This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer (raw, json) Hash identifier: UA2YFZN2n8NWQ9uU4Q1jgq/iwQPi9pwDSWX+ZqsjAPM= Subject key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE4F8EE8EB0F7115A5F0A56702FBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50120 IP: 193.39.200.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:f8:ee:8e:b0:f7:11:5a:5f:0a:56:70:2f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e155548ec9abe11ef3be70606a4b987eae3825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:a5:c6:45:c0:17:d2:07:e2:2f:cd:e1:ad: ca:99:58:eb:a0:51:16:6c:3a:9a:9e:97:24:f4:03: 62:32:2b:81:0a:c2:63:4c:e3:3a:db:30:64:40:f2: 2c:fe:88:a4:72:dd:f6:67:bd:99:be:fb:b9:d6:1c: 4c:87:b0:cb:a3:97:c3:45:93:27:94:bd:88:09:c7: 3c:b0:d5:a9:3e:83:9c:cc:52:b2:97:ea:49:ae:8b: 13:38:f0:4d:3f:5e:6b:88:d6:78:33:46:bf:bb:52: 19:74:2f:39:2b:3b:ca:80:43:e3:20:b6:b4:71:40: 71:7b:6b:91:4c:6a:61:42:71:70:d1:07:8b:fa:ee: 80:00:a9:f9:6d:15:bd:a2:76:b5:85:11:92:0a:02: b5:43:88:0f:ee:50:fc:90:4f:53:16:9e:04:0c:d2: 31:c8:19:e2:a5:7c:e8:2f:44:73:64:24:fd:fe:22: 3b:3f:fa:e6:ce:8e:a2:50:4f:41:33:82:60:03:87: 38:77:c8:1d:2d:91:b1:2b:d7:bf:de:e1:dc:61:f6: 12:0c:c3:fc:e3:87:10:94:92:cb:2a:40:32:9d:6f: 12:91:49:a3:67:24:4a:ef:50:45:8d:2c:92:1b:77: d5:7d:76:4d:95:5e:7d:03:0f:ac:8f:e4:ad:c0:7e: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.200.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50120 Signature Algorithm: sha256WithRSAEncryption a5:f1:69:91:b6:32:b6:db:19:e1:36:02:d6:e2:09:6a:34:d4: 8a:35:2f:45:f1:9d:fa:e1:eb:0d:dd:c3:20:aa:22:6e:44:d1: 44:c9:3a:c4:7e:ff:35:35:6e:8e:e0:a1:b5:5e:0c:e0:95:f3: 61:bd:ab:a7:5d:10:76:82:f1:d2:89:15:06:25:92:71:f0:a9: 64:ff:bb:6b:76:4b:19:c4:e5:9e:f7:4e:f3:88:51:aa:f9:aa: 3a:47:7c:e0:b4:53:5b:78:4d:7c:46:2b:00:61:b4:71:19:b1: 4f:bb:67:52:1c:c2:da:39:58:d2:cf:51:2c:9d:af:6d:06:cb: 4e:21:7d:01:ad:c4:f3:4c:2d:eb:2a:36:ef:f1:bb:a0:e2:bc: 0b:b3:59:1d:ab:2c:6f:b7:d7:e9:9e:48:0e:73:2e:23:e6:8f: 18:19:e7:c9:59:b6:53:6a:d1:a1:d3:c2:50:7c:a4:61:3c:1a: e0:e4:f0:2c:b2:d5:41:4e:bc:8c:99:76:82:44:7f:6b:e7:f7: 00:94:99:0e:93:04:be:21:6c:75:a4:72:19:85:58:25:4e:c0: 6f:c4:bc:f0:33:a9:80:c3:0d:7a:22:0e:4a:bb:5d:b7:ee:ec: be:df:28:08:1f:4a:af:7f:c8:8b:10:d8:6e:4b:22:33:a0:cb: 5e:4c:e5:99 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XOT47o6w9xFaXwpWcC+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGUxNTU1NDhlYzlhYmUxMWVmM2JlNzA2MDZhNGI5ODdlYWUzODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsulxkXAF9IH4i/N4a3KmVjroFEW bDqanpck9ANiMiuBCsJjTOM62zBkQPIs/oikct32Z72Zvvu51hxMh7DLo5fDRZMn lL2ICcc8sNWpPoOczFKyl+pJrosTOPBNP15riNZ4M0a/u1IZdC85KzvKgEPjILa0 cUBxe2uRTGphQnFw0QeL+u6AAKn5bRW9ona1hRGSCgK1Q4gP7lD8kE9TFp4EDNIx yBnipXzoL0RzZCT9/iI7P/rmzo6iUE9BM4JgA4c4d8gdLZGxK9e/3uHcYfYSDMP8 44cQlJLLKkAynW8SkUmjZyRK71BFjSySG3fVfXZNlV59Aw+sj+StwH4clwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPThVVSOyavhHvO+cGBqS5h+rjglMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzRlZGU5 ZC1jZGY4LTRjMjgtODhiMy1jOWYxNmU4MGIzYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNGVkZTlk LWNkZjgtNGMyOC04OGIzLWM5ZjE2ZTgwYjNjNC8xLzlPRlZWSTdKcS1FZTg3NXdZ R3BMbUg2dU9DVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwSfIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDDyDANBgkqhkiG9w0BAQsFAAOCAQEApfFpkbYyttsZ4TYC1uIJajTUijUvRfGd +uHrDd3DIKoibkTRRMk6xH7/NTVujuChtV4M4JXzYb2rp10QdoLx0okVBiWScfCp ZP+7a3ZLGcTlnvdO84hRqvmqOkd84LRTW3hNfEYrAGG0cRmxT7tnUhzC2jlY0s9R LJ2vbQbLTiF9Aa3E80wt6yo27/G7oOK8C7NZHassb7fX6Z5IDnMuI+aPGBnnyVm2 U2rRodPCUHykYTwa4OTwLLLVQU68jJl2gkR/a+f3AJSZDpMEviFsdaRyGYVYJU7A b8S88DOpgMMNeiIOSrtdt+7svt8oCB9Kr3/IixDYbksiM6DLXkzlmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:32 2026 by rpki-client