This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer File: tI9Br9xglWj7Izj9sgstDEIrcjs.cer (raw, json) Hash identifier: vs4bxkBTBaUL8kPdJeuy7o+EMEcmqHW+GXm5ndV3cGg= Subject key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F3FDDE5E2F7018551532D2D66FE12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.90.152.0/22 IP: 2a05:e100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3f:dd:e5:e2:f7:01:85:51:53:2d:2d:66:fe:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:1d:49:0b:e9:56:b5:e4:42:0d:f7:c8:c6: 37:04:54:7d:27:cf:41:08:b5:c4:1d:14:0b:b0:f2: 33:bc:ac:d0:0e:d5:4f:52:63:18:58:fd:09:c4:10: 9d:dc:49:ce:55:cf:18:f2:98:fe:22:f5:2f:64:be: bf:cd:41:e0:cc:7b:0c:69:93:f1:a6:ad:1e:ba:1c: a9:f6:6b:31:5f:43:07:89:29:30:92:b9:ab:76:3b: 62:99:c8:ed:1a:5d:61:6b:3d:7a:86:96:c2:e9:2a: a2:da:64:32:e7:15:3e:04:4b:fb:96:96:c1:ae:0b: a5:f2:b7:8d:0a:fa:a5:da:2f:f8:40:8f:72:5c:cf: fb:48:2c:83:16:0b:61:ea:70:eb:82:34:ce:4f:43: e9:16:7b:8f:10:e7:28:19:3e:33:64:c7:5f:09:2f: 40:2f:aa:57:f8:8d:f8:6e:00:09:87:fc:91:c1:fc: 38:d2:89:51:5a:12:9d:b0:78:31:bd:1e:7d:7c:b7: 83:0a:29:b0:1e:41:04:31:ca:8a:2d:f8:c5:4c:38: d2:ef:41:af:08:cb:5d:b4:0c:a6:f7:76:3b:2f:59: fc:a6:ef:7a:d1:ac:4a:2a:16:a5:b4:fb:81:f6:1d: c3:4c:0c:16:a6:62:b9:86:85:e4:9b:56:1b:49:fc: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.152.0/22 IPv6: 2a05:e100::/29 Signature Algorithm: sha256WithRSAEncryption 69:48:1d:1d:1f:5d:78:11:48:19:bb:ef:4b:6a:bc:4b:1e:30: ac:7c:43:45:8c:c0:a7:78:23:56:d8:a3:4f:cd:44:70:9e:c1: a6:8e:4c:ce:33:b8:fb:df:b9:5d:f0:ab:7c:c8:01:f8:9b:07: af:2a:b8:c5:6d:f0:71:aa:95:b8:2c:e7:df:2c:cc:d8:67:7c: d4:73:0f:5d:3f:6b:4e:60:ea:8f:8f:93:ae:d3:90:11:e6:84: b2:2e:d9:0a:69:58:6f:57:54:dd:19:df:59:29:9e:4f:64:47: 23:17:47:f2:04:6e:b1:c9:37:0b:dd:cc:ac:d2:65:c4:cc:c0: 07:fb:38:cd:4b:2c:39:ac:e5:e5:8b:03:61:68:03:a0:46:72: 47:d4:d1:74:12:d1:17:e6:4d:ef:b0:e8:26:39:94:09:a1:e9: f8:0a:5c:82:1b:80:f1:0d:95:55:61:15:0d:f5:8f:8d:f7:94: 5a:de:36:5c:c9:bd:54:a3:a8:79:d4:93:42:44:53:65:6a:62: 6e:32:ee:7c:1c:a9:61:e9:c5:d0:75:87:40:bd:69:a6:eb:2f: 9d:0b:ad:a0:73:e5:70:97:33:d6:b4:63:49:53:bc:d0:22:59: 56:9e:d7:37:f7:4f:30:30:6d:e2:02:c5:26:89:81:fc:3e:48: da:44:4e:35 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fz/d5eL3AYVRUy0tZv4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDhmNDFhZmRjNjA5NTY4ZmIyMzM4ZmRiMjBiMmQwYzQyMmI3MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWcdSQvpVrXkQg33yMY3BFR9J89B CLXEHRQLsPIzvKzQDtVPUmMYWP0JxBCd3EnOVc8Y8pj+IvUvZL6/zUHgzHsMaZPx pq0euhyp9msxX0MHiSkwkrmrdjtimcjtGl1haz16hpbC6Sqi2mQy5xU+BEv7lpbB rgul8reNCvql2i/4QI9yXM/7SCyDFgth6nDrgjTOT0PpFnuPEOcoGT4zZMdfCS9A L6pX+I34bgAJh/yRwfw40olRWhKdsHgxvR59fLeDCimwHkEEMcqKLfjFTDjS70Gv CMtdtAym93Y7L1n8pu960axKKhaltPuB9h3DTAwWpmK5hoXkm1YbSfwSkQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLSPQa/cYJVo+yM4/bILLQxCK3I7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzQ4NTc2 OS01ODM1LTQ3ZjQtYTlmZi04ZWM2OGU3ODg2ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNDg1NzY5 LTU4MzUtNDdmNC1hOWZmLThlYzY4ZTc4ODZlMi8xL3RJOUJyOXhnbFdqN0l6ajlz Z3N0REVJcmNqcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVqYMA0EAgACMAcDBQMqBeEAMA0GCSqGSIb3 DQEBCwUAA4IBAQBpSB0dH114EUgZu+9LarxLHjCsfENFjMCneCNW2KNPzURwnsGm jkzOM7j737ld8Kt8yAH4mwevKrjFbfBxqpW4LOffLMzYZ3zUcw9dP2tOYOqPj5Ou 05AR5oSyLtkKaVhvV1TdGd9ZKZ5PZEcjF0fyBG6xyTcL3cys0mXEzMAH+zjNSyw5 rOXliwNhaAOgRnJH1NF0EtEX5k3vsOgmOZQJoen4ClyCG4DxDZVVYRUN9Y+N95Ra 3jZcyb1Uo6h51JNCRFNlamJuMu58HKlh6cXQdYdAvWmm6y+dC62gc+VwlzPWtGNJ U7zQIllWntc3908wMG3iAsUmiYH8PkjaRE41 -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:36 2026 by rpki-client