This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer (raw, json) Hash identifier: z7y/Nivy0EcscwjSe9dfBrWCmS8Dazk9eMMde2Q38ZY= Subject key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE6BBDCF752718A332D90468DB4236 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214326 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6b:bd:cf:75:27:18:a3:32:d9:04:68:db:42:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:fb:d7:a1:f6:77:34:4a:2c:b4:bd:b5:5f: d9:80:00:b2:8c:6a:7f:1f:9e:54:65:b3:00:00:03: aa:b0:33:8c:14:0b:ad:82:d9:5b:eb:c0:e5:48:6f: b9:3e:c5:c3:3a:33:fb:7c:ed:16:65:c0:93:6c:4a: 96:d2:c1:ca:99:17:6e:3a:26:56:94:8e:9d:09:5d: 50:4f:1f:70:2b:49:8b:82:b4:c7:91:57:ff:aa:95: 8f:2b:2d:ff:60:af:51:c1:0f:5e:e2:6a:df:1b:2b: 6e:59:3f:a8:9a:63:3d:61:bd:2a:8d:8c:97:18:80: 3a:10:ce:04:00:4b:ec:13:7c:fa:13:ed:0f:a0:31: 80:13:97:59:ed:98:8c:64:7b:99:19:19:fe:8c:60: 21:37:3c:2a:56:b1:cc:94:76:87:44:57:42:1c:f0: 0a:a3:8b:20:3a:f0:f4:14:51:d7:f7:b9:a6:99:82: 04:75:1b:4e:21:38:f1:3f:99:f7:b2:e0:fc:ce:03: 32:03:8a:37:d1:14:9f:93:9a:6a:ce:18:84:59:ea: f0:ba:d3:56:84:53:82:b3:9d:8b:bd:39:1b:5c:40: 32:73:d9:5f:49:14:bb:6e:02:40:c0:42:bd:70:36: 37:34:0e:21:16:2f:be:1e:c3:73:da:bb:46:7f:2a: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214326 Signature Algorithm: sha256WithRSAEncryption 62:ac:e4:22:06:a2:b0:59:1d:aa:2b:39:97:8e:6e:cf:fc:cd: 58:7e:59:6a:69:a6:41:f6:74:6f:57:f6:39:32:d8:cf:7d:d8: 1c:a3:cc:33:33:52:ab:23:b8:5c:54:47:65:e3:73:7f:cd:3e: 68:95:98:c0:d8:a9:1d:53:3a:1e:af:79:14:48:1f:30:b5:e6: c9:f9:70:71:b9:bf:21:62:7c:66:6e:e1:ef:21:51:33:7c:1d: f0:86:d9:3c:0e:be:9c:5b:c0:cd:6e:1b:40:99:eb:f8:e8:c9: a1:55:4d:54:1f:a4:c5:14:01:95:3c:84:cd:fb:13:87:84:08: 59:0f:fe:8f:fb:68:4c:fe:f2:49:2e:79:d1:27:e1:b8:86:8e: 3e:8b:ed:f3:5c:85:7a:08:0f:1e:e1:fb:4d:fe:33:90:0f:d3: 75:ca:d7:97:b4:34:49:0e:b8:56:37:f7:fe:41:76:93:32:c7: ab:fa:ed:8a:c7:75:83:80:a4:17:bb:a3:73:74:f6:0f:25:38: fd:bd:93:bc:0f:9e:2a:da:32:9f:a5:44:c2:68:49:e1:75:60: ca:da:e0:a0:eb:b9:19:ef:4c:13:9d:ea:0c:c9:fa:e8:61:05: fc:1f:2d:3b:5f:86:cf:94:22:79:09:82:9b:59:5b:0a:0c:07: 6f:fd:1a:f8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87mu9z3UnGKMy2QRo20I2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDhmNmY0Y2Q1OTI4MGE2NTQ4YmIyMzIwMTdiNGEzYzhhNzUxMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydf716H2dzRKLLS9tV/ZgACyjGp/ H55UZbMAAAOqsDOMFAutgtlb68DlSG+5PsXDOjP7fO0WZcCTbEqW0sHKmRduOiZW lI6dCV1QTx9wK0mLgrTHkVf/qpWPKy3/YK9RwQ9e4mrfGytuWT+ommM9Yb0qjYyX GIA6EM4EAEvsE3z6E+0PoDGAE5dZ7ZiMZHuZGRn+jGAhNzwqVrHMlHaHRFdCHPAK o4sgOvD0FFHX97mmmYIEdRtOITjxP5n3suD8zgMyA4o30RSfk5pqzhiEWerwutNW hFOCs52LvTkbXEAyc9lfSRS7bgJAwEK9cDY3NA4hFi++HsNz2rtGfyolAQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMSPb0zVkoCmVIuyMgF7SjyKdRFuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2U4NzNi Yy05NWY0LTRkY2EtYjk2ZS1hMDM3ZDU3NDQ0ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZTg3M2Jj LTk1ZjQtNGRjYS1iOTZlLWEwMzdkNTc0NDRlMy8xL3hJOXZUTldTZ0taVWk3SXlB WHRLUElwMUVXNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNFNjANBgkqhkiG9w0BAQsFAAOCAQEAYqzkIgaisFkd qis5l45uz/zNWH5ZammmQfZ0b1f2OTLYz33YHKPMMzNSqyO4XFRHZeNzf80+aJWY wNipHVM6Hq95FEgfMLXmyflwcbm/IWJ8Zm7h7yFRM3wd8IbZPA6+nFvAzW4bQJnr +OjJoVVNVB+kxRQBlTyEzfsTh4QIWQ/+j/toTP7ySS550SfhuIaOPovt81yFeggP HuH7Tf4zkA/TdcrXl7Q0SQ64Vjf3/kF2kzLHq/rtisd1g4CkF7ujc3T2DyU4/b2T vA+eKtoyn6VEwmhJ4XVgytrgoOu5Ge9ME53qDMn66GEF/B8tO1+Gz5QieQmCm1lb CgwHb/0a+A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:10 2026 by rpki-client