This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer File: v9Cah3Q4F8VvgIgAeldG62n_LjA.cer (raw, json) Hash identifier: 5LAa7d4JDCiSNa5ZC3uVJaBQRuGkUCuaFn3L/+piTT8= Subject key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9395FF24A01FF4BA82BD24212C519 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201102 IP: 185.82.224.0/22 IP: 185.194.4.0/22 IP: 195.184.75.0/24 IP: 2a05:9540::/29 IP: 2a0a:42c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:39:5f:f2:4a:01:ff:4b:a8:2b:d2:42:12:c5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:3b:02:1c:5c:bb:06:5a:68:66:32:ec:7a: c5:ad:0b:9c:d9:2a:89:46:70:3a:0b:10:8e:ce:56: 76:20:8d:84:ec:22:83:1e:8f:7e:d7:b0:ab:e3:44: 0b:1d:e2:80:6a:f0:5b:10:48:b4:b0:6c:3f:e5:b3: 56:42:67:57:2f:57:96:fc:c7:c5:7d:7e:bd:e8:fe: 60:0f:24:1e:4b:0d:d0:24:a6:00:18:a7:fd:e5:c2: 58:94:81:f8:1d:fc:ac:73:2e:1d:82:33:fc:62:e5: 47:0f:8c:4a:8c:5f:80:48:69:75:9c:47:25:18:c9: 36:a7:2c:4a:17:a3:51:90:01:69:99:d5:6f:c9:67: 56:ed:52:3b:61:7d:16:42:95:84:9a:f7:14:9e:cf: 5b:e9:34:13:37:d1:44:34:af:a3:f5:22:85:16:cc: 50:ba:38:84:ce:c3:42:db:10:9e:48:ba:82:91:58: d7:cf:37:27:93:a4:c7:64:d2:14:3d:f1:c1:ed:e0: 3e:25:b6:49:91:71:82:bb:d4:b4:2e:08:57:55:a6: 29:5b:7c:d9:46:4d:eb:34:a2:f3:86:f2:3e:03:fb: 45:41:9c:35:bd:cc:66:55:a7:d6:ce:9b:96:1a:48: 24:8b:83:a8:d5:0b:4b:bd:72:27:bb:84:a1:83:9d: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.224.0/22 185.194.4.0/22 195.184.75.0/24 IPv6: 2a05:9540::/29 2a0a:42c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201102 Signature Algorithm: sha256WithRSAEncryption 87:5c:1d:cb:41:3f:c4:e5:80:46:ce:89:4b:bc:4c:d0:44:a9: 6e:66:95:7d:64:9d:37:dc:13:ae:36:80:ef:46:40:08:e6:b6: d7:3f:56:e8:b7:06:51:53:b9:ae:06:62:49:06:17:5e:cb:7a: 14:38:00:39:0b:f2:ce:d6:ec:39:d4:a7:a3:82:e3:7d:53:b0: a6:21:0a:f7:bc:54:fa:c7:ef:a8:01:42:b6:47:f4:e6:9e:a8: 8a:bc:a6:a6:e1:e9:99:a3:aa:ee:8a:65:ad:16:d5:be:53:6e: 95:17:54:98:b6:5e:6d:6c:6a:4f:57:76:70:2c:8d:48:6d:34: 6c:fe:03:8d:28:d3:c9:4c:90:bb:c0:66:52:2c:93:e9:ad:3a: f3:bd:62:66:55:0e:e3:a5:c4:97:02:a8:d8:43:63:2d:9b:91: 31:1d:25:f1:ce:bb:a4:bd:33:87:58:00:fd:1d:77:17:63:6b: c0:a2:71:32:c1:d7:36:14:46:c7:ed:48:29:cf:92:e3:f5:8f: ba:89:25:fb:1d:aa:e8:fd:12:e1:2f:e5:9e:7f:44:80:34:66: 9e:e2:fc:8a:65:86:d5:72:9f:ae:5a:a4:46:04:84:81:36:5e: e6:47:d0:24:e9:c6:ba:41:6d:0e:a2:9c:9d:a1:d6:23:c3:f5: d9:d3:e1:41 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt6yTlf8koB/0uoK9JCEsUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQwOWE4Nzc0MzgxN2M1NmY4MDg4MDA3YTU3NDZlYjY5ZmYyZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2k7AhxcuwZaaGYy7HrFrQuc2SqJ RnA6CxCOzlZ2II2E7CKDHo9+17Cr40QLHeKAavBbEEi0sGw/5bNWQmdXL1eW/MfF fX696P5gDyQeSw3QJKYAGKf95cJYlIH4Hfyscy4dgjP8YuVHD4xKjF+ASGl1nEcl GMk2pyxKF6NRkAFpmdVvyWdW7VI7YX0WQpWEmvcUns9b6TQTN9FENK+j9SKFFsxQ ujiEzsNC2xCeSLqCkVjXzzcnk6THZNIUPfHB7eA+JbZJkXGCu9S0LghXVaYpW3zZ Rk3rNKLzhvI+A/tFQZw1vcxmVafWzpuWGkgki4Oo1QtLvXInu4Shg51I7wIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFL/Qmod0OBfFb4CIAHpXRutp/y4wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzA5MjU3 MC01MTJhLTQ0ZmEtYTRmZS1kYmNhOGMzMWViYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMDkyNTcw LTUxMmEtNDRmYS1hNGZlLWRiY2E4YzMxZWJjOC8xL3Y5Q2FoM1E0RjhWdmdJZ0Fl bGRHNjJuX0xqQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuVLgAwQCucIEAwQAw7hLMBQEAgACMA4DBQMq BZVAAwUDKgpCwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDEY4wDQYJKoZIhvcN AQELBQADggEBAIdcHctBP8TlgEbOiUu8TNBEqW5mlX1knTfcE642gO9GQAjmttc/ Vui3BlFTua4GYkkGF17LehQ4ADkL8s7W7DnUp6OC431TsKYhCve8VPrH76gBQrZH 9OaeqIq8pqbh6Zmjqu6KZa0W1b5TbpUXVJi2Xm1sak9XdnAsjUhtNGz+A40o08lM kLvAZlIsk+mtOvO9YmZVDuOlxJcCqNhDYy2bkTEdJfHOu6S9M4dYAP0ddxdja8Ci cTLB1zYURsftSCnPkuP1j7qJJfsdquj9EuEv5Z5/RIA0Zp7i/IplhtVyn65apEYE hIE2XuZH0CTpxrpBbQ6inJ2h1iPD9dnT4UE= -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:00 2026 by rpki-client