This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer File: iD9pgz7Edx87C85PAJNleTVG9qg.cer (raw, json) Hash identifier: yZ2c6B8HXeWwLJv7IyIFmjeGTMKH5/KLYaOzxvIfB5s= Subject key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A52E00BB24FEF9BAC742BD90E4CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.200.213.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a5:2e:00:bb:24:fe:f9:ba:c7:42:bd:90:e4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=883f69833ec4771f3b0bce4f009365793546f6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:cf:1a:69:09:23:04:28:80:5e:71:25:53: 7f:62:a8:da:53:01:ae:7e:fa:ce:ca:79:91:44:a4: 9d:3e:56:46:6c:e2:73:14:f5:c5:ee:ec:16:f0:15: 80:5e:d3:1a:2f:fd:7b:1d:74:bf:dc:1c:e6:14:34: b9:11:99:a1:6b:ec:36:8f:cd:0c:cf:3f:40:be:35: ca:b4:4e:f9:f7:61:a4:6a:dd:93:a0:1d:43:e3:d4: 9f:e2:99:dd:ea:d2:39:1b:a2:eb:01:53:f3:c2:94: b6:ac:82:92:54:9a:48:87:7a:d0:03:cb:27:b8:8c: f5:d0:b5:3f:5c:2f:aa:6c:ac:99:80:e2:f6:8e:73: e6:85:de:64:11:30:0b:82:8b:b1:cf:5c:71:21:dd: 2e:22:7e:80:f5:1b:36:1d:da:67:5e:8e:2b:8a:58: 77:53:2d:9b:bf:1f:30:41:0a:7e:f9:bc:72:d6:a6: 44:94:a1:ff:43:4f:50:0d:87:fc:6a:b0:ec:95:eb: 92:e5:41:ed:3d:77:6a:fc:26:a4:e4:cc:9b:ce:2d: 4b:11:e3:fd:dc:fd:38:57:dc:dc:e9:e6:69:5e:3c: 65:7e:0a:9f:6f:a2:ee:7f:e8:4d:e6:92:21:b8:c0: 47:80:fb:ac:23:14:79:20:b5:9d:c6:8c:98:ef:e0: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.213.0/24 Signature Algorithm: sha256WithRSAEncryption 35:bd:da:f2:46:d5:57:7a:f5:92:50:7e:bd:6c:b3:4f:1a:7f: a3:83:40:41:be:d7:4d:20:0d:7b:3a:69:5e:dd:5e:35:2b:4c: 0d:02:11:7d:5c:71:5d:17:02:f5:41:70:b3:a2:c7:47:21:a8: 6a:6a:41:83:1f:72:32:3b:c2:12:f3:16:d6:06:5c:49:03:67: 1d:23:64:f2:bb:ba:08:a2:00:3c:7f:91:27:cf:a1:14:da:c0: 40:f9:37:4f:d5:0f:aa:0d:c8:b9:ed:4d:3e:80:5b:fe:87:95: 7b:14:2a:47:12:37:e8:74:34:3d:44:f6:f3:8a:91:8c:c7:79: 5f:12:1a:ae:3a:22:79:6b:2e:b6:4b:ac:8e:60:7c:0b:1b:81: d4:f0:54:f4:50:78:5d:42:2f:c6:14:31:b4:86:11:a0:e1:04: cb:51:aa:af:8d:80:ea:0d:72:9b:99:00:c8:8a:eb:31:62:13: 0e:05:c7:a9:e7:02:07:d5:30:31:2c:af:c3:e0:71:bc:ca:85: 11:97:f9:a4:25:21:8f:ed:11:77:6b:db:2c:a4:27:2c:ef:bc: 1e:1e:1a:c4:11:c3:d3:0f:6a:b8:bc:e5:40:9e:36:5b:d5:fa: 15:de:e6:a3:8e:9f:cb:39:d4:23:80:f3:f2:ca:fb:fb:cd:35: 39:1f:a0:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WKUuALsk/vm6x0K9kOTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODNmNjk4MzNlYzQ3NzFmM2IwYmNlNGYwMDkzNjU3OTM1NDZmNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd3PGmkJIwQogF5xJVN/YqjaUwGu fvrOynmRRKSdPlZGbOJzFPXF7uwW8BWAXtMaL/17HXS/3BzmFDS5EZmha+w2j80M zz9AvjXKtE7592Gkat2ToB1D49Sf4pnd6tI5G6LrAVPzwpS2rIKSVJpIh3rQA8sn uIz10LU/XC+qbKyZgOL2jnPmhd5kETALgouxz1xxId0uIn6A9Rs2HdpnXo4rilh3 Uy2bvx8wQQp++bxy1qZElKH/Q09QDYf8arDsleuS5UHtPXdq/Cak5Mybzi1LEeP9 3P04V9zc6eZpXjxlfgqfb6Luf+hN5pIhuMBHgPusIxR5ILWdxoyY7+CFNwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIg/aYM+xHcfOwvOTwCTZXk1RvaoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzkzNDU5 OS1mMzhlLTQ0NGEtYTNjMC02YmYyYmRiYWU1YzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvOTM0NTk5 LWYzOGUtNDQ0YS1hM2MwLTZiZjJiZGJhZTVjNC8xL2lEOXBnejdFZHg4N0M4NVBB Sk5sZVRWRzlxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcjVMA0GCSqGSIb3DQEBCwUAA4IBAQA1vdry RtVXevWSUH69bLNPGn+jg0BBvtdNIA17Omle3V41K0wNAhF9XHFdFwL1QXCzosdH IahqakGDH3IyO8IS8xbWBlxJA2cdI2Tyu7oIogA8f5Enz6EU2sBA+TdP1Q+qDci5 7U0+gFv+h5V7FCpHEjfodDQ9RPbzipGMx3lfEhquOiJ5ay62S6yOYHwLG4HU8FT0 UHhdQi/GFDG0hhGg4QTLUaqvjYDqDXKbmQDIiusxYhMOBcep5wIH1TAxLK/D4HG8 yoURl/mkJSGP7RF3a9sspCcs77weHhrEEcPTD2q4vOVAnjZb1foV3uajjp/LOdQj gPPyyvv7zTU5H6D/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:25 2026 by rpki-client