This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer File: _9v7226XXdyo9t2WjDen1VYOaR0.cer (raw, json) Hash identifier: HfonvQWiJ9usfJmvMLBXLYqXF438MCWoGNHi9+WOgrA= Subject key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF24B16BA0A9CA0F52A7B1BDCAC2973 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215568 IP: 212.108.113.0/24 IP: 2a02:e9c0::/29 IP: 2a10:3580::/29 IP: 2a13:6cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4b:16:ba:0a:9c:a0:f5:2a:7b:1b:dc:ac:29:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:60:4b:fe:a6:e3:18:2e:37:51:c7:b2:ca: 7a:cd:a2:81:d0:74:36:64:5f:d9:a1:6b:d0:07:03: 90:6e:4b:a5:f7:ad:79:e5:1b:32:08:06:3b:17:a2: 19:1e:db:84:34:95:0e:6e:2a:5c:59:52:05:32:9b: 05:cb:6d:22:1b:37:5c:86:91:44:e1:77:2e:e7:c9: 22:fb:3a:dd:84:17:28:22:b6:ce:1a:be:ee:8a:f8: 17:c7:7e:ff:ce:05:2e:db:c2:87:6b:cc:04:f3:50: 8e:54:91:63:9e:10:bf:4c:c9:2a:21:fe:89:19:cf: 89:d5:d9:e7:c3:65:9f:ed:05:ea:97:11:54:15:1a: ef:ce:5a:0b:d7:a2:81:85:d1:5a:39:74:7e:8e:5c: 84:e7:11:f5:47:b4:06:fa:b7:ad:d0:15:af:73:59: 48:b0:eb:1a:3b:eb:98:bf:af:01:f0:97:17:32:06: 39:db:48:0f:84:61:8f:d4:01:27:00:52:94:c5:cc: f5:3f:76:d8:53:af:35:8c:d9:e0:4d:3f:32:37:08: f8:f1:11:8e:00:55:38:ae:de:bd:67:81:09:e4:ea: f0:67:9e:79:02:11:4c:79:77:94:fd:ff:4f:ba:74: 4f:df:a5:e0:1f:44:8a:d9:19:d8:52:be:4d:d4:b5: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.113.0/24 IPv6: 2a02:e9c0::/29 2a10:3580::/29 2a13:6cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215568 Signature Algorithm: sha256WithRSAEncryption 9d:6e:8c:5f:b3:35:49:98:c1:e4:48:c9:ee:7f:e0:b7:bc:f4: 1f:5f:a0:54:c4:e3:8d:ca:96:29:61:91:b0:c9:ad:ce:d0:af: 75:5a:b5:fb:df:80:77:32:21:3b:d0:2b:22:88:63:23:dc:6d: fc:c1:e5:1e:b7:be:48:05:1f:91:e6:8a:8e:1f:63:9e:3d:4d: d4:84:c1:39:d1:83:38:a2:70:6c:de:c7:0d:68:47:fa:85:50: 58:5c:dd:4c:fd:1f:e4:c0:0e:96:6c:f5:b9:67:74:5d:52:b0: 06:e0:61:74:2f:9c:56:d6:97:6f:0b:97:0e:5b:28:7f:99:78: 30:83:c5:98:e9:29:19:d3:18:e1:1e:a6:09:a0:92:7e:a5:1e: 88:4d:cc:25:ff:4b:3a:59:2e:71:cc:49:20:cd:29:27:42:3f: 9a:0f:49:68:19:a7:da:73:bf:57:d6:de:25:cf:c3:02:2b:bc: 1d:38:f2:e6:7b:9a:55:66:aa:9f:18:06:d6:9c:4e:02:23:64: f2:9b:5e:2c:a8:12:b0:d2:ca:93:be:a4:43:29:df:b6:34:6f: 04:ea:b6:0a:f1:1f:d3:d2:af:41:6a:3e:9d:aa:74:8e:c7:c5: 52:e2:5e:d6:80:ce:09:35:a4:78:60:e6:b1:e9:ee:23:60:09: d3:3b:f9:1d -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt/8ksWugqcoPUqexvcrClzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmRiZmJkYjZlOTc1ZGRjYThmNmRkOTY4YzM3YTdkNTU2MGU2OTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFxgS/6m4xguN1HHssp6zaKB0HQ2 ZF/ZoWvQBwOQbkul96155RsyCAY7F6IZHtuENJUObipcWVIFMpsFy20iGzdchpFE 4Xcu58ki+zrdhBcoIrbOGr7uivgXx37/zgUu28KHa8wE81COVJFjnhC/TMkqIf6J Gc+J1dnnw2Wf7QXqlxFUFRrvzloL16KBhdFaOXR+jlyE5xH1R7QG+ret0BWvc1lI sOsaO+uYv68B8JcXMgY520gPhGGP1AEnAFKUxcz1P3bYU681jNngTT8yNwj48RGO AFU4rt69Z4EJ5OrwZ555AhFMeXeU/f9PunRP36XgH0SK2RnYUr5N1LVhuQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFP/b+9tul13cqPbdlow3p9VWDmkdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzY2ZmZm My1iZmE5LTQ3MzItYjRiNS0xOTc2OWY1NzhlZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjZmZmYz LWJmYTktNDczMi1iNGI1LTE5NzY5ZjU3OGVmZC8xL185djcyMjZYWGR5bzl0Mldq RGVuMVZZT2FSMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAMBAIAATAGAwQA1GxxMBsEAgACMBUDBQMqAunAAwUDKhA1gAMF AyoTbMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0oQMA0GCSqGSIb3DQEBCwUA A4IBAQCdboxfszVJmMHkSMnuf+C3vPQfX6BUxOONypYpYZGwya3O0K91WrX734B3 MiE70CsiiGMj3G38weUet75IBR+R5oqOH2OePU3UhME50YM4onBs3scNaEf6hVBY XN1M/R/kwA6WbPW5Z3RdUrAG4GF0L5xW1pdvC5cOWyh/mXgwg8WY6SkZ0xjhHqYJ oJJ+pR6ITcwl/0s6WS5xzEkgzSknQj+aD0loGafac79X1t4lz8MCK7wdOPLme5pV ZqqfGAbWnE4CI2Tym14sqBKw0sqTvqRDKd+2NG8E6rYK8R/T0q9Baj6dqnSOx8VS 4l7WgM4JNaR4YOax6e4jYAnTO/kd -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:12 2026 by rpki-client