This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer File: h9qWV60f35jec4uxmnPv0NsLOio.cer (raw, json) Hash identifier: C9WL1CGUIdfWZ12HHTE8bQK/rRb+wSNg4FHy1ANkGtM= Subject key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB375BC588A5034DE544E96BDA62F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16044 IP: 91.226.252.0/22 IP: 193.34.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:5b:c5:88:a5:03:4d:e5:44:e9:6b:da:62:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:d9:c1:70:73:9b:52:3c:59:95:84:11:6d: bb:14:ff:87:6a:d4:9c:96:a0:14:72:c9:79:51:da: a3:85:22:3c:98:bb:6e:e9:4e:cd:25:e3:f7:b7:f5: 58:48:bd:da:92:b0:9a:64:7a:0f:e3:f8:91:c9:a1: a6:18:1d:5f:f1:b8:cc:20:48:23:ac:b5:7e:81:b3: 2e:86:3c:ea:d3:dd:39:ee:f1:4f:c5:b8:60:20:e0: 2e:fc:ed:36:10:f7:88:42:71:a1:b1:68:ea:74:a6: a8:8d:53:9f:4d:5f:d7:cd:25:43:ec:67:91:f8:04: bb:9e:88:34:d4:0a:7f:8e:61:57:25:f1:0f:e6:f2: 74:96:7c:8f:54:91:33:2e:93:b6:e0:db:18:55:9f: 75:16:05:68:4b:84:56:b7:b8:09:bc:bb:57:b8:59: a6:2a:d8:d8:6c:89:c7:7a:82:65:6c:a1:67:b5:19: a3:3a:bb:ca:b6:6a:6a:9e:26:0e:d7:34:8f:97:e1: 7d:26:1d:d1:fa:21:86:74:25:2e:d5:40:bc:28:f1: 41:15:c9:31:0c:68:db:76:78:d2:12:08:2c:28:1f: a0:00:ea:29:8a:c1:9a:e1:a4:3a:7e:39:a1:fc:66: 2f:e5:13:1f:45:68:7a:7e:aa:5d:57:24:42:15:cb: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.252.0/22 193.34.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16044 Signature Algorithm: sha256WithRSAEncryption a8:f8:75:79:0f:19:30:ee:fd:83:38:63:95:0c:5e:f8:2a:05: db:33:a7:1c:2c:eb:8b:8d:c9:15:89:d5:c0:29:8e:e2:7b:55: 65:9f:4c:e7:d2:03:68:bf:32:a7:b9:fe:8f:a2:6f:60:99:e5: 0d:86:e1:2f:2a:2f:8d:89:61:73:32:db:70:fa:9f:ef:ab:bd: 1f:9b:a3:49:c8:22:32:2d:9f:f7:5f:cf:dc:d0:5d:84:83:03: 7e:30:0a:66:b9:8d:1c:ce:e1:b1:ad:f7:f2:46:6d:9a:da:00: 01:f7:0d:e6:fe:28:56:2a:8b:e2:6f:1a:94:98:20:eb:4c:f3: 03:71:89:39:5c:53:1a:18:1f:43:74:01:fd:4f:0f:c8:6f:03: 42:78:04:1e:d2:8f:e0:c6:4d:43:30:c4:90:d7:cc:18:b3:50: f4:aa:3a:31:b5:44:12:8b:02:e7:70:04:87:22:52:a3:79:2b: 68:51:a0:f6:3a:22:e0:f3:9b:e1:20:e5:e9:6d:dd:8d:74:ad: c0:aa:a3:06:a1:5b:5b:b3:53:da:93:f9:ae:f6:a0:46:3d:c7: 55:b0:96:62:c3:db:f0:0c:c6:2e:7b:a0:09:8a:a0:e7:01:62: 04:9d:8c:40:7c:e4:b2:d7:ef:b4:98:37:3f:a3:20:29:50:b6: 1b:01:88:3a -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt26zdbxYilA03lROlr2mL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2RhOTY1N2FkMWZkZjk4ZGU3MzhiYjE5YTczZWZkMGRiMGIzYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE/ZwXBzm1I8WZWEEW27FP+HatSc lqAUcsl5UdqjhSI8mLtu6U7NJeP3t/VYSL3akrCaZHoP4/iRyaGmGB1f8bjMIEgj rLV+gbMuhjzq09057vFPxbhgIOAu/O02EPeIQnGhsWjqdKaojVOfTV/XzSVD7GeR +AS7nog01Ap/jmFXJfEP5vJ0lnyPVJEzLpO24NsYVZ91FgVoS4RWt7gJvLtXuFmm KtjYbInHeoJlbKFntRmjOrvKtmpqniYO1zSPl+F9Jh3R+iGGdCUu1UC8KPFBFckx DGjbdnjSEggsKB+gAOopisGa4aQ6fjmh/GYv5RMfRWh6fqpdVyRCFcvCSwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFIfalletH9+Y3nOLsZpz79DbCzoqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2JiZWU1 ZS1kZGJkLTRiODUtYjRjYS0yYWU0NDBhNWNjYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvYmJlZTVl LWRkYmQtNGI4NS1iNGNhLTJhZTQ0MGE1Y2NiMC8xL2g5cVdWNjBmMzVqZWM0dXht blB2ME5zTE9pby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW+L8AwQCwSI8MBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAj6sMA0GCSqGSIb3DQEBCwUAA4IBAQCo+HV5Dxkw7v2DOGOVDF74KgXb M6ccLOuLjckVidXAKY7ie1Vln0zn0gNovzKnuf6Pom9gmeUNhuEvKi+NiWFzMttw +p/vq70fm6NJyCIyLZ/3X8/c0F2EgwN+MApmuY0czuGxrffyRm2a2gAB9w3m/ihW KovibxqUmCDrTPMDcYk5XFMaGB9DdAH9Tw/IbwNCeAQe0o/gxk1DMMSQ18wYs1D0 qjoxtUQSiwLncASHIlKjeStoUaD2OiLg85vhIOXpbd2NdK3AqqMGoVtbs1Pak/mu 9qBGPcdVsJZiw9vwDMYue6AJiqDnAWIEnYxAfOSy1++0mDc/oyApULYbAYg6 -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:45 2026 by rpki-client