This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer File: X9-gmGf3f6_At75-PE3iDirEN3A.cer (raw, json) Hash identifier: 2f72pYbEuNZrVPbhLC+Ge2DSnWrIAxCEiauJKPfDwFI= Subject key identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A232F37AE50CF7201F552D0FC59CF8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200329 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:32:f3:7a:e5:0c:f7:20:1f:55:2d:0f:c5:9c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:3f:6b:4a:63:6c:9f:0d:79:6e:00:9e:f3: 6b:85:e0:6d:37:2d:b0:b0:17:95:72:75:de:6e:db: fc:06:29:23:74:fb:2b:a9:1a:3c:20:f4:44:1e:34: f5:9e:04:b1:51:a4:0a:ec:f9:38:c5:92:ca:d0:0a: c0:77:7a:8f:88:a2:a7:f5:53:55:5f:2a:1b:74:39: 0b:c9:64:24:3e:f0:28:de:bd:dc:e7:84:1f:65:4a: a5:ac:72:79:78:cd:ae:ff:6a:9e:eb:68:cd:83:e3: 3d:36:90:51:a0:87:24:13:3b:f5:cc:14:7a:43:3c: b6:79:c4:a2:fc:df:eb:61:3f:ad:aa:24:0f:e6:f3: f0:77:ed:45:17:fc:2f:1f:01:ce:4b:29:6f:d0:fe: 01:94:51:c1:4b:53:3c:d9:00:6f:be:dd:46:13:4d: e5:ad:b5:90:d2:98:a8:f9:e1:34:f7:8a:22:0d:bf: d7:df:8b:26:31:5c:6e:20:c3:79:a3:90:49:13:c4: 5c:b3:f1:b9:0a:19:e4:54:59:ce:92:e6:7b:1f:cd: 4c:9f:e6:3d:a1:ec:6f:1a:7a:85:56:1f:4a:26:f1: 5f:88:69:cc:76:2b:8a:64:cf:be:45:0c:3d:a1:c3: 2b:ff:09:b0:15:78:b4:46:85:73:89:a3:87:c7:97: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200329 Signature Algorithm: sha256WithRSAEncryption 79:09:de:16:0f:6d:14:59:65:3b:0c:f8:30:aa:fb:db:fb:22: 54:4e:64:62:c5:98:1b:41:be:04:19:63:27:aa:42:3e:24:75: fd:1f:fd:22:62:03:3e:72:cf:77:1e:d1:6b:d3:8e:4e:83:41: 9f:2f:73:6e:6e:d1:d9:a1:ca:2b:2f:7a:e0:a4:a0:50:76:22: e7:66:5a:63:f6:df:82:a1:a0:42:f7:4c:20:56:cf:42:25:1b: 28:9c:a2:64:7e:7a:67:de:5e:63:b7:4a:6e:80:e5:03:cd:0b: f0:72:9e:ae:d1:23:fd:48:f8:3d:ad:28:b0:d2:1f:dc:cd:1a: 01:c5:09:9e:18:d0:91:a7:1c:f4:6c:43:e6:3a:48:c4:83:fa: b1:41:fa:86:de:2a:6e:fb:df:50:cc:5f:11:70:18:09:6e:f2: 7d:2e:39:e1:81:d7:c0:31:8d:32:46:eb:ad:35:b7:a3:f9:90: 44:d1:17:f9:00:74:50:ef:85:93:99:ba:42:04:93:78:53:ed: db:22:f4:12:6d:75:c0:60:80:84:51:93:e4:eb:48:47:09:db: b6:78:ed:20:93:f7:20:a8:1b:c2:0c:1f:e0:d8:f5:03:b7:5e: d8:3a:26:e7:6c:00:6b:24:9a:33:09:a1:0f:37:76:f5:c0:c5: 9a:ec:ac:b2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4ojLzeuUM9yAfVS0PxZz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmRmYTA5ODY3Zjc3ZmFmYzBiN2JlN2UzYzRkZTIwZTJhYzQzNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWM/a0pjbJ8NeW4AnvNrheBtNy2w sBeVcnXebtv8BikjdPsrqRo8IPREHjT1ngSxUaQK7Pk4xZLK0ArAd3qPiKKn9VNV XyobdDkLyWQkPvAo3r3c54QfZUqlrHJ5eM2u/2qe62jNg+M9NpBRoIckEzv1zBR6 Qzy2ecSi/N/rYT+tqiQP5vPwd+1FF/wvHwHOSylv0P4BlFHBS1M82QBvvt1GE03l rbWQ0pio+eE094oiDb/X34smMVxuIMN5o5BJE8Rcs/G5ChnkVFnOkuZ7H81Mn+Y9 oexvGnqFVh9KJvFfiGnMdiuKZM++RQw9ocMr/wmwFXi0RoVziaOHx5eZYwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFF/foJhn93+vwLe+fjxN4g4qxDdwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzBlMzYz Yi1hZTc5LTRiMGYtOTRlMS0wMzYxMTkzNDhiZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvMGUzNjNi LWFlNzktNGIwZi05NGUxLTAzNjExOTM0OGJmMS8xL1g5LWdtR2YzZjZfQXQ3NS1Q RTNpRGlyRU4zQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMOiTANBgkqhkiG9w0BAQsFAAOCAQEAeQneFg9tFFll Owz4MKr72/siVE5kYsWYG0G+BBljJ6pCPiR1/R/9ImIDPnLPdx7Ra9OOToNBny9z bm7R2aHKKy964KSgUHYi52ZaY/bfgqGgQvdMIFbPQiUbKJyiZH56Z95eY7dKboDl A80L8HKertEj/Uj4Pa0osNIf3M0aAcUJnhjQkacc9GxD5jpIxIP6sUH6ht4qbvvf UMxfEXAYCW7yfS454YHXwDGNMkbrrTW3o/mQRNEX+QB0UO+Fk5m6QgSTeFPt2yL0 Em11wGCAhFGT5OtIRwnbtnjtIJP3IKgbwgwf4Nj1A7de2Dom52wAaySaMwmhDzd2 9cDFmuyssg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:55 2026 by rpki-client