This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer File: I9FK_odQITwoDltovvsYhm95SX8.cer (raw, json) Hash identifier: NEwn3yHf8hhxVqG+m9/ngHz8Xuz1Kv/xKanKfRNRCUg= Subject key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FDB70F0433D6E6EA7D0A4943A0E49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201400 IP: 91.103.138.0/24 IP: 2a13:26c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:db:70:f0:43:3d:6e:6e:a7:d0:a4:94:3a:0e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23d14afe8750213c280e5b68befb18866f79497f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0d:3b:1f:f9:54:8b:7b:9b:dc:89:87:9f:5c: a7:f3:7d:a9:a9:04:34:21:ca:06:17:21:0f:ef:08: 92:fc:2e:5d:60:ae:da:73:e7:8d:16:f9:0d:69:4b: 51:db:5c:60:32:79:d2:42:7e:6c:14:72:9d:e8:d2: 8f:43:53:49:f0:0b:20:af:f0:8d:49:a1:16:a5:26: f7:b4:c0:49:27:c8:6b:20:90:7a:26:8b:2b:f4:e2: 6e:a6:80:80:a6:06:bf:2e:b7:a1:be:90:3f:bb:0c: 1c:0e:a1:f2:b8:54:a6:d7:da:e4:53:95:9d:60:ed: 91:78:97:99:75:0c:03:52:91:53:36:f1:12:21:60: 8d:c3:52:8c:25:02:bb:97:f8:dd:a2:1d:46:9b:37: 7a:37:a1:df:8f:95:9f:16:ef:e5:e7:cb:63:f6:42: 45:df:23:e4:44:55:94:94:96:83:f5:b3:d9:8b:82: 73:4b:14:b1:fa:0f:15:83:10:94:c8:f9:b3:67:88: 94:e2:e0:af:cf:72:c1:be:f1:7b:15:46:c9:e1:18: 47:da:36:bb:97:88:b6:5b:3a:73:4e:26:ce:b8:16: 7a:e7:69:51:02:3f:52:29:98:b4:51:8a:0c:a6:33: fa:a6:9c:f8:22:54:48:5f:e6:bd:b1:3b:3b:9e:d7: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.138.0/24 IPv6: 2a13:26c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201400 Signature Algorithm: sha256WithRSAEncryption a0:6a:60:88:11:06:ad:2d:50:5d:01:5e:9b:a4:94:81:92:45: ca:9c:d5:1b:0f:ed:66:69:51:97:dd:fc:a0:b8:1e:24:0c:e2: f4:7a:e2:19:54:2f:e8:12:75:0e:83:ec:a7:7f:e9:26:d0:4d: 42:8f:a5:df:ec:1d:48:fc:65:d7:33:11:6f:2e:a7:5a:82:d0: f6:89:4d:5a:a7:4d:b3:65:37:35:2e:1d:bc:a9:26:8f:b2:27: f5:fe:a7:7a:e8:57:32:2b:27:9d:7f:a4:ca:d8:e9:a4:70:d1: e4:84:7d:fc:b0:ad:b1:75:51:2c:7f:27:a6:75:11:3d:99:f9: ba:93:1e:83:1c:79:a8:42:b1:54:17:d1:06:2a:2c:85:a9:df: 22:41:27:00:64:46:af:d0:3c:ca:3d:4d:b2:d8:34:50:15:f0: d0:ba:69:ca:b1:1a:b2:de:92:8e:15:f0:e9:c2:05:a6:d9:ae: 4b:0e:e0:00:64:69:84:d8:68:4b:e7:7e:33:02:9f:a5:0b:bf: 7d:31:6f:20:e3:7c:db:49:00:90:95:fc:85:fa:0e:8b:d9:6c: ee:1a:83:9e:eb:46:36:7c:f2:5b:3f:30:e2:9d:68:88:64:71: 3c:d4:eb:f5:93:d5:f5:01:49:d9:1b:18:b6:1f:77:54:93:0d: db:82:cd:05 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f9tw8EM9bm6n0KSUOg5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2QxNGFmZTg3NTAyMTNjMjgwZTViNjhiZWZiMTg4NjZmNzk0OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog07H/lUi3ub3ImHn1yn832pqQQ0 IcoGFyEP7wiS/C5dYK7ac+eNFvkNaUtR21xgMnnSQn5sFHKd6NKPQ1NJ8Asgr/CN SaEWpSb3tMBJJ8hrIJB6Josr9OJupoCApga/LrehvpA/uwwcDqHyuFSm19rkU5Wd YO2ReJeZdQwDUpFTNvESIWCNw1KMJQK7l/jdoh1Gmzd6N6Hfj5WfFu/l58tj9kJF 3yPkRFWUlJaD9bPZi4JzSxSx+g8VgxCUyPmzZ4iU4uCvz3LBvvF7FUbJ4RhH2ja7 l4i2WzpzTibOuBZ652lRAj9SKZi0UYoMpjP6ppz4IlRIX+a9sTs7ntdL/wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCPRSv6HUCE8KA5baL77GIZveUl/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1Lzg5Zjg0 NS01NzY1LTRjMTEtOTJjZC04NDcyY2E0MGY3YTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvODlmODQ1 LTU3NjUtNGMxMS05MmNkLTg0NzJjYTQwZjdhNy8xL0k5Rktfb2RRSVR3b0RsdG92 dnNZaG05NVNYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW2eKMA0EAgACMAcDBQMqEybAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSuDANBgkqhkiG9w0BAQsFAAOCAQEAoGpgiBEGrS1Q XQFem6SUgZJFypzVGw/tZmlRl938oLgeJAzi9HriGVQv6BJ1DoPsp3/pJtBNQo+l 3+wdSPxl1zMRby6nWoLQ9olNWqdNs2U3NS4dvKkmj7In9f6neuhXMisnnX+kytjp pHDR5IR9/LCtsXVRLH8npnURPZn5upMegxx5qEKxVBfRBioshanfIkEnAGRGr9A8 yj1Nstg0UBXw0LppyrEast6SjhXw6cIFptmuSw7gAGRphNhoS+d+MwKfpQu/fTFv ION820kAkJX8hfoOi9ls7hqDnutGNnzyWz8w4p1oiGRxPNTr9ZPV9QFJ2RsYth93 VJMN24LNBQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:24:10 2026 by rpki-client