This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer File: v9gcqQzFIkWGr-urHHixeQJo1cE.cer (raw, json) Hash identifier: ITgluRkbsis+LogUyVd0tS2CNN/T95zS13SMoHjM3Yg= Subject key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11E10F8A71107AA3AC6224C3360ECB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.149.216.0/22 IP: 2a0f:7600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e1:0f:8a:71:10:7a:a3:ac:62:24:c3:36:0e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:ec:92:a4:46:f1:96:0c:a4:d7:f9:7c:8c: f7:dc:84:03:1d:48:b5:74:c5:f8:74:c5:fe:7e:0d: 7e:bf:10:41:ca:50:69:66:96:c9:fe:1e:a1:8d:75: 80:71:b6:b8:ff:7f:a5:5f:4c:df:da:db:09:72:3b: ba:2c:62:44:cd:a4:79:5e:f6:6e:aa:79:3e:6a:25: 44:9b:41:71:a7:ca:e2:4b:d2:ae:74:68:b4:f4:cd: 25:9a:89:7b:ef:98:86:2d:f2:6b:2b:49:a3:9e:1e: 05:35:5d:46:8c:ab:29:b1:69:e3:69:c6:88:9c:6d: b4:fc:f3:f9:2a:c9:45:1c:5a:56:1e:37:1a:80:7e: 19:79:67:99:2d:26:09:bc:d2:60:43:9f:e3:6e:3b: 59:b8:14:94:af:05:50:cf:51:62:14:fb:a9:8b:94: e9:f8:6d:d0:10:7b:7e:42:43:53:4d:ee:6f:94:d7: 5c:6a:85:a4:14:10:56:9d:78:4f:10:bf:95:d5:a6: 92:c5:02:f4:fa:89:8f:41:e4:0a:25:15:5d:22:e6: 6b:7f:a4:11:93:9a:ac:ca:95:a1:31:41:42:c4:d3: ce:e1:18:15:97:b8:53:c8:22:31:b5:bd:82:8b:e9: b7:b2:1a:c6:07:f9:82:38:f9:d6:b2:10:49:b9:49: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.216.0/22 IPv6: 2a0f:7600::/29 Signature Algorithm: sha256WithRSAEncryption 25:6a:de:5a:0b:fb:12:ed:fc:08:c1:f0:a3:aa:32:1b:c7:ff: ed:67:63:31:d0:69:a0:aa:33:be:e0:52:5c:eb:5b:9c:d4:f7: e2:4d:bd:b2:6c:5e:3d:62:b1:58:3e:ce:41:d8:8e:bd:d4:56: 1b:1f:c0:11:ba:17:d4:02:34:20:cf:bf:62:49:cf:27:b4:27: b2:be:08:36:8e:33:93:83:34:ca:89:48:b4:8a:5e:b6:2e:00: 73:59:6e:01:35:72:1d:d1:59:c6:2e:58:18:50:8e:67:78:88: 47:4f:63:7a:2e:a0:c4:f9:61:8b:a5:2f:14:ea:23:5c:ef:4a: 1f:54:75:f0:06:3f:6c:f1:c6:c1:57:e3:93:ab:42:2e:b2:26: d1:1a:0f:2e:e6:8e:95:d3:d5:e4:12:57:a5:6e:fb:8a:d4:99: 08:c3:8e:c5:d7:58:eb:5d:4d:88:7f:4a:4b:7d:45:0a:11:5f: 0b:0a:ac:ee:b2:a4:2d:b1:9b:c5:dd:fd:fe:e2:f7:41:8c:f1: ae:70:76:9a:cf:22:97:c0:0e:81:3e:75:f5:e2:e0:92:89:7c: 72:3e:9e:18:f5:00:f0:f5:e2:cd:9c:4d:1b:c0:c6:1b:0f:d1: f1:bd:0e:3c:39:aa:29:1b:8b:39:c5:0b:ea:9f:c1:d4:1b:74: de:32:0a:45 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EeEPinEQeqOsYiTDNg7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQ4MWNhOTBjYzUyMjQ1ODZhZmViYWIxYzc4YjE3OTAyNjhkNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXvskqRG8ZYMpNf5fIz33IQDHUi1 dMX4dMX+fg1+vxBBylBpZpbJ/h6hjXWAcba4/3+lX0zf2tsJcju6LGJEzaR5XvZu qnk+aiVEm0Fxp8riS9KudGi09M0lmol775iGLfJrK0mjnh4FNV1GjKspsWnjacaI nG20/PP5KslFHFpWHjcagH4ZeWeZLSYJvNJgQ5/jbjtZuBSUrwVQz1FiFPupi5Tp +G3QEHt+QkNTTe5vlNdcaoWkFBBWnXhPEL+V1aaSxQL0+omPQeQKJRVdIuZrf6QR k5qsypWhMUFCxNPO4RgVl7hTyCIxtb2Ci+m3shrGB/mCOPnWshBJuUlZEQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL/YHKkMxSJFhq/rqxx4sXkCaNXBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzI1YTU5 Yy1jMmZjLTRmZDQtOTZmNy04NGFkY2JmNWFjNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMjVhNTlj LWMyZmMtNGZkNC05NmY3LTg0YWRjYmY1YWM1NS8xL3Y5Z2NxUXpGSWtXR3ItdXJI SGl4ZVFKbzFjRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZXYMA0EAgACMAcDBQMqD3YAMA0GCSqGSIb3 DQEBCwUAA4IBAQAlat5aC/sS7fwIwfCjqjIbx//tZ2Mx0GmgqjO+4FJc61uc1Pfi Tb2ybF49YrFYPs5B2I691FYbH8ARuhfUAjQgz79iSc8ntCeyvgg2jjOTgzTKiUi0 il62LgBzWW4BNXId0VnGLlgYUI5neIhHT2N6LqDE+WGLpS8U6iNc70ofVHXwBj9s 8cbBV+OTq0IusibRGg8u5o6V09XkElelbvuK1JkIw47F11jrXU2If0pLfUUKEV8L CqzusqQtsZvF3f3+4vdBjPGucHaazyKXwA6BPnX14uCSiXxyPp4Y9QDw9eLNnE0b wMYbD9HxvQ48OaopG4s5xQvqn8HUG3TeMgpF -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:07 2026 by rpki-client