This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.cer (raw, json) Hash identifier: PTP0cNQWf/pz4/f06ao93NHMHgha8FQxoa5d+amntnc= Subject key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC935C5487C542CE62E131CB342F826 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.16.38.0/24 IP: 2a14:6480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:35:c5:48:7c:54:2c:e6:2e:13:1c:b3:42:f8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f676887f22ecda8d074815a0bcf91faf81942abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:eb:21:02:a4:c3:cd:f6:76:c5:1d:b7:66: 96:95:57:8b:11:35:e3:d0:7d:ba:4c:4f:60:64:c8: eb:aa:40:4a:e7:b4:02:b2:46:a6:34:da:6f:43:ba: 89:60:5c:ba:f0:48:4b:b7:7d:9b:76:0c:ef:95:cb: 0e:28:66:d7:6d:da:88:38:8d:b3:b3:30:8e:60:6a: 09:6a:02:31:21:9d:46:0f:26:0f:23:25:f8:91:1e: 4f:07:f8:8b:14:60:3b:d5:58:6c:9b:fd:39:f5:ef: 19:ce:d4:e1:b3:a6:39:52:69:1b:62:93:3a:a8:9b: 1b:6a:31:42:e3:a6:f5:e0:be:d7:a6:d8:88:42:10: 69:31:79:4b:08:e6:1b:c6:c0:a9:b1:96:82:58:ed: 84:ce:37:7c:2d:26:fb:ae:58:af:98:9f:c8:4d:5b: 99:cd:a5:ae:f1:f5:01:ba:bf:20:ff:37:cc:e7:de: 51:57:2b:16:07:74:77:6e:b4:3f:87:3a:4c:a0:44: 5b:0e:7b:ff:b1:ba:23:6e:97:32:3a:e2:3c:f9:1e: 57:76:90:20:6c:86:fa:55:d1:f3:90:2f:27:59:11: d9:fc:ca:7b:f4:b8:9f:60:ed:52:f7:a9:93:8c:f6: 2c:c6:fa:32:8c:08:34:b7:1c:ac:9e:ad:8a:e3:06: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.38.0/24 IPv6: 2a14:6480::/29 Signature Algorithm: sha256WithRSAEncryption 11:2e:9d:60:20:25:8e:07:ee:14:91:8f:0b:3f:50:24:60:49: 43:cd:ae:53:7e:12:d5:91:55:a1:35:41:2a:a0:56:aa:0a:42: 43:30:90:68:31:00:63:27:41:54:95:b0:5a:af:ed:cc:b7:13: d1:d9:01:81:66:1b:04:0a:99:b7:29:70:84:36:ac:3f:11:f3: 21:d1:27:b9:45:45:75:83:4b:c9:f3:dd:ac:c9:0c:7e:02:f2: 14:ba:b5:ef:cb:99:41:73:a2:84:f1:f0:53:ef:65:35:6c:e6: ec:24:f8:8f:cd:c3:72:23:47:d3:3d:b2:55:cf:90:c8:d7:dc: cd:1a:34:22:0d:e9:85:4b:42:91:8e:52:a1:01:16:a0:c4:78: 96:35:40:d0:8a:e8:b1:33:54:a0:b5:fd:ec:c5:e4:c0:fa:7a: 16:fd:36:74:0e:03:67:78:25:97:24:8f:6f:48:1c:f2:b9:2e: c0:ad:a1:aa:67:1f:6c:69:6e:a0:23:47:c9:bf:4c:58:02:1f: b2:f7:9b:fc:54:70:34:69:31:f5:48:19:f2:14:47:e3:2b:93: e0:34:63:fd:51:42:0a:59:c2:0b:b5:c2:31:dc:72:c1:b1:07: 9e:9e:31:0f:1b:bf:4f:81:84:02:fb:56:82:59:d3:8a:c7:e0: 16:d6:72:27 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yTXFSHxULOYuExyzQvgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjc2ODg3ZjIyZWNkYThkMDc0ODE1YTBiY2Y5MWZhZjgxOTQyYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ajrIQKkw832dsUdt2aWlVeLETXj 0H26TE9gZMjrqkBK57QCskamNNpvQ7qJYFy68EhLt32bdgzvlcsOKGbXbdqIOI2z szCOYGoJagIxIZ1GDyYPIyX4kR5PB/iLFGA71Vhsm/059e8ZztThs6Y5UmkbYpM6 qJsbajFC46b14L7XptiIQhBpMXlLCOYbxsCpsZaCWO2Ezjd8LSb7rlivmJ/ITVuZ zaWu8fUBur8g/zfM595RVysWB3R3brQ/hzpMoERbDnv/sbojbpcyOuI8+R5XdpAg bIb6VdHzkC8nWRHZ/Mp79LifYO1S96mTjPYsxvoyjAg0txysnq2K4wYtFwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2NiYzRi Yi05OTljLTQ5ODgtYTFlMS1jZDJkY2IzNTU2NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvY2JjNGJi LTk5OWMtNDk4OC1hMWUxLWNkMmRjYjM1NTY1NS8xLzluYUlmeUxzMm8wSFNCV2d2 UGtmcjRHVUtyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALhAmMA0EAgACMAcDBQMqFGSAMA0GCSqGSIb3 DQEBCwUAA4IBAQARLp1gICWOB+4UkY8LP1AkYElDza5TfhLVkVWhNUEqoFaqCkJD MJBoMQBjJ0FUlbBar+3MtxPR2QGBZhsECpm3KXCENqw/EfMh0Se5RUV1g0vJ892s yQx+AvIUurXvy5lBc6KE8fBT72U1bObsJPiPzcNyI0fTPbJVz5DI19zNGjQiDemF S0KRjlKhARagxHiWNUDQiuixM1Sgtf3sxeTA+noW/TZ0DgNneCWXJI9vSBzyuS7A raGqZx9saW6gI0fJv0xYAh+y95v8VHA0aTH1SBnyFEfjK5PgNGP9UUIKWcILtcIx 3HLBsQeenjEPG79PgYQC+1aCWdOKx+AW1nIn -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:37 2026 by rpki-client