This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer (raw, json) Hash identifier: 219UKT/Opr8PGNCAkCFDuiNdI5OS22UcoH/2Lz24VWM= Subject key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E375FDB952D8FD27777C67F5E4E3D70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.194.0.0/23 IP: 91.194.14.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5f:db:95:2d:8f:d2:77:77:c6:7f:5e:4e:3d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:3f:b9:68:c4:5a:3d:82:b7:85:d8:c5:88: d1:43:df:02:c3:c6:b1:4d:d8:1a:71:05:59:73:3c: c4:fa:19:8b:7f:f1:bb:79:0f:93:56:9a:ad:a3:69: eb:f5:79:59:73:f1:a0:2c:8f:39:ed:c2:57:65:5b: 07:9b:02:d6:4e:f8:d3:a1:9e:a3:3f:42:3e:6c:61: 16:db:14:6f:9c:cc:db:df:7b:17:39:2a:44:00:f9: 1e:7b:b2:4d:2b:31:d7:77:1f:2c:59:11:71:70:bb: f9:3b:92:bc:56:6f:b9:d3:59:38:2e:53:40:f0:cd: ec:c9:1c:d4:14:a7:83:fd:2a:0f:61:22:31:46:78: f7:d8:94:63:2c:01:10:e4:20:cf:6e:0e:b0:20:56: a2:8a:cd:45:91:0b:0d:cc:96:b0:f9:18:71:f9:ec: 6a:5e:53:8a:6d:f3:30:6c:ea:6a:d5:4c:db:da:94: 4d:e8:34:af:e1:0c:12:ec:d4:6c:f4:dd:57:f3:cf: fe:4e:62:49:92:ea:a8:4a:b0:89:f6:6f:4c:80:59: b0:de:3e:46:ac:1a:d6:87:ce:bb:63:d4:e7:a2:09: ba:2b:57:51:23:9f:11:85:75:a4:ea:2d:c2:f7:88: 76:36:79:d4:8b:d1:a1:34:19:f5:2c:11:56:99:01: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.0.0/23 91.194.14.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a9:70:71:1a:4d:03:3a:85:1a:be:fc:f1:04:c9:b6:f9:b6: 3d:d2:74:c1:c8:1d:65:03:23:a1:fb:02:67:ed:17:36:84:29: f2:bf:76:01:11:0d:55:fe:1b:92:ca:51:0b:19:87:95:11:23: 1c:d8:27:31:5d:57:33:ef:04:f8:94:c1:40:c0:6a:c7:ab:26: 94:6c:bc:47:e1:34:0c:ad:de:72:0e:91:95:da:7c:ff:74:f7: f0:8e:5a:cc:dc:9e:eb:ef:ec:be:e7:d3:1b:c4:b7:fa:87:49: 9b:fa:8a:a7:6a:18:3c:95:4e:bc:a0:9d:48:db:af:67:55:15: 54:5e:d4:8b:8b:1e:13:0f:e4:43:31:49:1c:30:a8:6b:dc:37: b9:fd:34:28:d7:cc:1d:ad:bc:a6:45:3b:eb:37:9d:fa:1d:23: 97:b6:8b:1e:ef:1e:18:d0:80:71:fe:9c:cd:c8:cc:2c:74:86: 7c:61:55:88:4c:bf:58:6c:b7:a9:08:13:b9:83:98:c9:5d:c0: a3:7d:68:a2:15:94:d7:d8:31:12:5e:94:4b:54:73:9c:a2:6e: a9:f9:cf:dc:8f:5f:77:8a:f9:e2:49:3b:06:2f:b9:10:76:0d: 0f:66:1e:2d:0a:d4:05:de:38:3d:cb:7f:e8:09:c2:21:12:aa: 29:63:08:44 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+N1/blS2P0nd3xn9eTj1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQwZjhiNDIwNDVjNzM4NzAyMTZjZTAzNjljYmQxYTgwYmM4OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2A/uWjEWj2Ct4XYxYjRQ98Cw8ax TdgacQVZczzE+hmLf/G7eQ+TVpqto2nr9XlZc/GgLI857cJXZVsHmwLWTvjToZ6j P0I+bGEW2xRvnMzb33sXOSpEAPkee7JNKzHXdx8sWRFxcLv5O5K8Vm+501k4LlNA 8M3syRzUFKeD/SoPYSIxRnj32JRjLAEQ5CDPbg6wIFaiis1FkQsNzJaw+Rhx+exq XlOKbfMwbOpq1Uzb2pRN6DSv4QwS7NRs9N1X88/+TmJJkuqoSrCJ9m9MgFmw3j5G rBrWh867Y9Tnogm6K1dRI58RhXWk6i3C94h2NnnUi9GhNBn1LBFWmQFzzwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFJvQ+LQgRcc4cCFs4DacvRqAvImVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzBmOTYz Mi04YzNkLTRmN2MtYjIyYS05MmYxZDdkZmM4MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMGY5NjMy LThjM2QtNGY3Yy1iMjJhLTkyZjFkN2RmYzgxNy8xL205RDR0Q0JGeHpod0lXemdO cHk5R29DOGlaVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW8IAAwQBW8IOMA0GCSqGSIb3DQEBCwUAA4IB AQAUqXBxGk0DOoUavvzxBMm2+bY90nTByB1lAyOh+wJn7Rc2hCnyv3YBEQ1V/huS ylELGYeVESMc2CcxXVcz7wT4lMFAwGrHqyaUbLxH4TQMrd5yDpGV2nz/dPfwjlrM 3J7r7+y+59MbxLf6h0mb+oqnahg8lU68oJ1I269nVRVUXtSLix4TD+RDMUkcMKhr 3De5/TQo18wdrbymRTvrN536HSOXtose7x4Y0IBx/pzNyMwsdIZ8YVWITL9YbLep CBO5g5jJXcCjfWiiFZTX2DESXpRLVHOcom6p+c/cj193ivniSTsGL7kQdg0PZh4t CtQF3jg9y3/oCcIhEqopYwhE -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:32 2026 by rpki-client