This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.cer (raw, json) Hash identifier: gj6okXZU93cNkDF+lTzW4SctQF9jM4gbrp1zpqFLpjk= Subject key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36F69E9BE4BE95626881C6DD892BF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.30.100.0/22 IP: 2a07:f7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f6:9e:9b:e4:be:95:62:68:81:c6:dd:89:2b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:79:d9:a3:8c:8f:43:2c:94:82:e5:4c:bc: 13:f4:8a:07:24:8d:f7:ce:5f:41:d2:3d:6f:70:68: 6d:c3:69:ef:6f:bb:78:a2:96:eb:02:ac:36:40:b9: 26:05:b2:1e:e5:a6:2c:d6:0a:25:d0:1a:e9:29:4f: e9:a2:36:47:29:dc:d6:59:fa:da:1a:cb:7e:c4:24: 2b:19:ec:5d:5e:a5:87:a3:21:78:c1:b2:b3:f6:c9: 36:f7:a3:ce:e7:65:d2:53:85:f1:02:ce:67:0a:6d: 71:1e:ae:7a:f2:5f:15:63:92:f0:58:24:cd:f8:01: f7:10:bd:d8:03:21:69:48:c9:d8:ab:59:23:1b:cb: b8:8c:5c:f2:d2:94:ab:31:47:84:4f:06:c9:93:24: 1e:17:62:54:a4:dd:0f:a2:45:1c:91:2e:a0:ae:36: 8a:7e:5e:02:4d:cd:ff:0d:ec:44:f2:e2:73:08:07: 85:fd:c3:ba:d3:f8:f6:b2:13:7f:99:af:e6:55:21: 0a:e7:30:8a:de:10:dd:39:77:c1:fd:45:9a:be:62: d6:c1:a4:c0:4f:4f:24:6c:33:0d:54:c6:c6:c9:21: 50:3c:77:71:39:94:73:9a:2f:2f:89:c0:a0:2e:bd: b2:83:6a:a2:2a:03:7f:34:a5:82:ff:18:72:34:e8: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.100.0/22 IPv6: 2a07:f7c0::/29 Signature Algorithm: sha256WithRSAEncryption 02:09:d6:8a:a1:f1:f3:57:85:79:65:35:6b:f2:bf:9d:87:36: a7:25:d8:e2:11:9a:46:28:11:e7:c8:a0:34:6a:6c:61:6b:cd: 46:ba:b8:1a:eb:fa:17:36:32:f5:a6:97:67:0a:e6:86:28:ea: e7:13:c3:c2:68:43:7c:b5:34:b9:90:69:d3:23:1b:e0:0a:5a: 04:ca:48:7d:5d:99:56:7f:e0:f8:64:54:3a:45:f4:c1:5f:97: 12:55:58:0a:4f:6a:f0:4e:7f:ea:7c:76:e9:8e:4d:a4:f2:b3: 67:21:e1:20:d7:11:c1:79:11:b7:59:27:e8:43:d9:49:b6:68: 23:fb:75:26:fe:05:38:36:83:73:77:8a:1b:5a:63:23:33:1f: bc:60:42:5e:7e:f5:b5:7f:c6:af:75:05:b5:b9:72:d6:8e:a3: 4a:3b:d3:34:c5:00:97:bf:40:bd:3d:9e:9e:cb:52:4e:a3:4f: 04:5c:e7:63:f7:a8:b5:c2:88:b1:a5:c4:4f:56:4d:be:37:d9: ac:9e:98:27:9e:61:ba:c9:c4:d7:4d:36:b7:bb:1e:36:ce:cc: eb:bc:16:c9:d5:c7:e7:c6:e8:68:b6:95:53:77:f7:54:00:3f: 8b:b1:0f:ef:bc:7e:b9:6c:64:82:75:fc:3b:30:10:3f:86:c3: 4f:87:26:5d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nvaem+S+lWJogcbdiSv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjUxZGM5ODc1ZTM1ZWM1ODBjNTcxZmQwNDE2ZjRkNWY1ZDQxNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8R52aOMj0MslILlTLwT9IoHJI33 zl9B0j1vcGhtw2nvb7t4opbrAqw2QLkmBbIe5aYs1gol0BrpKU/pojZHKdzWWfra Gst+xCQrGexdXqWHoyF4wbKz9sk296PO52XSU4XxAs5nCm1xHq568l8VY5LwWCTN +AH3EL3YAyFpSMnYq1kjG8u4jFzy0pSrMUeETwbJkyQeF2JUpN0PokUckS6grjaK fl4CTc3/DexE8uJzCAeF/cO60/j2shN/ma/mVSEK5zCK3hDdOXfB/UWavmLWwaTA T08kbDMNVMbGySFQPHdxOZRzmi8vicCgLr2yg2qiKgN/NKWC/xhyNOjJUwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPZR3Jh1417FgMVx/QQW9NX11BWKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2I0ZDlk Ny02NzAzLTRiMDYtYjNlZS0wNzUxMDM4MTQyMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjRkOWQ3 LTY3MDMtNGIwNi1iM2VlLTA3NTEwMzgxNDIwYS8xLzlsSGNtSFhqWHNXQXhYSDlC QmIwMWZYVUZZby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwR5kMA0EAgACMAcDBQMqB/fAMA0GCSqGSIb3 DQEBCwUAA4IBAQACCdaKofHzV4V5ZTVr8r+dhzanJdjiEZpGKBHnyKA0amxha81G urga6/oXNjL1ppdnCuaGKOrnE8PCaEN8tTS5kGnTIxvgCloEykh9XZlWf+D4ZFQ6 RfTBX5cSVVgKT2rwTn/qfHbpjk2k8rNnIeEg1xHBeRG3WSfoQ9lJtmgj+3Um/gU4 NoNzd4obWmMjMx+8YEJefvW1f8avdQW1uXLWjqNKO9M0xQCXv0C9PZ6ey1JOo08E XOdj96i1woixpcRPVk2+N9msnpgnnmG6ycTXTTa3ux42zszrvBbJ1cfnxuhotpVT d/dUAD+LsQ/vvH65bGSCdfw7MBA/hsNPhyZd -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:48 2026 by rpki-client