This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer File: f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer (raw, json) Hash identifier: P/H2GbtBiGF6w0gJxPYeJpt+9Q0Hb0ITxNKBwD46dX0= Subject key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD09D56DDE709947C1CEC32524DF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215288 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d0:9d:56:dd:e7:09:94:7c:1c:ec:32:52:4d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:ed:97:10:5f:84:ad:77:2e:8c:ce:61:af: 38:4a:5c:db:4b:cf:0d:94:8c:60:d4:52:32:bc:23: c7:2e:1b:93:e0:dd:6f:b7:6d:47:eb:ad:07:7c:3e: 5f:cd:02:d4:d8:54:2a:32:16:2f:fb:74:17:f9:3f: b0:8e:78:dc:f0:19:2f:83:d4:2e:13:38:90:6c:99: ae:61:14:56:d6:99:89:5c:d9:9e:ed:b5:47:6a:59: 10:d7:41:4b:31:fe:87:3a:1b:28:ca:63:20:71:f5: 52:ce:9c:f0:e4:d7:c0:b6:c6:6e:16:cd:85:c0:b5: 3d:13:bc:4e:80:8d:58:cd:52:6a:90:14:0e:4c:23: cc:c2:cf:8f:97:5f:15:b2:96:3c:f3:59:48:c4:d5: fa:1f:27:f0:a6:b7:d8:82:0b:b2:c2:7e:6f:d6:7c: 07:54:62:5d:fe:f4:56:58:19:cd:22:93:23:3e:e0: 53:68:0a:db:f2:ab:3e:36:4e:80:31:a5:02:47:ac: 7f:6f:13:7f:11:c9:30:a9:2b:37:2c:50:58:fc:fa: 76:6f:d9:bb:75:f2:ac:ad:24:c7:91:43:97:ab:85: fd:89:c9:c7:6e:29:3d:f5:cc:eb:f5:cd:62:00:e3: 23:4c:4d:dc:ba:29:6e:52:97:b5:5c:01:fd:32:02: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215288 Signature Algorithm: sha256WithRSAEncryption 3b:a1:f3:ba:97:f9:a3:4e:b6:99:7e:b3:a7:ee:85:8d:83:47: 40:07:fd:5d:8a:7e:b6:32:43:44:a4:0a:01:07:e0:0d:8e:43: cb:e4:0c:5d:9c:45:6b:d1:fb:70:ee:52:6c:46:d5:23:59:f1: 6d:94:f5:71:21:71:7a:7f:0c:c9:06:78:c8:2b:88:42:da:92: 50:23:2f:97:0c:04:41:a3:a0:a6:45:19:96:5f:3a:d1:04:d5: c6:12:82:5f:e4:5a:78:c6:ea:ff:b0:c6:d7:51:a7:f9:a3:6e: 85:fe:eb:1b:84:5e:f2:f2:59:04:5c:53:1d:09:80:3a:32:54: 7f:9e:6e:e2:94:8c:da:7e:ce:db:07:f3:da:e6:4b:88:0c:92: 57:fe:73:86:35:3d:ed:dc:24:96:71:d4:75:4b:7c:f8:aa:63: 11:63:9c:32:85:e0:41:77:24:92:b4:a9:55:4b:74:09:3f:70: 1c:61:8e:53:bb:fc:5e:e5:79:38:4d:3e:83:59:0b:b0:fc:85: ff:9c:87:dd:74:34:68:95:62:7e:11:69:8c:ba:a1:c7:34:73: 19:40:bf:70:66:18:72:f4:2e:43:fc:73:3c:08:d1:46:98:a2: 37:15:f1:02:7f:9a:7a:0f:eb:80:81:1d:1c:3a:62:eb:76:f6: d8:92:39:ed -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26tCdVt3nCZR8HOwyUk33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmQxZGQ1MjJmNjEzNGYwNzAxOTVjNWMwZTJkNGMxMWNmYTZhOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHrtlxBfhK13LozOYa84SlzbS88N lIxg1FIyvCPHLhuT4N1vt21H660HfD5fzQLU2FQqMhYv+3QX+T+wjnjc8Bkvg9Qu EziQbJmuYRRW1pmJXNme7bVHalkQ10FLMf6HOhsoymMgcfVSzpzw5NfAtsZuFs2F wLU9E7xOgI1YzVJqkBQOTCPMws+Pl18VspY881lIxNX6HyfwprfYgguywn5v1nwH VGJd/vRWWBnNIpMjPuBTaArb8qs+Nk6AMaUCR6x/bxN/EckwqSs3LFBY/Pp2b9m7 dfKsrSTHkUOXq4X9icnHbik99czr9c1iAOMjTE3cuiluUpe1XAH9MgJMvwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFH/R3VIvYTTwcBlcXA4tTBHPpql9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M4NmI2 NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzg2 YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUyMWI3LzAvN0ZEMURENTIyRjYx MzRGMDcwMTk1QzVDMEUyRDRDMTFDRkE2QTk3RC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSPgw DQYJKoZIhvcNAQELBQADggEBADuh87qX+aNOtpl+s6fuhY2DR0AH/V2KfrYyQ0Sk CgEH4A2OQ8vkDF2cRWvR+3DuUmxG1SNZ8W2U9XEhcXp/DMkGeMgriELaklAjL5cM BEGjoKZFGZZfOtEE1cYSgl/kWnjG6v+wxtdRp/mjboX+6xuEXvLyWQRcUx0JgDoy VH+ebuKUjNp+ztsH89rmS4gMklf+c4Y1Pe3cJJZx1HVLfPiqYxFjnDKF4EF3JJK0 qVVLdAk/cBxhjlO7/F7leThNPoNZC7D8hf+ch910NGiVYn4RaYy6occ0cxlAv3Bm GHL0LkP8czwI0UaYojcV8QJ/mnoP64CBHRw6Yut29tiSOe0= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:42 2026 by rpki-client