This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer File: 19BnS9bwzJF1IZoyjIs5aCn2wK8.cer (raw, json) Hash identifier: mAO6DC4YlnHneXqtPFk6AGbwKt5TChWxTLR5P5kRwps= Subject key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834A4E72AD76E598E401E096C6F426B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39370 IP: 89.147.0.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a4:e7:2a:d7:6e:59:8e:40:1e:09:6c:6f:42:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:d6:a1:75:4c:79:4a:37:2c:0c:f3:b7:7a: 48:b7:4a:ca:da:e7:58:43:97:5a:7f:e5:ea:17:00: 7b:87:c4:a5:e5:72:c7:35:3d:a9:81:5e:ee:92:38: df:81:bf:c3:67:c5:18:55:40:6b:29:9c:07:61:3f: 3a:d8:82:20:6f:ee:ce:6b:64:3f:10:37:98:bb:85: fe:d2:1e:28:39:15:1c:ee:67:af:b4:86:da:1a:0a: 0a:fc:3e:ff:b4:57:36:ab:ee:c0:b3:c8:37:ff:e2: 12:69:04:e0:a1:32:9c:61:b9:27:7d:ee:8e:1e:b0: c5:aa:5c:f7:ad:fb:ba:f8:a9:ac:62:c1:f8:d4:c1: 41:c6:97:3e:de:41:0c:fc:21:de:22:e1:19:7c:45: 04:e1:f0:d4:f7:42:e7:d8:c8:0f:8a:5c:e7:11:8e: a3:fb:8e:84:34:be:36:86:ba:25:54:0e:31:3c:ad: 9f:93:c2:ae:8f:cb:76:92:30:32:9a:88:82:bc:e4: 8e:3d:f1:1d:8e:b6:f9:77:ea:6a:85:f1:2b:a6:6b: 72:8e:c6:a7:b2:43:ab:f5:1a:d9:2d:eb:c6:56:9e: a0:a5:b0:78:e1:17:f7:8b:ec:e0:52:56:7d:47:ff: 84:87:0d:6d:21:ec:f7:34:ce:cc:ae:b8:cc:02:65: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.147.0.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39370 Signature Algorithm: sha256WithRSAEncryption 5d:45:36:ed:49:2e:cb:7f:12:61:bd:88:3c:63:c5:b1:14:1e: 3a:b3:65:21:d1:76:3c:fc:6b:82:c8:1a:1d:ba:b2:0e:99:34: 2e:f1:b4:f6:f1:e8:5f:99:16:c0:1c:a5:47:4f:7c:b5:83:95: 7e:ca:2a:8f:45:dc:31:3b:c2:6b:24:4d:d8:6b:13:94:45:08: 89:fe:e3:91:15:09:42:72:09:66:29:fd:72:18:bd:ab:9b:7f: bc:20:0c:c1:a7:21:cd:9f:86:87:d3:87:34:73:55:fd:bd:68: 34:ab:08:21:67:64:47:56:1c:a3:90:24:32:42:39:c5:2d:db: 7e:ef:71:be:d5:3b:ba:d9:6a:c0:13:69:92:4f:0c:d3:54:b7: 2b:31:ef:4d:31:d1:60:0a:d9:9d:4e:64:58:8d:ca:d3:c3:cf: d4:43:a5:33:10:c4:ed:59:2c:f3:e5:d5:d4:28:d2:7d:15:44: db:eb:7b:a8:53:64:c9:59:83:a6:7f:04:4c:e8:1f:76:c4:94: 43:a6:89:85:95:9f:fa:9f:8a:4a:bc:e3:6a:29:65:cd:74:4c: 66:ba:fd:0b:17:11:8a:cd:51:17:0a:fa:70:83:d0:de:21:b9: cf:90:11:ba:ab:4e:bf:43:b5:f5:a8:fd:6f:0a:71:1e:5d:74: 32:54:37:b6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NKTnKtduWY5AHglsb0JrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2QwNjc0YmQ2ZjBjYzkxNzUyMTlhMzI4YzhiMzk2ODI5ZjZjMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3DWoXVMeUo3LAzzt3pIt0rK2udY Q5daf+XqFwB7h8Sl5XLHNT2pgV7ukjjfgb/DZ8UYVUBrKZwHYT862IIgb+7Oa2Q/ EDeYu4X+0h4oORUc7mevtIbaGgoK/D7/tFc2q+7As8g3/+ISaQTgoTKcYbknfe6O HrDFqlz3rfu6+KmsYsH41MFBxpc+3kEM/CHeIuEZfEUE4fDU90Ln2MgPilznEY6j +46ENL42hrolVA4xPK2fk8Kuj8t2kjAymoiCvOSOPfEdjrb5d+pqhfErpmtyjsan skOr9RrZLevGVp6gpbB44Rf3i+zgUlZ9R/+Ehw1tIez3NM7MrrjMAmXMWwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2IzMGU1 ZC04YjNiLTQyODctOWIzYi04MjMyZmEzZTYyOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYjMwZTVk LThiM2ItNDI4Ny05YjNiLTgyMzJmYTNlNjI5ZC8xLzE5Qm5TOWJ3ekpGMUlab3lq SXM1YUNuMndLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQGWZMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCZyjANBgkqhkiG9w0BAQsFAAOCAQEAXUU27Ukuy38SYb2IPGPFsRQeOrNlIdF2 PPxrgsgaHbqyDpk0LvG09vHoX5kWwBylR098tYOVfsoqj0XcMTvCayRN2GsTlEUI if7jkRUJQnIJZin9chi9q5t/vCAMwachzZ+Gh9OHNHNV/b1oNKsIIWdkR1Yco5Ak MkI5xS3bfu9xvtU7utlqwBNpkk8M01S3KzHvTTHRYArZnU5kWI3K08PP1EOlMxDE 7Vks8+XV1CjSfRVE2+t7qFNkyVmDpn8ETOgfdsSUQ6aJhZWf+p+KSrzjaillzXRM Zrr9CxcRis1RFwr6cIPQ3iG5z5ARuqtOv0O19aj9bwpxHl10MlQ3tg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:50 2026 by rpki-client