This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer File: 9vSDrNiLUfXUf1d_EBtUV3heDts.cer (raw, json) Hash identifier: mO9fTQH/iSv1LySqb0V9Z8oi/cSMWVDJzuClEVikOw4= Subject key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB2C86874CE811FB266B82B072B795E13 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 12 Jan 2026 15:17:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204132 IP: 89.44.106.0/24 IP: 89.45.9.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:c8:68:74:ce:81:1f:b2:66:b8:2b:07:2b:79:5e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 12 15:17:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6f483acd88b51f5d47f577f101b5457785e0edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:20:5b:09:66:7e:6c:68:65:2d:c0:20:ee: 32:d7:34:9e:21:ef:9c:6f:43:12:5b:32:a3:95:e1: e2:28:83:89:70:31:e8:95:16:74:f6:01:1a:85:28: 9f:fa:f3:4b:41:e6:71:55:c2:03:8f:40:09:d1:23: 9e:ed:cf:0c:76:ff:2c:77:fd:9e:53:14:2f:b1:5e: fa:c5:58:f3:ee:fc:22:03:da:d2:9b:63:46:05:33: c5:db:42:bc:13:ee:2a:22:81:2c:83:f3:72:06:9e: 1b:46:c7:81:4c:dc:df:50:35:c2:01:b0:bb:43:fb: 89:fd:65:14:cb:db:8c:12:e8:03:94:77:72:cb:dd: 12:0b:82:00:66:ea:ae:21:ba:38:95:d2:8d:36:ff: 26:af:ee:84:62:b1:3a:02:42:aa:14:c7:49:a6:ab: c4:c2:48:ca:0f:67:5a:c4:94:00:86:9c:08:8b:97: 81:d1:b2:cc:3f:5d:4f:80:a5:60:fe:10:5b:ec:a3: c4:55:02:51:c4:30:75:63:29:0d:f7:66:48:6a:9c: 6c:62:0d:8d:8a:9d:6c:5f:60:09:4f:bd:52:e0:8f: c1:e3:d0:95:85:e3:5e:7e:96:72:b5:a9:74:66:aa: 47:01:37:91:db:0c:9c:87:c8:71:0c:52:85:09:f9: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.106.0/24 89.45.9.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204132 Signature Algorithm: sha256WithRSAEncryption 1c:0f:9b:c6:87:8e:6d:bb:60:59:0c:cb:56:9f:ba:e1:51:a5: d4:a4:fc:4f:4c:38:e9:e2:21:3e:ba:25:6a:ab:97:99:f6:36: 67:66:be:30:42:80:99:60:07:24:a4:45:a1:70:07:70:8d:6c: 6f:66:69:d4:de:72:f7:05:68:16:7f:f7:38:84:94:a6:cf:b3: 2d:73:81:5b:f1:2b:92:9a:3b:f7:92:77:0d:86:bb:6a:5e:2d: ca:b4:80:df:77:38:e6:90:42:e6:8e:34:af:01:ed:45:bc:3a: a9:83:59:e0:88:08:95:61:f4:8a:e1:b4:34:4d:91:d5:0e:1a: ed:2f:c2:c2:fa:e4:da:b8:75:f4:f6:13:77:30:8e:75:38:54: 44:b9:7b:1f:3d:e4:2a:c0:2b:68:12:b4:41:33:9b:85:5d:80: 3f:4d:6f:24:8c:27:2e:c6:49:3a:6f:42:2e:c4:e5:31:68:e8: 9a:b6:2d:cc:ba:b5:46:58:fb:f5:16:74:33:51:cc:63:a5:43: e1:f9:d9:e0:cb:c5:7d:9b:06:30:75:48:51:70:24:16:a1:b9: 3e:48:c3:48:26:d3:00:16:c5:36:c6:a2:93:16:38:d4:2d:2f: 5c:ef:30:02:76:cf:80:ad:df:28:2f:18:21:b2:38:12:42:b4: d1:bc:9b:4c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZuyyGh0zoEfsma4KwcreV4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEyMTUxNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmY0ODNhY2Q4OGI1MWY1ZDQ3ZjU3N2YxMDFiNTQ1Nzc4NWUwZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IEgWwlmfmxoZS3AIO4y1zSeIe+c b0MSWzKjleHiKIOJcDHolRZ09gEahSif+vNLQeZxVcIDj0AJ0SOe7c8Mdv8sd/2e UxQvsV76xVjz7vwiA9rSm2NGBTPF20K8E+4qIoEsg/NyBp4bRseBTNzfUDXCAbC7 Q/uJ/WUUy9uMEugDlHdyy90SC4IAZuquIbo4ldKNNv8mr+6EYrE6AkKqFMdJpqvE wkjKD2daxJQAhpwIi5eB0bLMP11PgKVg/hBb7KPEVQJRxDB1YykN92ZIapxsYg2N ip1sX2AJT71S4I/B49CVheNefpZytal0ZqpHATeR2wych8hxDFKFCfkRawIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFPb0g6zYi1H11H9XfxAbVFd4Xg7bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzNmNmRk NC0yMjgzLTQyYmEtYmQ2Mi01MmExNWQ3ODU0MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvM2Y2ZGQ0 LTIyODMtNDJiYS1iZDYyLTUyYTE1ZDc4NTQwMy8xLzl2U0RyTmlMVWZYVWYxZF9F QnRVVjNoZUR0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAWSxqAwQAWS0JMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMdZDANBgkqhkiG9w0BAQsFAAOCAQEAHA+bxoeObbtgWQzLVp+64VGl 1KT8T0w46eIhProlaquXmfY2Z2a+MEKAmWAHJKRFoXAHcI1sb2Zp1N5y9wVoFn/3 OISUps+zLXOBW/Erkpo795J3DYa7al4tyrSA33c45pBC5o40rwHtRbw6qYNZ4IgI lWH0iuG0NE2R1Q4a7S/Cwvrk2rh19PYTdzCOdThURLl7Hz3kKsAraBK0QTObhV2A P01vJIwnLsZJOm9CLsTlMWjomrYtzLq1Rlj79RZ0M1HMY6VD4fnZ4MvFfZsGMHVI UXAkFqG5PkjDSCbTABbFNsaikxY41C0vXO8wAnbPgK3fKC8YIbI4EkK00bybTA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:53 2026 by rpki-client