This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.cer (raw, json) Hash identifier: cd3Q/qT1Tx1eJlvkUTzOb9paf6S0GbD8XACiLcIgglU= Subject key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE7D2B17584496FF6BF067AE00AFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35503 IP: 193.192.56.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e7:d2:b1:75:84:49:6f:f6:bf:06:7a:e0:0a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:f3:ea:35:fb:f7:b6:41:49:4f:64:48:64: d5:20:94:bf:41:6e:dd:1e:0b:e6:6c:64:5f:03:77: 7f:5e:b5:ee:0a:d4:0f:89:72:88:85:f1:b1:ee:b5: 86:61:a2:3f:cd:68:9f:25:ed:0e:98:08:64:c3:89: 09:22:0d:00:36:bb:9f:2a:d2:91:c1:88:ce:51:54: a1:be:d3:b7:5a:23:44:ba:ed:50:0c:c4:f7:15:6b: 39:9f:17:06:37:35:c0:db:ef:f9:a8:9d:09:63:8c: 8b:20:75:07:52:27:81:2d:1c:91:1c:9e:8c:c7:4f: 58:0c:28:00:72:28:23:49:9d:54:04:b0:e8:df:5d: ed:c0:38:a1:6c:df:77:b9:8b:5e:a9:f1:ee:c7:92: 22:03:c0:de:55:16:57:f4:51:99:41:07:58:41:e0: 5d:a5:e7:9c:ef:b6:c5:29:f6:f4:9e:63:6f:10:0e: 1c:24:f4:d2:78:2a:ea:9e:21:ed:d0:18:f2:4d:d4: 03:d3:f0:cc:3c:f7:ed:06:86:98:8f:b5:00:46:3c: a0:52:00:48:6d:1f:c7:80:a0:30:9e:ca:0f:4f:52: 7a:40:ec:76:ac:78:ce:4b:73:30:2e:01:cc:5a:a3: b7:c0:f5:43:72:27:99:63:26:6e:64:f5:b4:5f:c0: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.56.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35503 Signature Algorithm: sha256WithRSAEncryption 42:f7:87:a5:26:93:bd:5d:c8:15:7b:ee:e1:ad:f7:bf:b8:22: 18:9e:45:21:22:f5:5f:f2:6f:d2:e7:8d:44:5b:68:06:40:8b: b0:02:67:fc:89:c0:29:56:71:73:eb:a7:83:6c:03:3f:57:69: c7:f1:ec:8c:23:bf:d9:f3:0f:d3:a8:42:33:91:57:5b:d7:a1: fe:72:f1:78:84:47:b0:1b:38:01:a6:23:3e:f0:fb:15:80:84: ff:9c:5c:7f:e4:ec:41:55:62:e1:b3:b5:3e:e2:c8:d1:ff:c8: ae:98:13:28:7d:fe:14:16:4d:0f:6b:60:81:06:43:01:bf:9a: db:54:12:7f:2f:c3:cd:f2:1b:09:44:3c:66:6c:bd:ec:c0:ad: 5f:fa:ed:e1:c8:22:53:a5:1f:d4:62:3c:ba:89:3e:91:a2:5f: eb:75:9a:b4:74:3d:57:a7:ac:e0:da:9c:57:59:99:2c:e9:ff: 69:1d:cd:16:a8:a4:ed:13:c9:14:61:55:90:be:2a:51:aa:0d: 93:69:14:5b:d7:5f:ae:6b:47:bb:54:e4:ce:b3:2c:02:b6:35: 23:f9:40:29:78:f9:70:de:c6:78:4e:7b:62:17:80:37:b8:6d: bd:15:d1:16:98:a6:5a:68:f3:bf:49:4f:7f:88:da:54:cf:36: d6:f1:09:12 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87OfSsXWESW/2vwZ64Ar+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQ1MWFmMTExMjBkOGZhODk4Y2I2MjEyY2VhOGNhNjFkYzU5YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y3z6jX797ZBSU9kSGTVIJS/QW7d HgvmbGRfA3d/XrXuCtQPiXKIhfGx7rWGYaI/zWifJe0OmAhkw4kJIg0ANrufKtKR wYjOUVShvtO3WiNEuu1QDMT3FWs5nxcGNzXA2+/5qJ0JY4yLIHUHUieBLRyRHJ6M x09YDCgAcigjSZ1UBLDo313twDihbN93uYteqfHux5IiA8DeVRZX9FGZQQdYQeBd peec77bFKfb0nmNvEA4cJPTSeCrqniHt0BjyTdQD0/DMPPftBoaYj7UARjygUgBI bR/HgKAwnsoPT1J6QOx2rHjOS3MwLgHMWqO3wPVDcieZYyZuZPW0X8DPVwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPZFGvERINj6iYy2ISzqjKYdxZuSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzNiNjVh Yi1hMGUyLTQ2ODQtYjk4MS1hODZhN2FmMzY4ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvM2I2NWFi LWEwZTItNDY4NC1iOTgxLWE4NmE3YWYzNjhkYS8xLzlrVWE4UkVnMlBxSmpMWWhM T3FNcGgzRm01SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwcA4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCKrzANBgkqhkiG9w0BAQsFAAOCAQEAQveHpSaTvV3IFXvu4a33v7giGJ5FISL1 X/Jv0ueNRFtoBkCLsAJn/InAKVZxc+ung2wDP1dpx/HsjCO/2fMP06hCM5FXW9eh /nLxeIRHsBs4AaYjPvD7FYCE/5xcf+TsQVVi4bO1PuLI0f/IrpgTKH3+FBZND2tg gQZDAb+a21QSfy/DzfIbCUQ8Zmy97MCtX/rt4cgiU6Uf1GI8uok+kaJf63WatHQ9 V6es4NqcV1mZLOn/aR3NFqik7RPJFGFVkL4qUaoNk2kUW9dfrmtHu1TkzrMsArY1 I/lAKXj5cN7GeE57YheAN7htvRXRFpimWmjzv0lPf4jaVM821vEJEg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:21 2026 by rpki-client