This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer File: 9q9DOXTfNztwq9drE-HHDHdfVUs.cer (raw, json) Hash identifier: +vKOXZafWJY6wqxquXeXnHe16z6qgFO0z/xZCF3p4sU= Subject key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348AEF1AA52375D71A77AB357516A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200482 AS: 215653 IP: 45.85.216.0/22 IP: 45.89.140.0/22 IP: 193.187.255.0/24 IP: 2a0e:cb80::/29 IP: 2a12:3e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8a:ef:1a:a5:23:75:d7:1a:77:ab:35:75:16:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6af433974df373b70abd76b13e1c70c775f554b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:09:85:3b:58:3b:e6:d6:b0:b2:d4:37:76: 09:92:b7:ec:ab:76:27:a1:52:76:ca:09:1e:f9:f1: 2c:94:d3:93:27:ea:51:37:d5:56:39:a4:bc:d7:b8: 03:d5:ba:7c:b6:a1:41:2d:6f:59:d7:e2:0a:7c:38: f2:bd:7a:94:6c:61:0c:a8:8a:35:14:53:19:f5:53: fc:b5:36:e9:05:e2:4c:37:a6:ac:43:b5:5e:52:db: 75:66:de:68:24:5f:e4:c4:2e:c6:5b:ed:fd:b0:4d: cd:16:90:00:29:11:89:a1:c8:9b:5e:c8:17:b0:52: a3:65:39:ed:41:52:f0:01:b3:8c:f6:ab:fd:59:3c: 60:bb:db:1b:d5:6d:77:9f:8b:a8:81:fc:c7:8d:98: ce:aa:93:8d:d9:df:6f:c5:74:32:5f:cb:69:15:c9: 6e:41:13:21:0b:97:a1:c8:a5:40:e1:75:5a:88:a1: ca:13:8b:5f:d8:53:98:1d:fd:3d:97:95:ef:e1:3a: 73:1f:db:49:0b:51:fc:7b:b7:60:82:97:2d:15:a7: 0c:44:6f:f5:1d:35:22:f0:27:6d:19:76:e8:8c:a7: 91:69:8b:bc:9d:27:64:93:4c:65:cc:50:05:ea:94: 16:4d:d5:5c:e0:12:94:7d:ab:cd:3f:c7:74:66:93: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.216.0/22 45.89.140.0/22 193.187.255.0/24 IPv6: 2a0e:cb80::/29 2a12:3e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200482 215653 Signature Algorithm: sha256WithRSAEncryption 3a:c4:a3:20:3c:f5:a3:c4:dd:a1:5e:b8:e0:5f:6c:97:92:f7: c0:a6:17:6a:41:14:85:16:45:78:8e:28:52:4f:6e:af:ad:51: b3:a9:3d:f6:32:af:15:d1:45:e5:d8:2d:a7:59:e5:0c:c3:ee: 5a:48:37:ed:bf:e9:5a:cf:8a:f4:0d:1b:0d:f0:1b:68:9d:53: 8f:b1:f1:7c:58:b6:6e:b2:3e:97:1a:0b:9b:da:a5:26:6f:a9: 82:b2:a9:3f:77:39:9b:c8:a2:6e:94:45:18:26:a2:ad:da:10: 16:33:6d:47:6c:c8:fc:95:a8:9d:eb:ef:a2:42:39:86:0f:33: 2e:b4:12:6d:b5:b5:8a:5c:fa:3f:aa:a2:c3:8e:4b:16:d5:48: af:c1:1f:29:9e:78:ab:a7:83:79:3d:77:5e:72:69:16:40:bd: 8c:9f:15:d0:ad:9f:75:85:d2:d1:59:b7:d1:48:b0:08:69:df: 4d:65:c1:6d:69:5f:0d:f1:fb:9b:c4:ef:83:a1:71:27:b1:10: ea:0c:fb:62:27:39:75:56:d1:a3:93:d8:e9:78:04:32:3a:bb: 10:cd:eb:6f:a5:df:58:93:02:fd:0d:29:70:08:55:47:3a:29: d1:a8:ea:db:1d:33:71:66:22:d2:6e:c2:3a:10:2f:82:a9:b0: f9:37:06:76 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt4NIrvGqUjddcad6s1dRaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmFmNDMzOTc0ZGYzNzNiNzBhYmQ3NmIxM2UxYzcwYzc3NWY1NTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMQJhTtYO+bWsLLUN3YJkrfsq3Yn oVJ2ygke+fEslNOTJ+pRN9VWOaS817gD1bp8tqFBLW9Z1+IKfDjyvXqUbGEMqIo1 FFMZ9VP8tTbpBeJMN6asQ7VeUtt1Zt5oJF/kxC7GW+39sE3NFpAAKRGJocibXsgX sFKjZTntQVLwAbOM9qv9WTxgu9sb1W13n4uogfzHjZjOqpON2d9vxXQyX8tpFclu QRMhC5ehyKVA4XVaiKHKE4tf2FOYHf09l5Xv4TpzH9tJC1H8e7dggpctFacMRG/1 HTUi8CdtGXbojKeRaYu8nSdkk0xlzFAF6pQWTdVc4BKUfavNP8d0ZpPlFwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFPavQzl03zc7cKvXaxPhxwx3X1VLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2Y5Y2Fm MC0yYzJlLTQ4OTctOGEzYi1hMjZiYzY1M2IwNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZjljYWYw LTJjMmUtNDg5Ny04YTNiLWEyNmJjNjUzYjA2Yi8xLzlxOURPWFRmTnp0d3E5ZHJF LUhIREhkZlZVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCLVXYAwQCLVmMAwQAwbv/MBQEAgACMA4DBQMq DsuAAwUDKhI+gDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDDyICAwNKZTANBgkq hkiG9w0BAQsFAAOCAQEAOsSjIDz1o8TdoV644F9sl5L3wKYXakEUhRZFeI4oUk9u r61Rs6k99jKvFdFF5dgtp1nlDMPuWkg37b/pWs+K9A0bDfAbaJ1Tj7HxfFi2brI+ lxoLm9qlJm+pgrKpP3c5m8iibpRFGCairdoQFjNtR2zI/JWonevvokI5hg8zLrQS bbW1ilz6P6qiw45LFtVIr8EfKZ54q6eDeT13XnJpFkC9jJ8V0K2fdYXS0Vm30Uiw CGnfTWXBbWlfDfH7m8Tvg6FxJ7EQ6gz7Yic5dVbRo5PY6XgEMjq7EM3rb6XfWJMC /Q0pcAhVRzop0ajq2x0zcWYi0m7COhAvgqmw+TcGdg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:50 2026 by rpki-client