This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer (raw, json) Hash identifier: q5uQ8QeJYkSfqs5+Fp4sX+qIvoC1++ecTEbjCpD8re4= Subject key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E3AABE61F9BACC44C60791C6DC9B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198139 IP: 128.127.48.0/23 IP: 185.195.148.0/24 IP: 2a0b:b000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3a:ab:e6:1f:9b:ac:c4:4c:60:79:1c:6d:c9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:bf:1a:f8:19:a9:dc:4b:ea:91:9a:4b:b1: 86:67:9f:9f:9c:58:c3:a4:71:16:c7:50:74:7d:89: 86:b6:ce:fc:ef:f3:f2:66:bb:5b:35:bc:4b:ad:e4: 2c:24:81:e0:f4:d1:1b:16:0c:83:6a:e3:bb:ab:8a: 70:b9:c8:a7:f1:7e:50:71:8d:10:74:0a:c4:9a:66: bb:5b:56:2f:cb:30:ed:a8:6e:4f:7a:1d:4c:e8:e8: 21:7a:a4:ea:54:3e:db:ee:bd:9a:d6:8f:21:92:e7: d6:ce:9d:0e:94:96:ad:85:89:31:a8:99:49:9f:62: 68:8a:54:3a:3f:31:4d:f9:68:db:fc:1f:c7:00:71: 37:ca:c3:fe:c2:da:3a:3f:f2:49:5a:fd:7f:78:a9: 3d:29:d0:c6:05:6e:7b:eb:4c:e9:fd:5c:f0:bd:95: 14:ae:ef:fe:a1:26:54:4a:28:ff:9c:0b:08:3e:9c: 2f:13:62:5d:c3:36:4d:df:b6:53:3d:11:91:b0:d4: 5d:28:5c:e6:29:66:d6:eb:8c:66:50:a8:45:70:e1: f5:8b:5f:38:51:a2:00:2b:ff:e0:d6:06:86:37:24: 2a:f3:72:84:ac:f9:74:c0:a4:b6:b7:30:b8:aa:4c: ab:f8:ee:50:1a:dc:a1:dc:43:68:ef:2b:0e:c1:8c: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.48.0/23 185.195.148.0/24 IPv6: 2a0b:b000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198139 Signature Algorithm: sha256WithRSAEncryption a4:a2:2c:69:01:01:ba:7a:16:b6:76:09:e7:c0:f7:5a:a4:38: d4:67:6d:66:c3:19:aa:6d:78:74:aa:fe:49:7f:af:ee:b3:c9: 6f:f0:b7:92:e2:9c:01:f8:bd:57:8f:48:94:5c:24:53:74:3e: 80:1a:6d:dc:6c:e6:0f:da:8c:83:fd:93:b2:90:0a:7f:a5:4e: f2:b4:14:0c:f7:f2:d3:85:22:35:43:eb:93:dd:81:04:3f:66: ef:da:2e:8a:e9:05:9a:52:e1:68:0d:16:c2:7a:9f:a8:78:af: 58:22:6a:cb:89:46:09:13:e5:7b:82:c2:60:6f:ff:32:cc:a7: 81:ce:ea:1e:51:e3:e4:55:f7:83:a6:f0:e1:e1:6e:cc:fa:1e: 95:6c:6e:9d:86:0d:63:ff:4c:37:d4:85:31:53:fb:1b:bc:b0: be:08:c6:36:36:52:cf:d1:36:4d:1f:2b:9d:94:05:b7:3a:a9: bd:1f:92:f9:ae:18:93:19:e9:f5:2e:fd:81:14:ad:30:83:bf: f5:69:83:05:24:a4:ed:bd:44:36:e4:a6:be:59:68:84:db:11: 11:61:da:14:58:00:fd:0d:82:ac:fe:ac:e2:90:20:2b:70:f8: 1b:03:30:2b:98:0a:47:a0:91:f5:5e:20:aa:88:ec:b6:18:de: 7c:f5:28:5b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fjqr5h+brMRMYHkcbcm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmRlMzQ2YjU4MDUzMjdiYmM5ZGY1ZTQ5YjE2Yzk5N2VhM2ExMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAK/GvgZqdxL6pGaS7GGZ5+fnFjD pHEWx1B0fYmGts787/PyZrtbNbxLreQsJIHg9NEbFgyDauO7q4pwucin8X5QcY0Q dArEmma7W1YvyzDtqG5Peh1M6OgheqTqVD7b7r2a1o8hkufWzp0OlJathYkxqJlJ n2JoilQ6PzFN+Wjb/B/HAHE3ysP+wto6P/JJWv1/eKk9KdDGBW5760zp/VzwvZUU ru/+oSZUSij/nAsIPpwvE2JdwzZN37ZTPRGRsNRdKFzmKWbW64xmUKhFcOH1i184 UaIAK//g1gaGNyQq83KErPl0wKS2tzC4qkyr+O5QGtyh3ENo7ysOwYxg+wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPbeNGtYBTJ7vJ315JsWyZfqOhJUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzNhODQ2 NC0wNzI3LTRkMWMtODkyNS03M2FiODU2NGI5Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvM2E4NDY0 LTA3MjctNGQxYy04OTI1LTczYWI4NTY0YjljYS8xLzl0NDBhMWdGTW51OG5mWGtt eGJKbC1vNkVsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBgH8wAwQAucOUMA0EAgACMAcDBQMqC7AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMF+zANBgkqhkiG9w0BAQsFAAOCAQEApKIs aQEBunoWtnYJ58D3WqQ41GdtZsMZqm14dKr+SX+v7rPJb/C3kuKcAfi9V49IlFwk U3Q+gBpt3GzmD9qMg/2TspAKf6VO8rQUDPfy04UiNUPrk92BBD9m79ouiukFmlLh aA0WwnqfqHivWCJqy4lGCRPle4LCYG//Msyngc7qHlHj5FX3g6bw4eFuzPoelWxu nYYNY/9MN9SFMVP7G7ywvgjGNjZSz9E2TR8rnZQFtzqpvR+S+a4Ykxnp9S79gRSt MIO/9WmDBSSk7b1ENuSmvllohNsREWHaFFgA/Q2CrP6s4pAgK3D4GwMwK5gKR6CR 9V4gqojsthjefPUoWw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:35 2026 by rpki-client