This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer File: 9rkcLAjwDWdj0unmosRCETDz3b0.cer (raw, json) Hash identifier: lTKG1kuUcbdeRdW/qHOce7V7q3mMENxFRAOQZVD9ViI= Subject key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A247D7D99AA81FE450A46B9A4AFEED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213939 IP: 62.164.197.0/24 IP: 212.108.103.0/24 IP: 2a01:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:47:d7:d9:9a:a8:1f:e4:50:a4:6b:9a:4a:fe:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:d7:e8:b4:6e:f8:61:e4:f8:b1:45:63:2c: eb:f9:29:ef:44:27:20:c4:49:35:b0:11:2e:56:59: f2:21:e8:01:21:e8:a0:0b:1c:45:93:dd:99:c3:bf: 2f:d0:ce:96:7f:4b:93:6b:d8:24:77:76:38:c1:e6: 18:ee:9c:11:b2:c1:6c:36:18:14:a9:a4:ac:00:37: 06:76:8f:b4:a5:6a:e9:92:06:24:dc:14:7f:f1:72: 1d:9e:02:ef:25:fe:d3:36:df:c6:d2:54:75:ed:ad: 4d:77:8b:1a:ce:68:f7:e9:47:36:e2:67:4b:2d:b4: 3e:34:62:ec:a1:64:64:2c:9f:fd:3c:58:90:6a:69: 29:21:3e:17:8d:cf:c2:b1:61:7b:4f:bf:70:f9:d3: 88:24:17:ef:96:bb:48:f3:33:b7:8d:1b:ec:93:cb: 37:76:cf:92:89:9d:73:ba:ed:67:1b:d6:69:c5:49: 04:0c:ea:bc:aa:cb:74:71:a9:6e:4a:5f:ca:6d:ee: 08:20:38:91:0a:89:34:83:73:52:15:fe:64:69:01: 20:9f:48:02:0e:7e:88:0f:b7:f3:6c:75:7f:bc:c0: 2f:57:d5:f7:d5:d7:ee:54:b6:9f:75:14:a4:5a:d3: 84:11:bc:dc:8e:4a:2c:2f:3f:f2:6d:ee:43:fa:60: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.197.0/24 212.108.103.0/24 IPv6: 2a01:e340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213939 Signature Algorithm: sha256WithRSAEncryption 50:9a:4d:e0:2f:84:d9:b8:d9:b7:4e:b9:de:3d:8b:3e:ca:51: c6:f3:e3:1a:16:94:fc:ee:7f:63:d0:e3:3e:a2:c6:82:03:46: 7f:e2:01:09:76:38:b7:36:d3:ac:09:b2:e2:74:3d:1d:9d:e4: d6:fa:56:08:40:6a:8e:aa:ac:de:b8:53:6c:e1:d6:8f:3d:14: 00:f9:de:d3:31:40:76:7b:90:f5:95:3d:69:81:a2:97:1c:46: 80:cb:ca:38:fe:48:02:c6:40:7a:cf:40:9a:78:0a:10:b0:3a: e9:5e:8b:57:b4:24:7b:df:58:bc:63:5f:7e:0d:11:13:ad:51: 7d:83:bb:5e:f6:38:28:14:a2:3d:ee:df:a2:3a:85:71:22:f7: b9:d6:e1:4b:16:f0:cf:4a:6f:1a:24:01:0a:0b:b1:e4:92:d0: d7:36:ac:e7:c2:99:cc:3f:99:e5:b5:a0:36:8d:ec:75:7c:f0: 27:2f:49:4e:e5:fc:32:e6:de:38:db:e5:c2:8d:60:18:b6:79: 83:ca:f7:fa:51:b3:8e:9b:a3:39:f9:e1:f0:41:b1:c5:cd:6e: ee:f8:bc:68:65:88:76:6e:3a:f7:c3:0f:85:76:00:ca:d2:a0: 2c:3f:d7:f4:e7:4c:a2:0b:1d:78:97:a6:cf:44:6b:0a:87:fd: e5:90:e4:27 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4okfX2ZqoH+RQpGuaSv7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmI5MWMyYzA4ZjAwZDY3NjNkMmU5ZTZhMmM0NDIxMTMwZjNkZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w3X6LRu+GHk+LFFYyzr+SnvRCcg xEk1sBEuVlnyIegBIeigCxxFk92Zw78v0M6Wf0uTa9gkd3Y4weYY7pwRssFsNhgU qaSsADcGdo+0pWrpkgYk3BR/8XIdngLvJf7TNt/G0lR17a1Nd4sazmj36Uc24mdL LbQ+NGLsoWRkLJ/9PFiQamkpIT4Xjc/CsWF7T79w+dOIJBfvlrtI8zO3jRvsk8s3 ds+SiZ1zuu1nG9ZpxUkEDOq8qst0caluSl/Kbe4IIDiRCok0g3NSFf5kaQEgn0gC Dn6ID7fzbHV/vMAvV9X31dfuVLafdRSkWtOEEbzcjkosLz/ybe5D+mDX/wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPa5HCwI8A1nY9Lp5qLEQhEw8929MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzhkYTVl OC04NTQ0LTQ5ZDktYTgzZi04YzkxZjk2YmU2MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvOGRhNWU4 LTg1NDQtNDlkOS1hODNmLThjOTFmOTZiZTYyNS8xLzlya2NMQWp3RFdkajB1bm1v c1JDRVREejNiMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAPqTFAwQA1GxnMA0EAgACMAcDBQMqAeNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNDszANBgkqhkiG9w0BAQsFAAOCAQEAUJpN 4C+E2bjZt0653j2LPspRxvPjGhaU/O5/Y9DjPqLGggNGf+IBCXY4tzbTrAmy4nQ9 HZ3k1vpWCEBqjqqs3rhTbOHWjz0UAPne0zFAdnuQ9ZU9aYGilxxGgMvKOP5IAsZA es9AmngKELA66V6LV7Qke99YvGNffg0RE61RfYO7XvY4KBSiPe7fojqFcSL3udbh Sxbwz0pvGiQBCgux5JLQ1zas58KZzD+Z5bWgNo3sdXzwJy9JTuX8MubeONvlwo1g GLZ5g8r3+lGzjpujOfnh8EGxxc1u7vi8aGWIdm4698MPhXYAytKgLD/X9OdMogsd eJemz0RrCof95ZDkJw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:42 2026 by rpki-client