This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer (raw, json) Hash identifier: IXNu259MdNb4RnzbNeEgbbUDxMP9NCuOBnSr2lEqyHA= Subject key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC4EB3824063B307DE0A4E59E5B23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.175.130.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c4:eb:38:24:06:3b:30:7d:e0:a4:e5:9e:5b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:b1:bd:ea:14:47:fb:15:84:19:d1:94:44: c6:2b:a9:c5:45:3a:75:bd:a0:f4:5c:f0:c6:cf:e0: 29:42:ec:67:04:99:e8:1e:20:0c:e9:df:35:82:04: 20:f9:49:59:63:da:78:fa:e2:de:c4:13:c9:b0:1e: 3f:6d:c1:b0:cf:ce:06:e6:30:4a:fb:6d:20:66:38: 35:b4:c3:36:d2:2e:b9:43:a4:a0:66:27:a1:ce:e0: fc:27:c5:fb:5a:bf:44:09:21:a2:e0:92:ec:6d:d2: d3:91:28:b3:f7:a9:35:fc:d3:9d:4e:45:87:84:61: 66:9f:68:0f:cc:49:28:68:25:b6:b3:85:23:8d:65: e0:e9:9f:7b:ca:8b:c7:ef:53:2c:70:5f:d9:94:74: 9d:74:bc:4b:06:23:7f:40:23:59:7a:ee:dc:c6:16: e5:4f:f0:61:bf:32:b4:12:73:a6:62:49:fd:b0:32: 35:9e:c0:43:65:ac:3a:ac:66:18:80:cf:38:48:1f: 23:0a:24:b5:2e:e4:f9:3b:8e:a9:2e:a6:d2:88:ae: fd:e3:ff:01:83:ec:46:43:3c:c5:aa:7e:60:66:ea: a7:bd:ae:2d:ed:5f:67:5c:9a:45:54:e2:1b:17:be: a7:62:03:d2:f9:4a:47:3b:46:68:51:bf:f1:2b:64: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.130.0/24 Signature Algorithm: sha256WithRSAEncryption 92:5b:b5:5d:a7:16:44:08:6d:cd:f1:1c:1a:b8:6f:bc:60:bb: b8:fb:d5:96:94:8e:2d:c0:4b:3e:5f:e2:9f:db:a7:62:14:68: b6:53:cb:a6:e3:eb:08:80:4e:94:8e:a1:cf:af:4b:4c:cc:31: 66:c4:6c:3f:f1:cb:a6:3f:4d:9a:e4:33:d6:a2:23:ab:fe:d2: 41:18:93:87:ff:c9:fa:2b:86:f2:2e:42:48:fa:44:72:b8:52: 0f:59:a6:6f:3a:98:43:0c:9d:df:94:97:f5:38:f9:c9:71:b6: 6b:c5:42:0a:5e:fe:00:c9:26:63:47:f9:a9:34:9f:15:b3:33: e5:93:b4:50:d3:c6:63:5d:d5:28:5c:ec:8f:ca:51:6d:f0:90: 64:5e:84:32:03:5d:a1:b7:3f:ef:43:e5:ed:95:35:1a:a0:72: 3c:2e:db:15:50:52:78:c9:f5:04:22:ec:1a:cb:22:0c:9f:1c: 5f:db:06:ef:0d:10:52:30:7e:e1:83:6c:60:a5:2a:0c:a2:af: ad:72:34:68:e5:72:7c:fd:80:05:c5:a5:bd:f0:2d:11:77:a4: 55:8d:b4:be:c3:60:88:c3:85:7b:48:24:5f:0b:b6:fa:46:50: e6:f6:4a:3a:82:33:97:e8:22:d5:96:37:de:36:f8:00:fa:3d: f7:fb:34:19 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57MTrOCQGOzB94KTlnlsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDk5ODgxODgwYzZmOTk1YzI5YzE3N2JlZDMzYTFhNmUzZDRmYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupyxveoUR/sVhBnRlETGK6nFRTp1 vaD0XPDGz+ApQuxnBJnoHiAM6d81ggQg+UlZY9p4+uLexBPJsB4/bcGwz84G5jBK +20gZjg1tMM20i65Q6SgZiehzuD8J8X7Wr9ECSGi4JLsbdLTkSiz96k1/NOdTkWH hGFmn2gPzEkoaCW2s4UjjWXg6Z97yovH71MscF/ZlHSddLxLBiN/QCNZeu7cxhbl T/BhvzK0EnOmYkn9sDI1nsBDZaw6rGYYgM84SB8jCiS1LuT5O46pLqbSiK794/8B g+xGQzzFqn5gZuqnva4t7V9nXJpFVOIbF76nYgPS+UpHO0ZoUb/xK2RqsQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPSZiBiAxvmVwpwXe+0zoabj1PswMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzM3ZTYz Mi01MjQ2LTQ2YWYtYTcyOS1iM2FmODMwMGFkZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMzdlNjMy LTUyNDYtNDZhZi1hNzI5LWIzYWY4MzAwYWRkMy8xLzlKbUlHSURHLVpYQ25CZDc3 VE9ocHVQVS16QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALq+CMA0GCSqGSIb3DQEBCwUAA4IBAQCSW7Vd pxZECG3N8RwauG+8YLu4+9WWlI4twEs+X+Kf26diFGi2U8um4+sIgE6UjqHPr0tM zDFmxGw/8cumP02a5DPWoiOr/tJBGJOH/8n6K4byLkJI+kRyuFIPWaZvOphDDJ3f lJf1OPnJcbZrxUIKXv4AySZjR/mpNJ8VszPlk7RQ08ZjXdUoXOyPylFt8JBkXoQy A12htz/vQ+XtlTUaoHI8LtsVUFJ4yfUEIuwayyIMnxxf2wbvDRBSMH7hg2xgpSoM oq+tcjRo5XJ8/YAFxaW98C0Rd6RVjbS+w2CIw4V7SCRfC7b6RlDm9ko6gjOX6CLV ljfeNvgA+j33+zQZ -----END CERTIFICATE-----Generated at Mon Jan 26 11:35:23 2026 by rpki-client