This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer File: m-du9KpJjCFSTdftrRbeHT2wAuM.cer (raw, json) Hash identifier: 9ncVwbrjeM58e6iNy4lCkYpn9N/dYz6f1kWG+wg/e7E= Subject key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6F89293E0C176BF778918E7C0DF33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12817 IP: 194.145.150.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f8:92:93:e0:c1:76:bf:77:89:18:e7:c0:df:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:17:1a:eb:a4:71:b0:6f:d0:96:76:12:99: 92:6d:36:c0:03:68:d2:cf:fd:59:6e:db:4e:3a:dc: 1d:5b:37:6b:db:d2:e1:6b:ab:4a:8c:da:08:14:41: ad:a7:06:71:7d:80:15:0f:82:9e:65:77:7a:ae:a9: 6a:42:23:8f:31:cb:5f:cf:71:92:8e:97:b2:21:4a: c4:af:6c:34:a1:0a:db:57:81:c9:ac:43:67:fa:46: 31:53:22:c3:93:63:40:a6:d0:e0:19:a4:3d:35:aa: 31:20:90:ab:ba:33:01:c3:08:1b:a2:89:6b:9f:85: 23:33:b2:aa:b6:5b:10:6f:07:ae:84:60:62:96:7b: 41:54:fe:fb:d9:2e:5e:e9:21:e7:91:e5:e9:79:4f: e4:60:34:7a:8e:43:f8:35:e3:77:d1:9c:0f:d3:91: 64:38:dc:2b:af:1b:7b:87:83:64:14:e1:3d:77:ea: e9:8c:e1:33:63:a4:5d:3c:33:e4:46:84:db:b2:aa: 9f:9d:24:c9:2d:ff:02:97:3f:28:ac:dd:6f:da:6b: 54:62:0a:8d:83:4e:d7:0a:b5:48:26:1e:a5:cc:c5: 84:2a:47:f9:60:ba:8c:28:d2:17:5c:95:88:65:7a: 83:de:0e:30:9c:b7:a9:b2:2f:14:f2:38:61:b3:d0: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.150.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12817 Signature Algorithm: sha256WithRSAEncryption 92:ff:97:e9:b4:fb:c9:4b:0a:77:c0:37:47:28:a8:4d:d6:23: 92:33:10:ed:b2:6e:04:47:dd:31:4f:82:b5:f5:40:da:df:12: e8:be:7c:0a:54:a4:6b:48:3e:7f:6a:4a:cb:f1:5c:fd:b7:01: b0:11:c6:07:c8:84:58:df:29:7d:eb:33:fc:d8:ad:f3:0a:5d: df:98:c3:fc:32:fb:bd:7c:f6:6b:06:c9:15:8c:ef:a0:dc:0d: a7:70:54:34:27:2a:d9:39:17:de:0d:b7:42:ac:1d:1b:b5:97: 34:f6:24:96:eb:6a:cb:5f:56:49:30:71:54:a6:a6:db:b1:87: 12:68:06:90:6e:4a:81:3f:f1:e2:42:f8:7f:ea:b4:07:15:17: 30:80:f6:4e:bd:15:c3:8c:ab:a5:f9:af:4c:1d:d9:80:11:80: 19:9a:66:31:27:4d:5e:ee:63:70:37:f0:04:c4:5c:6c:16:4c: fd:74:d2:40:a8:94:95:7d:4e:cd:cc:b5:da:42:cc:bc:a3:eb: 97:31:00:f7:f2:57:4c:60:1b:6d:20:14:8e:cc:e6:8e:79:8f: 27:31:0e:33:c5:0f:95:b6:19:ed:77:80:05:76:ee:a8:61:53: 50:97:e2:cd:f3:c0:3d:7e:7d:ba:13:dd:6a:ae:12:95:5e:7b: b7:f1:bd:b0 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3xviSk+DBdr93iRjnwN8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmU3NmVmNGFhNDk4YzIxNTI0ZGQ3ZWRhZDE2ZGUxZDNkYjAwMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu40XGuukcbBv0JZ2EpmSbTbAA2jS z/1ZbttOOtwdWzdr29Lha6tKjNoIFEGtpwZxfYAVD4KeZXd6rqlqQiOPMctfz3GS jpeyIUrEr2w0oQrbV4HJrENn+kYxUyLDk2NAptDgGaQ9NaoxIJCrujMBwwgboolr n4UjM7KqtlsQbweuhGBilntBVP772S5e6SHnkeXpeU/kYDR6jkP4NeN30ZwP05Fk ONwrrxt7h4NkFOE9d+rpjOEzY6RdPDPkRoTbsqqfnSTJLf8Clz8orN1v2mtUYgqN g07XCrVIJh6lzMWEKkf5YLqMKNIXXJWIZXqD3g4wnLepsi8U8jhhs9CEGQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJvnbvSqSYwhUk3X7a0W3h09sALjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2ViMzAx ZC1hYjUwLTRjM2UtOGM3OC05ZGYzNzEwOWM4MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZWIzMDFk LWFiNTAtNGMzZS04Yzc4LTlkZjM3MTA5YzgxZC8xL20tZHU5S3BKakNGU1RkZnRy UmJlSFQyd0F1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwpGWMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjIRMA0GCSqGSIb3DQEBCwUAA4IBAQCS/5fptPvJSwp3wDdHKKhN1iOSMxDtsm4E R90xT4K19UDa3xLovnwKVKRrSD5/akrL8Vz9twGwEcYHyIRY3yl96zP82K3zCl3f mMP8Mvu9fPZrBskVjO+g3A2ncFQ0JyrZORfeDbdCrB0btZc09iSW62rLX1ZJMHFU pqbbsYcSaAaQbkqBP/HiQvh/6rQHFRcwgPZOvRXDjKul+a9MHdmAEYAZmmYxJ01e 7mNwN/AExFxsFkz9dNJAqJSVfU7NzLXaQsy8o+uXMQD38ldMYBttIBSOzOaOeY8n MQ4zxQ+Vthntd4AFdu6oYVNQl+LN88A9fn26E91qrhKVXnu38b2w -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:45 2026 by rpki-client