This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer (raw, json) Hash identifier: IBSHVAVv5PQ4QV4eHqZ4+9zNggE03jc68ezObsPKE7M= Subject key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BC7F85052C27BB4A4A167077613F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25575 IP: 193.19.92.0/23 IP: 213.145.224.0/19 IP: 2a03:1000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bc:7f:85:05:2c:27:bb:4a:4a:16:70:77:61:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd6646c93c2974789ecef7b444656ee64161729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:79:a7:0f:c1:10:89:e1:3e:f1:a6:13:b1: b2:a5:df:cf:65:10:33:8e:0a:65:98:1a:0b:8f:a7: 14:a1:1b:8f:48:dc:ea:13:f0:6e:44:a8:7f:98:93: 9b:a1:94:04:cc:36:9a:07:56:2f:f2:fe:d2:d9:a4: 52:26:3e:b8:61:de:2c:c0:6e:29:07:b5:de:3e:bb: 97:97:ff:26:de:b3:2a:cc:10:50:ba:d3:e5:f2:c4: 78:6d:c9:92:57:28:7e:63:83:b2:ae:65:cd:fb:68: 13:76:de:ca:56:da:04:63:a0:ea:42:35:02:30:9b: 6d:5c:d3:6e:1d:2c:14:bb:cd:e6:dd:ed:ad:95:c1: 53:f9:f7:a1:d6:ec:06:d4:93:b3:c9:bf:f5:6c:8a: a8:d0:f6:12:6f:d7:73:39:0c:cd:10:54:9f:57:10: c0:bd:95:90:b1:51:06:d5:e9:59:93:3a:1b:b7:bf: 3d:3e:38:99:0f:2d:d2:8d:93:b2:d4:ee:05:55:02: 1b:63:78:e0:7b:25:64:af:77:90:28:68:a9:28:21: a5:bd:bb:c5:ee:c5:8a:fc:5b:6f:fc:9f:6e:9f:ff: c6:0d:cc:24:f0:e9:23:e3:b6:16:aa:23:c5:10:66: a9:05:7e:1a:b4:f4:f7:52:2c:53:33:cf:cf:f3:d0: ef:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.92.0/23 213.145.224.0/19 IPv6: 2a03:1000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25575 Signature Algorithm: sha256WithRSAEncryption 2f:64:7a:bf:3a:c9:d7:83:b3:4a:7c:5e:d3:6b:fe:2a:85:1c: 49:ac:89:af:d3:ae:8a:52:ef:28:04:7f:dd:1e:10:47:1a:e9: 4f:89:29:a3:e7:b1:28:0a:83:90:d3:b3:88:36:f2:8c:ce:d0: 27:da:46:69:1e:8f:b5:8e:bb:b1:54:43:9a:f8:a6:9d:52:f2: 05:2d:e7:63:59:e5:66:6f:fe:8e:c5:c4:a7:72:a6:bf:ae:5b: 20:d0:a4:32:85:44:43:20:93:19:61:8c:fc:24:48:cb:5c:07: fa:df:de:54:cc:14:a0:91:26:94:a5:ee:c0:44:96:c0:c0:c1: 97:56:5b:d5:4b:14:80:7c:dd:fb:1d:15:0e:96:cb:18:a1:96: 8f:6b:d5:9f:73:d6:9f:e6:9b:32:6e:f2:9e:a9:3e:e9:c5:80: d3:d0:91:0b:99:04:51:3d:55:54:28:4d:78:21:88:43:cf:b2: c8:40:69:23:e8:4a:da:eb:8a:d7:97:ee:51:e0:dc:5f:0d:da: 38:c8:34:d9:ce:db:47:1f:96:1d:3c:3d:2e:67:de:1b:01:fe: f9:1c:4c:69:3d:dc:3b:f1:76:4e:11:4f:02:8c:d5:a3:2a:24: bd:44:24:a2:27:0f:02:0d:9f:b8:70:2c:da:49:ca:4f:eb:6b: 4d:79:08:31 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3xrx/hQUsJ7tKShZwd2E/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ2NjQ2YzkzYzI5NzQ3ODllY2VmN2I0NDQ2NTZlZTY0MTYxNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu215pw/BEInhPvGmE7Gypd/PZRAz jgplmBoLj6cUoRuPSNzqE/BuRKh/mJOboZQEzDaaB1Yv8v7S2aRSJj64Yd4swG4p B7XePruXl/8m3rMqzBBQutPl8sR4bcmSVyh+Y4OyrmXN+2gTdt7KVtoEY6DqQjUC MJttXNNuHSwUu83m3e2tlcFT+feh1uwG1JOzyb/1bIqo0PYSb9dzOQzNEFSfVxDA vZWQsVEG1elZkzobt789PjiZDy3SjZOy1O4FVQIbY3jgeyVkr3eQKGipKCGlvbvF 7sWK/Ftv/J9un//GDcwk8Okj47YWqiPFEGapBX4atPT3UixTM8/P89DvbQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFE/WZGyTwpdHiezve0RGVu5kFhcpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzMzODE2 Yi0xNDViLTQ3ZjgtODVmYS03NmE1Mzg1YzUxNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvMzM4MTZi LTE0NWItNDdmOC04NWZhLTc2YTUzODVjNTE1YS8xL1Q5WmtiSlBDbDBlSjdPOTdS RVpXN21RV0Z5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwRNcAwQF1ZHgMA0EAgACMAcDBQAqAxAAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmPnMA0GCSqGSIb3DQEBCwUAA4IBAQAvZHq/ OsnXg7NKfF7Ta/4qhRxJrImv066KUu8oBH/dHhBHGulPiSmj57EoCoOQ07OINvKM ztAn2kZpHo+1jruxVEOa+KadUvIFLedjWeVmb/6OxcSncqa/rlsg0KQyhURDIJMZ YYz8JEjLXAf6395UzBSgkSaUpe7ARJbAwMGXVlvVSxSAfN37HRUOlssYoZaPa9Wf c9af5psybvKeqT7pxYDT0JELmQRRPVVUKE14IYhDz7LIQGkj6Era64rXl+5R4Nxf Ddo4yDTZzttHH5YdPD0uZ94bAf75HExpPdw78XZOEU8CjNWjKiS9RCSiJw8CDZ+4 cCzaScpP62tNeQgx -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:50 2026 by rpki-client