This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer File: 9PjslsjuJlw9pCMjClUhk2bdmyg.cer (raw, json) Hash identifier: 2rep/mXFyi42vyi03y2gxFH0q/dx7fKjc3JHgdQrH70= Subject key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33A94C47F563AAD9C82975D05A80D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62050 IP: 185.51.116.0/23 IP: 185.51.119.0/24 IP: 185.60.230.0/24 IP: 2a04:b840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3a:94:c4:7f:56:3a:ad:9c:82:97:5d:05:a8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:1d:6d:19:0a:b3:13:af:c4:ef:c3:aa:ca: cf:a4:ca:9b:c5:99:46:38:16:e0:45:54:53:3d:de: 9c:ea:4c:00:6b:c3:23:e3:65:a4:3b:5a:45:2d:ad: 65:78:29:cc:ad:0e:dd:87:bf:db:7e:8b:12:0b:9d: 90:e0:c6:05:b8:ba:63:19:64:a9:df:4b:d9:52:b9: 26:1a:eb:fb:52:3b:4a:89:b9:7b:2d:74:18:43:4a: 8f:0a:6d:76:16:dd:ee:90:a7:4a:44:5f:8e:0d:89: 90:f9:dd:f3:63:9f:d0:c9:14:c6:91:68:26:d4:84: 50:94:0e:42:ff:92:38:89:48:8c:7e:22:94:67:67: 3a:f4:c2:27:e6:e9:9f:7d:43:f1:cd:d6:89:97:43: 89:48:3c:41:97:42:cf:0e:53:df:e3:d9:48:bc:45: b5:19:e1:cc:22:e7:bb:7f:0f:84:7b:d9:e5:2e:6d: 52:26:b0:c2:f7:54:38:0e:19:fa:76:e4:ce:e0:b6: a2:70:d0:ef:f6:a2:91:cf:c4:d3:d1:96:15:04:a7: 43:5a:bc:8c:60:c7:2e:88:4b:64:02:cc:b5:43:b3: ff:02:74:92:9d:a0:6e:52:ea:b4:b4:52:ea:e5:d8: 4b:0e:38:be:35:e6:3f:32:dc:ff:73:c4:7b:82:38: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.116.0/23 185.51.119.0/24 185.60.230.0/24 IPv6: 2a04:b840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62050 Signature Algorithm: sha256WithRSAEncryption 1f:7c:54:d3:8e:29:ab:de:2d:fe:6a:1d:1b:50:57:74:97:10: e1:39:c7:09:63:5a:93:5f:03:4b:70:c2:fe:98:94:f3:a4:55: a6:4e:69:25:d0:c5:08:71:68:e3:ed:7b:e8:31:79:f2:ac:58: c2:3e:08:22:69:3b:25:2f:14:0a:0f:08:d8:dd:af:bd:cb:be: 1e:13:1e:40:71:a5:d7:67:26:ef:0b:a4:dc:c9:4f:ed:78:5c: d2:2f:db:5d:9e:10:73:ad:22:4b:84:48:7c:11:13:7a:05:46: c7:96:94:09:fb:3b:54:e6:81:97:a4:88:83:a3:25:bb:d4:4c: 21:c8:f7:8b:f3:80:d4:03:01:21:d8:0b:c9:2c:4b:c7:2f:4b: 14:40:d8:1d:f2:4f:54:ea:62:94:71:44:11:ba:08:26:96:ca: a6:e7:16:d1:7c:8a:8c:49:88:fe:75:cd:a1:79:b6:29:1b:0b: 2d:10:67:b6:71:58:8a:56:c0:4f:9b:a7:cc:3f:85:1e:dd:8e: 90:ef:2f:6a:d9:7c:7d:fa:6f:53:ad:f6:6a:11:9f:4a:5f:54: 25:cb:37:56:8b:e3:5d:2d:5c:19:02:fc:cd:76:88:76:2f:89: cd:7b:87:8b:f6:90:3f:b0:bd:f8:7b:f8:3e:35:be:30:6f:15: 1c:3f:12:c0 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4ozqUxH9WOq2cgpddBagNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGY4ZWM5NmM4ZWUyNjVjM2RhNDIzMjMwYTU1MjE5MzY2ZGQ5YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4YdbRkKsxOvxO/DqsrPpMqbxZlG OBbgRVRTPd6c6kwAa8Mj42WkO1pFLa1leCnMrQ7dh7/bfosSC52Q4MYFuLpjGWSp 30vZUrkmGuv7UjtKibl7LXQYQ0qPCm12Ft3ukKdKRF+ODYmQ+d3zY5/QyRTGkWgm 1IRQlA5C/5I4iUiMfiKUZ2c69MIn5umffUPxzdaJl0OJSDxBl0LPDlPf49lIvEW1 GeHMIue7fw+Ee9nlLm1SJrDC91Q4Dhn6duTO4LaicNDv9qKRz8TT0ZYVBKdDWryM YMcuiEtkAsy1Q7P/AnSSnaBuUuq0tFLq5dhLDji+NeY/Mtz/c8R7gjjB6QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFPT47JbI7iZcPaQjIwpVIZNm3ZsoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzkxNTlk Yi02MTczLTQwOGMtOGUxYi04ZDQ5ODgyN2Y0NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvOTE1OWRi LTYxNzMtNDA4Yy04ZTFiLThkNDk4ODI3ZjQ1Yy8xLzlQanNsc2p1Smx3OXBDTWpD bFVoazJiZG15Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBuTN0AwQAuTN3AwQAuTzmMA0EAgACMAcDBQMq BLhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyYjANBgkqhkiG9w0BAQsFAAOC AQEAH3xU044pq94t/modG1BXdJcQ4TnHCWNak18DS3DC/piU86RVpk5pJdDFCHFo 4+176DF58qxYwj4IImk7JS8UCg8I2N2vvcu+HhMeQHGl12cm7wuk3MlP7Xhc0i/b XZ4Qc60iS4RIfBETegVGx5aUCfs7VOaBl6SIg6Mlu9RMIcj3i/OA1AMBIdgLySxL xy9LFEDYHfJPVOpilHFEEboIJpbKpucW0XyKjEmI/nXNoXm2KRsLLRBntnFYilbA T5unzD+FHt2OkO8vatl8ffpvU632ahGfSl9UJcs3VovjXS1cGQL8zXaIdi+JzXuH i/aQP7C9+Hv4PjW+MG8VHD8SwA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:49 2026 by rpki-client