This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer (raw, json) Hash identifier: 0h0FL1fdFXTMt+5vrQAGNyi10lXEbLHXWJDI1yXh3K0= Subject key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66076140BC31FD21B98392599DF5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.112.151.0/24 IP: 192.112.178.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:60:76:14:0b:c3:1f:d2:1b:98:39:25:99:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:43:cb:58:e4:1c:ae:4e:3f:64:29:9b:df: ee:12:4e:47:11:3b:3b:0a:ca:12:d7:89:91:60:10: f1:e9:48:10:74:2c:85:2d:64:83:08:40:36:3d:0b: 99:72:ef:eb:ed:0f:3a:50:66:df:94:5d:b5:70:43: 70:3f:af:38:6e:b9:b7:25:37:27:55:d6:3a:46:04: b5:85:da:0e:3a:5f:72:c1:55:2a:fd:12:00:8c:a1: ff:c3:01:09:36:70:4c:37:c4:66:98:94:d5:b4:86: 78:28:90:1f:23:21:76:1d:47:44:68:7a:93:7a:d2: 77:6c:73:a1:c6:c9:04:48:1d:8e:39:ce:81:0e:27: f0:59:94:fe:14:3c:8b:e5:eb:8e:93:c7:89:f1:2f: 22:9a:2d:e6:64:d7:e1:26:57:cd:0b:8c:44:99:16: ce:29:5f:dc:5b:f8:ce:a9:6c:ad:14:4f:be:80:dc: 99:a3:98:40:9f:3b:18:e8:8d:dd:fc:27:dc:ca:ca: 52:8e:46:c6:65:c8:f8:73:8c:04:66:4f:4a:a3:8c: 65:ba:0a:be:f1:dd:25:3e:9a:3a:3d:de:e6:8d:2d: 3c:bc:de:94:98:ae:c9:cc:fd:a5:be:b7:35:c1:58: ee:ca:96:cf:a6:e2:3a:07:f7:3b:d6:64:02:0e:30: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.112.151.0/24 192.112.178.0/24 Signature Algorithm: sha256WithRSAEncryption ae:04:15:6f:e3:40:0f:4f:c1:3c:c2:18:46:b1:f1:fe:cd:84: c4:43:67:5a:57:29:f9:62:d6:29:f0:0d:9e:08:3d:a0:67:ee: 17:78:6a:02:29:bf:12:51:ae:f8:14:4c:bc:4c:36:f9:4b:21: 07:b1:fc:cd:6e:89:4d:14:79:9e:81:1f:1b:97:d7:5e:04:74: a4:58:f9:9f:f2:d8:37:bb:38:b0:6b:5f:bb:0f:bc:44:3d:a1: 67:dc:ee:f4:93:3f:80:d4:7d:6c:79:ee:33:3b:72:2e:da:d8: e4:39:ed:eb:b8:d5:40:86:ad:68:ee:36:3c:32:12:c1:e9:cc: 53:56:fc:13:3c:ae:2f:a8:59:3d:b6:44:e9:ef:63:1a:b9:b2: 28:fc:b1:5f:e4:b2:5b:4b:63:99:de:1d:a5:bf:fd:e7:0f:e4: 5b:48:12:70:74:df:a2:2b:65:66:aa:86:69:5b:07:8f:76:83: 8a:54:d1:d5:e9:d8:be:d4:62:f1:fb:2f:a4:4f:ac:0f:00:f3: 29:fd:65:75:1e:42:21:9e:e9:26:fc:c1:e5:ab:b6:92:b2:e3: b8:62:cb:65:e9:c3:57:d0:93:e5:86:61:28:74:3b:f2:15:e6: 85:e9:dd:96:26:69:3d:45:e2:e2:b7:b3:e2:3d:bb:f9:ff:a0: 89:06:5d:cd -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3xmB2FAvDH9IbmDklmd9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ2Y2RjNmZkMzMyZDg4YmUyYWIwOTFlY2U3NGQ3NjI0ZDM1OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jhDy1jkHK5OP2Qpm9/uEk5HETs7 CsoS14mRYBDx6UgQdCyFLWSDCEA2PQuZcu/r7Q86UGbflF21cENwP684brm3JTcn VdY6RgS1hdoOOl9ywVUq/RIAjKH/wwEJNnBMN8RmmJTVtIZ4KJAfIyF2HUdEaHqT etJ3bHOhxskESB2OOc6BDifwWZT+FDyL5euOk8eJ8S8imi3mZNfhJlfNC4xEmRbO KV/cW/jOqWytFE++gNyZo5hAnzsY6I3d/CfcyspSjkbGZcj4c4wEZk9Ko4xlugq+ 8d0lPpo6Pd7mjS08vN6UmK7JzP2lvrc1wVjuypbPpuI6B/c71mQCDjBvQQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHvWzcb9My2IviqwkeznTXYk01nxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzI5ZjM4 Ni00MjQ3LTRlNmEtOWJmMS02MWM0YTI1NmY5YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMjlmMzg2 LTQyNDctNGU2YS05YmYxLTYxYzRhMjU2ZjlhZC8xL2U5Yk54djB6TFlpLUtyQ1I3 T2ROZGlUVFdmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwHCXAwQAwHCyMA0GCSqGSIb3DQEBCwUAA4IB AQCuBBVv40APT8E8whhGsfH+zYTEQ2daVyn5YtYp8A2eCD2gZ+4XeGoCKb8SUa74 FEy8TDb5SyEHsfzNbolNFHmegR8bl9deBHSkWPmf8tg3uziwa1+7D7xEPaFn3O70 kz+A1H1see4zO3Iu2tjkOe3ruNVAhq1o7jY8MhLB6cxTVvwTPK4vqFk9tkTp72Ma ubIo/LFf5LJbS2OZ3h2lv/3nD+RbSBJwdN+iK2VmqoZpWwePdoOKVNHV6di+1GLx +y+kT6wPAPMp/WV1HkIhnukm/MHlq7aSsuO4Ystl6cNX0JPlhmEodDvyFeaF6d2W Jmk9ReLit7PiPbv5/6CJBl3N -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:25 2026 by rpki-client