This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.cer (raw, json) Hash identifier: OR8ytRg8ex62v7uhmWiUdNsL1nHv2peQcovrGVNzv+4= Subject key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC879F5339ABCC341535FAA9224BB24 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202892 IP: 185.9.140.0/22 IP: 2a03:4940::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:79:f5:33:9a:bc:c3:41:53:5f:aa:92:24:bb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:c5:54:61:82:ed:56:33:13:59:15:6b:df: 74:3e:76:1b:d0:50:8e:90:1d:98:85:e1:3b:c5:d2: 83:75:d5:91:28:4f:77:5f:37:b1:8c:43:65:6f:ab: 44:fe:bc:b3:da:9f:85:a3:36:aa:08:1c:29:2a:ad: d0:88:9a:de:db:31:56:59:d2:05:e3:a7:e8:2b:e8: 75:2a:ac:8a:ae:99:10:26:28:9a:b3:01:b2:c1:60: 73:dd:13:3a:9f:a3:02:ac:9a:29:3b:da:10:c5:bc: c6:a9:00:52:3d:82:dd:d0:5a:e8:09:cc:61:ae:fb: 34:6f:17:23:b0:ec:91:48:fc:bb:9e:42:56:0a:eb: c9:db:c8:53:02:fb:cc:5f:10:f9:95:52:ed:3c:9d: ec:56:d3:a7:73:5f:51:25:21:7a:c7:42:a7:30:7b: 6d:1f:81:65:f6:db:77:44:c9:90:6d:7a:e4:5f:fc: 8d:b3:ed:df:b7:d4:00:06:23:8a:0b:9a:a2:2f:12: e9:ef:4e:24:69:bd:fd:1d:87:e8:9a:ef:7d:f6:ae: cb:af:4d:90:29:7e:d1:5d:6c:b9:6e:e0:56:f2:5c: 23:f9:7f:ae:9d:d1:88:27:85:db:e8:2a:e4:61:a0: 9b:97:12:2d:ed:5d:67:42:de:10:1a:88:34:64:71: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.140.0/22 IPv6: 2a03:4940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202892 Signature Algorithm: sha256WithRSAEncryption a2:e3:98:6a:c0:b4:d0:8b:df:23:ca:66:21:01:5d:71:11:1f: 77:d7:0b:e7:75:82:97:af:6d:1a:88:4a:bd:2e:cc:b5:40:4a: 2b:13:74:a1:a1:f8:2f:89:41:b5:f1:51:90:58:78:f8:4d:10: 5a:c6:ed:3a:ef:38:3a:70:b3:99:72:68:31:cf:97:a2:be:4c: 7e:80:95:8e:ed:79:03:21:d0:37:40:af:5c:44:03:56:36:ed: 29:4d:02:30:f8:42:69:6d:13:c0:1e:f8:66:11:76:e6:4e:66: 8e:a8:bf:9e:9f:ad:5b:94:15:8f:5a:2c:76:d6:a8:73:40:69: 77:ea:03:21:d3:ba:e1:70:8a:8a:cd:50:57:d2:03:b0:fc:6b: 50:cb:62:07:8c:1f:ae:bd:94:74:e9:d4:85:e3:02:1c:c5:74: 97:d0:19:dd:78:cd:32:d6:ca:9a:a6:78:15:a6:5a:71:a8:60: 74:1e:b5:ef:be:d2:31:18:d1:8f:4f:97:e6:25:9a:e0:c4:3b: c3:62:22:75:22:6d:08:e2:23:37:e0:16:66:9f:43:6b:41:29: 28:3b:16:99:63:9e:3e:52:51:46:d6:92:20:02:ba:e8:f9:2f: e2:68:45:29:8c:a9:84:e5:a7:23:81:4d:85:0c:7a:7a:b8:89: d7:71:d4:64 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yHn1M5q8w0FTX6qSJLskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjg1ZGMzYzE0NDY0YjhjNDA4MTc1MjVkOWEyNTRiNGVkM2E4YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOzFVGGC7VYzE1kVa990PnYb0FCO kB2YheE7xdKDddWRKE93XzexjENlb6tE/ryz2p+FozaqCBwpKq3QiJre2zFWWdIF 46foK+h1KqyKrpkQJiiaswGywWBz3RM6n6MCrJopO9oQxbzGqQBSPYLd0FroCcxh rvs0bxcjsOyRSPy7nkJWCuvJ28hTAvvMXxD5lVLtPJ3sVtOnc19RJSF6x0KnMHtt H4Fl9tt3RMmQbXrkX/yNs+3ft9QABiOKC5qiLxLp704kab39HYfomu999q7Lr02Q KX7RXWy5buBW8lwj+X+undGIJ4Xb6CrkYaCblxIt7V1nQt4QGog0ZHHCkQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPaF3DwURkuMQIF1JdmiVLTtOoo6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzIwNDI3 NS1hMzY4LTQzMWItOGZmNi1lYjY3ZjhlNjMyYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvMjA0Mjc1 LWEzNjgtNDMxYi04ZmY2LWViNjdmOGU2MzJiOC8xLzlvWGNQQlJHUzR4QWdYVWwy YUpVdE8wNmlqby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQmMMA0EAgACMAcDBQAqA0lAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYjDANBgkqhkiG9w0BAQsFAAOCAQEAouOYasC00Ivf I8pmIQFdcREfd9cL53WCl69tGohKvS7MtUBKKxN0oaH4L4lBtfFRkFh4+E0QWsbt Ou84OnCzmXJoMc+Xor5MfoCVju15AyHQN0CvXEQDVjbtKU0CMPhCaW0TwB74ZhF2 5k5mjqi/np+tW5QVj1osdtaoc0Bpd+oDIdO64XCKis1QV9IDsPxrUMtiB4wfrr2U dOnUheMCHMV0l9AZ3XjNMtbKmqZ4FaZacahgdB61777SMRjRj0+X5iWa4MQ7w2Ii dSJtCOIjN+AWZp9Da0EpKDsWmWOePlJRRtaSIAK66Pkv4mhFKYyphOWnI4FNhQx6 eriJ13HUZA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:19 2026 by rpki-client