This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer (raw, json) Hash identifier: /zlXvS/pkdO+G3nZJkgYRC47qeN6P/GYLKXRY8LpZ3w= Subject key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFD81CB089B8834824EC9CBAFCC84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12657 AS: 210430 IP: 80.91.217.0/24 IP: 91.194.118.0/23 IP: 91.194.124.0/23 IP: 212.72.64.0/19 IP: 212.102.160.0/19 IP: 213.131.192.0/19 IP: 2001:1578::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:81:cb:08:9b:88:34:82:4e:c9:cb:af:cc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbd351b274fc23a42728303638a0d62b606401b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:4b:82:a3:02:2b:82:6c:03:9a:d5:99:4e: 3e:69:17:03:bb:e4:a6:46:45:ed:f3:fc:45:bb:fc: 34:e7:8c:15:2b:4b:4b:50:05:fe:8f:c1:a5:57:ca: b2:9f:a1:c0:ea:c7:fb:3f:1d:f2:0a:28:3a:9e:ff: 78:cb:78:e6:2c:91:09:80:2e:2d:7e:6c:cb:3b:38: 46:b8:6c:90:a7:9d:41:54:48:f2:c9:87:c2:e9:ac: ff:2d:1f:7e:96:8e:9b:55:04:2c:22:ff:35:f9:34: d2:73:0e:21:cc:20:b8:5b:9a:c9:7d:4d:3c:39:a3: ab:d7:fb:88:35:91:92:7e:73:12:d4:b3:d7:cf:b1: f1:0a:a7:59:73:1e:68:d5:fe:96:98:0d:68:df:b1: 20:66:c2:9b:40:ae:54:51:18:a5:dc:41:94:88:de: 31:7f:2e:d6:61:5b:0e:57:fb:a7:68:39:c0:20:20: de:c0:c2:ea:c2:46:f8:98:64:0c:09:ff:2a:63:a0: 56:bb:48:cb:b2:bb:09:72:30:fe:62:ab:33:6c:64: 65:f8:f1:a5:92:fc:ec:8d:72:fb:18:3f:80:2f:f4: ed:b1:c2:8c:c3:68:30:02:12:52:01:a2:88:7c:e4: 75:e8:70:77:61:a6:21:29:61:41:51:cc:b8:65:f9: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.217.0/24 91.194.118.0/23 91.194.124.0/23 212.72.64.0/19 212.102.160.0/19 213.131.192.0/19 IPv6: 2001:1578::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12657 210430 Signature Algorithm: sha256WithRSAEncryption 9a:8c:84:79:8b:31:89:f3:74:01:4f:74:34:4d:70:7b:b1:4d: 37:d6:f0:d4:11:4a:84:75:a3:56:7f:4b:3a:68:a0:68:ad:01: 1a:b8:25:a8:8d:ff:d0:02:b3:f8:83:c2:e6:aa:32:d7:56:b5: a5:67:72:25:58:b1:51:1b:f6:c4:1c:bf:46:9c:11:b5:10:3f: 61:b0:f4:2b:86:07:4c:77:f7:bb:a1:64:35:79:9e:a4:d6:7e: 05:f0:15:45:bc:c9:27:c0:b2:8b:be:fd:85:01:88:db:18:25: 9e:3b:45:15:e6:4b:4a:88:3b:8d:92:48:4f:a6:1f:fd:e2:b1: 89:d7:67:34:fb:09:e9:6f:20:27:d3:46:e5:3b:d3:32:3e:9f: 7c:89:4e:02:d1:87:57:47:ce:4b:5f:64:64:61:6c:62:78:24: 0f:0b:4a:a3:cd:4f:c6:b1:29:59:da:6c:2f:48:6d:bf:c2:73: b4:ae:ee:36:45:01:62:24:42:a9:ea:73:fd:96:b8:db:23:cf: 70:1a:8e:4d:99:e9:da:d2:10:2a:38:82:67:21:9e:36:6d:6e: bd:26:32:6c:1e:87:ec:5d:4c:63:43:3e:c9:b2:30:b6:61:f9: 4b:ca:cb:02:e5:bc:67:43:a0:73:ac:17:20:00:57:c1:48:a7: 3b:10:f9:5b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt5fv2BywibiDSCTsnLr8yEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmQzNTFiMjc0ZmMyM2E0MjcyODMwMzYzOGEwZDYyYjYwNjQwMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1LgqMCK4JsA5rVmU4+aRcDu+Sm RkXt8/xFu/w054wVK0tLUAX+j8GlV8qyn6HA6sf7Px3yCig6nv94y3jmLJEJgC4t fmzLOzhGuGyQp51BVEjyyYfC6az/LR9+lo6bVQQsIv81+TTScw4hzCC4W5rJfU08 OaOr1/uINZGSfnMS1LPXz7HxCqdZcx5o1f6WmA1o37EgZsKbQK5UURil3EGUiN4x fy7WYVsOV/unaDnAICDewMLqwkb4mGQMCf8qY6BWu0jLsrsJcjD+YqszbGRl+PGl kvzsjXL7GD+AL/TtscKMw2gwAhJSAaKIfOR16HB3YaYhKWFBUcy4ZfkLOwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFLvTUbJ0/COkJygwNjig1itgZAG0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2MxZjkw YS0yYmFkLTQxYjQtYjFhNi00NmIzMDI4YTAzYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYzFmOTBh LTJiYWQtNDFiNC1iMWE2LTQ2YjMwMjhhMDNiMC8xL3U5TlJzblQ4STZRbktEQTJP S0RXSzJCa0FiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAUFvZAwQBW8J2AwQBW8J8AwQF1EhAAwQF1Gag AwQF1YPAMA0EAgACMAcDBQMgARV4MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAjFx AgMDNf4wDQYJKoZIhvcNAQELBQADggEBAJqMhHmLMYnzdAFPdDRNcHuxTTfW8NQR SoR1o1Z/SzpooGitARq4JaiN/9ACs/iDwuaqMtdWtaVnciVYsVEb9sQcv0acEbUQ P2Gw9CuGB0x397uhZDV5nqTWfgXwFUW8ySfAsou+/YUBiNsYJZ47RRXmS0qIO42S SE+mH/3isYnXZzT7CelvICfTRuU70zI+n3yJTgLRh1dHzktfZGRhbGJ4JA8LSqPN T8axKVnabC9Ibb/Cc7Su7jZFAWIkQqnqc/2WuNsjz3Aajk2Z6drSECo4gmchnjZt br0mMmweh+xdTGNDPsmyMLZh+UvKywLlvGdDoHOsFyAAV8FIpzsQ+Vs= -----END CERTIFICATE-----Generated at Mon Jan 26 19:37:32 2026 by rpki-client