This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer File: u9Qr14Mqar4W4VIqLX5OQNProKI.cer (raw, json) Hash identifier: 3d9D1pOPng+6k8XUfWdKq+JpA6F/pfgr0QqFwy1Gj6o= Subject key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C760F38EBA38846561D4E4167CF9EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206339 IP: 185.188.244.0/22 IP: 193.28.216.0/22 IP: 2a0b:d380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:f3:8e:ba:38:84:65:61:d4:e4:16:7c:f9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:32:1b:3e:fe:99:eb:8c:db:07:b5:8b:da: f9:79:27:80:e8:2b:ee:9f:81:a4:02:1a:3a:0f:2e: 6a:98:22:36:fe:e1:24:56:03:25:07:96:04:97:96: c2:7d:9d:83:a9:9d:62:7c:9d:b5:9c:14:e8:4c:78: e0:b3:ee:f3:ec:ed:c9:f2:5f:ef:8b:df:f1:12:ff: cd:89:26:7f:cb:06:27:fd:31:7a:59:b0:c9:08:1e: 48:5a:fe:d5:6a:61:06:2e:47:ee:d0:b4:ce:4b:29: 50:ea:66:87:23:bc:17:96:29:e7:1e:62:4c:03:9a: a1:9b:f5:32:69:93:c0:15:b1:1c:88:60:75:40:02: a3:2b:e2:91:f4:73:a0:e0:66:3c:bc:ee:d6:d7:54: 3a:6b:9b:68:a5:d6:f6:fd:b3:e3:8c:76:04:e8:e2: be:68:cf:b6:09:b7:76:67:3b:3f:8c:9f:c8:b6:12: ae:b8:f8:d0:76:1a:d6:2b:54:a8:f7:41:bb:e0:e8: ba:fe:4f:18:fd:ec:06:9b:9e:07:7d:82:59:24:a3: 8e:7f:7b:3f:0a:74:1b:22:94:67:16:68:5f:46:f6: e1:c4:7e:f7:2f:d4:39:25:09:7b:86:a4:56:1f:83: d8:77:e2:41:e5:0b:d8:b6:9a:87:53:25:2a:7d:69: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.244.0/22 193.28.216.0/22 IPv6: 2a0b:d380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206339 Signature Algorithm: sha256WithRSAEncryption 5b:83:25:e6:eb:93:e1:33:8a:32:ca:3c:46:08:db:a4:86:6c: ed:b9:fc:39:d1:e4:42:6f:a9:a9:f0:4a:fe:e6:dc:05:8c:28: 89:40:5d:f8:5c:c3:33:27:68:90:66:3a:f7:66:0f:d6:a4:bb: 13:da:8d:c5:13:41:d1:c3:b2:73:77:1d:4f:71:08:98:86:e9: fa:a0:74:c3:5d:b1:ca:0f:46:4b:a9:5f:31:ca:68:54:62:54: 52:d7:8c:af:b2:ba:ff:3d:73:6d:72:1d:5c:1a:d9:bb:ad:0e: 3f:35:ae:9a:01:a8:79:59:7d:2a:d5:4f:48:b7:a1:3c:c1:b3: ea:14:85:d3:24:01:38:7d:e7:9c:fa:85:9c:2a:4a:04:a7:bd: 0b:d3:33:53:d0:be:03:fc:de:29:b1:2e:50:98:e7:b7:fb:4c: cd:10:6e:d0:9e:ff:48:40:c3:c6:d1:2f:1f:54:85:6d:53:f5: ce:9f:a7:9b:f9:c7:b3:63:c9:e7:40:19:e9:6f:99:ca:8c:cd: 49:24:be:b9:2d:79:48:a0:cf:a2:4a:93:65:1b:58:cf:2d:79: de:c6:f2:ee:f3:c1:7f:42:77:51:70:b0:d0:f4:94:8d:50:8a: 21:0d:76:0a:e2:8b:50:26:73:fa:1a:20:6a:58:cf:4d:12:f6: 01:d5:d1:37 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3x2Dzjro4hGVh1OQWfPnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmQ0MmJkNzgzMmE2YWJlMTZlMTUyMmEyZDdlNGU0MGQzZWJhMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEcyGz7+meuM2we1i9r5eSeA6Cvu n4GkAho6Dy5qmCI2/uEkVgMlB5YEl5bCfZ2DqZ1ifJ21nBToTHjgs+7z7O3J8l/v i9/xEv/NiSZ/ywYn/TF6WbDJCB5IWv7VamEGLkfu0LTOSylQ6maHI7wXlinnHmJM A5qhm/UyaZPAFbEciGB1QAKjK+KR9HOg4GY8vO7W11Q6a5topdb2/bPjjHYE6OK+ aM+2Cbd2Zzs/jJ/IthKuuPjQdhrWK1So90G74Oi6/k8Y/ewGm54HfYJZJKOOf3s/ CnQbIpRnFmhfRvbhxH73L9Q5JQl7hqRWH4PYd+JB5QvYtpqHUyUqfWm+RwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLvUK9eDKmq+FuFSKi1+TkDT66CiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2QzZmY2 My1lMDk4LTRlNzUtYTM0Ni04MGM4YTg2N2Q3NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZDNmZjYz LWUwOTgtNGU3NS1hMzQ2LTgwYzhhODY3ZDc3MS8xL3U5UXIxNE1xYXI0VzRWSXFM WDVPUU5Qcm9LSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCubz0AwQCwRzYMA0EAgACMAcDBQMqC9OAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmAzANBgkqhkiG9w0BAQsFAAOCAQEAW4Ml 5uuT4TOKMso8RgjbpIZs7bn8OdHkQm+pqfBK/ubcBYwoiUBd+FzDMydokGY692YP 1qS7E9qNxRNB0cOyc3cdT3EImIbp+qB0w12xyg9GS6lfMcpoVGJUUteMr7K6/z1z bXIdXBrZu60OPzWumgGoeVl9KtVPSLehPMGz6hSF0yQBOH3nnPqFnCpKBKe9C9Mz U9C+A/zeKbEuUJjnt/tMzRBu0J7/SEDDxtEvH1SFbVP1zp+nm/nHs2PJ50AZ6W+Z yozNSSS+uS15SKDPokqTZRtYzy153sby7vPBf0J3UXCw0PSUjVCKIQ12CuKLUCZz +hogaljPTRL2AdXRNw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:50:57 2026 by rpki-client