This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer File: S91CzNE9f4p8PtpbVQLY1ty7vhE.cer (raw, json) Hash identifier: wowONFgHJAwrZRo5P4nC4rPP9ixL1uxDE9yTXhrmW8c= Subject key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC3C01EF6DD6245C539ABC1F309616 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.168.149.0/24 IP: 2a12:b7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3c:01:ef:6d:d6:24:5c:53:9a:bc:1f:30:96:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:33:54:08:ca:d0:71:13:46:9c:30:f3:f3: 84:b3:a8:74:54:e2:ab:b6:f7:8f:1a:05:57:d2:ca: 39:43:be:d2:87:c1:49:e8:90:72:1b:6b:54:97:8c: 7b:4d:ae:fc:6a:f5:65:c6:eb:67:81:80:a7:c5:d5: 02:30:ac:de:e6:54:e1:0c:63:ed:11:83:17:26:67: 17:27:0a:ca:eb:6f:ba:71:a2:53:16:58:37:19:f6: 97:f4:cd:3c:d4:f3:43:5b:66:d8:90:ab:0b:ba:42: 4b:37:91:2a:93:44:fb:33:cf:01:ed:8c:1d:80:45: 07:d7:6b:58:8d:77:44:1d:6b:1a:56:45:5f:e4:c0: 79:1d:c9:12:8a:eb:2e:bc:6e:94:31:e8:79:59:7e: ae:59:58:c2:98:b4:82:d9:d9:e9:a7:64:d1:eb:1b: ce:22:59:5d:e2:bd:62:e4:0f:57:d5:c4:de:b7:f2: 24:df:42:89:20:6e:0c:d2:7e:ae:ff:f6:e4:b2:95: 78:56:8e:6e:f4:ae:9b:89:70:e6:7b:b7:04:8e:58: cf:86:ee:8e:a9:bb:7d:6c:c8:29:4d:a4:4d:80:40: 7c:db:05:85:da:ef:dc:a6:64:da:5b:96:18:89:4d: 4d:99:39:dd:c8:cc:83:33:ef:7d:71:62:06:00:ea: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.149.0/24 IPv6: 2a12:b7c0::/29 Signature Algorithm: sha256WithRSAEncryption 48:4a:a4:c6:8a:e9:c3:89:26:89:a5:91:9b:6c:88:9d:22:c3: de:bb:1b:05:20:0d:cc:18:0d:e3:51:f9:c0:f8:a2:3f:4b:2f: 6c:d2:16:4f:8a:8f:49:ae:6f:0f:c2:95:83:f7:a1:2a:f1:27: bc:16:9a:8e:a7:12:48:77:5d:77:74:2e:54:20:2e:c3:b4:2f: 11:10:10:ea:f7:e8:57:88:45:03:b7:4c:a9:7c:29:bb:49:c6: ce:25:b4:c0:a0:5a:7f:2b:89:72:78:f4:22:bf:42:73:f9:6c: af:17:ac:c0:58:55:7c:59:d5:b6:eb:bb:23:f5:b2:0a:cd:a0: 15:7d:be:5f:ad:2d:53:84:6c:a1:cb:09:c5:79:30:2b:3b:2e: 09:c2:52:5d:0a:65:e9:6a:00:28:ad:7e:c9:6e:be:f8:56:c7: 73:e0:fe:6f:d0:5a:b7:c1:e5:e9:53:cf:39:5c:58:ff:17:67: 09:22:b6:75:d5:04:75:24:b2:58:e4:1a:8a:99:25:3e:2a:f8: fb:59:2a:d7:63:80:1a:2f:5e:55:20:53:d0:03:c1:c9:c5:e8: b8:52:53:79:f5:e6:10:da:df:ca:68:1b:b1:f6:98:39:d1:0f: 9b:52:dd:cf:1f:6c:6b:3f:79:37:96:67:df:fa:63:de:e9:f1: a7:7a:49:fe -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57DwB723WJFxTmrwfMJYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmRkNDJjY2QxM2Q3ZjhhN2MzZWRhNWI1NTAyZDhkNmRjYmJiZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDMzVAjK0HETRpww8/OEs6h0VOKr tvePGgVX0so5Q77Sh8FJ6JByG2tUl4x7Ta78avVlxutngYCnxdUCMKze5lThDGPt EYMXJmcXJwrK62+6caJTFlg3GfaX9M081PNDW2bYkKsLukJLN5Eqk0T7M88B7Ywd gEUH12tYjXdEHWsaVkVf5MB5HckSiusuvG6UMeh5WX6uWVjCmLSC2dnpp2TR6xvO Illd4r1i5A9X1cTet/Ik30KJIG4M0n6u//bkspV4Vo5u9K6biXDme7cEjljPhu6O qbt9bMgpTaRNgEB82wWF2u/cpmTaW5YYiU1NmTndyMyDM+99cWIGAOodcQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEvdQszRPX+KfD7aW1UC2Nbcu74RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2ZjOGUy Mi05YTNiLTQ2NDYtYmFiZS0xY2EyMTIwZWU0MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZmM4ZTIy LTlhM2ItNDY0Ni1iYWJlLTFjYTIxMjBlZTQzNi8xL1M5MUN6TkU5ZjRwOFB0cGJW UUxZMXR5N3ZoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuaiVMA0EAgACMAcDBQMqErfAMA0GCSqGSIb3 DQEBCwUAA4IBAQBISqTGiunDiSaJpZGbbIidIsPeuxsFIA3MGA3jUfnA+KI/Sy9s 0hZPio9Jrm8PwpWD96Eq8Se8FpqOpxJId113dC5UIC7DtC8REBDq9+hXiEUDt0yp fCm7ScbOJbTAoFp/K4lyePQiv0Jz+WyvF6zAWFV8WdW267sj9bIKzaAVfb5frS1T hGyhywnFeTArOy4JwlJdCmXpagAorX7Jbr74Vsdz4P5v0Fq3weXpU885XFj/F2cJ IrZ11QR1JLJY5BqKmSU+Kvj7WSrXY4AaL15VIFPQA8HJxei4UlN59eYQ2t/KaBux 9pg50Q+bUt3PH2xrP3k3lmff+mPe6fGnekn+ -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:24 2026 by rpki-client