This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer File: 9EDl66L4v8j-j-VsyIpCiWUjkLo.cer (raw, json) Hash identifier: ZzvhGdMeSopzSAft1dAhguX6cdpvoMIjzCtXmlE4wnc= Subject key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E5B15AF54FA3514897EB1C6F4D028 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31560 IP: 91.192.240.0/22 IP: 193.17.69.0/24 IP: 195.225.128.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5b:15:af:54:fa:35:14:89:7e:b1:c6:f4:d0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:cf:c7:ab:b1:b9:91:10:3b:5c:04:f5:22: 4c:82:a0:fb:af:db:3c:dd:5b:ca:f0:36:fe:64:f6: d4:c3:9b:8c:7e:c5:f5:b9:2e:80:5d:14:97:30:66: 40:db:9b:03:17:cf:0e:45:28:a4:98:73:ef:67:54: a0:e1:ce:b1:e2:06:a1:61:2a:d5:e7:0e:28:33:4c: d8:76:88:24:7e:e7:63:9f:47:5d:1f:87:83:40:21: 68:26:c9:87:23:fb:5d:bf:e9:df:dd:3b:f3:af:a7: 96:00:25:35:d7:95:74:88:c2:05:cb:80:13:34:43: 07:0f:a2:5c:94:28:11:b9:00:49:26:04:c4:0a:74: c3:19:37:93:00:85:88:29:dc:16:5f:a2:da:1a:a2: b3:51:d2:84:a8:66:fc:c1:42:8c:09:71:9f:cc:0e: 86:a5:62:c9:89:75:80:13:b6:c2:08:8d:1a:6f:41: 2e:b7:7b:c6:6c:62:18:1c:84:17:e3:60:34:e0:15: 24:92:54:4a:64:26:3d:96:b7:31:5c:43:ff:ca:ef: 72:b7:95:78:0f:42:ef:ec:d0:9e:0e:66:21:90:28: 39:de:1e:f4:9c:78:17:aa:c6:10:8c:25:ca:0e:75: 49:de:15:40:fb:68:3e:5a:db:65:4c:24:54:1e:d6: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.240.0/22 193.17.69.0/24 195.225.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31560 Signature Algorithm: sha256WithRSAEncryption 83:2c:31:ec:11:d7:32:c0:0f:eb:ba:21:02:0b:59:c8:df:8b: 51:cd:36:89:32:a1:d9:3a:47:59:ed:a5:b7:4e:d3:93:d8:19: ab:62:76:5f:cc:7f:dd:74:68:ca:f0:e9:7c:b9:82:3d:ca:15: 88:26:cb:a8:c6:d3:d6:b0:33:4f:76:f8:b9:64:93:4a:b9:89: 49:47:cd:f4:46:f4:4f:ff:74:18:ba:8b:66:fa:ea:6e:31:09: 99:56:2f:54:bd:16:d5:0a:15:39:1c:9f:63:34:df:de:97:6a: a8:73:b9:f4:c6:1a:12:fb:fa:ac:59:2d:af:5d:c6:42:5a:62: d8:02:45:38:82:9f:ef:c3:37:f5:3a:1d:cc:cb:28:8b:ff:0d: ad:a5:d0:8f:c7:4a:d6:bf:3c:75:83:61:15:0a:f0:9e:64:f6: 77:0c:07:cb:e9:89:87:70:7e:fd:4c:06:c6:9d:45:05:8f:b0: 07:e5:4d:45:40:cc:f9:d5:e5:63:82:d5:42:20:cb:18:d0:97: 63:f6:1d:4d:ce:99:ba:5b:a9:46:72:6c:1f:de:a2:a9:f6:31: db:3a:cc:c9:99:f9:4b:a6:a9:15:ab:ea:5e:7d:21:c3:08:9d: 6d:77:fd:85:0e:55:6c:3d:0c:7d:17:01:89:c8:11:04:51:c9: 42:1f:a7:73 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5flsVr1T6NRSJfrHG9NAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDQwZTVlYmEyZjhiZmM4ZmU4ZmU1NmNjODhhNDI4OTY1MjM5MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv/Px6uxuZEQO1wE9SJMgqD7r9s8 3VvK8Db+ZPbUw5uMfsX1uS6AXRSXMGZA25sDF88ORSikmHPvZ1Sg4c6x4gahYSrV 5w4oM0zYdogkfudjn0ddH4eDQCFoJsmHI/tdv+nf3Tvzr6eWACU115V0iMIFy4AT NEMHD6JclCgRuQBJJgTECnTDGTeTAIWIKdwWX6LaGqKzUdKEqGb8wUKMCXGfzA6G pWLJiXWAE7bCCI0ab0Eut3vGbGIYHIQX42A04BUkklRKZCY9lrcxXEP/yu9yt5V4 D0Lv7NCeDmYhkCg53h70nHgXqsYQjCXKDnVJ3hVA+2g+WttlTCRUHtY8tQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFPRA5eui+L/I/o/lbMiKQollI5C6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2RlODY2 Mi05OTNmLTQ3ZjctYTI3Zi0wMGI5MmMxYzFlZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZGU4NjYy LTk5M2YtNDdmNy1hMjdmLTAwYjkyYzFjMWVmNC8xLzlFRGw2Nkw0djhqLWotVnN5 SXBDaVdVamtMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW8DwAwQAwRFFAwQCw+GAMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAntIMA0GCSqGSIb3DQEBCwUAA4IBAQCDLDHsEdcywA/ruiEC C1nI34tRzTaJMqHZOkdZ7aW3TtOT2BmrYnZfzH/ddGjK8Ol8uYI9yhWIJsuoxtPW sDNPdvi5ZJNKuYlJR830RvRP/3QYuotm+upuMQmZVi9UvRbVChU5HJ9jNN/el2qo c7n0xhoS+/qsWS2vXcZCWmLYAkU4gp/vwzf1Oh3MyyiL/w2tpdCPx0rWvzx1g2EV CvCeZPZ3DAfL6YmHcH79TAbGnUUFj7AH5U1FQMz51eVjgtVCIMsY0Jdj9h1Nzpm6 W6lGcmwf3qKp9jHbOszJmflLpqkVq+pefSHDCJ1td/2FDlVsPQx9FwGJyBEEUclC H6dz -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:39 2026 by rpki-client