This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer (raw, json) Hash identifier: y2mmb/PGvhfThuaj7LUvYKZwFI1PKE6hQeBnG3S940A= Subject key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D3144933240AD59514A1F6824BD7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30769 IP: 193.19.88.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d3:14:49:33:24:0a:d5:95:14:a1:f6:82:4b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e9d53310243187083fdc9609735465b1089043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:fb:96:2a:8a:6b:e2:3d:f8:e2:02:2e:8e: 88:45:79:5e:9a:fa:16:ae:0a:e8:31:ac:08:a6:12: f5:a3:f6:3b:2b:ac:fc:76:20:f3:e6:82:36:db:d8: 8f:ab:01:42:eb:07:4e:ee:62:6b:74:ff:01:08:14: 1d:a6:dc:31:8c:e1:08:92:71:95:79:bd:29:5e:09: 55:35:48:a8:ce:b7:dd:9f:67:7c:04:6e:24:67:19: 1e:f5:36:28:39:c1:47:53:46:7e:c8:9e:a6:eb:03: 1f:e3:a6:d6:b6:45:8a:4d:0c:79:86:c5:99:4d:4e: 3e:ed:ad:b5:ca:83:2b:b1:eb:72:ba:db:d2:db:91: ab:21:38:3c:08:66:7e:17:5e:d2:4a:20:d7:86:76: a4:92:13:8d:73:eb:b5:98:6c:b9:05:ec:b2:9d:9f: 46:2d:90:80:92:e9:64:96:a1:59:dc:ad:59:40:a9: ca:e2:b7:78:b6:f4:97:3d:7b:05:80:ac:f8:d2:e0: 95:9b:9f:b2:a5:b3:03:9a:31:67:9d:10:bb:f2:84: 52:57:d5:57:25:a0:c9:d6:6d:73:6c:62:c8:2f:0b: 91:ef:da:0a:12:05:b5:a5:b1:1f:10:d8:ec:3f:3c: 00:61:03:8b:0e:d9:e3:08:ce:e3:3d:ff:4d:8b:ee: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.88.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30769 Signature Algorithm: sha256WithRSAEncryption 11:77:92:b4:1b:a8:61:d7:56:59:34:11:16:ef:6e:c8:8b:02: 42:c4:97:54:d0:04:47:f6:9a:b0:ac:38:6d:8a:40:17:58:44: 70:16:b8:08:db:3b:5e:ea:5c:40:eb:83:fc:56:2e:7d:29:e3: 58:9d:56:d6:f7:20:7c:39:1b:4c:1b:a2:a6:32:bf:d9:9c:37: 7e:d9:03:7c:4f:2b:10:ce:88:4d:55:42:99:d9:c8:f8:47:f2: ee:58:06:e4:c9:ac:e6:cb:b7:58:fb:b5:fd:d6:46:e0:8f:95: 59:a1:d0:fb:fa:3b:24:45:c3:a7:b2:7a:a8:21:7f:43:72:f0: 19:ea:f0:6e:0c:9d:29:14:40:3b:6f:1a:29:81:d0:d7:a6:ae: 7c:92:74:2a:9e:44:23:22:67:7d:f2:e1:93:23:d6:b1:23:d0: cc:64:db:08:2d:a9:bf:fd:5b:59:3a:1d:ee:2b:44:35:8e:30: d7:86:bd:51:cd:6d:5d:da:7d:44:da:cd:cf:e0:a2:6f:15:3a: b1:7f:49:c0:94:d5:82:f0:40:10:51:17:3b:b6:cd:1e:bd:5e: 35:86:83:b7:54:bb:95:7f:33:84:68:32:64:df:81:55:52:e8: 3b:d5:3f:6a:ab:80:5c:e7:d5:6b:62:d6:0e:07:3f:3f:cc:1e: 46:22:9f:05 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/FdMUSTMkCtWVFKH2gkvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU5ZDUzMzEwMjQzMTg3MDgzZmRjOTYwOTczNTQ2NWIxMDg5MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9j7liqKa+I9+OICLo6IRXlemvoW rgroMawIphL1o/Y7K6z8diDz5oI229iPqwFC6wdO7mJrdP8BCBQdptwxjOEIknGV eb0pXglVNUiozrfdn2d8BG4kZxke9TYoOcFHU0Z+yJ6m6wMf46bWtkWKTQx5hsWZ TU4+7a21yoMrsetyutvS25GrITg8CGZ+F17SSiDXhnakkhONc+u1mGy5BeyynZ9G LZCAkulklqFZ3K1ZQKnK4rd4tvSXPXsFgKz40uCVm5+ypbMDmjFnnRC78oRSV9VX JaDJ1m1zbGLILwuR79oKEgW1pbEfENjsPzwAYQOLDtnjCM7jPf9Ni+7R9QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFPTp1TMQJDGHCD/clglzVGWxCJBDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzI4NWYz Mi0wM2VhLTQxNmUtOWNiMC03ZTY2NjQ4ZmMyNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMjg1ZjMy LTAzZWEtNDE2ZS05Y2IwLTdlNjY2NDhmYzI2NC8xLzlPblZNeEFrTVljSVA5eVdD WE5VWmJFSWtFTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwRNYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AngxMA0GCSqGSIb3DQEBCwUAA4IBAQARd5K0G6hh11ZZNBEW727IiwJCxJdU0ARH 9pqwrDhtikAXWERwFrgI2zte6lxA64P8Vi59KeNYnVbW9yB8ORtMG6KmMr/ZnDd+ 2QN8TysQzohNVUKZ2cj4R/LuWAbkyazmy7dY+7X91kbgj5VZodD7+jskRcOnsnqo IX9DcvAZ6vBuDJ0pFEA7bxopgdDXpq58knQqnkQjImd98uGTI9axI9DMZNsILam/ /VtZOh3uK0Q1jjDXhr1RzW1d2n1E2s3P4KJvFTqxf0nAlNWC8EAQURc7ts0evV41 hoO3VLuVfzOEaDJk34FVUug71T9qq4Bc59VrYtYOBz8/zB5GIp8F -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:37 2026 by rpki-client