This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.cer (raw, json) Hash identifier: QP8Vza2JmYBw7DxRZejePJAGavKyipv+hFrGGfTjaGE= Subject key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37DE9DFB5F6A0FF7FF5B1B7534A18E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.150.58.0/24 IP: 185.223.64.0/22 IP: 2a0d:3800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:9d:fb:5f:6a:0f:f7:ff:5b:1b:75:34:a1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:37:d3:11:6f:9b:67:36:73:7a:ed:5b:c7: f9:5a:23:e3:0a:7f:ff:4d:56:e6:65:46:25:68:d8: e4:34:7a:a6:b0:36:a2:9d:05:eb:6f:74:0a:6b:26: bd:e4:4b:d6:3d:df:52:bf:0f:0a:a4:cb:34:d5:34: 67:6c:8f:fb:11:2a:21:cf:70:c5:ad:06:02:b0:d9: 06:6a:76:dd:e3:0f:f5:f4:05:b8:6f:92:53:01:a6: 00:63:2b:7c:06:31:fb:9a:d2:7e:5f:04:33:2e:6f: bb:dc:f3:df:0d:dc:e6:1f:5c:23:3a:19:8a:d0:b5: 08:53:37:0b:d7:23:f5:9b:32:b3:41:44:02:79:45: f9:3f:c9:2d:84:2e:99:35:b7:f4:14:37:a2:25:e4: 90:f2:b4:b6:df:7b:65:f9:92:b2:66:26:b0:e9:d0: c2:89:98:31:dd:d1:d9:7a:7f:35:ab:cc:dd:40:ec: 89:43:3b:10:c8:9f:87:7a:97:b3:53:b1:ba:4c:2e: 49:c5:f3:9d:09:98:2c:f9:c3:e3:c8:0f:99:86:33: 9f:c5:b0:4c:99:40:e9:e0:ff:20:5c:dd:b8:0e:6d: 3b:7c:da:83:5e:d9:fa:00:5d:b4:0b:76:b3:57:fc: 61:2c:d2:88:a5:a9:70:e8:3a:e3:0e:8c:5a:c7:8d: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.58.0/24 185.223.64.0/22 IPv6: 2a0d:3800::/29 Signature Algorithm: sha256WithRSAEncryption 10:4c:cb:cf:ad:54:6a:33:db:b7:f8:cd:cc:4c:cf:d0:88:f1: 11:95:45:0c:87:11:9f:8d:1e:5e:f8:27:99:e0:d0:54:dd:6b: 56:70:ce:9d:50:16:97:a2:b8:9a:f0:3d:43:79:88:18:e2:67: 58:ef:c8:62:29:6f:f6:29:f1:63:3f:d8:87:05:17:ff:75:36: f4:ef:06:5a:04:29:f2:95:22:42:d1:d6:e5:31:82:2d:b4:98: b5:6e:5b:3e:c9:36:c3:d0:d6:e5:86:0d:5e:2e:cd:6b:30:1a: 3e:a2:7b:bf:fd:90:24:e9:64:d2:b3:5b:7c:64:0f:0a:2f:9d: d3:65:10:30:61:ba:a3:79:23:b6:18:c9:28:e0:c8:6d:9e:4f: 10:73:36:4b:d7:e0:46:b6:48:e5:f2:4f:23:0c:34:b4:84:4d: b2:72:a4:1b:1e:d6:32:d6:77:1a:aa:74:fc:14:aa:59:2e:69: 86:d6:c0:48:e1:a4:72:f5:cf:04:d1:0b:db:60:d2:81:d6:b9: ec:a9:08:2d:a5:31:18:67:ca:b6:3e:cb:fb:0d:84:94:e3:c8: 4b:72:29:40:9d:cc:0b:51:81:a5:d2:e7:e9:02:a8:05:b1:25: a4:e0:05:94:cc:48:77:b3:39:0b:d0:1b:a6:7c:d0:56:6d:73: b7:0d:a3:57 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+N96d+19qD/f/Wxt1NKGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmJhY2U3OGZjOTAyNzhkODJmMWU4NjY4YThhMTllZTk5ODJjZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxps30xFvm2c2c3rtW8f5WiPjCn// TVbmZUYlaNjkNHqmsDainQXrb3QKaya95EvWPd9Svw8KpMs01TRnbI/7ESohz3DF rQYCsNkGanbd4w/19AW4b5JTAaYAYyt8BjH7mtJ+XwQzLm+73PPfDdzmH1wjOhmK 0LUIUzcL1yP1mzKzQUQCeUX5P8kthC6ZNbf0FDeiJeSQ8rS233tl+ZKyZiaw6dDC iZgx3dHZen81q8zdQOyJQzsQyJ+HepezU7G6TC5JxfOdCZgs+cPjyA+ZhjOfxbBM mUDp4P8gXN24Dm07fNqDXtn6AF20C3azV/xhLNKIpalw6DrjDoxax42NkwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFPa6znj8kCeNgvHoZoqKGe6Zgs3DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzc4MzVj Mi0yMDRjLTRkZGUtOGVmOS1mNmRkM2I1MTYxZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvNzgzNWMy LTIwNGMtNGRkZS04ZWY5LWY2ZGQzYjUxNjFmNS8xLzlyck9lUHlRSjQyQzhlaG1p b29aN3BtQ3pjTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAWZY6AwQCud9AMA0EAgACMAcDBQMqDTgAMA0G CSqGSIb3DQEBCwUAA4IBAQAQTMvPrVRqM9u3+M3MTM/QiPERlUUMhxGfjR5e+CeZ 4NBU3WtWcM6dUBaXoria8D1DeYgY4mdY78hiKW/2KfFjP9iHBRf/dTb07wZaBCny lSJC0dblMYIttJi1bls+yTbD0Nblhg1eLs1rMBo+onu//ZAk6WTSs1t8ZA8KL53T ZRAwYbqjeSO2GMko4Mhtnk8QczZL1+BGtkjl8k8jDDS0hE2ycqQbHtYy1ncaqnT8 FKpZLmmG1sBI4aRy9c8E0QvbYNKB1rnsqQgtpTEYZ8q2Psv7DYSU48hLcilAncwL UYGl0ufpAqgFsSWk4AWUzEh3szkL0BumfNBWbXO3DaNX -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:30 2026 by rpki-client