This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer (raw, json) Hash identifier: jT+Nngvhk4DAroi3cEuM75RAThReW1LdLBuxCI3Vt5E= Subject key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A310E82F76C9D707E993FA525B896D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58247 IP: 2001:67c:29d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:10:e8:2f:76:c9:d7:07:e9:93:fa:52:5b:89:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f50e225bfb45218b997719804ea287f1751cf20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:55:ea:4b:f2:de:a9:88:4e:96:d2:bb:36: 89:52:de:9a:0b:7a:3e:0c:0a:4d:89:77:1a:af:3a: b3:e0:36:64:fe:37:f9:59:71:25:4b:b2:4b:90:11: 1d:81:17:32:60:73:28:78:d5:b4:ab:81:73:b8:0c: d8:e8:ea:cb:e9:45:06:c8:9e:29:44:80:5a:b0:9a: 2b:ce:f1:91:10:76:38:1b:8c:5c:27:68:dd:ff:86: d0:7e:17:35:8f:ba:94:b5:18:90:6c:fa:48:61:96: 79:5e:8e:b1:38:0f:70:fd:6c:85:e4:3d:e3:4e:86: cb:48:8e:4d:42:64:ab:bf:1c:0d:76:33:e1:99:9c: 13:7e:de:67:c7:65:c5:00:75:02:e0:7b:3f:ad:3e: 84:ea:21:80:3b:a4:bd:d4:57:45:72:6a:a4:34:af: 1d:db:0b:a8:e6:30:71:12:b6:5d:24:3d:ac:2e:62: d5:25:56:45:32:01:8c:3e:b9:c5:38:fd:ce:4b:93: aa:df:3e:84:b1:e1:90:7d:84:b8:cd:60:43:3a:38: d8:df:15:fb:a7:a9:9a:f4:9f:c7:c3:92:9d:50:f7: f4:b7:c0:9a:aa:dd:68:64:1b:16:86:f5:02:5b:74: 38:e0:4e:c4:59:eb:87:3b:0a:5a:68:b4:dd:0d:6c: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:29d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58247 Signature Algorithm: sha256WithRSAEncryption ac:58:53:38:c3:84:cd:c6:e0:db:cd:9e:fd:6d:eb:da:f6:6c: 18:36:eb:93:81:09:57:9f:19:06:1b:ea:77:cc:8f:37:db:cb: 8c:aa:1a:f5:66:83:7a:75:8c:c3:fc:c4:01:03:b6:6d:5d:ff: eb:07:a4:50:9d:91:5b:b4:25:0f:f8:b9:97:f7:11:7f:0a:a2: 10:25:7c:2b:4f:1b:0a:41:22:65:dc:21:c6:93:7c:8b:af:c9: 2f:a0:b5:c9:fb:6f:95:64:8b:42:eb:f7:dc:77:ac:2d:3e:3b: 7e:96:a1:43:19:42:a8:da:ae:04:c2:f8:c4:7a:0a:7c:6b:b4: b7:45:84:d1:b4:40:c5:8e:a3:38:b8:ec:f9:82:a2:f5:e6:36: 6a:6e:64:fd:92:5b:70:80:c5:fa:03:d2:ca:1e:0b:81:56:52: 75:f2:75:66:6b:f5:6b:7a:43:81:71:fb:3d:36:46:93:f8:e4: 90:3e:f0:7e:7b:cd:f1:ab:0a:d2:53:56:ec:3a:c1:32:33:df: e7:2a:97:c2:bc:7f:6e:9d:76:20:82:67:3c:cc:18:d3:e7:5c: 8b:0a:52:20:a7:0f:42:cb:3a:15:1a:18:14:3d:fd:bc:d9:1a: 9e:94:a4:71:8f:ea:50:37:dc:c4:2b:0c:54:a8:24:38:e8:19: 10:6b:37:59 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4oxDoL3bJ1wfpk/pSW4ltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTBlMjI1YmZiNDUyMThiOTk3NzE5ODA0ZWEyODdmMTc1MWNmMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO9V6kvy3qmITpbSuzaJUt6aC3o+ DApNiXcarzqz4DZk/jf5WXElS7JLkBEdgRcyYHMoeNW0q4FzuAzY6OrL6UUGyJ4p RIBasJorzvGREHY4G4xcJ2jd/4bQfhc1j7qUtRiQbPpIYZZ5Xo6xOA9w/WyF5D3j TobLSI5NQmSrvxwNdjPhmZwTft5nx2XFAHUC4Hs/rT6E6iGAO6S91FdFcmqkNK8d 2wuo5jBxErZdJD2sLmLVJVZFMgGMPrnFOP3OS5Oq3z6EseGQfYS4zWBDOjjY3xX7 p6ma9J/Hw5KdUPf0t8Caqt1oZBsWhvUCW3Q44E7EWeuHOwpaaLTdDWy6kQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFPUOIlv7RSGLmXcZgE6ih/F1HPIOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzE3MjMx MC0zY2IwLTRiYjAtOTFhZS00NDYyYTEyNmQwN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMTcyMzEw LTNjYjAtNGJiMC05MWFlLTQ0NjJhMTI2ZDA3ZC8xLzlRNGlXX3RGSVl1WmR4bUFU cUtIOFhVYzhnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCnUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDjhzANBgkqhkiG9w0BAQsFAAOCAQEArFhTOMOEzcbg282e/W3r2vZsGDbr k4EJV58ZBhvqd8yPN9vLjKoa9WaDenWMw/zEAQO2bV3/6wekUJ2RW7QlD/i5l/cR fwqiECV8K08bCkEiZdwhxpN8i6/JL6C1yftvlWSLQuv33HesLT47fpahQxlCqNqu BML4xHoKfGu0t0WE0bRAxY6jOLjs+YKi9eY2am5k/ZJbcIDF+gPSyh4LgVZSdfJ1 Zmv1a3pDgXH7PTZGk/jkkD7wfnvN8asK0lNW7DrBMjPf5yqXwrx/bp12IIJnPMwY 0+dciwpSIKcPQss6FRoYFD39vNkanpSkcY/qUDfcxCsMVKgkOOgZEGs3WQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:14 2026 by rpki-client