This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer File: k9t6NCzZOS76XNM4lHQcqKW09Cs.cer (raw, json) Hash identifier: 9ItzIz4A20dHjfX4t9v8ohm12izn/rmyNy4xUA6xia8= Subject key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C5053E93788B3830FA1F600B63D90 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210321 IP: 185.242.248.0/22 IP: 2a0c:f780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:50:53:e9:37:88:b3:83:0f:a1:f6:00:b6:3d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:24:89:70:04:c3:a5:32:c6:32:20:5d:77: 58:de:78:12:f6:ed:e5:2d:a6:83:be:8b:fd:15:bb: 43:27:bf:9b:17:cf:dc:cb:13:6c:2b:31:0b:9f:9f: 38:3f:44:c7:1c:66:64:77:73:68:16:c5:98:51:a5: 61:8d:ad:5a:a0:1e:cd:78:57:1a:f2:f4:9b:b0:a8: 34:ef:7a:63:21:06:0a:76:c4:dd:e0:8f:d8:6b:53: 3f:21:a5:d2:f6:5e:cf:56:f4:0f:fe:dc:00:dc:3a: 83:9c:7a:15:bb:23:b8:1f:f6:1b:f2:28:d3:c7:28: 88:75:59:bf:b6:50:b9:19:5e:70:1f:f1:8b:c1:dd: 1d:d6:7f:32:87:4b:d4:34:44:1e:cf:ac:6d:c7:a8: 34:19:22:17:50:ed:71:6d:e8:8b:7d:3c:19:2e:07: 6a:c9:ac:07:8a:38:43:32:15:83:4b:03:1f:f6:2d: 03:f1:3a:61:09:75:00:b3:f7:3c:4d:13:ab:3f:90: 94:58:3c:63:38:4d:6d:f1:e0:bb:7d:db:0f:d1:7c: 8d:23:cd:2b:02:f7:19:6b:a0:50:16:18:89:28:a8: 9d:57:e9:db:e3:52:0b:bb:7c:f6:17:48:22:92:1d: d9:d8:b3:ed:10:91:7c:56:e4:c4:a0:a3:ee:40:30: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.248.0/22 IPv6: 2a0c:f780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210321 Signature Algorithm: sha256WithRSAEncryption 60:1e:3b:10:32:3a:9b:5a:bc:ca:9d:bc:1f:81:10:15:af:51: 51:34:a7:48:b5:29:27:ff:05:6b:4b:30:d8:fb:7b:5a:52:01: c1:23:4b:73:5e:c4:9a:af:ea:1a:85:ca:ff:ca:43:a2:de:01: 3e:a3:63:6a:b7:1b:79:5a:fa:1f:77:cb:be:68:b9:c1:3e:94: c6:71:d7:de:c3:06:0f:6c:11:56:76:24:f4:f7:70:b7:61:e2: 57:ab:3a:2d:8c:57:5e:c8:c9:cf:06:b8:b6:b4:32:02:3b:d5: 8d:eb:6f:64:d8:83:aa:64:60:a0:d8:96:b6:6d:96:11:7b:16: af:77:aa:ce:d3:3e:f4:a5:33:31:68:2a:8d:0f:47:71:bc:e6: b8:bf:ca:dd:56:3f:8b:e4:eb:de:a4:94:79:68:35:e3:87:b1: c4:3e:77:8b:a3:4a:b9:33:02:c3:70:e6:e0:3a:de:ba:45:8c: a1:da:73:64:d0:34:6c:df:cf:c0:d2:68:6e:07:b0:09:35:29: b5:26:17:43:f2:60:ba:56:38:be:c1:3e:9c:6c:ee:df:77:42: 26:b6:78:3d:e0:4e:7b:59:ee:1b:98:bc:07:5b:26:48:ab:31: 7b:f6:67:02:72:3a:b3:85:f6:27:83:f1:29:26:3b:0c:76:4c: d4:1a:ce:3c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XFBT6TeIs4MPofYAtj2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2RiN2EzNDJjZDkzOTJlZmE1Y2QzMzg5NDc0MWNhOGE1YjRmNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PckiXAEw6UyxjIgXXdY3ngS9u3l LaaDvov9FbtDJ7+bF8/cyxNsKzELn584P0THHGZkd3NoFsWYUaVhja1aoB7NeFca 8vSbsKg073pjIQYKdsTd4I/Ya1M/IaXS9l7PVvQP/twA3DqDnHoVuyO4H/Yb8ijT xyiIdVm/tlC5GV5wH/GLwd0d1n8yh0vUNEQez6xtx6g0GSIXUO1xbeiLfTwZLgdq yawHijhDMhWDSwMf9i0D8TphCXUAs/c8TROrP5CUWDxjOE1t8eC7fdsP0XyNI80r AvcZa6BQFhiJKKidV+nb41ILu3z2F0gikh3Z2LPtEJF8VuTEoKPuQDDsrQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJPbejQs2Tku+lzTOJR0HKiltPQrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzMwOGY1 My04YmZmLTQ5OTAtOGQ3Yi1lNzE4NWNkZWNjZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMzA4ZjUz LThiZmYtNDk5MC04ZDdiLWU3MTg1Y2RlY2NkMy8xL2s5dDZOQ3paT1M3NlhOTTRs SFFjcUtXMDlDcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufL4MA0EAgACMAcDBQMqDPeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM1kTANBgkqhkiG9w0BAQsFAAOCAQEAYB47EDI6m1q8 yp28H4EQFa9RUTSnSLUpJ/8Fa0sw2Pt7WlIBwSNLc17Emq/qGoXK/8pDot4BPqNj arcbeVr6H3fLvmi5wT6UxnHX3sMGD2wRVnYk9Pdwt2HiV6s6LYxXXsjJzwa4trQy AjvVjetvZNiDqmRgoNiWtm2WEXsWr3eqztM+9KUzMWgqjQ9HcbzmuL/K3VY/i+Tr 3qSUeWg144exxD53i6NKuTMCw3Dm4DreukWModpzZNA0bN/PwNJobgewCTUptSYX Q/JgulY4vsE+nGzu33dCJrZ4PeBOe1nuG5i8B1smSKsxe/ZnAnI6s4X2J4PxKSY7 DHZM1BrOPA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:30 2026 by rpki-client