This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer File: G-9aoU0xQMfHxJiPGdqUMesaQPE.cer (raw, json) Hash identifier: I8duUb6VX28uwtHckv7wFfCK6pqI7QK+SnPL4fArMzc= Subject key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8338D1604450D776A4C4C0AB207A91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49796 IP: 185.167.72.0/22 IP: 2a0a:900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:38:d1:60:44:50:d7:76:a4:c4:c0:ab:20:7a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:ab:77:1c:5c:c1:6d:f3:92:4c:fe:f2:e8: c2:74:f9:ad:8f:7d:ac:9f:10:1f:6f:11:39:2a:2b: 3b:1b:0a:da:00:11:6d:bf:9b:02:6f:96:b6:84:85: e2:15:99:5d:53:46:a9:81:bf:77:b6:80:b7:c6:19: 11:78:54:30:d8:f3:8f:88:a7:ad:af:57:52:c1:1e: 81:db:65:12:0f:61:95:c3:ba:d6:27:f0:d7:15:dd: 4b:a0:5d:fe:d9:3a:63:60:ba:b3:ee:31:b8:00:9d: 3a:11:db:e9:c5:27:b9:bb:00:c0:14:1f:58:c1:df: 14:37:f9:06:1f:c8:b5:38:f9:60:cb:76:f4:9c:2c: 0d:37:ac:4d:d5:34:59:c7:f8:86:fc:ac:b1:3a:d9: 4a:4e:de:48:af:4e:1e:79:5e:51:1e:9e:d6:6e:0b: 51:b0:01:21:34:f4:3d:51:d5:e5:42:91:d5:5a:52: 80:e6:7f:b9:a8:2b:5e:bd:b6:b4:75:fc:b2:87:31: d5:93:83:18:51:04:3a:34:13:1f:d1:62:52:bf:eb: 14:e5:bc:9f:60:16:9e:89:c3:55:8a:ab:fb:5b:26: 8b:6d:c7:4f:e6:9e:53:1c:52:fc:3a:a8:ab:89:3a: 9f:da:fd:fb:eb:f6:d4:ca:39:bb:57:20:e2:10:65: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.72.0/22 IPv6: 2a0a:900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49796 Signature Algorithm: sha256WithRSAEncryption 44:7a:84:f3:c5:01:99:59:72:9f:0a:49:30:7c:bf:4d:d8:91: ac:21:92:00:09:99:8f:ea:04:e5:75:99:06:01:49:5f:09:35: 8b:aa:67:49:18:d6:37:53:28:86:72:4a:50:82:f4:c0:c0:5b: f7:f7:5a:cc:92:20:72:4a:2d:aa:fa:80:7a:c0:70:22:17:33: 57:00:95:42:c9:63:71:73:b1:94:08:0f:b1:aa:76:45:e9:41: 0b:69:38:24:32:e1:2d:1e:e2:1e:51:82:e9:63:41:35:5a:12: b0:94:23:ab:1b:69:a8:15:4e:d5:38:39:da:ae:9e:80:eb:9f: 9d:5f:2e:d4:8f:d6:60:db:05:b8:3e:2d:55:a4:1f:58:4a:27: e4:2f:a5:bd:3d:e8:60:d7:74:6a:fe:ab:71:52:68:a8:2e:1b: d2:1b:f4:f6:59:7c:1e:65:99:6c:ce:e3:f8:ba:ce:4c:d9:bf: 3e:a0:8f:7a:6e:68:ad:97:f9:f3:7f:e7:84:7a:fe:a9:06:cc: 30:3d:45:e3:b3:e5:9d:6c:01:3b:c3:1e:1a:04:53:47:ef:ba: ae:be:a7:4f:04:22:fa:d5:fd:0b:f3:92:86:fa:bc:67:6d:5b: b9:44:06:a2:3d:f5:0a:fe:5c:0f:7d:4a:5b:ef:36:25:4a:68: 35:75:97:8e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gzjRYERQ13akxMCrIHqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmVmNWFhMTRkMzE0MGM3YzdjNDk4OGYxOWRhOTQzMWViMWE0MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4mrdxxcwW3zkkz+8ujCdPmtj32s nxAfbxE5Kis7GwraABFtv5sCb5a2hIXiFZldU0apgb93toC3xhkReFQw2POPiKet r1dSwR6B22USD2GVw7rWJ/DXFd1LoF3+2TpjYLqz7jG4AJ06EdvpxSe5uwDAFB9Y wd8UN/kGH8i1OPlgy3b0nCwNN6xN1TRZx/iG/KyxOtlKTt5Ir04eeV5RHp7WbgtR sAEhNPQ9UdXlQpHVWlKA5n+5qCtevba0dfyyhzHVk4MYUQQ6NBMf0WJSv+sU5byf YBaeicNViqv7WyaLbcdP5p5THFL8OqiriTqf2v376/bUyjm7VyDiEGXwGwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBvvWqFNMUDHx8SYjxnalDHrGkDxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzVkNjE2 Ny1mMDJiLTQ0ZGItYjU2NS0wZTQzODIzMTBjYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvNWQ2MTY3 LWYwMmItNDRkYi1iNTY1LTBlNDM4MjMxMGNhNS8xL0ctOWFvVTB4UU1mSHhKaVBH ZHFVTWVzYVFQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuadIMA0EAgACMAcDBQMqCgkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDChDANBgkqhkiG9w0BAQsFAAOCAQEARHqE88UBmVly nwpJMHy/TdiRrCGSAAmZj+oE5XWZBgFJXwk1i6pnSRjWN1MohnJKUIL0wMBb9/da zJIgckotqvqAesBwIhczVwCVQsljcXOxlAgPsap2RelBC2k4JDLhLR7iHlGC6WNB NVoSsJQjqxtpqBVO1Tg52q6egOufnV8u1I/WYNsFuD4tVaQfWEon5C+lvT3oYNd0 av6rcVJoqC4b0hv09ll8HmWZbM7j+LrOTNm/PqCPem5orZf583/nhHr+qQbMMD1F 47PlnWwBO8MeGgRTR++6rr6nTwQi+tX9C/OShvq8Z21buUQGoj31Cv5cD31KW+82 JUpoNXWXjg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:09 2026 by rpki-client