This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer (raw, json) Hash identifier: yl2dp1HEC5fPOLv9fyMudW4Ij6l0PvB3aw9MjWus0iI= Subject key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B99A9A8D93EF17C4E649093D271D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:10e0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:99:a9:a8:d9:3e:f1:7c:4e:64:90:93:d2:71:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b86bd882e476e4698318f370712f71c2bf50dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:fa:92:6c:54:92:28:5e:f8:6f:c1:3a:d2: 04:54:91:82:01:9c:65:3b:f3:be:38:f0:55:ea:2b: 78:d8:59:48:f4:06:e5:22:e7:07:20:6a:60:f3:88: 07:3b:97:3d:84:a4:a0:b9:e6:4d:6f:47:30:f3:ee: f7:d2:f4:09:0e:4e:06:bd:e5:97:b1:b5:a1:6f:20: e6:79:05:61:3e:9e:a7:9b:60:ae:11:79:27:13:09: 6a:16:a2:2b:bd:38:9d:76:60:97:e0:c5:09:7a:da: 0d:e3:c9:fc:b7:97:3d:8f:6d:5e:e3:02:54:02:d6: 79:3a:8d:63:b3:2f:33:d2:fe:27:85:aa:ba:23:93: c6:48:ce:1c:58:fe:f6:3e:41:77:48:68:ea:a8:d1: 33:f7:08:6b:d3:fe:d1:32:23:81:eb:f0:18:11:e9: 1f:4d:d7:e7:a3:48:08:b9:54:fe:99:01:3f:da:87: 44:9c:1d:57:a2:b8:f7:cc:ec:5b:b5:a0:23:91:94: c7:dd:6a:fd:41:4c:45:d1:5f:21:19:87:0f:6f:5b: 2e:62:8d:f8:1e:08:b8:21:23:bb:db:b8:6b:ff:b5: ea:e9:b2:7b:db:5f:5a:5e:fb:fd:57:5b:8d:1d:29: 68:96:9a:e0:34:da:a7:d6:ee:22:23:92:7f:65:3a: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:10e0::/48 Signature Algorithm: sha256WithRSAEncryption 67:30:4e:99:7c:0c:78:28:95:91:2d:7f:5b:fd:7d:aa:74:c2: 4f:72:c1:e8:6c:01:ab:fd:94:9a:e0:54:a3:59:08:7e:bc:06: c7:f1:a5:af:b0:6e:8d:60:b7:80:f7:b4:1c:2c:9c:2d:ca:52: db:f3:fd:f8:1c:16:2a:60:2b:f9:0c:fe:92:82:8c:27:24:a2: 15:e4:df:09:f0:66:0a:cd:f8:36:2f:3a:03:7e:69:09:87:79: 27:d5:69:75:c4:92:85:63:47:36:ed:4c:4a:2e:8c:00:63:4e: 24:b9:c8:b4:ed:e8:d0:09:e8:5c:93:f5:b2:5d:99:28:69:77: bf:1f:90:45:cb:7c:6b:00:01:7a:ba:27:8d:58:cc:23:b8:60: fe:c1:b7:ab:c7:53:bf:c7:53:d6:19:26:e2:e7:14:56:92:b1: a4:a6:08:63:e7:9c:61:e8:3e:15:c5:de:47:6c:7e:ba:b2:a6: 15:08:d6:9e:83:91:ee:01:6f:88:d0:62:d0:ad:87:55:94:49: be:ab:87:47:0d:2f:40:4d:b5:03:95:72:e6:01:8f:0c:c7:dd: 8f:7c:f2:99:c3:8e:31:8b:58:0b:fa:f0:75:ae:b3:34:cd:35: 47:7d:64:b6:1c:86:5d:e7:cb:65:12:48:99:8b:45:fd:f3:28: ae:bd:33:34 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt6W5mpqNk+8XxOZJCT0nHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjg2YmQ4ODJlNDc2ZTQ2OTgzMThmMzcwNzEyZjcxYzJiZjUwZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfH6kmxUkihe+G/BOtIEVJGCAZxl O/O+OPBV6it42FlI9AblIucHIGpg84gHO5c9hKSgueZNb0cw8+730vQJDk4GveWX sbWhbyDmeQVhPp6nm2CuEXknEwlqFqIrvTiddmCX4MUJetoN48n8t5c9j21e4wJU AtZ5Oo1jsy8z0v4nhaq6I5PGSM4cWP72PkF3SGjqqNEz9whr0/7RMiOB6/AYEekf Tdfno0gIuVT+mQE/2odEnB1Xorj3zOxbtaAjkZTH3Wr9QUxF0V8hGYcPb1suYo34 Hgi4ISO727hr/7Xq6bJ7219aXvv9V1uNHSlolprgNNqn1u4iI5J/ZTpYswIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJuGvYguR25GmDGPNwcS9xwr9Q38MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzcyOTBk NS0xZWQ1LTRjYTEtOTZmZC1iZmM3M2RkMGJiYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNzI5MGQ1 LTFlZDUtNGNhMS05NmZkLWJmYzczZGQwYmJiNi8xL200YTlpQzVIYmthWU1ZODNC eEwzSEN2MURmdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBDgMA0GCSqGSIb3DQEBCwUAA4IBAQBn ME6ZfAx4KJWRLX9b/X2qdMJPcsHobAGr/ZSa4FSjWQh+vAbH8aWvsG6NYLeA97Qc LJwtylLb8/34HBYqYCv5DP6SgownJKIV5N8J8GYKzfg2LzoDfmkJh3kn1Wl1xJKF Y0c27UxKLowAY04kuci07ejQCehck/WyXZkoaXe/H5BFy3xrAAF6uieNWMwjuGD+ wberx1O/x1PWGSbi5xRWkrGkpghj55xh6D4Vxd5HbH66sqYVCNaeg5HuAW+I0GLQ rYdVlEm+q4dHDS9ATbUDlXLmAY8Mx92PfPKZw44xi1gL+vB1rrM0zTVHfWS2HIZd 58tlEkiZi0X98yiuvTM0 -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:10 2026 by rpki-client