This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer File: r9rCQfMBCxrkhLwx9YStD50gZzQ.cer (raw, json) Hash identifier: vaykUzZmkOeFpbwUlOkAYA/z4xnoJolLTr1aaUpNlR4= Subject key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7864D6DE360449C0A4D7E13EB9F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.138.112.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:78:64:d6:de:36:04:49:c0:a4:d7:e1:3e:b9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:11:3c:05:91:00:e5:d4:38:63:76:14:61: ed:ec:f6:4f:1f:eb:ec:57:4d:b7:63:9f:1c:a9:b0: 76:72:e2:17:64:97:0d:41:15:02:ec:a5:2a:0d:d2: 05:6f:b7:71:46:ac:3c:7c:77:20:17:78:cd:a4:e3: ba:05:8e:68:ba:e1:b8:3f:bf:70:e4:ad:20:79:d4: 98:21:b2:a1:98:a2:53:a4:e9:16:1e:28:b9:29:f3: 47:cc:f6:73:0f:79:28:dc:72:26:af:7e:5a:5c:7f: fb:23:86:b1:8a:29:e0:a3:da:98:13:e3:48:e8:8f: 01:2d:b4:2b:c9:dc:57:4b:48:da:92:3a:91:8e:59: 2c:52:cc:d6:ff:a8:b8:12:53:26:89:6d:13:27:2a: df:d7:af:1b:40:a5:32:f5:9d:37:c6:08:be:63:6b: 8d:ba:fd:4a:d4:e8:ef:ea:17:74:08:f9:23:c6:32: 86:3a:07:de:c5:60:d5:97:03:4f:bc:19:55:98:6a: c4:42:9c:62:a3:33:56:70:74:2c:34:8b:0d:f6:9d: 9a:7a:4f:91:a1:b3:3b:88:f4:0f:08:e8:c5:b4:cb: c3:81:6c:32:b4:17:4b:da:26:20:d1:fd:b7:02:c0: ee:0c:b4:79:e8:f2:93:02:16:10:7b:ad:39:e3:48: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.112.0/22 Signature Algorithm: sha256WithRSAEncryption 89:8f:0f:44:0e:6b:01:8b:01:09:a6:78:a5:1f:70:8e:30:26: d5:36:7c:a9:42:78:ba:83:a1:aa:78:bf:8e:81:6d:89:f4:6d: 34:b7:4f:ab:ca:f8:66:98:2a:b7:a1:1a:30:6a:18:49:9f:d5: a2:30:df:17:2f:51:77:3f:2d:61:3f:7c:8c:ec:70:c1:ea:41: 80:8d:c3:52:c9:a9:31:79:e1:d2:37:c3:3c:4a:df:23:e6:82: 5b:18:4b:40:da:4f:dc:8e:4c:7f:5e:f8:99:c3:88:30:6f:00: 92:9a:ff:17:fe:a8:26:7f:13:44:f9:0c:8b:24:91:ed:0a:c4: b3:ae:d8:a8:d9:5e:ea:40:e0:6e:cf:a7:d5:c2:7a:5c:53:72: e5:e2:fe:bd:57:a7:4f:d4:2b:f2:00:bb:6d:73:bb:14:8d:5e: 57:f8:39:bc:22:48:e7:9e:b8:ba:e7:27:c1:58:d2:ad:8a:64: 02:7b:b6:76:d5:75:56:ed:18:f2:6a:ff:41:a0:57:f8:f9:4f: 0c:84:e2:13:3b:b5:e0:d4:d3:92:d0:bd:47:d2:55:60:71:4c: e2:3e:85:4f:a0:90:ea:7c:18:f3:3c:31:b1:80:3e:27:67:6b: 03:6c:06:56:72:77:23:58:22:9b:a7:70:07:ef:a7:85:fb:3b: ca:e5:df:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt263hk1t42BEnApNfhPrn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmRhYzI0MWYzMDEwYjFhZTQ4NGJjMzFmNTg0YWQwZjlkMjA2NzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveURPAWRAOXUOGN2FGHt7PZPH+vs V023Y58cqbB2cuIXZJcNQRUC7KUqDdIFb7dxRqw8fHcgF3jNpOO6BY5ouuG4P79w 5K0gedSYIbKhmKJTpOkWHii5KfNHzPZzD3ko3HImr35aXH/7I4axiingo9qYE+NI 6I8BLbQrydxXS0jakjqRjlksUszW/6i4ElMmiW0TJyrf168bQKUy9Z03xgi+Y2uN uv1K1Ojv6hd0CPkjxjKGOgfexWDVlwNPvBlVmGrEQpxiozNWcHQsNIsN9p2aek+R obM7iPQPCOjFtMvDgWwytBdL2iYg0f23AsDuDLR56PKTAhYQe60540j/DwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFK/awkHzAQsa5IS8MfWErQ+dIGc0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2ViN2E2 NS1mOWU2LTQ3ODQtOGZmNy00YjRmMGY2Zjc1MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZWI3YTY1 LWY5ZTYtNDc4NC04ZmY3LTRiNGYwZjZmNzUyMi8xL3I5ckNRZk1CQ3hya2hMd3g5 WVN0RDUwZ1p6US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLYpwMA0GCSqGSIb3DQEBCwUAA4IBAQCJjw9E DmsBiwEJpnilH3COMCbVNnypQni6g6GqeL+OgW2J9G00t0+ryvhmmCq3oRowahhJ n9WiMN8XL1F3Py1hP3yM7HDB6kGAjcNSyakxeeHSN8M8St8j5oJbGEtA2k/cjkx/ XviZw4gwbwCSmv8X/qgmfxNE+QyLJJHtCsSzrtio2V7qQOBuz6fVwnpcU3Ll4v69 V6dP1CvyALttc7sUjV5X+Dm8Ikjnnri65yfBWNKtimQCe7Z21XVW7Rjyav9BoFf4 +U8MhOITO7Xg1NOS0L1H0lVgcUziPoVPoJDqfBjzPDGxgD4nZ2sDbAZWcncjWCKb p3AH76eF+zvK5d+p -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:55 2026 by rpki-client