This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.cer (raw, json) Hash identifier: xVvNLkamWM4aIObrTlalG1sLTYEt5QORt8czh3PY4Q8= Subject key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4E0713BBF90C9E6F03B2A08AC055 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47550 IP: 91.241.19.0/24 IP: 193.106.236.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4e:07:13:bb:f9:0c:9e:6f:03:b2:a0:8a:c0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:ad:89:f2:b3:08:cd:92:29:2e:ea:f4:9a: 5e:e5:9b:96:0c:ec:b6:47:4e:31:52:36:6e:b7:82: ae:32:e4:65:fc:46:5c:c0:79:30:63:1f:d1:f6:bb: 7f:a3:39:77:b2:7a:8a:a3:4f:d5:b8:e2:3a:b0:c1: 00:fc:b8:2d:17:8c:c8:c0:37:c1:36:0a:98:84:3a: c8:23:67:e6:b6:70:be:78:03:71:e0:0c:88:ae:78: e8:ba:b4:a7:ef:93:87:c2:71:4a:94:c6:2a:da:f1: 30:10:45:b8:45:13:42:da:ad:53:9a:0e:2d:94:27: b6:6f:9e:a9:65:85:92:87:b6:a8:57:7d:2b:61:71: be:1e:57:25:83:b4:5c:c0:f3:c7:c2:ff:89:15:fb: 6e:05:60:09:f0:ea:9f:a4:03:18:1e:0f:d7:ab:9b: 1b:d2:fb:b9:d8:55:6f:6e:4e:1a:fa:c1:15:45:f5: b2:08:98:14:09:12:ff:a1:2e:64:57:50:5a:92:35: ef:66:ab:c0:a3:6c:c0:56:85:37:93:bd:57:57:84: 25:b7:47:25:5b:68:e5:8f:d8:53:36:ac:4e:49:dd: 17:2c:60:f3:6f:b1:72:b7:e7:0e:13:7d:36:64:1b: 6d:87:da:30:3a:39:ff:a2:5b:00:ce:0b:24:12:12: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.19.0/24 193.106.236.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47550 Signature Algorithm: sha256WithRSAEncryption 1d:a0:fb:3a:7e:7e:d0:37:1c:d1:47:ae:a3:d5:88:dc:58:26: 0e:8e:50:b7:9a:5d:05:6a:8a:af:ff:c6:74:19:88:96:07:07: 19:05:a1:bf:b2:83:43:c2:a5:a2:80:d2:b1:8f:11:28:82:d3: 75:cc:dd:f7:ba:77:d3:61:3c:d4:32:e3:32:0d:40:67:0d:17: 3b:98:08:42:66:9b:4f:cd:2a:99:2a:24:63:23:5c:94:66:a8: 3b:f2:75:76:9d:84:76:ac:d9:3a:52:c9:e7:6c:13:f5:e4:39: 3f:f6:fc:8d:54:48:62:e5:a0:ab:c3:53:9c:3d:62:7c:75:ca: be:18:1c:06:6f:15:f1:4f:44:fc:9b:aa:33:ca:47:6e:a3:f5: 4d:19:67:26:6a:b1:92:85:66:16:76:fc:45:86:21:c4:b6:19: 7e:2b:35:7f:c2:84:ed:e0:bf:94:95:a0:bc:18:1c:19:7f:f4: b1:f0:20:7d:c2:8c:d2:be:75:f2:06:c3:a5:b8:ed:5c:66:c2: 27:13:6b:5e:d9:00:9b:3f:14:5d:b4:7c:d2:18:48:0a:8b:0f: e9:be:4e:36:8f:04:0a:5a:d5:30:aa:59:63:31:7f:c2:9e:87: be:08:32:d4:e5:00:8a:a1:60:ef:cb:b3:02:20:03:6d:5e:a6: a6:32:8b:65 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt87U4HE7v5DJ5vA7KgisBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWNmNWQ5MmRkNzdiOGVmN2VkNmNkNTdjYWFhMTBhZmQ5OGU5ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDGtifKzCM2SKS7q9Jpe5ZuWDOy2 R04xUjZut4KuMuRl/EZcwHkwYx/R9rt/ozl3snqKo0/VuOI6sMEA/LgtF4zIwDfB NgqYhDrII2fmtnC+eANx4AyIrnjourSn75OHwnFKlMYq2vEwEEW4RRNC2q1Tmg4t lCe2b56pZYWSh7aoV30rYXG+Hlclg7RcwPPHwv+JFftuBWAJ8OqfpAMYHg/Xq5sb 0vu52FVvbk4a+sEVRfWyCJgUCRL/oS5kV1BakjXvZqvAo2zAVoU3k71XV4Qlt0cl W2jlj9hTNqxOSd0XLGDzb7Fyt+cOE302ZBtth9owOjn/olsAzgskEhLJhQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNHPXZLdd7jvftbNV8qqEK/Zjp5aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzI5NGEx Mi0zMGViLTRhZWItOTVjOC01MDFhMDcxOWRhMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvMjk0YTEy LTMwZWItNGFlYi05NWM4LTUwMWEwNzE5ZGEwYy8xLzBjOWRrdDEzdU85LTFzMVh5 cW9RcjltT25sby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW/ETAwQBwWrsMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC5vjANBgkqhkiG9w0BAQsFAAOCAQEAHaD7On5+0Dcc0Ueuo9WI3Fgm Do5Qt5pdBWqKr//GdBmIlgcHGQWhv7KDQ8KlooDSsY8RKILTdczd97p302E81DLj Mg1AZw0XO5gIQmabT80qmSokYyNclGaoO/J1dp2EdqzZOlLJ52wT9eQ5P/b8jVRI YuWgq8NTnD1ifHXKvhgcBm8V8U9E/JuqM8pHbqP1TRlnJmqxkoVmFnb8RYYhxLYZ fis1f8KE7eC/lJWgvBgcGX/0sfAgfcKM0r518gbDpbjtXGbCJxNrXtkAmz8UXbR8 0hhICosP6b5ONo8EClrVMKpZYzF/wp6Hvggy1OUAiqFg78uzAiADbV6mpjKLZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:46 2026 by rpki-client