This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer (raw, json) Hash identifier: 9BP1xox13rX5PJeJjIw7IOiUuzUXtAi3VCgF3msskAc= Subject key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1261AFE9EEF420AEADF9481F061026 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.13.28.0/22 IP: 2a03:9b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:61:af:e9:ee:f4:20:ae:ad:f9:48:1f:06:10:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33d2d885477d0280264e458eb071f45d91691520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:e6:b3:c0:7c:cc:df:62:f1:d8:ae:12:2f: b9:a4:f0:37:3e:f3:7c:8f:8d:a3:3d:97:22:31:0c: 8e:95:a4:53:05:76:88:66:ec:2f:1b:ac:bb:8d:4f: dd:fe:31:e2:a0:9e:74:c5:2f:1e:6f:c6:b3:da:59: 9c:9d:b7:b8:dc:83:b9:3d:76:cf:22:eb:29:44:e3: be:a1:22:78:6d:01:81:34:17:30:a1:49:5f:fd:52: b7:70:43:9e:fa:59:81:1e:fe:39:17:4b:fc:2c:20: 0b:61:dd:68:14:40:82:ba:5c:cd:90:14:ba:e1:cb: 4d:d3:13:a2:eb:b5:98:d1:ac:17:ed:a4:c2:3c:88: e9:6b:5f:54:92:cb:d5:db:d2:6b:68:2a:e1:ec:b7: 91:92:ab:2a:49:c7:44:19:f3:2f:c3:b5:93:cb:b8: a8:a6:25:de:7c:09:31:51:1e:50:25:88:cf:1c:46: 41:56:03:a3:2e:cf:71:c4:09:e9:f8:e3:d1:f9:e0: 93:d0:0f:85:b7:8a:e3:2c:6a:13:fa:83:0a:56:92: 86:03:0e:c5:a2:68:81:f6:5b:84:c3:10:04:7b:4d: 09:dd:5d:56:36:a4:0e:ee:56:24:d8:46:f9:15:8d: c4:e0:cc:ff:a0:02:10:9d:28:35:cf:18:af:61:16: 35:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.28.0/22 IPv6: 2a03:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 22:53:91:70:a4:c9:b7:06:c4:4d:69:9d:ee:81:39:de:08:c7: 89:35:91:7b:ed:f1:c2:50:e4:14:76:50:ba:07:66:ae:3a:74: b5:2b:88:be:57:ee:31:41:c9:4c:a8:d2:2b:4f:18:c1:43:2e: 14:51:45:49:a7:1a:5b:84:52:15:4b:eb:86:6c:65:75:af:c0: c7:66:69:18:7f:cf:71:d1:5e:04:a1:25:b9:27:f5:1d:42:3b: a6:68:6d:ac:a4:93:f0:a6:ee:38:6e:48:d2:61:7e:c2:a2:e5: d5:6b:42:44:34:0c:77:ed:26:da:84:95:23:87:92:5c:15:b0: 9f:3b:37:0d:9b:ea:9f:c0:99:60:b0:ef:b2:b3:f7:cc:dd:c9: af:6a:65:dc:62:87:04:da:43:ef:bc:27:57:16:c8:45:0a:98: b1:4e:3d:06:18:9a:3c:86:60:74:16:a0:a5:f1:89:97:a3:a3: fa:e9:ad:5a:4d:0d:b1:e1:ab:58:d4:bc:a1:e8:46:35:9c:73: ee:29:1d:d5:3e:dd:11:9c:4e:6d:ac:23:4a:22:ef:df:1c:d8: 38:bf:39:ca:6f:fb:4a:d6:bc:96:62:5f:41:4a:58:0e:30:97: fb:95:2e:45:71:b7:6e:81:c9:ac:93:a9:61:6c:14:c0:74:19: cf:5a:43:9d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EmGv6e70IK6t+UgfBhAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2QyZDg4NTQ3N2QwMjgwMjY0ZTQ1OGViMDcxZjQ1ZDkxNjkxNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOTms8B8zN9i8diuEi+5pPA3PvN8 j42jPZciMQyOlaRTBXaIZuwvG6y7jU/d/jHioJ50xS8eb8az2lmcnbe43IO5PXbP IuspROO+oSJ4bQGBNBcwoUlf/VK3cEOe+lmBHv45F0v8LCALYd1oFECCulzNkBS6 4ctN0xOi67WY0awX7aTCPIjpa19UksvV29JraCrh7LeRkqsqScdEGfMvw7WTy7io piXefAkxUR5QJYjPHEZBVgOjLs9xxAnp+OPR+eCT0A+Ft4rjLGoT+oMKVpKGAw7F omiB9luEwxAEe00J3V1WNqQO7lYk2Eb5FY3E4Mz/oAIQnSg1zxivYRY1DQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDPS2IVHfQKAJk5FjrBx9F2RaRUgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzcxNTll Yi1kZDM3LTQ0YWQtODNlMi1iMjY0MTJhZWIzYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNzE1OWVi LWRkMzctNDRhZC04M2UyLWIyNjQxMmFlYjNhZS8xL005TFloVWQ5QW9BbVRrV09z SEgwWFpGcEZTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ0cMA0EAgACMAcDBQAqA5tAMA0GCSqGSIb3 DQEBCwUAA4IBAQAiU5FwpMm3BsRNaZ3ugTneCMeJNZF77fHCUOQUdlC6B2auOnS1 K4i+V+4xQclMqNIrTxjBQy4UUUVJpxpbhFIVS+uGbGV1r8DHZmkYf89x0V4EoSW5 J/UdQjumaG2spJPwpu44bkjSYX7CouXVa0JENAx37SbahJUjh5JcFbCfOzcNm+qf wJlgsO+ys/fM3cmvamXcYocE2kPvvCdXFshFCpixTj0GGJo8hmB0FqCl8YmXo6P6 6a1aTQ2x4atY1Lyh6EY1nHPuKR3VPt0RnE5trCNKIu/fHNg4vznKb/tK1ryWYl9B SlgOMJf7lS5Fcbdugcmsk6lhbBTAdBnPWkOd -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:50 2026 by rpki-client