This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer (raw, json) Hash identifier: o7X6xgxO0xZomrOn999C0SEj+vvkvQXXfRAQnWFj0aE= Subject key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC89A89391EEB21A961CD5DC65CF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197846 IP: 31.222.0.0/20 IP: 185.150.212.0/22 IP: 2a07:7380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c8:9a:89:39:1e:eb:21:a9:61:cd:5d:c6:5c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:32:78:95:bb:71:a2:a3:ec:b0:64:5f:f0: cb:3b:3d:c1:63:5b:79:db:76:a1:18:a1:83:fe:69: 6a:5f:c7:36:ae:b6:fd:86:1a:51:0f:8e:0b:8b:38: b6:1b:0b:bc:43:2a:ff:a7:a5:32:77:2b:41:7b:17: 4c:e0:34:9b:e1:2d:1e:1f:1d:0a:46:99:0b:e0:16: ee:a3:3b:6c:22:0a:bc:36:2b:90:e9:2b:db:28:3a: 2c:99:f1:71:11:de:c3:5d:b6:d4:b9:3b:a9:77:23: 5c:c2:76:be:69:09:08:e8:a5:df:9f:55:37:9a:bc: 99:9e:3a:dc:33:5c:09:01:d9:f0:e0:af:5f:cc:47: 28:86:d8:db:3c:5b:6b:fb:52:71:f9:8a:2b:d8:d5: 72:b8:ae:73:78:53:d5:c0:87:fa:56:19:bf:9f:3d: 3a:55:99:b0:29:31:7e:98:f3:0e:4c:5f:7d:02:78: 00:79:fe:8f:8d:2f:e7:9a:dd:4f:16:46:fd:ac:c3: 1d:0e:65:ba:54:97:14:4c:09:8b:b9:e9:45:f0:27: 7d:1e:4c:b3:d7:ad:27:99:73:e2:37:9f:37:5d:58: 8d:49:0f:33:50:21:d1:5e:c4:17:d6:82:c4:ba:9f: fa:53:8f:0b:0e:b5:80:9d:cf:99:68:9e:cd:4c:22: f4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.0.0/20 185.150.212.0/22 IPv6: 2a07:7380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197846 Signature Algorithm: sha256WithRSAEncryption 84:4d:00:ba:f0:5e:94:d4:48:ee:f8:d0:09:bb:f2:6e:e2:6c: 88:5d:7d:c0:3a:b5:d0:5c:b6:b7:0f:94:99:0e:a0:ee:d4:f1: 74:c6:f2:e8:0c:a7:7a:21:f5:c1:cf:ac:82:3f:dd:74:36:92: ce:24:e8:86:36:e4:ee:df:f1:4e:51:f6:fe:00:8b:c1:de:73: 9a:57:da:07:50:2f:46:87:fe:4e:07:0e:56:b9:ba:4c:11:53: 01:79:c5:75:86:c9:11:54:be:08:26:46:44:e4:35:42:db:5c: 88:7b:ae:7a:1c:b7:8e:0b:30:1e:b0:7b:36:3a:1b:64:ae:eb: 96:76:b9:fc:10:a6:d4:39:8c:4f:85:66:9f:16:f2:1f:77:c9: 18:a6:b4:09:e0:ea:14:28:9b:6e:6f:fb:35:6d:b2:ef:2e:33: 87:d3:17:03:9c:0f:36:e1:ad:23:ae:35:9d:f2:b3:53:9d:90: 78:8e:b7:41:de:0f:84:ad:bd:c0:34:dd:b3:dd:ba:32:bd:b9: 50:d1:fa:35:e8:58:62:6e:ef:43:f6:c0:c5:d9:c8:33:1b:a2: f7:cc:e4:70:1b:56:a2:1c:6a:6e:ee:28:39:7d:37:96:a8:dc: 59:53:a2:87:31:81:2e:a9:d5:0f:3e:f4:1c:5b:66:5a:99:25: da:f8:d3:22 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt26siaiTke6yGpYc1dxlzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2QwYjg2MWFmYjEyNWI4YmMxMzk2OWQwYjQ5NzM0Y2U4NDRiZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEEyeJW7caKj7LBkX/DLOz3BY1t5 23ahGKGD/mlqX8c2rrb9hhpRD44Lizi2Gwu8Qyr/p6UydytBexdM4DSb4S0eHx0K RpkL4BbuoztsIgq8NiuQ6SvbKDosmfFxEd7DXbbUuTupdyNcwna+aQkI6KXfn1U3 mryZnjrcM1wJAdnw4K9fzEcohtjbPFtr+1Jx+Yor2NVyuK5zeFPVwIf6Vhm/nz06 VZmwKTF+mPMOTF99AngAef6PjS/nmt1PFkb9rMMdDmW6VJcUTAmLuelF8Cd9Hkyz 160nmXPiN583XViNSQ8zUCHRXsQX1oLEup/6U48LDrWAnc+ZaJ7NTCL0BQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFfQuGGvsSW4vBOWnQtJc0zoRL1qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzA5ZWU2 Ni02NjdlLTRjZDQtYjRmYS1mODYyZmRmYTNiOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMDllZTY2 LTY2N2UtNGNkNC1iNGZhLWY4NjJmZGZhM2I5My8xL1Y5QzRZYS14SmJpOEU1YWRD MGx6VE9oRXZXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEH94AAwQCuZbUMA0EAgACMAcDBQMqB3OAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwME1jANBgkqhkiG9w0BAQsFAAOCAQEAhE0A uvBelNRI7vjQCbvybuJsiF19wDq10Fy2tw+UmQ6g7tTxdMby6AyneiH1wc+sgj/d dDaSziTohjbk7t/xTlH2/gCLwd5zmlfaB1AvRof+TgcOVrm6TBFTAXnFdYbJEVS+ CCZGROQ1QttciHuuehy3jgswHrB7NjobZK7rlna5/BCm1DmMT4VmnxbyH3fJGKa0 CeDqFCibbm/7NW2y7y4zh9MXA5wPNuGtI641nfKzU52QeI63Qd4PhK29wDTds926 Mr25UNH6NehYYm7vQ/bAxdnIMxui98zkcBtWohxqbu4oOX03lqjcWVOihzGBLqnV Dz70HFtmWpkl2vjTIg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:46 2026 by rpki-client