This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer File: e9g2worwknoDVYYlrt9v14ekkFw.cer (raw, json) Hash identifier: M+6snUPX56hmPNpQ3l5aLECodM+kiTIBVjTLv6TEOlM= Subject key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A28BA09C6913B60278411FE32D0C2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8b:a0:9c:69:13:b6:02:78:41:1f:e3:2d:0c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd836c28af0927a03558625aedf6fd787a4905c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:94:10:5d:da:e4:71:2c:4d:5e:49:d4:ba: fd:a9:5f:bc:c8:ea:11:2b:e1:68:1c:7e:02:06:63: 33:dd:74:90:ba:9b:c3:93:77:a8:32:da:65:ba:bd: ce:f7:a9:e1:63:ea:3d:75:89:3b:bf:bc:40:13:bd: b2:48:2b:da:4e:11:4c:18:e1:2f:a1:3d:4a:80:b1: 54:a4:60:dd:67:e1:cd:ea:9a:fd:f2:8d:a2:59:dd: db:57:8a:a3:8e:d3:6f:71:6a:93:45:e0:27:63:62: 46:97:c6:4d:d2:68:b9:8d:3f:02:d4:86:87:b2:ae: 08:a2:f5:28:6e:1b:9b:ef:09:9e:67:29:4c:47:c7: 21:65:6b:a0:e8:bc:78:8d:36:f4:5c:45:2c:91:50: e7:58:25:2a:63:95:dc:2c:ba:96:98:fd:e9:52:aa: c5:8e:91:84:a6:cb:26:6e:ed:11:09:ac:aa:c5:ae: c7:38:4f:2e:05:29:10:11:6c:13:c3:71:bb:9c:0b: 65:31:ca:98:06:a0:8a:11:fb:ea:52:aa:5d:cb:9a: a1:24:83:ad:77:51:3e:9f:9c:c2:7f:20:1f:19:12: 33:a3:fa:18:fc:db:56:9e:f3:ca:e8:26:36:d7:06: 56:22:3d:1f:72:ef:05:f2:9d:88:0c:9f:1b:37:40: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 41255 Signature Algorithm: sha256WithRSAEncryption 60:a3:34:7f:86:41:42:7a:2b:a0:27:b1:68:3b:ca:ba:80:30: 3d:95:b2:c0:32:d3:96:f1:c7:29:1d:8d:25:1a:26:f9:fa:56: f0:69:22:a7:3a:38:89:1b:0d:f9:54:9f:0c:fe:1d:90:a6:38: 7b:f2:6b:39:ed:be:1f:2e:fd:b8:49:b9:f3:18:00:25:c8:84: db:6e:cd:dd:43:89:35:20:af:f4:dc:76:ed:ad:ad:46:b5:2b: 6f:80:69:e3:dc:46:2a:07:f3:5b:f3:23:b1:02:aa:36:37:ed: 1c:47:cd:43:62:04:81:82:6d:d2:1d:37:f8:13:1e:67:50:27: a0:a6:91:51:7d:13:f9:a0:6f:81:cc:65:8c:1f:81:a7:98:29: 0b:8e:c8:7a:d1:f7:ef:58:42:93:0e:d6:f3:f6:72:de:89:d1: 27:22:e0:79:ec:81:eb:21:3b:d1:ba:c7:4d:a6:b2:93:56:77: 1f:18:4b:d3:3d:c3:53:3c:9a:1d:d1:a4:be:6b:14:a4:43:84: e7:61:88:6a:04:7d:69:22:50:6f:f3:7b:52:80:d4:6a:c1:39: 7f:a6:5b:23:b7:b5:32:46:67:b0:65:87:61:1b:ce:47:ff:62: 4b:b9:8b:7a:fa:93:b9:cf:2f:af:61:e9:36:47:a4:13:47:5e: d2:b5:26:a2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4oougnGkTtgJ4QR/jLQwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ4MzZjMjhhZjA5MjdhMDM1NTg2MjVhZWRmNmZkNzg3YTQ5MDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeSUEF3a5HEsTV5J1Lr9qV+8yOoR K+FoHH4CBmMz3XSQupvDk3eoMtplur3O96nhY+o9dYk7v7xAE72ySCvaThFMGOEv oT1KgLFUpGDdZ+HN6pr98o2iWd3bV4qjjtNvcWqTReAnY2JGl8ZN0mi5jT8C1IaH sq4IovUobhub7wmeZylMR8chZWug6Lx4jTb0XEUskVDnWCUqY5XcLLqWmP3pUqrF jpGEpssmbu0RCayqxa7HOE8uBSkQEWwTw3G7nAtlMcqYBqCKEfvqUqpdy5qhJIOt d1E+n5zCfyAfGRIzo/oY/NtWnvPK6CY21wZWIj0fcu8F8p2IDJ8bN0DpSQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHvYNsKK8JJ6A1WGJa7fb9eHpJBcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2RmNzE1 Yi03OWE2LTQ0YTktYWM5Ny1hZGIzMTRhNTc1M2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZGY3MTVi LTc5YTYtNDRhOS1hYzk3LWFkYjMxNGE1NzUzYy8xL2U5ZzJ3b3J3a25vRFZZWWxy dDl2MTRla2tGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwChJzANBgkqhkiG9w0BAQsFAAOCAQEAYKM0f4ZBQnor oCexaDvKuoAwPZWywDLTlvHHKR2NJRom+fpW8Gkipzo4iRsN+VSfDP4dkKY4e/Jr Oe2+Hy79uEm58xgAJciE227N3UOJNSCv9Nx27a2tRrUrb4Bp49xGKgfzW/MjsQKq NjftHEfNQ2IEgYJt0h03+BMeZ1AnoKaRUX0T+aBvgcxljB+Bp5gpC47IetH371hC kw7W8/Zy3onRJyLgeeyB6yE70brHTaayk1Z3HxhL0z3DUzyaHdGkvmsUpEOE52GI agR9aSJQb/N7UoDUasE5f6ZbI7e1MkZnsGWHYRvOR/9iS7mLevqTuc8vr2HpNkek E0de0rUmog== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:37 2026 by rpki-client