This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer File: _x9hW5GDn1HtOltTdTsnsCx22pU.cer (raw, json) Hash identifier: geKJKi4tmt0elDKIHOf97drP6RoNSOl95mMnrYMi1dE= Subject key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AB9CAAC55DC0D4C768BE28D5560E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56567 IP: 185.114.148.0/22 IP: 185.220.192.0/22 IP: 2a06:7000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b9:ca:ac:55:dc:0d:4c:76:8b:e2:8d:55:60:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d0:d8:13:25:f0:18:4b:9b:f3:c1:61:9a:98: 79:f0:a9:5b:df:31:3b:ec:30:4d:00:d0:d3:7a:70: 18:2c:1a:18:64:bd:07:d0:06:c7:de:bf:0e:5a:3c: e1:f8:b9:cc:8b:62:13:ea:b7:03:2a:eb:af:a9:08: 55:f1:fe:0d:d2:64:56:79:f0:69:ee:43:6f:fa:83: e6:c5:8e:b2:12:65:9d:2e:1d:ba:a1:04:74:4a:7f: 21:9f:4c:4f:10:ee:e3:81:01:a8:f4:3b:2a:0a:a0: ca:ea:30:a9:bc:a4:b8:9d:7e:5b:7a:ae:50:d3:2d: e9:97:37:c3:9e:aa:71:35:14:72:52:13:21:fa:93: 8d:a1:de:7b:1d:bd:ad:74:9f:6e:e3:fe:62:85:f4: 0b:f7:88:af:d2:36:72:22:7d:04:a5:5c:94:8f:13: 82:df:7f:af:84:b9:d2:37:6f:98:e3:d3:b6:ed:a6: 79:ec:60:38:78:ae:8f:11:6f:cf:c7:b2:7f:8e:03: 5c:10:60:d7:53:40:a2:2f:f1:0b:7f:71:37:08:7e: 55:d1:4e:14:00:d7:fe:1c:d8:97:75:3a:83:31:fd: b7:cb:43:8f:21:01:00:ff:e2:f3:be:47:5c:3e:70: 2e:24:1e:cd:bf:7a:a4:ef:e4:83:7c:c8:5d:30:e3: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.148.0/22 185.220.192.0/22 IPv6: 2a06:7000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56567 Signature Algorithm: sha256WithRSAEncryption 1a:a8:1b:78:62:d0:b4:8a:c1:56:6a:8c:5a:57:00:ad:0c:9b: 64:cf:4d:a2:74:df:d1:aa:02:96:cb:be:08:91:20:bc:df:d2: b0:46:75:0b:90:04:88:aa:9a:f4:84:be:a0:3f:f3:f3:32:c2: 94:e0:63:af:98:f2:d7:e8:dd:f7:47:fa:cc:3d:f1:54:2c:51: c2:86:07:f4:98:51:e3:8c:4f:a0:7c:d9:13:43:b8:53:9a:16: 31:dd:45:7b:fd:68:1c:57:f7:a1:de:4c:0e:0e:db:04:4b:7b: f8:ce:e8:b4:93:0d:ff:6b:b6:a1:bc:c1:e9:ef:6a:cf:c1:ee: 7b:41:ae:01:34:d6:30:db:0a:19:fd:78:4b:6a:9c:41:9c:a7: 2c:85:eb:f7:9d:ee:0e:35:70:47:4b:52:a2:b8:8a:73:d0:84: e3:c2:41:f4:a7:d7:21:11:b4:b9:b7:1d:23:a6:23:44:b2:da: 1a:0a:44:ce:19:a2:35:9a:c4:3b:f5:41:07:1a:d2:98:d8:f9: 19:64:1d:40:b4:c9:b1:61:03:c2:5a:8d:64:6f:76:38:27:d7: fa:60:c4:54:1f:05:75:22:12:98:61:7c:88:7f:87:c1:cc:45: d9:54:dc:cf:16:32:9d:32:c7:90:b3:05:69:8d:93:b3:3f:93: 2b:54:6c:56 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6WrnKrFXcDUx2i+KNVWDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFmNjE1YjkxODM5ZjUxZWQzYTViNTM3NTNiMjdiMDJjNzZkYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tDYEyXwGEub88Fhmph58Klb3zE7 7DBNANDTenAYLBoYZL0H0AbH3r8OWjzh+LnMi2IT6rcDKuuvqQhV8f4N0mRWefBp 7kNv+oPmxY6yEmWdLh26oQR0Sn8hn0xPEO7jgQGo9DsqCqDK6jCpvKS4nX5beq5Q 0y3plzfDnqpxNRRyUhMh+pONod57Hb2tdJ9u4/5ihfQL94iv0jZyIn0EpVyUjxOC 33+vhLnSN2+Y49O27aZ57GA4eK6PEW/Px7J/jgNcEGDXU0CiL/ELf3E3CH5V0U4U ANf+HNiXdTqDMf23y0OPIQEA/+LzvkdcPnAuJB7Nv3qk7+SDfMhdMONeqQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFP8fYVuRg59R7TpbU3U7J7AsdtqVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2I0MTZh NS1lZTRmLTRjYzctYjBjNC03NDc1ZjcwZGY5ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvYjQxNmE1 LWVlNGYtNGNjNy1iMGM0LTc0NzVmNzBkZjlmYS8xL194OWhXNUdEbjFIdE9sdFRk VHNuc0N4MjJwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuXKUAwQCudzAMA0EAgACMAcDBQMqBnAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDc9zANBgkqhkiG9w0BAQsFAAOCAQEAGqgb eGLQtIrBVmqMWlcArQybZM9NonTf0aoClsu+CJEgvN/SsEZ1C5AEiKqa9IS+oD/z 8zLClOBjr5jy1+jd90f6zD3xVCxRwoYH9JhR44xPoHzZE0O4U5oWMd1Fe/1oHFf3 od5MDg7bBEt7+M7otJMN/2u2obzB6e9qz8Hue0GuATTWMNsKGf14S2qcQZynLIXr 953uDjVwR0tSoriKc9CE48JB9KfXIRG0ubcdI6YjRLLaGgpEzhmiNZrEO/VBBxrS mNj5GWQdQLTJsWEDwlqNZG92OCfX+mDEVB8FdSISmGF8iH+HwcxF2VTczxYynTLH kLMFaY2Tsz+TK1RsVg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:56 2026 by rpki-client