This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer File: 9aKRIk-CvG0mtRntevviXLMsEVw.cer (raw, json) Hash identifier: tOFWZJZJo8AnziFDFDkXg3XQL1kJlUnp6gO2A+tEdGA= Subject key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1345EED21E498ECC49A39A3AA0B71B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.238.24.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:45:ee:d2:1e:49:8e:cc:49:a3:9a:3a:a0:b7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:89:96:fe:f7:81:90:b5:f6:8b:7d:7d:5e: f4:f6:92:11:61:83:cc:a3:c6:fe:f8:c4:0c:8e:0c: 23:c0:90:5a:a0:2c:2f:1e:e9:1f:10:81:a1:94:9a: 58:5f:a5:a5:56:9c:86:30:27:7c:ba:64:e3:fe:30: d9:e0:51:b8:a5:e5:ba:35:74:b3:1d:d0:fa:b5:66: 53:0b:b4:f8:63:3a:a4:74:e3:64:e0:e7:3e:d4:4a: 44:aa:bf:33:cf:fe:60:2f:ce:73:0b:d7:96:d4:d4: ca:c4:ed:d4:f7:cd:f7:3c:9d:29:ad:25:72:ce:08: 93:2b:e5:42:e2:cb:e8:aa:dd:6b:93:8d:4f:57:25: ad:79:ea:c4:31:a2:d2:f2:11:56:c5:b7:45:fe:e0: 0e:fe:97:68:94:2a:8f:26:8a:b2:9c:d3:8b:4a:0a: 96:b5:67:3f:42:d0:e4:67:8e:26:7f:7f:91:bd:59: eb:7a:1d:a4:0b:98:a1:29:4a:05:b9:d1:63:76:e7: f9:51:7d:97:3c:43:f3:ca:50:d5:a6:8c:3b:43:cf: 10:89:ca:09:5f:0a:be:a5:1f:8c:ef:3d:f3:b0:7c: 06:bb:44:86:d2:52:fb:fe:e1:7c:5f:53:70:bd:e3: 1f:f1:27:b2:3d:fd:c1:42:03:12:5c:1f:4f:5c:8c: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.24.0/24 Signature Algorithm: sha256WithRSAEncryption 74:01:01:7d:40:6c:b8:41:87:35:9a:2d:92:cb:0b:35:fb:da: 2e:0c:b0:2b:9b:d7:20:43:fa:af:36:be:09:a4:ad:4f:90:f8: 9f:27:a7:7f:b3:13:bb:88:da:b9:2e:2b:fb:2d:fd:8a:00:3b: ae:d6:fb:a0:8e:66:ed:55:9c:74:c6:b8:45:bb:a7:2f:0a:ed: 62:f2:8f:9f:a6:01:74:65:b5:81:a9:47:09:e6:05:71:62:13: 1b:83:a9:23:ae:40:45:f1:ea:9f:ed:d0:e4:fc:6f:ff:ae:5e: 41:ce:89:3c:3a:98:0b:49:10:9b:5c:cf:2c:4b:f0:df:9c:7d: eb:57:da:cd:d9:f0:ef:bd:80:6b:a7:ff:d6:57:c9:cc:f4:e1: d7:64:6d:3e:ae:89:31:8b:2b:15:00:f2:8a:a2:4c:15:83:16: 2d:a4:bf:30:5a:8d:61:32:e6:5c:ce:5d:50:7f:0e:01:5b:04: 90:cd:f1:54:de:df:ab:86:71:fe:b9:1d:79:c5:68:4a:24:3b: 1a:16:08:29:90:c0:7c:da:2d:87:ea:89:97:10:68:62:9f:72: 0b:38:9f:fb:8f:9d:f2:af:69:68:48:f7:49:0c:3c:1c:29:c0: e1:b8:b3:67:30:49:1e:66:8e:5f:1c:ee:90:2f:01:3d:82:5e: c6:ff:89:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8E0Xu0h5JjsxJo5o6oLcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWEyOTEyMjRmODJiYzZkMjZiNTE5ZWQ3YWZiZTI1Y2IzMmMxMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUKJlv73gZC19ot9fV709pIRYYPM o8b++MQMjgwjwJBaoCwvHukfEIGhlJpYX6WlVpyGMCd8umTj/jDZ4FG4peW6NXSz HdD6tWZTC7T4YzqkdONk4Oc+1EpEqr8zz/5gL85zC9eW1NTKxO3U9833PJ0prSVy zgiTK+VC4svoqt1rk41PVyWteerEMaLS8hFWxbdF/uAO/pdolCqPJoqynNOLSgqW tWc/QtDkZ44mf3+RvVnreh2kC5ihKUoFudFjduf5UX2XPEPzylDVpow7Q88QicoJ Xwq+pR+M7z3zsHwGu0SG0lL7/uF8X1NwveMf8SeyPf3BQgMSXB9PXIyYowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPWikSJPgrxtJrUZ7Xr74lyzLBFcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzhhNWNj Mi1jNTQyLTRjOWItODA3Ny1iYzc5NzczOTZkOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvOGE1Y2My LWM1NDItNGM5Yi04MDc3LWJjNzk3NzM5NmQ5Yi8xLzlhS1JJay1DdkcwbXRSbnRl dnZpWExNc0VWdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwe4YMA0GCSqGSIb3DQEBCwUAA4IBAQB0AQF9 QGy4QYc1mi2Syws1+9ouDLArm9cgQ/qvNr4JpK1PkPifJ6d/sxO7iNq5Liv7Lf2K ADuu1vugjmbtVZx0xrhFu6cvCu1i8o+fpgF0ZbWBqUcJ5gVxYhMbg6kjrkBF8eqf 7dDk/G//rl5Bzok8OpgLSRCbXM8sS/DfnH3rV9rN2fDvvYBrp//WV8nM9OHXZG0+ rokxiysVAPKKokwVgxYtpL8wWo1hMuZczl1Qfw4BWwSQzfFU3t+rhnH+uR15xWhK JDsaFggpkMB82i2H6omXEGhin3ILOJ/7j53yr2loSPdJDDwcKcDhuLNnMEkeZo5f HO6QLwE9gl7G/4l8 -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:56 2026 by rpki-client