This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer File: txU9FR23r-6-BDvkXy1v1Af8XdQ.cer (raw, json) Hash identifier: ROL5Japgj9XW428vzGrJopICChbARb8t4OK/8GL9msQ= Subject key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4CFFCD9005EFB35059CF0DDC620F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204160 IP: 2a0f:9040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cf:fc:d9:00:5e:fb:35:05:9c:f0:dd:c6:20:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:4a:17:fb:70:b8:13:b7:a4:18:96:fa:31: 15:4a:27:60:89:94:9c:f7:cd:eb:20:bc:e3:07:51: 9f:e0:1d:82:8f:c6:d7:27:4e:84:17:03:db:fe:19: d9:f8:1c:e1:b3:9f:f9:4e:1c:d8:20:04:f1:32:f3: ab:16:2a:8e:79:ff:29:d4:db:2e:3e:22:ec:b1:b5: 21:46:94:22:63:62:86:48:35:af:8c:58:2e:28:5c: fd:2a:36:d0:fa:a9:f6:b7:39:2c:28:b2:a3:33:e0: 96:d8:ee:9b:ba:08:47:3a:e3:48:e5:4b:35:06:4d: be:b1:18:9e:4b:a8:69:81:ed:c7:d0:1a:ee:63:d5: 38:ba:46:d5:95:65:d5:63:99:ba:cc:10:72:d0:e2: ef:b2:0a:04:9e:d4:69:9b:7b:d8:ce:45:a5:4b:bd: d0:95:f5:3a:86:1a:88:cc:8a:3f:f6:55:06:a2:e0: 24:c3:b7:ca:ac:4a:c1:d1:1b:00:da:01:57:a7:35: ca:b8:43:85:e6:cf:ff:81:f8:58:42:2e:65:bf:0b: 46:17:1f:12:5d:73:53:f9:d2:8a:09:50:db:63:d4: f9:f7:50:ca:e4:02:1e:51:14:b6:3c:68:4b:b4:14: f4:5e:7e:2a:e3:b6:eb:51:b7:95:e7:4a:43:93:9f: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204160 Signature Algorithm: sha256WithRSAEncryption 5c:67:5e:d0:8d:44:cd:02:e5:77:3d:3e:e6:9a:35:17:d9:0a: 51:58:4e:2e:8d:bd:d3:9f:0c:04:3e:58:5d:dc:2b:11:63:f1: 35:19:78:70:36:86:6a:1f:d7:93:fc:32:69:bf:bf:4a:76:9c: 25:79:03:68:18:99:cc:b9:2c:35:93:15:37:c3:58:36:50:24: 9a:de:57:3c:13:2c:e9:5e:47:3f:3f:da:f3:5c:f0:b0:b5:30: 9b:cc:6f:96:63:65:c3:95:38:eb:ef:67:9d:62:1d:1b:11:96: a7:3e:4a:5c:d3:74:64:24:84:a4:26:4d:f7:fb:16:4e:80:fe: 24:b2:e6:b5:ea:e0:c7:12:ca:f4:46:a1:16:f5:3a:86:ea:fe: 06:bc:bf:5e:9b:ee:a8:83:26:62:70:99:63:51:0a:3a:a1:28: 53:01:90:63:6f:fe:ee:b7:1e:8d:fe:98:13:55:97:9d:a1:f9: 93:aa:dc:95:51:e9:5d:77:19:4d:b1:6c:d5:8e:c3:0f:2d:fe: 09:f3:4b:da:ac:ff:1b:25:a8:91:a2:b6:07:d7:ed:a3:a1:17: be:eb:48:b8:f2:e5:db:1c:a7:aa:5d:b3:a1:58:e8:2a:b7:9f: 7c:00:84:fe:53:12:32:ad:5b:01:78:99:1d:89:51:94:9f:65: f0:53:72:ce -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt7pM/82QBe+zUFnPDdxiD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzE1M2QxNTFkYjdhZmVlYmUwNDNiZTQ1ZjJkNmZkNDA3ZmM1ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cJKF/twuBO3pBiW+jEVSidgiZSc 983rILzjB1Gf4B2Cj8bXJ06EFwPb/hnZ+Bzhs5/5ThzYIATxMvOrFiqOef8p1Nsu PiLssbUhRpQiY2KGSDWvjFguKFz9KjbQ+qn2tzksKLKjM+CW2O6bughHOuNI5Us1 Bk2+sRieS6hpge3H0BruY9U4ukbVlWXVY5m6zBBy0OLvsgoEntRpm3vYzkWlS73Q lfU6hhqIzIo/9lUGouAkw7fKrErB0RsA2gFXpzXKuEOF5s//gfhYQi5lvwtGFx8S XXNT+dKKCVDbY9T591DK5AIeURS2PGhLtBT0Xn4q47brUbeV50pDk58zAwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFLcVPRUdt6/uvgQ75F8tb9QH/F3UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzcxOGMx Zi1mOGM5LTRkODktYjkwNy01MzFmYjkxZTM4M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNzE4YzFm LWY4YzktNGQ4OS1iOTA3LTUzMWZiOTFlMzgzYi8xL3R4VTlGUjIzci02LUJEdmtY eTF2MUFmOFhkUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg+QQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDHYAwDQYJKoZIhvcNAQELBQADggEBAFxnXtCNRM0C5Xc9PuaaNRfZClFYTi6N vdOfDAQ+WF3cKxFj8TUZeHA2hmof15P8Mmm/v0p2nCV5A2gYmcy5LDWTFTfDWDZQ JJreVzwTLOleRz8/2vNc8LC1MJvMb5ZjZcOVOOvvZ51iHRsRlqc+SlzTdGQkhKQm Tff7Fk6A/iSy5rXq4McSyvRGoRb1Oobq/ga8v16b7qiDJmJwmWNRCjqhKFMBkGNv /u63Ho3+mBNVl52h+ZOq3JVR6V13GU2xbNWOww8t/gnzS9qs/xslqJGitgfX7aOh F77rSLjy5dscp6pds6FY6Cq3n3wAhP5TEjKtWwF4mR2JUZSfZfBTcs4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:57 2026 by rpki-client