This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer (raw, json) Hash identifier: ahyBwtbe8NReJyAgnckkKY3UUGHJX6P1FAgzWu8zems= Subject key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79104B500875CD46E1520A19C24DBA3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51110 IP: 5.102.72.0/21 IP: 94.124.152.0/21 IP: 185.91.232.0/22 IP: 2a03:5b20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4b:50:08:75:cd:46:e1:52:0a:19:c2:4d:ba:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:8c:76:84:7d:fb:6c:88:8f:0e:63:25:97: 2c:9c:99:02:21:47:75:97:b6:6d:2e:59:8d:a5:c2: 4f:0e:35:83:7a:7d:76:28:40:eb:bc:ea:b1:cd:d4: f6:5f:e2:7e:cf:0a:4b:a7:31:20:38:72:ee:08:16: 0a:10:3e:07:62:c4:69:e7:bf:92:6c:c0:99:af:cf: 1b:9c:eb:77:5c:86:d3:83:13:6a:89:c9:f5:6e:34: 73:e5:37:3c:cb:0c:d1:7f:bb:b5:d8:ca:93:ba:f6: b9:85:b0:c4:01:64:00:70:78:b6:b6:32:24:2e:55: 7c:76:2b:4d:36:0b:41:23:bd:9f:49:a7:ab:3f:4e: 95:9c:5a:c3:62:c1:f2:79:ad:de:ba:4d:6b:e4:b7: 9c:27:ff:c7:20:4b:6b:ee:b4:dc:38:14:6a:66:2d: 3c:ac:55:24:dd:ca:17:3c:9b:49:50:ea:e2:8b:45: 0a:f7:a6:97:52:50:2b:c7:06:f3:d7:52:7b:fa:a2: 5a:e4:62:7f:99:64:d8:55:b6:48:9b:af:0b:86:f4: 0a:58:89:7e:ed:f6:68:59:03:3f:1e:b5:3e:cb:ef: 8d:fb:af:57:fe:b4:24:51:6b:17:f8:97:ff:ab:c5: 7e:c2:89:fa:6c:dc:7b:10:c9:8e:49:c0:52:5e:b0: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.72.0/21 94.124.152.0/21 185.91.232.0/22 IPv6: 2a03:5b20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51110 Signature Algorithm: sha256WithRSAEncryption 7b:a3:32:03:90:46:69:7f:b4:8f:f8:12:48:0e:28:f1:7c:88: ba:4f:db:4f:8b:14:63:d4:e5:df:b7:99:9a:80:88:0f:cb:28: 1f:97:d1:96:dc:0f:3b:02:4b:40:5a:78:1b:52:c8:03:5e:d1: bc:19:5c:1e:78:48:f9:3b:e7:4f:95:85:47:9e:6e:1a:13:a6: 25:f4:a2:b7:94:c3:64:e9:98:a9:a6:d5:40:74:67:c3:de:50: 2d:93:6e:3b:ad:5c:de:c1:41:10:e5:44:cf:51:1f:cb:0b:50: 72:1c:45:e0:3e:e1:6d:b3:6c:d9:89:39:31:a8:4c:b1:48:4c: f0:9f:9d:2f:e3:6d:06:82:22:95:d0:6c:98:50:89:38:33:20: b4:37:81:f2:12:26:cf:29:9c:0e:a7:68:53:90:9b:31:89:31: b6:24:a4:2f:45:29:1c:b7:5a:79:fb:7b:ea:a1:ae:90:bb:f0: e0:93:1a:ea:9c:f6:f6:f2:92:77:e8:71:17:f8:fe:e3:81:90: 60:65:86:2f:8d:ad:18:3a:57:42:84:bf:4a:42:c3:c8:5b:87: fa:4d:04:41:92:b2:13:dc:d3:92:35:90:b0:2a:ff:90:27:60: 7d:44:79:b6:e2:88:66:03:01:4c:97:df:e1:22:3b:3c:d7:4c: 7d:6f:2b:74 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EEtQCHXNRuFSChnCTbo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRjNTNjYzIyNjNmNmZkZWExNzBkMzI4MmEyMGI4ZTcxNjA3Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIeMdoR9+2yIjw5jJZcsnJkCIUd1 l7ZtLlmNpcJPDjWDen12KEDrvOqxzdT2X+J+zwpLpzEgOHLuCBYKED4HYsRp57+S bMCZr88bnOt3XIbTgxNqicn1bjRz5Tc8ywzRf7u12MqTuva5hbDEAWQAcHi2tjIk LlV8ditNNgtBI72fSaerP06VnFrDYsHyea3euk1r5LecJ//HIEtr7rTcOBRqZi08 rFUk3coXPJtJUOrii0UK96aXUlArxwbz11J7+qJa5GJ/mWTYVbZIm68LhvQKWIl+ 7fZoWQM/HrU+y++N+69X/rQkUWsX+Jf/q8V+won6bNx7EMmOScBSXrAQ6QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFIvcU8wiY/b96hcNMoKiC45xYHOGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzIzNzQy Zi0xZDcwLTRmMzEtYTljYS03YWNiMjFiYTc3M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMjM3NDJm LTFkNzAtNGYzMS1hOWNhLTdhY2IyMWJhNzczZi8xL2k5eFR6Q0pqOXYzcUZ3MHln cUlMam5GZ2M0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBWZIAwQDXnyYAwQCuVvoMA0EAgACMAcDBQAq A1sgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDHpjANBgkqhkiG9w0BAQsFAAOC AQEAe6MyA5BGaX+0j/gSSA4o8XyIuk/bT4sUY9Tl37eZmoCID8soH5fRltwPOwJL QFp4G1LIA17RvBlcHnhI+TvnT5WFR55uGhOmJfSit5TDZOmYqabVQHRnw95QLZNu O61c3sFBEOVEz1EfywtQchxF4D7hbbNs2Yk5MahMsUhM8J+dL+NtBoIildBsmFCJ ODMgtDeB8hImzymcDqdoU5CbMYkxtiSkL0UpHLdaeft76qGukLvw4JMa6pz29vKS d+hxF/j+44GQYGWGL42tGDpXQoS/SkLDyFuH+k0EQZKyE9zTkjWQsCr/kCdgfUR5 tuKIZgMBTJff4SI7PNdMfW8rdA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:46 2026 by rpki-client