This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer File: n73cYxPvxLZyp-KzKuPESE_l9jA.cer (raw, json) Hash identifier: emlFW6ES38XobaJte4ZUiXiuJBA5Cnlr2n/eaxKy7qs= Subject key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66D7F29E271BA7AEB8E0CDAC1E7DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48748 IP: 195.88.26.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6d:7f:29:e2:71:ba:7a:eb:8e:0c:da:c1:e7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:89:3e:44:d0:25:fa:6a:20:c6:50:59:1a: 7f:44:c0:f8:f0:68:d6:3d:ec:9a:8f:fd:8e:34:44: 45:2d:89:8b:0e:22:71:90:1d:84:ce:a7:55:dd:f5: a7:c0:2c:73:c2:4c:c3:32:b1:a4:02:45:1a:f5:9e: 8a:e7:2a:17:29:30:4b:1d:78:12:d3:70:d9:ff:ef: 08:e2:72:e5:ab:dd:66:26:a3:0b:68:56:89:ab:ba: 70:d3:56:8d:af:f7:e4:e3:98:64:59:4e:f9:8a:aa: c1:94:b8:30:26:4b:50:4d:26:4e:c0:52:8e:1d:7b: 90:38:fd:2a:a7:81:9a:63:91:81:58:fc:40:32:ca: 54:07:68:2e:1a:9b:77:79:d0:60:4d:5a:56:bc:a8: 80:22:b4:71:b6:8a:1d:94:9b:0f:7c:d2:a8:56:1b: 7c:97:ff:4f:c7:a1:41:ef:89:f8:cf:14:aa:c4:8f: 8a:89:81:5a:ce:3a:a4:94:50:d6:81:1c:49:7f:0e: 12:34:1b:24:58:75:28:56:04:43:4a:f4:be:88:5a: 27:55:51:e4:da:a5:93:2f:ab:ab:2d:de:4b:83:be: ef:5a:32:27:38:5d:43:07:c5:49:b7:75:9f:2a:53: dc:14:2d:e1:bd:80:f7:d0:aa:08:a6:b6:4d:4a:86: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.26.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48748 Signature Algorithm: sha256WithRSAEncryption 77:37:d5:8f:66:b3:3f:ca:ea:8c:1a:89:cd:7b:c6:75:60:6b: af:25:ba:71:7c:d7:2d:cc:88:cf:d7:c1:96:d5:06:e9:97:41: aa:34:81:61:6c:c6:21:77:40:68:73:7c:88:84:e1:ab:98:5b: 8d:94:1d:df:c9:f0:a1:8c:a2:c6:6d:e5:ef:01:ae:87:a7:58: 34:18:0e:b2:fe:49:b1:cc:b2:39:49:77:25:22:d9:be:ee:c1: b8:4b:19:9c:eb:9a:bc:f7:fc:96:5d:72:86:80:ab:bd:ff:a1: 13:e4:3b:00:59:8e:1d:f7:03:90:84:da:0f:d5:fe:83:ab:2e: 8f:af:67:0d:70:80:ee:3d:56:3b:5f:0b:b8:9b:5c:ff:b1:07: 33:ae:18:b5:8a:79:46:85:78:d0:40:a3:bf:54:45:e1:a4:bd: 6b:5c:ad:a9:7e:28:1b:8a:02:b9:5b:29:89:69:c5:29:2e:b7: 16:47:fd:09:a3:a2:da:f6:2d:41:07:d1:c6:9d:63:eb:98:c9: 4c:c2:18:3e:24:1e:d7:d0:b1:d7:bb:fb:f4:3f:48:7f:2c:10: 1d:be:03:60:93:0e:29:18:4d:94:60:61:6c:d9:8e:14:3c:f2: 91:6d:af:95:db:cb:af:f8:e4:37:07:70:62:af:d0:cd:c8:1d: 40:ce:81:3f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xm1/KeJxunrrjgzawefdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmJkZGM2MzEzZWZjNGI2NzJhN2UyYjMyYWUzYzQ0ODRmZTVmNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoiJPkTQJfpqIMZQWRp/RMD48GjW Peyaj/2ONERFLYmLDiJxkB2EzqdV3fWnwCxzwkzDMrGkAkUa9Z6K5yoXKTBLHXgS 03DZ/+8I4nLlq91mJqMLaFaJq7pw01aNr/fk45hkWU75iqrBlLgwJktQTSZOwFKO HXuQOP0qp4GaY5GBWPxAMspUB2guGpt3edBgTVpWvKiAIrRxtoodlJsPfNKoVht8 l/9Px6FB74n4zxSqxI+KiYFazjqklFDWgRxJfw4SNBskWHUoVgRDSvS+iFonVVHk 2qWTL6urLd5Lg77vWjInOF1DB8VJt3WfKlPcFC3hvYD30KoIprZNSoY0ewIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ+93GMT78S2cqfisyrjxEhP5fYwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzNlMDY5 YS0zNDIxLTQwYWItOWUwYy00NWNjMmRkNmU0OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvM2UwNjlh LTM0MjEtNDBhYi05ZTBjLTQ1Y2MyZGQ2ZTQ5MS8xL243M2NZeFB2eExaeXAtS3pL dVBFU0VfbDlqQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw1gaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC+bDANBgkqhkiG9w0BAQsFAAOCAQEAdzfVj2azP8rqjBqJzXvGdWBrryW6cXzX LcyIz9fBltUG6ZdBqjSBYWzGIXdAaHN8iIThq5hbjZQd38nwoYyixm3l7wGuh6dY NBgOsv5JscyyOUl3JSLZvu7BuEsZnOuavPf8ll1yhoCrvf+hE+Q7AFmOHfcDkITa D9X+g6suj69nDXCA7j1WO18LuJtc/7EHM64YtYp5RoV40ECjv1RF4aS9a1ytqX4o G4oCuVspiWnFKS63Fkf9CaOi2vYtQQfRxp1j65jJTMIYPiQe19Cx17v79D9IfywQ Hb4DYJMOKRhNlGBhbNmOFDzykW2vldvLr/jkNwdwYq/QzcgdQM6BPw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:44 2026 by rpki-client