This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer File: w9bWn9WH0FQXblPRknJoI2GxZzY.cer (raw, json) Hash identifier: DGIWBMn2S7/jSskOCi9XDKbE614/rhyuBJB039OwTXM= Subject key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFCA01B0340A4CE877C371BA0F04B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43172 IP: 91.194.122.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fc:a0:1b:03:40:a4:ce:87:7c:37:1b:a0:f0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d6d69fd587d054176e53d19272682361b16736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:78:85:56:30:c5:64:5d:c8:06:bc:8b:a0: 9a:2c:fc:ed:00:f3:04:1f:5a:0b:36:ce:11:f2:17: b7:26:77:32:e2:12:77:9f:e5:fa:6a:8d:be:4e:d5: 7b:fd:b6:19:33:b0:cb:1a:29:fd:e6:da:56:e0:1e: 3e:21:09:00:18:96:bf:0b:8d:20:4f:f6:9a:1a:be: 9b:fe:e9:17:b9:06:ff:a3:9d:5f:cc:fa:68:eb:33: 29:2e:fe:a1:f5:12:5f:1f:86:35:bb:cc:6c:c7:4c: 2f:be:b2:27:68:f7:a5:3d:18:ba:c3:9e:38:18:d2: 82:f9:4c:44:a5:45:56:4e:33:23:69:a9:30:4f:2b: 72:f2:d4:a0:f6:8a:d1:57:26:77:f8:77:58:f8:fe: df:38:27:b3:bc:03:f7:26:0c:6c:79:bc:a9:08:4e: aa:e1:e6:18:68:b1:28:58:f7:54:d1:4d:04:41:a1: 2c:a6:25:b1:b8:8d:f1:d0:e4:7b:4f:42:bb:b0:47: e4:28:2a:f6:73:00:94:64:8d:c1:50:4a:ad:91:ad: 00:8e:5f:3b:44:d8:41:73:5e:f1:bb:9b:cb:42:5d: c0:63:2d:66:ce:05:cd:3c:43:75:e7:90:91:6d:d3: dc:7e:b4:8e:eb:a4:5f:4c:d7:43:4e:1a:24:b8:68: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.122.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43172 Signature Algorithm: sha256WithRSAEncryption 87:bd:1b:d9:26:75:b0:f2:72:4d:c9:21:9a:c0:ba:f9:72:f8: b9:6b:96:c2:8b:e7:48:bc:01:7d:1d:73:15:89:15:43:cd:3a: df:54:07:d5:6c:76:b0:40:f3:2a:0b:b3:fc:01:d0:19:59:6d: ed:08:37:89:02:89:5b:17:bc:41:0a:77:f6:e3:94:d3:d7:56: 33:2c:64:0f:6b:de:8d:fb:e9:a7:15:66:98:14:15:8f:21:b5: 89:8e:53:d0:81:02:34:72:10:42:de:4d:ed:9b:84:f6:7e:45: 85:78:a8:28:b8:5a:48:b2:fa:82:bb:e5:c3:a4:2b:fe:54:bd: f3:dd:c3:10:39:cc:18:c6:7e:68:68:9c:46:07:49:66:8e:72: 97:89:85:07:53:bd:1f:49:77:6f:96:0f:d7:b4:28:bb:eb:99: 79:38:8a:56:1e:c2:2e:4b:0b:b7:5e:2b:14:c1:b5:3b:bf:bd: b4:8b:f3:05:79:c1:a2:a6:dd:a3:ae:b0:36:80:2c:a2:04:0c: 06:59:95:83:e0:30:96:d1:0a:45:be:53:19:71:d2:e4:e4:df: d0:a5:0a:1f:e0:92:b8:46:ff:cd:26:60:01:fc:a4:13:80:cc: 1f:d7:49:57:9e:61:29:bd:9a:63:d9:d8:f6:e1:d9:ab:b8:9e: 23:83:fa:5a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9WvygGwNApM6HfDcboPBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2Q2ZDY5ZmQ1ODdkMDU0MTc2ZTUzZDE5MjcyNjgyMzYxYjE2NzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKV4hVYwxWRdyAa8i6CaLPztAPME H1oLNs4R8he3Jncy4hJ3n+X6ao2+TtV7/bYZM7DLGin95tpW4B4+IQkAGJa/C40g T/aaGr6b/ukXuQb/o51fzPpo6zMpLv6h9RJfH4Y1u8xsx0wvvrInaPelPRi6w544 GNKC+UxEpUVWTjMjaakwTyty8tSg9orRVyZ3+HdY+P7fOCezvAP3JgxsebypCE6q 4eYYaLEoWPdU0U0EQaEspiWxuI3x0OR7T0K7sEfkKCr2cwCUZI3BUEqtka0Ajl87 RNhBc17xu5vLQl3AYy1mzgXNPEN155CRbdPcfrSO66RfTNdDThokuGjOwQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMPW1p/Vh9BUF25T0ZJyaCNhsWc2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2Q3NzRi Zi0wMGZlLTQzNzktYWQyNC1jYTA4MzYzMTg5OTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvZDc3NGJm LTAwZmUtNDM3OS1hZDI0LWNhMDgzNjMxODk5NS8xL3c5YlduOVdIMEZRWGJsUFJr bkpvSTJHeFp6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8J6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCopDANBgkqhkiG9w0BAQsFAAOCAQEAh70b2SZ1sPJyTckhmsC6+XL4uWuWwovn SLwBfR1zFYkVQ80631QH1Wx2sEDzKguz/AHQGVlt7Qg3iQKJWxe8QQp39uOU09dW MyxkD2vejfvppxVmmBQVjyG1iY5T0IECNHIQQt5N7ZuE9n5FhXioKLhaSLL6grvl w6Qr/lS9893DEDnMGMZ+aGicRgdJZo5yl4mFB1O9H0l3b5YP17Qou+uZeTiKVh7C LksLt14rFMG1O7+9tIvzBXnBoqbdo66wNoAsogQMBlmVg+AwltEKRb5TGXHS5OTf 0KUKH+CSuEb/zSZgAfykE4DMH9dJV55hKb2aY9nY9uHZq7ieI4P6Wg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:07 2026 by rpki-client