This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer File: s901zP9sK4ah-tjxA7wgBw0J5Q0.cer (raw, json) Hash identifier: VykF901TInfDEphEiOrH50EQ4+TRoUwMSq+s/wKDc+o= Subject key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B8FA1D0FEF8501B93FDF5DC70B93F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 40964 IP: 89.107.128.0/21 IP: 185.173.156.0/22 IP: 2a01:afc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8f:a1:d0:fe:f8:50:1b:93:fd:f5:dc:70:b9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:bf:df:96:85:71:c0:c9:9f:7f:bd:ca:63: b4:f9:38:e1:4d:29:02:d3:07:7f:1e:8a:32:31:12: 19:fa:4f:88:dc:67:2b:98:be:f7:b9:75:64:57:ae: b3:7f:99:c1:41:fb:f8:ca:40:b8:10:20:f7:b4:b2: 4d:38:e2:9e:f5:f8:2e:80:8c:08:b5:26:db:85:25: 82:ce:ab:da:7a:89:3d:35:14:b1:af:2d:8f:0a:2d: 18:5b:63:a9:f8:a9:ec:38:28:ad:11:1f:4d:51:f2: 6b:f4:21:ad:86:9f:4e:34:49:ef:d2:2e:37:66:e4: 05:60:38:8d:61:9c:c5:59:d6:99:04:3f:4f:da:9d: 58:c8:5c:a0:37:e9:c6:f9:f5:57:7f:5e:0b:65:dd: 9b:31:92:0b:8e:3b:ee:44:1c:0d:5e:ca:2e:19:e2: 0b:a2:64:e2:f0:dd:28:bd:55:58:32:93:d3:a3:66: 00:a7:8c:1a:0c:83:4d:d4:72:f8:d5:15:e5:d4:0c: fc:d8:ae:40:83:1b:a0:6c:bd:17:87:35:14:ab:9b: 1d:14:03:3c:00:2f:d4:f2:d3:5d:1e:51:3c:5a:42: 08:b9:19:63:cc:91:1c:55:5b:c1:cc:99:a0:cb:a2: 04:ae:d1:c6:a7:95:02:07:dd:dd:9d:c6:ea:3f:8b: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.128.0/21 185.173.156.0/22 IPv6: 2a01:afc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40964 Signature Algorithm: sha256WithRSAEncryption 02:5f:d2:3c:20:ca:98:c6:c7:53:46:3e:bc:ac:c0:d5:ef:05: 26:67:46:b6:25:3b:53:45:70:f4:55:18:0d:75:7c:7a:4a:72: 7b:a0:2c:e3:d6:41:35:ef:e0:5d:22:fa:12:91:ee:86:12:70: 7a:e6:8d:a0:c7:d2:b0:4e:18:fd:ad:ce:3f:8e:27:fb:75:db: 41:e4:25:50:b5:a5:12:a0:bf:b4:fd:f6:a0:ee:9f:4e:53:b4: 9e:0f:ff:91:15:c3:cf:29:33:e4:98:ba:98:fb:c2:14:77:ab: 7a:7f:30:db:3f:b6:4b:b7:fd:b4:f7:cc:c4:c2:9e:8c:fb:7f: 4e:56:40:81:5e:e2:df:d8:3c:96:f6:c1:ea:18:80:5b:69:50: 31:29:c3:b0:18:f5:d3:1b:68:55:d5:41:ef:d2:c6:fe:b8:69: e4:60:b3:52:4b:20:49:48:e3:96:a8:cf:66:2b:e2:61:c5:fb: 2e:40:e1:39:ca:24:c6:97:1c:0b:5d:29:15:ed:33:db:88:84: 5c:43:d3:c5:3f:69:1a:da:2b:40:5d:2a:03:96:7c:a4:46:33: 6a:c0:68:83:0c:6a:92:34:f9:de:fb:f9:fc:1d:76:01:10:72: 7a:c9:0b:66:bd:33:5c:27:c2:44:2e:70:71:bf:73:48:12:76: 60:d1:fe:e7 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9W4+h0P74UBuT/fXccLk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2RkMzVjY2ZmNmMyYjg2YTFmYWQ4ZjEwM2JjMjAwNzBkMDllNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxG/35aFccDJn3+9ymO0+TjhTSkC 0wd/HooyMRIZ+k+I3GcrmL73uXVkV66zf5nBQfv4ykC4ECD3tLJNOOKe9fgugIwI tSbbhSWCzqvaeok9NRSxry2PCi0YW2Op+KnsOCitER9NUfJr9CGthp9ONEnv0i43 ZuQFYDiNYZzFWdaZBD9P2p1YyFygN+nG+fVXf14LZd2bMZILjjvuRBwNXsouGeIL omTi8N0ovVVYMpPTo2YAp4waDINN1HL41RXl1Az82K5AgxugbL0XhzUUq5sdFAM8 AC/U8tNdHlE8WkIIuRljzJEcVVvBzJmgy6IErtHGp5UCB93dncbqP4t2zwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLPdNcz/bCuGofrY8QO8IAcNCeUNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzQ0ZDRh My03YTg0LTQ0OTktOGI3MS0yYjEwNTA1MWJhNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNDRkNGEz LTdhODQtNDQ5OS04YjcxLTJiMTA1MDUxYmE1OS8xL3M5MDF6UDlzSzRhaC10anhB N3dnQncwSjVRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWWuAAwQCua2cMA0EAgACMAcDBQAqAa/AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCgBDANBgkqhkiG9w0BAQsFAAOCAQEAAl/S PCDKmMbHU0Y+vKzA1e8FJmdGtiU7U0Vw9FUYDXV8ekpye6As49ZBNe/gXSL6EpHu hhJweuaNoMfSsE4Y/a3OP44n+3XbQeQlULWlEqC/tP32oO6fTlO0ng//kRXDzykz 5Ji6mPvCFHeren8w2z+2S7f9tPfMxMKejPt/TlZAgV7i39g8lvbB6hiAW2lQMSnD sBj10xtoVdVB79LG/rhp5GCzUksgSUjjlqjPZiviYcX7LkDhOcokxpccC10pFe0z 24iEXEPTxT9pGtorQF0qA5Z8pEYzasBogwxqkjT53vv5/B12ARByeskLZr0zXCfC RC5wcb9zSBJ2YNH+5w== -----END CERTIFICATE-----Generated at Wed Jan 21 18:47:38 2026 by rpki-client