This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer File: s9FM4YqPHQWmo1OQr0rsjObMVuw.cer (raw, json) Hash identifier: UCD988BJywz5KbRcaozZ6DtKnXiS0bakFannrAWMgT8= Subject key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8519A070567FA3C5B13E8DA2A4BF5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41858 IP: 86.104.65.0/24 IP: 89.37.135.0/24 IP: 89.40.148.0/22 IP: 185.21.92.0/22 IP: 193.34.182.0/23 IP: 2a00:50e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:19:a0:70:56:7f:a3:c5:b1:3e:8d:a2:a4:bf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:31:0c:5b:31:29:74:8b:56:4f:d3:6e:45: 85:6c:a2:3d:66:42:fd:03:28:d3:f3:50:61:74:40: b1:9c:75:bf:88:9d:73:f1:0f:3b:c3:b6:74:35:87: 47:5e:d0:85:13:f8:6c:34:23:ac:14:92:ff:98:b1: cd:31:c6:b5:01:59:95:55:49:3b:05:cf:a9:ae:3c: 61:23:ef:6a:b2:5f:4d:ff:a1:1d:c3:ac:b4:17:67: a3:5a:27:82:1c:d0:d0:c2:d8:8a:63:b1:6d:3b:ff: 16:4e:03:60:e7:2b:e2:ce:6a:70:1a:4f:e3:97:63: 59:3d:ca:b7:5a:cb:fb:7a:f1:d5:97:f7:8a:79:6d: 76:bd:b7:f3:ba:90:b0:aa:8f:c9:b6:5e:a4:0f:b1: 87:86:f0:b9:66:4f:10:18:15:00:75:ae:9c:4f:3c: f3:60:fc:bc:97:0f:ed:54:88:9f:e8:23:be:2b:53: 0b:2a:0e:be:bd:dd:b1:44:84:22:fb:4b:79:4a:28: 58:ba:ec:a8:49:64:a3:99:0c:e9:95:f2:24:35:25: 1d:9e:a6:55:f4:14:4a:99:67:9a:15:f1:62:54:7c: bd:d4:7d:f4:49:e4:f7:6e:9a:92:2c:7e:dc:eb:5d: 54:30:7a:a1:99:72:13:1f:ea:a0:c2:4d:07:54:1d: 76:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.65.0/24 89.37.135.0/24 89.40.148.0/22 185.21.92.0/22 193.34.182.0/23 IPv6: 2a00:50e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41858 Signature Algorithm: sha256WithRSAEncryption a8:23:59:53:1f:5f:a6:29:1e:c2:e5:18:84:df:d2:2f:1c:5e: 53:e2:f4:3e:50:f1:d4:01:d7:67:99:dd:0c:e5:b6:03:16:69: 28:54:63:dd:b2:8a:f0:df:0a:9f:88:4e:75:e7:a7:21:da:85: 55:c8:4e:c6:ee:88:dd:6b:1b:c0:35:10:24:51:ab:8f:56:6c: 59:9f:18:37:47:1b:12:51:be:e9:b4:09:6d:65:3a:b0:95:b5: cd:25:c2:4c:2d:ce:6e:af:0a:d9:17:04:e2:8d:bd:fe:29:62: d5:6b:bf:52:15:17:4b:70:b9:99:99:27:d2:d1:3e:00:02:9a: d0:3d:ed:44:e1:86:77:1c:aa:c9:95:fc:2c:88:c0:e7:55:12: f2:bc:b0:5a:ea:49:b3:b0:cd:66:79:88:ea:22:12:9f:55:56: ed:56:70:66:a7:db:f0:b2:68:a2:b6:79:4b:1e:64:c1:e6:36: 5b:3a:91:c5:c2:36:a7:cd:57:92:75:ee:ad:1f:d0:c5:6b:03: 8a:45:ac:52:6e:a6:29:c7:3f:ce:e7:aa:be:87:48:80:79:54: f8:a1:5f:6d:05:fc:76:53:70:c8:5a:cb:eb:62:b6:af:df:33: ea:e8:78:ec:6c:45:99:b6:22:ff:71:22:8a:d0:80:46:c8:e3: 23:7c:0c:3b -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt/hRmgcFZ/o8WxPo2ipL9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2QxNGNlMThhOGYxZDA1YTZhMzUzOTBhZjRhZWM4Y2U2Y2M1NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIxDFsxKXSLVk/TbkWFbKI9ZkL9 AyjT81BhdECxnHW/iJ1z8Q87w7Z0NYdHXtCFE/hsNCOsFJL/mLHNMca1AVmVVUk7 Bc+prjxhI+9qsl9N/6Edw6y0F2ejWieCHNDQwtiKY7FtO/8WTgNg5yvizmpwGk/j l2NZPcq3Wsv7evHVl/eKeW12vbfzupCwqo/Jtl6kD7GHhvC5Zk8QGBUAda6cTzzz YPy8lw/tVIif6CO+K1MLKg6+vd2xRIQi+0t5SihYuuyoSWSjmQzplfIkNSUdnqZV 9BRKmWeaFfFiVHy91H30SeT3bpqSLH7c611UMHqhmXITH+qgwk0HVB12dQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLPRTOGKjx0FpqNTkK9K7IzmzFbsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzEwMzAz Yy00M2Q1LTQwMzMtODA4YS01MmM2OTlkMzg2Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMTAzMDNj LTQzZDUtNDAzMy04MDhhLTUyYzY5OWQzODZjZC8xL3M5Rk00WXFQSFFXbW8xT1Fy MHJzak9iTVZ1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAVmhBAwQAWSWHAwQCWSiUAwQCuRVcAwQBwSK2 MA0EAgACMAcDBQMqAFDgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCjgjANBgkq hkiG9w0BAQsFAAOCAQEAqCNZUx9fpikewuUYhN/SLxxeU+L0PlDx1AHXZ5ndDOW2 AxZpKFRj3bKK8N8Kn4hOdeenIdqFVchOxu6I3WsbwDUQJFGrj1ZsWZ8YN0cbElG+ 6bQJbWU6sJW1zSXCTC3Obq8K2RcE4o29/ili1Wu/UhUXS3C5mZkn0tE+AAKa0D3t ROGGdxyqyZX8LIjA51US8rywWupJs7DNZnmI6iISn1VW7VZwZqfb8LJoorZ5Sx5k weY2WzqRxcI2p81XknXurR/QxWsDikWsUm6mKcc/zueqvodIgHlU+KFfbQX8dlNw yFrL62K2r98z6uh47GxFmbYi/3EiitCARsjjI3wMOw== -----END CERTIFICATE-----Generated at Mon Jan 26 17:29:17 2026 by rpki-client