This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer (raw, json) Hash identifier: L3y3M733ftoBQeGbRoCDwJvzS0aAKrYaKspWFK946no= Subject key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15EB7A5D1EAB2A2BACAD75C01D6C8C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44567 AS: 216108 IP: 91.240.214.0/23 IP: 91.241.14.0/23 IP: 93.92.152.0/21 IP: 2a01:9c00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:eb:7a:5d:1e:ab:2a:2b:ac:ad:75:c0:1d:6c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:1d:8d:16:53:01:cc:72:1d:68:6a:1c:46: 7a:b1:6f:24:71:d9:ce:a2:b5:25:d6:b1:2c:f6:7b: 15:43:85:a4:96:aa:d0:d6:70:74:d6:fe:6c:1b:7e: 44:0c:a9:b8:d1:8d:24:49:5f:71:2c:db:f3:05:b1: 3f:ff:b0:80:82:09:1c:af:30:1d:3c:4c:a9:91:14: 60:10:08:a9:c2:4a:a6:92:42:3f:79:90:de:f6:28: 03:83:3e:35:4c:be:9f:82:6b:bb:a9:5f:83:68:13: 8b:1d:69:10:f0:e5:e9:54:0f:18:74:35:c7:85:fe: 93:d7:1b:54:bb:02:91:60:ac:32:27:dd:0d:52:c6: f4:90:cb:65:8c:4d:ac:ca:fb:78:51:84:f2:b5:b4: 40:69:51:85:e9:d0:99:09:05:9f:76:df:c7:1c:f5: 38:13:9e:5e:d9:17:ea:f9:f4:76:96:67:20:a1:06: 39:99:54:89:e7:bb:5b:81:4a:54:3a:3c:4a:d8:6f: 28:43:fc:4c:b8:86:63:07:2c:73:a3:fe:f9:ca:17: a8:67:e9:c7:81:fc:ce:fa:55:6b:09:f3:c9:3b:cf: b9:ff:09:5a:f3:aa:74:01:8d:05:f8:1b:2a:35:1d: 99:fb:cf:40:ca:cb:97:93:4c:14:da:05:2a:9b:35: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.214.0/23 91.241.14.0/23 93.92.152.0/21 IPv6: 2a01:9c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44567 216108 Signature Algorithm: sha256WithRSAEncryption 6a:3e:4e:82:9b:64:5a:44:5d:09:b1:4b:f8:a2:77:91:97:f9: 27:2e:27:d5:7a:1e:26:c7:07:ed:f5:80:c0:9c:23:dc:97:35: af:d7:99:b0:56:98:b9:dc:65:db:2d:0e:4e:ae:c8:97:e3:9e: 1d:00:5a:64:86:21:62:13:77:dc:88:b9:71:24:5c:2a:e2:3c: 6e:b5:19:a4:ed:7c:e8:c6:15:d4:6d:24:04:6f:62:30:bf:1b: 3f:fc:df:c6:4a:52:ad:71:50:49:d1:1a:29:52:89:82:1a:5e: 5d:ab:ef:11:dc:f3:4c:e9:fe:3f:2c:f5:72:81:d9:75:fe:fa: 87:7c:d3:b1:f5:5c:fc:b5:05:78:3f:a9:a6:e1:bd:e0:a0:8f: 7f:d3:48:d9:52:9a:af:d8:e2:52:d4:03:4c:94:66:75:b0:e1: 32:11:d5:ec:0b:48:48:46:71:c8:1c:30:6f:ab:8f:c6:97:36: a9:22:54:8c:9a:b9:01:3b:34:12:d4:e4:9f:e9:ca:2b:12:42: e1:fc:06:46:3c:bf:2e:20:2b:ee:6d:bc:d9:cc:df:48:47:9d: 15:97:b7:90:cd:b5:e0:02:67:a7:ee:15:f6:92:fe:0c:22:e9: 04:d9:c7:cf:7f:ac:61:10:ad:1b:26:ec:1c:2e:96:e5:57:b5: 2d:fd:1a:97 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt/Fet6XR6rKiusrXXAHWyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Q2NjI5N2M1Y2RiZDM2ZDg2ODQ5ZGRlYWU3OTg1OTc5ZjQ1MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA4djRZTAcxyHWhqHEZ6sW8kcdnO orUl1rEs9nsVQ4WklqrQ1nB01v5sG35EDKm40Y0kSV9xLNvzBbE//7CAggkcrzAd PEypkRRgEAipwkqmkkI/eZDe9igDgz41TL6fgmu7qV+DaBOLHWkQ8OXpVA8YdDXH hf6T1xtUuwKRYKwyJ90NUsb0kMtljE2syvt4UYTytbRAaVGF6dCZCQWfdt/HHPU4 E55e2Rfq+fR2lmcgoQY5mVSJ57tbgUpUOjxK2G8oQ/xMuIZjByxzo/75yheoZ+nH gfzO+lVrCfPJO8+5/wla86p0AY0F+BsqNR2Z+89AysuXk0wU2gUqmzWLDQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLPWYpfFzb022GhJ3ernmFl59FDKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzkyYzFj Zi01YTIyLTQ1M2MtOTA3Zi1lYjFmODcxNWVlYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvOTJjMWNm LTVhMjItNDUzYy05MDdmLWViMWY4NzE1ZWVjMC8xL3M5WmlsOFhOdlRiWWFFbmQ2 dWVZV1huMFVNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBW/DWAwQBW/EOAwQDXVyYMA0EAgACMAcDBQAq AZwAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCuFwIDA0wsMA0GCSqGSIb3DQEB CwUAA4IBAQBqPk6Cm2RaRF0JsUv4oneRl/knLifVeh4mxwft9YDAnCPclzWv15mw Vpi53GXbLQ5OrsiX454dAFpkhiFiE3fciLlxJFwq4jxutRmk7XzoxhXUbSQEb2Iw vxs//N/GSlKtcVBJ0RopUomCGl5dq+8R3PNM6f4/LPVygdl1/vqHfNOx9Vz8tQV4 P6mm4b3goI9/00jZUpqv2OJS1ANMlGZ1sOEyEdXsC0hIRnHIHDBvq4/GlzapIlSM mrkBOzQS1OSf6corEkLh/AZGPL8uICvubbzZzN9IR50Vl7eQzbXgAmen7hX2kv4M IukE2cfPf6xhEK0bJuwcLpblV7Ut/RqX -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:34 2026 by rpki-client