:3C:09:8A:C3:FC:CA:40:9F:A0:A8:5F:7A:EC:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.0.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47863 Signature Algorithm: sha256WithRSAEncryption 63:69:cc:3c:fa:7b:c6:34:73:bc:9c:5b:48:c8:56:5b:e8:a2: db:8e:15:77:d2:7a:25:10:3e:3e:08:b2:92:5c:b5:86:a4:81: b7:b5:5a:60:23:d8:f9:d7:ae:e4:05:16:7f:ab:48:47:c1:b4: 3d:6a:60:9e:47:2a:d4:ab:d5:87:92:53:df:6b:ac:d5:f9:65: 1f:fe:23:02:bc:80:c6:a3:2d:f3:89:8e:06:7a:d4:35:e6:1f: 71:4f:f2:2e:fb:77:4a:f0:6b:f6:74:f3:54:d5:7f:25:0c:b0: 6d:4c:55:ca:53:c6:84:5e:51:e1:65:a6:f1:ae:57:54:fa:26: 4f:cf:44:21:c6:bd:8c:c2:2c:1b:ff:88:f5:f0:dc:00:c1:3c: f9:58:c1:c8:46:1f:ac:12:6f:7a:22:07:d4:0c:41:b9:ed:ac: 45:52:d9:c2:69:44:13:d3:15:8d:c4:d8:07:d9:1d:ed:0b:2a: 32:a7:3c:7e:c0:8e:4f:e1:70:e9:8f:81:07:08:88:43:59:ae: 7e:fc:a7:ce:2f:7a:4b:fe:cb:cb:45:ff:f1:d6:a0:de:60:1b: bf:7b:23:87:fa:18:5d:ac:1a:85:da:dc:6f:78:f1:13:8f:e5: 9d:aa:3c:e2:7a:88:d4:4f:04:dc:d0:e3:9b:22:af:28:f3:63: 29:76:b7:f9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZudUWtmz0sUpRKcKa76iIqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA4MTExNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzFmNmMxNzcwMzEzYzA5OGFjM2ZjY2E0MDlmYTBhODVmN2FlYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF1MMqIG+0jKVJHpWEXonnx+gUzR U5rAH3CVYmyhe469tnLRIG6w2se/TWDqvsiCX05hp/HlVBcQBxA8R5qm8GFjcwgK U+UmUmm0DP3v4Ks9VllhV4s1LKEt/MTHXoiqiQ+IKhtCYE3HcghjUydXdlNhknUp hrjSJ6lCxoyrmCn8gEK4NcNM4AWfJKnPbEA4quY1ObpX1FmsTrQoL2fw8qXrPf5q hq2zpNuUpxxUqoshQjSXDrfcxBQBbyM8qY0CiKGdtBSlNr5A7qL3day/ystTsn/3 zUCFxPcZzeQduBBWIkBkWyqh5f6vMgP2/i+dW6nuhEZZ1qs0fh25MF0/zwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFCcfbBdwMTwJisP8ykCfoKhfeuwcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2MxMGI1 ZS02ZWVlLTQ5YTItYjQ0Ny0xZTZkZWQxMzhkMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvYzEwYjVl LTZlZWUtNDlhMi1iNDQ3LTFlNmRlZDEzOGQxOS8xL0p4OXNGM0F4UEFtS3dfektR Si1ncUY5NjdCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXb8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC69zANBgkqhkiG9w0BAQsFAAOCAQEAY2nMPPp7xjRzvJxbSMhWW+ii244Vd9J6 JRA+Pgiykly1hqSBt7VaYCPY+deu5AUWf6tIR8G0PWpgnkcq1KvVh5JT32us1fll H/4jAryAxqMt84mOBnrUNeYfcU/yLvt3SvBr9nTzVNV/JQywbUxVylPGhF5R4WWm 8a5XVPomT89EIca9jMIsG/+I9fDcAME8+VjByEYfrBJveiIH1AxBue2sRVLZwmlE E9MVjcTYB9kd7QsqMqc8fsCOT+Fw6Y+BBwiIQ1mufvynzi96S/7Ly0X/8dag3mAb v3sjh/oYXawahdrcb3jxE4/lnao84nqI1E8E3NDjmyKvKPNjKXa3+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:32 2026 by rpki-client