This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer (raw, json) Hash identifier: ONETnet2EU1YcU1VBMCcsgJfcGFWCyTcS6nnAWbxmR0= Subject key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2E44C8CD82E25F2F253CE40D60F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.146.69.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2e:44:c8:cd:82:e2:5f:2f:25:3c:e4:0d:60:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:7c:98:2a:c6:7b:01:3c:43:3c:14:95:90: b0:40:af:13:06:ea:74:ed:fd:d9:49:94:69:9e:8b: 3e:dd:e2:de:41:9c:dd:ff:e9:2d:c0:f2:d9:1d:ae: a1:e8:45:27:19:f5:a0:63:28:50:dd:99:4c:7e:e5: 06:fe:52:04:96:58:2e:ac:6a:4a:20:11:02:3e:aa: 89:98:7b:97:38:95:e1:c2:ff:69:be:7f:36:a1:fa: 78:86:ce:a7:90:1f:e4:a0:00:58:29:cc:21:58:28: 35:76:ca:ca:df:95:75:68:01:07:6e:f1:7e:93:30: 7a:47:59:81:6e:1d:39:4a:a2:a0:97:c3:d6:a5:6e: 7b:b3:51:e8:f6:bf:02:79:ed:c5:1d:15:bb:18:70: 33:21:94:5a:4c:b7:44:73:17:00:90:5e:b5:8e:a1: f3:2e:52:c7:8b:3a:2f:1b:01:48:20:6e:87:9b:8a: a4:a7:41:87:77:99:ad:a8:8c:c7:b0:f3:4b:9b:72: 01:3e:11:e4:62:d4:cd:48:a5:0c:39:41:69:7d:47: ea:d7:5c:37:da:f8:7c:d7:e9:b5:a0:29:b7:ac:0d: 1b:0a:49:e6:e3:fc:fb:e4:6a:f6:cf:f1:fa:6b:e5: e2:6d:80:71:41:8e:e2:ee:74:47:3f:d1:65:c9:c5: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.69.0/24 Signature Algorithm: sha256WithRSAEncryption a0:0a:a0:58:92:91:c7:d7:d5:fa:03:52:ed:f8:77:a5:3c:ad: 76:79:4b:ff:af:c0:97:19:71:aa:01:2e:85:ad:56:d2:00:0e: c3:94:f3:68:d1:97:20:1d:6c:85:dd:51:80:cf:b2:4f:20:dd: db:de:98:93:19:4d:a7:81:f1:84:d2:e7:08:12:5c:fd:bc:b6: b3:a4:60:cd:b7:71:3f:df:13:e6:f2:4f:e4:42:61:d9:90:17: e5:a2:83:4d:ef:2b:fb:31:11:be:c2:9e:a8:6c:d2:63:91:a2: 09:5b:cb:4c:62:27:1f:56:82:fc:69:0d:d6:25:04:a4:a8:81: 3b:81:01:ca:19:2a:0b:d7:51:af:33:e6:4a:a0:15:a6:53:cc: a8:ce:fc:68:43:41:80:6e:ab:de:19:e6:a3:99:27:24:94:a0: cd:e8:c4:46:9a:1d:0c:91:9d:0b:28:5e:f4:c8:26:bf:53:c2: 2f:17:16:03:dc:a1:09:ce:93:30:cc:00:c4:a1:38:7f:0b:74: 99:32:f6:ab:9f:6f:f2:22:5d:3b:e4:34:6c:7c:c8:06:0e:cb: 50:08:c1:fc:a1:52:1d:f0:46:1b:21:b3:7e:c7:39:d5:f9:fa: af:04:e1:91:78:b9:26:2e:58:b8:6f:8b:cb:ca:22:c3:46:1b: 71:f7:3a:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fy5EyM2C4l8vJTzkDWDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjlmYjI0Y2U2N2MyMTEyOTdiMDY1YzY3ZjFiODIwOWI5OTQ0YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWh8mCrGewE8QzwUlZCwQK8TBup0 7f3ZSZRpnos+3eLeQZzd/+ktwPLZHa6h6EUnGfWgYyhQ3ZlMfuUG/lIEllgurGpK IBECPqqJmHuXOJXhwv9pvn82ofp4hs6nkB/koABYKcwhWCg1dsrK35V1aAEHbvF+ kzB6R1mBbh05SqKgl8PWpW57s1Ho9r8Cee3FHRW7GHAzIZRaTLdEcxcAkF61jqHz LlLHizovGwFIIG6Hm4qkp0GHd5mtqIzHsPNLm3IBPhHkYtTNSKUMOUFpfUfq11w3 2vh81+m1oCm3rA0bCknm4/z75Gr2z/H6a+XibYBxQY7i7nRHP9FlycXZVwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPafskzmfCESl7Blxn8bggm5lEsPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzNlNmIy Ni1hMTQ2LTQyY2YtODJmMy05ZTUxMzhlMTIwYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvM2U2YjI2 LWExNDYtNDJjZi04MmYzLTllNTEzOGUxMjBjOS8xLzlwLXlUT1o4SVJLWHNHWEdm eHVDQ2JtVVN3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwpJFMA0GCSqGSIb3DQEBCwUAA4IBAQCgCqBY kpHH19X6A1Lt+HelPK12eUv/r8CXGXGqAS6FrVbSAA7DlPNo0ZcgHWyF3VGAz7JP IN3b3piTGU2ngfGE0ucIElz9vLazpGDNt3E/3xPm8k/kQmHZkBflooNN7yv7MRG+ wp6obNJjkaIJW8tMYicfVoL8aQ3WJQSkqIE7gQHKGSoL11GvM+ZKoBWmU8yozvxo Q0GAbqveGeajmScklKDN6MRGmh0MkZ0LKF70yCa/U8IvFxYD3KEJzpMwzADEoTh/ C3SZMvarn2/yIl075DRsfMgGDstQCMH8oVId8EYbIbN+xznV+fqvBOGReLkmLli4 b4vLyiLDRhtx9zoh -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:58 2026 by rpki-client