This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer File: T9ZCEC691_ImjBTCfj678mtMr-s.cer (raw, json) Hash identifier: 055aMrLKQLn8+rl9KFmEbPGTRqmJQ1hVmW4ZqhFQTLs= Subject key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEA65DDB61B68BB5D34F96DE6C57AD521 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 10:28:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.143.220.0/22 IP: 77.247.108.0/22 IP: 117.18.118.0/24 IP: 117.55.202.0/23 IP: 185.53.88.0/22 IP: 212.237.231.0/24 IP: 2a07:e000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:65:dd:b6:1b:68:bb:5d:34:f9:6d:e6:c5:7a:d5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 10:28:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:5e:63:5a:de:e7:8b:e6:4c:6c:43:e5:08: 9f:5d:49:49:47:0b:c4:30:8d:56:4e:be:b9:c8:16: f5:bd:96:53:1b:c5:71:c6:4b:69:8d:2d:6b:12:19: 2f:c9:0d:25:4f:b9:1d:b4:bc:a1:e3:ae:d1:6a:41: e4:e6:37:ab:3d:57:ee:91:51:bb:c8:ad:8f:2a:9b: 0b:b8:22:02:8d:f4:d1:45:22:d4:9d:8b:8b:5d:c8: ce:18:2e:b2:20:86:75:65:11:04:5e:90:8e:1d:40: 07:29:b4:79:1d:49:9c:9c:dc:d4:eb:f9:8c:fd:af: 24:3d:e7:c2:cf:e2:4b:3e:2c:f9:4f:8e:66:e2:36: 7b:07:c8:f2:21:31:ff:fa:94:02:4d:0e:1a:55:22: 89:a9:b7:ab:e1:6e:26:40:e2:91:10:eb:34:cc:b7: 24:f3:14:1d:fe:9a:b0:07:e1:dd:c0:a9:7f:f1:0e: d0:79:ad:09:0d:33:60:ab:95:59:93:21:a1:b5:a6: ff:68:ef:fb:ac:00:b1:1e:8e:a8:60:79:17:87:83: 63:e7:77:f9:77:c1:a9:47:73:4b:d0:de:23:33:ba: d0:0f:45:db:fd:a6:eb:ef:9b:ff:ed:5b:ac:db:96: bf:5b:b3:97:e2:e5:95:52:ed:36:40:8a:b7:51:dc: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.220.0/22 77.247.108.0/22 117.18.118.0/24 117.55.202.0/23 185.53.88.0/22 212.237.231.0/24 IPv6: 2a07:e000::/29 Signature Algorithm: sha256WithRSAEncryption 02:c7:2a:ce:31:82:7b:66:30:68:52:e6:38:aa:6c:6c:f0:d0: 01:3f:0f:60:66:60:ff:68:a3:2f:44:d4:3a:f9:55:58:cc:b5: fa:8a:4f:22:6a:a9:97:ed:3c:44:00:02:b4:4b:ec:f5:62:cb: 89:83:38:cd:d8:0e:5f:b8:50:96:bc:ee:f9:47:2b:0e:69:6a: 13:68:21:06:bc:23:5e:8a:32:e5:a3:3a:5a:ed:eb:fa:80:b7: 66:84:ec:35:7a:f3:de:ca:14:73:40:5c:35:fd:1a:ad:2b:04: df:79:13:d1:b6:84:40:ef:e3:65:47:fa:29:24:d6:1d:a3:d4: 05:d1:1a:8a:0a:45:12:f5:0f:9e:29:f4:00:40:5e:45:70:94: 5a:7b:a5:97:73:5c:70:41:c9:44:c9:ec:45:22:c1:fd:3d:10: ea:c4:38:63:5b:12:30:d6:47:3e:50:8e:eb:56:86:5a:46:3a: fa:ed:93:b0:4c:e6:e4:6e:35:d0:b1:92:76:0c:85:33:e6:1e: ed:b5:71:24:5a:83:1c:a0:75:0e:44:50:e6:0c:82:52:5e:78: 3f:e7:1b:76:81:7b:51:71:7d:1d:69:b8:1a:1e:90:25:a6:96: 1c:5d:ba:ba:7a:cc:51:ca:ec:79:c6:2c:10:5d:fe:d1:39:5d: 93:29:7f:9b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZvqZd22G2i7XTT5bebFetUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTAyODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ2NDIxMDJlYmRkN2YyMjY4YzE0YzI3ZTNlYmJmMjZiNGNhZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxJeY1re54vmTGxD5QifXUlJRwvE MI1WTr65yBb1vZZTG8VxxktpjS1rEhkvyQ0lT7kdtLyh467RakHk5jerPVfukVG7 yK2PKpsLuCICjfTRRSLUnYuLXcjOGC6yIIZ1ZREEXpCOHUAHKbR5HUmcnNzU6/mM /a8kPefCz+JLPiz5T45m4jZ7B8jyITH/+pQCTQ4aVSKJqber4W4mQOKREOs0zLck 8xQd/pqwB+HdwKl/8Q7Qea0JDTNgq5VZkyGhtab/aO/7rACxHo6oYHkXh4Nj53f5 d8GpR3NL0N4jM7rQD0Xb/abr75v/7Vus25a/W7OX4uWVUu02QIq3UdyMhQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFE/WQhAuvdfyJowUwn4+u/JrTK/rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzBjM2Ix Zi1kYWI4LTQ3NjItOWQwNC1mOTQxY2MzOWE3MWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvMGMzYjFm LWRhYjgtNDc2Mi05ZDA0LWY5NDFjYzM5YTcxZS8xL1Q5WkNFQzY5MV9JbWpCVENm ajY3OG10TXItcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCLY/cAwQCTfdsAwQAdRJ2AwQBdTfKAwQCuTVY AwQA1O3nMA0EAgACMAcDBQMqB+AAMA0GCSqGSIb3DQEBCwUAA4IBAQACxyrOMYJ7 ZjBoUuY4qmxs8NABPw9gZmD/aKMvRNQ6+VVYzLX6ik8iaqmX7TxEAAK0S+z1YsuJ gzjN2A5fuFCWvO75RysOaWoTaCEGvCNeijLlozpa7ev6gLdmhOw1evPeyhRzQFw1 /RqtKwTfeRPRtoRA7+NlR/opJNYdo9QF0RqKCkUS9Q+eKfQAQF5FcJRae6WXc1xw QclEyexFIsH9PRDqxDhjWxIw1kc+UI7rVoZaRjr67ZOwTObkbjXQsZJ2DIUz5h7t tXEkWoMcoHUORFDmDIJSXng/5xt2gXtRcX0dabgaHpAlppYcXbq6esxRyux5xiwQ Xf7ROV2TKX+b -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:01 2026 by rpki-client