This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer File: v9P33PxgiR_DiPpcHb118nuVGeI.cer (raw, json) Hash identifier: tcF8rT2Ox3t++cPWlZmduZW5odeiHgtHBoudVq20Hqc= Subject key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECB5C789F703326D9F8ADF667DB3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42472 IP: 194.1.209.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cb:5c:78:9f:70:33:26:d9:f8:ad:f6:67:db:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d6:89:f0:00:af:5f:16:3e:ca:0f:03:1b:df: e9:b8:d9:25:09:11:3e:5a:96:65:e3:58:9e:9b:29: 5b:d2:2a:27:f5:f5:c2:14:e4:ed:bf:7f:21:35:15: 6e:43:78:b3:aa:dc:a4:5c:08:9c:29:ef:50:7c:2a: 1c:2b:67:f6:d1:f3:83:eb:fc:37:59:4f:f0:4a:c3: ef:c1:3d:65:62:b2:6c:74:73:4a:a0:f4:cb:2e:5c: 2a:0a:cd:57:74:a4:7b:5b:87:86:11:c7:6c:ab:80: 0f:86:c7:c0:f0:72:02:b5:e5:47:91:71:21:ed:0c: 6e:fe:65:17:65:11:70:ea:35:0d:18:4c:8d:e7:99: 6a:3d:32:7d:0c:18:ea:70:bf:67:dc:df:c9:04:ab: 07:50:5f:27:14:00:54:01:06:83:9e:41:99:bc:a9: 2e:9d:10:aa:1f:68:72:8a:0f:bc:39:2b:50:2c:52: cc:55:2c:b9:6f:65:cd:40:70:de:90:de:ca:36:ca: 6e:7b:31:3f:6c:11:c3:ec:4f:fb:ed:c4:38:32:65: 6f:55:7e:f9:17:31:49:36:b8:5a:81:a3:35:3f:4f: eb:4b:fb:ba:9f:ca:58:a6:e4:12:0e:b5:b2:2f:a5: 94:19:af:27:f3:79:c6:4b:60:60:43:8c:47:bf:96: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.209.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42472 Signature Algorithm: sha256WithRSAEncryption 3b:e8:93:0a:67:dc:8e:52:4a:31:c7:43:44:7f:66:5b:a5:1f: bd:3e:bd:40:64:f8:02:33:cc:82:69:ee:c8:66:e8:0d:14:22: a9:65:21:34:4e:a8:0f:7e:2b:3d:05:e9:70:35:f9:7e:df:cc: 08:b4:11:dc:78:da:d9:e8:b3:d3:a0:c1:e9:fa:ae:d4:7c:c0: a4:fa:75:d7:1c:d8:b9:1b:86:c2:dc:8c:8d:d7:39:1d:d1:dd: 18:f9:c5:7a:7f:85:f2:74:65:a0:e7:8a:1a:ce:5e:e8:2f:25: 6b:c3:c7:d6:98:8f:79:02:cf:13:88:2e:44:40:ad:15:ac:dd: 2c:92:92:9b:bd:8b:11:00:66:3b:d2:8e:5f:9c:b5:67:28:14: 70:75:6b:08:30:70:37:0d:4a:3b:98:c0:38:64:9d:fe:ab:ea: 83:33:7f:f6:a3:ba:88:14:34:d9:75:12:58:17:da:aa:c7:13: d6:11:93:f6:9b:ea:10:e1:20:b2:ca:35:1d:3c:33:c6:dd:c2: c1:01:d0:90:a5:73:cd:1e:ac:0d:3d:ad:50:76:01:7b:10:52: 9d:a7:ce:5b:a7:83:f6:66:54:f2:8e:1f:6a:8d:4f:c9:fc:28: a5:0c:f4:3c:df:94:99:bc:22:c9:69:48:91:c8:b0:ac:21:0c: 38:8b:d3:bc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fstceJ9wMybZ+K32Z9s/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQzZjdkY2ZjNjA4OTFmYzM4OGZhNWMxZGJkNzVmMjdiOTUxOWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59aJ8ACvXxY+yg8DG9/puNklCRE+ WpZl41iemylb0ion9fXCFOTtv38hNRVuQ3izqtykXAicKe9QfCocK2f20fOD6/w3 WU/wSsPvwT1lYrJsdHNKoPTLLlwqCs1XdKR7W4eGEcdsq4APhsfA8HICteVHkXEh 7Qxu/mUXZRFw6jUNGEyN55lqPTJ9DBjqcL9n3N/JBKsHUF8nFABUAQaDnkGZvKku nRCqH2hyig+8OStQLFLMVSy5b2XNQHDekN7KNspuezE/bBHD7E/77cQ4MmVvVX75 FzFJNrhagaM1P0/rS/u6n8pYpuQSDrWyL6WUGa8n83nGS2BgQ4xHv5aO2QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFL/T99z8YIkfw4j6XB29dfJ7lRniMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlL2QzYTY5 NS01YWZlLTQ2YjYtYmU1OS01OGZlZDI4MjJjYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvZDNhNjk1 LTVhZmUtNDZiNi1iZTU5LTU4ZmVkMjgyMmNhMy8xL3Y5UDMzUHhnaVJfRGlQcGNI YjExOG51VkdlSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgHRMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCl6DANBgkqhkiG9w0BAQsFAAOCAQEAO+iTCmfcjlJKMcdDRH9mW6UfvT69QGT4 AjPMgmnuyGboDRQiqWUhNE6oD34rPQXpcDX5ft/MCLQR3Hja2eiz06DB6fqu1HzA pPp11xzYuRuGwtyMjdc5HdHdGPnFen+F8nRloOeKGs5e6C8la8PH1piPeQLPE4gu RECtFazdLJKSm72LEQBmO9KOX5y1ZygUcHVrCDBwNw1KO5jAOGSd/qvqgzN/9qO6 iBQ02XUSWBfaqscT1hGT9pvqEOEgsso1HTwzxt3CwQHQkKVzzR6sDT2tUHYBexBS nafOW6eD9mZU8o4fao1PyfwopQz0PN+UmbwiyWlIkciwrCEMOIvTvA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:55 2026 by rpki-client