This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer (raw, json) Hash identifier: wchtRJZLuDwBzMTyMPhjtYY8ENpYiStLmz+kO5/lAMI= Subject key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596FBB0CC2562EECEAA19A542CCA36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44084 IP: 45.67.124.0/22 IP: 217.115.16.0/20 IP: 2a09:6240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6f:bb:0c:c2:56:2e:ec:ea:a1:9a:54:2c:ca:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f541d46893aaa164fe2673990d07aa6c071003c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:8c:1d:ff:09:6b:35:02:9e:bf:07:b2:5c: 3a:ba:a2:fb:e2:93:1a:42:2c:d4:e3:c5:49:b7:7c: 9f:91:c6:7f:a2:fe:d1:02:b6:20:f2:f3:76:bc:6e: ba:88:fc:23:73:7d:2d:c3:4e:91:2e:ea:33:97:e1: e9:11:1c:9b:01:91:d8:ad:bf:23:b4:8d:cc:0c:f8: df:d3:01:c5:0f:de:59:c4:4c:1f:9d:f5:58:35:c4: 0e:3b:54:7f:bb:6c:51:a4:33:e2:bb:db:8c:42:20: 06:28:a9:58:69:84:b3:cb:46:1a:00:2f:2e:aa:cf: 98:3c:73:64:a0:4a:a3:2e:48:c2:2b:cc:70:ef:a5: a7:19:9c:f4:d9:8f:1e:e6:77:7d:4b:c9:8c:6a:e6: bb:98:ce:14:48:93:d6:49:73:2f:ff:a5:4e:40:cf: 82:c8:eb:62:7c:51:2c:50:d5:7a:c0:bd:1c:7c:08: b2:b3:f8:26:3b:5f:44:ef:76:ff:a5:47:6a:0a:6b: 5e:a0:17:8c:34:77:c6:9f:4d:e9:a8:b8:bb:6c:9e: e7:31:a3:8f:4a:3d:74:ff:8f:66:d3:b9:51:ef:c8: d2:3c:45:0f:71:b8:e0:28:17:8e:52:8a:2a:40:69: 9e:95:e0:da:65:9b:19:39:20:8c:73:56:47:11:50: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.124.0/22 217.115.16.0/20 IPv6: 2a09:6240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44084 Signature Algorithm: sha256WithRSAEncryption 29:fe:1f:0c:78:b2:da:56:1f:13:7a:87:12:42:ed:fd:f7:39: 16:47:82:2a:01:c9:6e:3c:f6:5d:27:2e:23:a0:7d:a2:35:3d: 39:55:16:d3:7d:6d:ec:4c:84:b6:21:99:ca:2f:46:37:ec:54: 71:86:94:dd:c4:82:ea:6a:81:86:22:66:8d:a2:2e:9e:ed:02: e5:3c:c3:2b:d5:79:17:41:26:4f:05:92:e6:d5:f1:3c:23:4a: 4f:6d:e6:e2:7c:d8:e8:17:6b:29:2e:4c:aa:e1:7d:74:45:6d: 78:f9:4d:20:b9:7e:46:3a:92:ff:97:7d:ca:28:f5:2c:07:ce: 13:7a:c4:39:42:03:72:eb:f2:3e:ea:15:fd:98:ec:80:4f:61: 0c:bc:c9:38:17:99:98:ef:be:b8:36:a1:43:39:a1:ba:15:23: 24:df:41:3b:ec:fd:d4:70:60:c7:56:5f:57:75:77:0a:d3:72: e4:23:24:bc:90:25:6b:d1:47:f3:28:2a:16:53:51:9d:ae:e5: e6:b8:a1:c6:8e:d3:3e:a8:a6:47:6b:b3:6d:b4:69:7d:5b:90: 98:85:64:dc:22:fa:6b:39:4b:88:42:f7:40:cc:a3:7c:dc:d4: 23:96:31:80:8c:e9:23:78:b3:7d:19:8e:7d:0b:e5:c7:f5:52: 77:9a:12:1f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WW+7DMJWLuzqoZpULMo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTQxZDQ2ODkzYWFhMTY0ZmUyNjczOTkwZDA3YWE2YzA3MTAwM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdqMHf8JazUCnr8Hslw6uqL74pMa QizU48VJt3yfkcZ/ov7RArYg8vN2vG66iPwjc30tw06RLuozl+HpERybAZHYrb8j tI3MDPjf0wHFD95ZxEwfnfVYNcQOO1R/u2xRpDPiu9uMQiAGKKlYaYSzy0YaAC8u qs+YPHNkoEqjLkjCK8xw76WnGZz02Y8e5nd9S8mMaua7mM4USJPWSXMv/6VOQM+C yOtifFEsUNV6wL0cfAiys/gmO19E73b/pUdqCmteoBeMNHfGn03pqLi7bJ7nMaOP Sj10/49m07lR78jSPEUPcbjgKBeOUooqQGmeleDaZZsZOSCMc1ZHEVB/JQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzJlOTVl Ny01NjQ0LTQ2ZjItOGZhMy0zOThjMDQ1MTg5ZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMmU5NWU3 LTU2NDQtNDZmMi04ZmEzLTM5OGMwNDUxODllYi8xLzlVSFVhSk9xb1dULUpuT1pE UWVxYkFjUUE4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLUN8AwQE2XMQMA0EAgACMAcDBQMqCWJAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCsNDANBgkqhkiG9w0BAQsFAAOCAQEAKf4f DHiy2lYfE3qHEkLt/fc5FkeCKgHJbjz2XScuI6B9ojU9OVUW031t7EyEtiGZyi9G N+xUcYaU3cSC6mqBhiJmjaIunu0C5TzDK9V5F0EmTwWS5tXxPCNKT23m4nzY6Bdr KS5MquF9dEVtePlNILl+RjqS/5d9yij1LAfOE3rEOUIDcuvyPuoV/ZjsgE9hDLzJ OBeZmO++uDahQzmhuhUjJN9BO+z91HBgx1ZfV3V3CtNy5CMkvJAla9FH8ygqFlNR na7l5rihxo7TPqimR2uzbbRpfVuQmIVk3CL6azlLiEL3QMyjfNzUI5YxgIzpI3iz fRmOfQvlx/VSd5oSHw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:37:30 2026 by rpki-client