This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.cer (raw, json) Hash identifier: 3NON3ZYNFLVg5h1mhCIb06xwNDYInfplCr2pp1q6Yx0= Subject key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EACF1637F83EAEEE9A210EEFDB410F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.185.164.0/22 IP: 2a0b:5a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cf:16:37:f8:3e:ae:ee:9a:21:0e:ef:db:41:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:49:72:02:c3:96:61:b4:49:7a:e3:8d:1a: 90:a5:cd:19:52:f8:38:00:e6:52:19:50:ed:fd:93: 4c:4c:2f:df:82:8e:c1:49:3a:ea:77:20:42:c2:39: 40:58:ea:4f:c6:f4:91:ff:fb:66:6c:84:0c:7e:5f: 5e:8a:6b:1f:b9:93:24:72:bf:f4:cb:99:f9:a1:94: 2f:0f:00:68:b8:00:92:99:b4:fc:25:7d:e7:23:57: 65:f7:dd:e0:6d:34:03:8e:ac:26:c9:3a:85:37:6c: 44:7a:97:bf:fa:af:10:6b:7f:55:b9:ed:45:fb:3f: 0b:62:0c:99:9d:18:50:92:5e:c0:89:45:f6:0d:36: ab:50:ba:d3:cb:46:f2:c2:0c:3f:ca:04:de:b2:32: ea:f2:18:06:17:d3:44:86:cd:88:54:3f:3e:59:0d: 94:91:10:bc:83:ae:af:b2:ba:22:d3:bb:c2:96:a9: 7d:c3:7a:3d:c1:a5:24:8f:3d:71:84:a2:2c:3f:fa: 5e:e1:38:3d:78:b6:b5:5c:f6:be:45:dc:a1:42:a4: 87:d0:d6:77:fe:ad:ea:91:3f:1e:9a:42:d3:b3:51: 66:a9:98:03:35:da:41:64:24:39:2b:f0:46:3d:93: c3:a1:2c:1f:75:57:c7:20:72:3e:94:cc:86:aa:a1: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.164.0/22 IPv6: 2a0b:5a80::/29 Signature Algorithm: sha256WithRSAEncryption 53:05:93:66:b1:14:5d:2f:fa:d3:6f:c1:27:46:cd:68:13:64: 29:b1:93:bb:c1:e6:78:ab:bd:10:a3:d0:5d:da:ba:8c:f0:1e: ad:c2:51:22:dd:68:c5:e3:65:76:d1:34:79:3c:ec:7c:ce:71: 7a:bd:7b:d6:30:c8:53:48:09:44:a8:1e:23:3d:12:ed:93:b8: c8:d9:25:f8:47:3b:4e:a1:fe:87:e9:f5:18:a5:cd:8e:f8:66: 5c:8a:71:10:b9:d7:10:23:af:65:d8:c9:d7:21:60:ec:ca:a1: 07:76:89:d1:fe:9a:57:63:7f:d4:7e:c6:8e:23:b5:6b:f3:16: 33:2f:27:5f:b5:8c:3f:24:a2:69:15:ad:f7:14:23:97:cb:1e: b1:c7:dd:aa:f7:53:32:98:4c:54:e6:ff:2d:03:8a:17:1e:ab: ef:4f:14:b8:0a:05:e5:8a:14:96:82:67:b5:c0:8f:c7:2a:62: 78:7f:e5:84:03:c6:cb:2f:9e:14:6a:46:c5:50:00:b1:93:5d: 6a:36:d6:ef:57:ed:a5:8a:e9:92:51:1f:a1:dd:cb:4b:73:be: 30:3c:97:70:cc:aa:93:bf:b0:ce:d5:71:dc:09:28:9b:d8:74: 33:13:45:97:19:49:f9:fb:a5:35:53:b7:4b:49:be:37:b0:50: 6a:eb:a1:b5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26s8WN/g+ru6aIQ7v20EPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjkxYWIzMjQ1ZmY4OTVhNzJkZDZmZjA3NDNjMzc3YjZmMGY4OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaRJcgLDlmG0SXrjjRqQpc0ZUvg4 AOZSGVDt/ZNMTC/fgo7BSTrqdyBCwjlAWOpPxvSR//tmbIQMfl9eimsfuZMkcr/0 y5n5oZQvDwBouACSmbT8JX3nI1dl993gbTQDjqwmyTqFN2xEepe/+q8Qa39Vue1F +z8LYgyZnRhQkl7AiUX2DTarULrTy0bywgw/ygTesjLq8hgGF9NEhs2IVD8+WQ2U kRC8g66vsroi07vClql9w3o9waUkjz1xhKIsP/pe4Tg9eLa1XPa+RdyhQqSH0NZ3 /q3qkT8emkLTs1FmqZgDNdpBZCQ5K/BGPZPDoSwfdVfHIHI+lMyGqqGi0wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPaRqzJF/4lact1v8HQ8N3tvD4mmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzI0NGE3 MS1lNmFmLTQ5MDUtYmY2NS1kZmUzYzRjNTI4OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMjQ0YTcx LWU2YWYtNDkwNS1iZjY1LWRmZTNjNGM1Mjg4Yy8xLzlwR3JNa1hfaVZweTNXX3dk RHczZTI4UGlhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubmkMA0EAgACMAcDBQMqC1qAMA0GCSqGSIb3 DQEBCwUAA4IBAQBTBZNmsRRdL/rTb8EnRs1oE2QpsZO7weZ4q70Qo9Bd2rqM8B6t wlEi3WjF42V20TR5POx8znF6vXvWMMhTSAlEqB4jPRLtk7jI2SX4RztOof6H6fUY pc2O+GZcinEQudcQI69l2MnXIWDsyqEHdonR/ppXY3/UfsaOI7Vr8xYzLydftYw/ JKJpFa33FCOXyx6xx92q91MymExU5v8tA4oXHqvvTxS4CgXlihSWgme1wI/HKmJ4 f+WEA8bLL54UakbFUACxk11qNtbvV+2liumSUR+h3ctLc74wPJdwzKqTv7DO1XHc CSib2HQzE0WXGUn5+6U1U7dLSb43sFBq66G1 -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:57 2026 by rpki-client