This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer File: 9zHDObGGFyK__oZyGDFM4SlcPIU.cer (raw, json) Hash identifier: CKVob3Dho2BA5hGaEH49cpRKvzDHUDLjMDZhZOrHa4o= Subject key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38749E2CDDB41965D84BB442D2091F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56791 IP: 176.32.128.0/19 IP: 176.119.197.0/24 IP: 185.45.100.0/22 IP: 2a00:9e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:74:9e:2c:dd:b4:19:65:d8:4b:b4:42:d2:09:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f731c339b1861722bffe867218314ce1295c3c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:00:b8:d7:24:38:3e:c5:01:26:47:de:cc: 7f:36:e7:14:fc:49:f5:69:00:0f:f7:d9:d6:4f:fc: de:fe:ea:a3:a0:ee:44:1f:fe:37:4c:75:f4:08:83: 42:13:57:16:7e:30:d7:87:e2:fd:27:da:1d:17:8c: 88:3c:99:c8:2f:17:53:d1:ae:d9:df:12:2f:18:0a: 79:a2:19:cd:d7:f8:35:9b:31:4b:8c:a6:94:1b:ae: 5f:db:5c:37:03:d6:df:6e:48:d6:a8:d8:60:c5:42: 1c:41:3e:74:57:3a:36:a3:00:d7:77:d8:b4:23:4d: 36:98:fe:1d:09:ed:1d:02:e5:92:9b:ba:ed:5b:5a: c4:f3:ad:54:6f:3b:9b:bc:64:12:4a:a3:32:41:39: 2e:84:f9:bb:eb:56:95:86:4e:d5:dc:f7:c8:63:7b: 71:a5:72:6d:f3:5a:6d:32:b7:a2:2a:ff:37:ea:92: 74:dd:5e:de:43:c7:2b:b4:ab:03:7f:52:0b:cd:5a: bd:6b:b4:03:e2:7c:e9:d9:98:35:ea:6e:2c:61:c0: 44:9b:17:0d:76:61:10:a6:59:b0:e9:80:5c:17:88: 8e:a3:f0:a8:4a:8a:bd:48:81:7e:a8:cf:f1:f2:4f: 2d:a1:fe:e6:7f:91:75:88:00:2c:e5:e3:ba:f5:aa: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.128.0/19 176.119.197.0/24 185.45.100.0/22 IPv6: 2a00:9e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56791 Signature Algorithm: sha256WithRSAEncryption 0b:bd:61:95:e9:3b:2e:4c:f2:15:b5:c2:e0:cc:3d:01:27:e1: d0:ea:0b:3e:b6:ec:99:50:bb:ac:ee:97:67:61:e3:c9:75:69: 22:35:86:3b:87:02:58:39:21:0d:53:71:87:0f:07:a1:64:35: e8:ab:30:39:f4:6b:f9:3d:ed:a7:e2:a6:f5:fb:9f:2e:47:ab: 09:e3:76:5c:6c:13:87:22:8e:04:26:3f:35:56:c0:66:1c:f5: 81:a7:f6:45:9b:74:9a:9b:cd:45:e6:c6:34:7f:0a:cc:6c:4e: 0f:d8:f9:14:fc:78:f7:4d:1a:84:22:96:45:0e:ca:2d:aa:17: ab:18:ed:2b:15:03:17:ed:57:b0:ab:a1:c4:80:64:71:95:b5: f5:ab:44:8e:63:ee:04:76:71:c5:d6:c3:0e:6f:c0:85:bf:e9: fb:3d:75:cc:7f:5f:ec:b5:1f:cd:49:bd:f9:de:d2:44:3a:53: 10:24:54:f8:fd:19:3e:ab:9e:be:61:fa:ac:55:f3:9c:ea:da: de:1f:ff:4d:12:23:2d:7f:d0:ba:0a:d0:02:b8:32:53:a0:a7: 40:8d:f4:a1:6d:a0:cc:c2:9f:31:d1:4c:94:d5:2b:15:4b:ef: e1:6a:b3:5f:9f:ca:64:ab:09:1f:ea:d9:af:87:b6:3e:44:26: 18:ea:bb:a8 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt+OHSeLN20GWXYS7RC0gkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzMxYzMzOWIxODYxNzIyYmZmZTg2NzIxODMxNGNlMTI5NWMzYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk84AuNckOD7FASZH3sx/NucU/En1 aQAP99nWT/ze/uqjoO5EH/43THX0CINCE1cWfjDXh+L9J9odF4yIPJnILxdT0a7Z 3xIvGAp5ohnN1/g1mzFLjKaUG65f21w3A9bfbkjWqNhgxUIcQT50Vzo2owDXd9i0 I002mP4dCe0dAuWSm7rtW1rE861UbzubvGQSSqMyQTkuhPm761aVhk7V3PfIY3tx pXJt81ptMreiKv836pJ03V7eQ8crtKsDf1ILzVq9a7QD4nzp2Zg16m4sYcBEmxcN dmEQplmw6YBcF4iOo/CoSoq9SIF+qM/x8k8tof7mf5F1iAAs5eO69aosFQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFPcxwzmxhhciv/6GchgxTOEpXDyFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzE2YzY0 Yi1iOTY1LTQ5Y2MtYWE0MC0wZGMyMGE3ZDgyYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMTZjNjRi LWI5NjUtNDljYy1hYTQwLTBkYzIwYTdkODJiOS8xLzl6SERPYkdHRnlLX19vWnlH REZNNFNsY1BJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFsCCAAwQAsHfFAwQCuS1kMA0EAgACMAcDBQMq AJ6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDd1zANBgkqhkiG9w0BAQsFAAOC AQEAC71hlek7LkzyFbXC4Mw9ASfh0OoLPrbsmVC7rO6XZ2HjyXVpIjWGO4cCWDkh DVNxhw8HoWQ16KswOfRr+T3tp+Km9fufLkerCeN2XGwThyKOBCY/NVbAZhz1gaf2 RZt0mpvNRebGNH8KzGxOD9j5FPx4900ahCKWRQ7KLaoXqxjtKxUDF+1XsKuhxIBk cZW19atEjmPuBHZxxdbDDm/Ahb/p+z11zH9f7LUfzUm9+d7SRDpTECRU+P0ZPque vmH6rFXznOra3h//TRIjLX/QugrQArgyU6CnQI30oW2gzMKfMdFMlNUrFUvv4Wqz X5/KZKsJH+rZr4e2PkQmGOq7qA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:39 2026 by rpki-client