This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer (raw, json) Hash identifier: 3g+pNJcNljCSR9YH5d7RIiZotdikDnfMDWRreaBjlaA= Subject key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2958CECB04CAE9276DCC41B6BB623 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60775 IP: 185.177.144.0/22 IP: 2a0a:4f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:95:8c:ec:b0:4c:ae:92:76:dc:c4:1b:6b:b6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:73:65:8e:1f:e6:07:57:3a:17:7d:f0:2b: 99:c4:22:b9:7b:bb:69:35:d7:f3:42:1a:75:b2:59: 57:37:62:4b:44:cf:ba:b5:80:a3:5f:65:4e:3c:c8: 27:93:00:7a:f9:a9:21:80:aa:2b:70:e3:f0:5d:e2: fb:1a:d0:da:5c:5a:85:6d:c5:4e:35:35:f9:99:70: fe:0b:11:18:63:bc:31:ca:86:91:f2:01:53:c9:0c: 41:48:c2:6d:b4:dc:f1:16:1c:b7:2b:41:ae:f4:45: 0b:fa:4d:b4:53:87:72:0a:25:fd:b2:30:19:b3:b9: 11:35:56:d3:46:dd:fc:d5:45:cf:bf:f3:84:e8:89: ed:40:cd:74:45:98:9c:ba:73:f1:1d:ba:3e:7e:ff: aa:84:41:94:ce:fc:4d:d2:df:d6:59:7d:ab:07:cb: 42:04:66:d5:1a:32:3c:27:5d:03:6f:3d:83:05:fc: 06:64:ca:08:03:89:b3:1e:65:06:99:d7:c8:9e:a1: 5a:61:b2:22:aa:79:3e:e7:c7:a8:5b:4d:a9:c0:49: a3:79:ce:ce:c4:f9:a6:3d:44:bb:09:d1:45:80:37: 3e:65:88:b2:03:9d:66:f3:69:94:c1:42:e8:b3:ab: d2:14:a3:66:9b:2c:e7:c0:12:d4:5b:d6:21:95:73: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.144.0/22 IPv6: 2a0a:4f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60775 Signature Algorithm: sha256WithRSAEncryption 14:f0:7a:ac:f4:f3:da:bc:dc:d4:bb:b9:2b:cf:a4:b6:90:31: 08:f5:0b:20:f5:d7:39:5f:85:aa:24:8e:4a:51:b7:4d:e9:53: 80:ff:7b:56:f9:01:63:3b:11:2a:07:19:3f:56:a6:10:41:ec: ed:19:4b:54:b3:0a:ca:76:53:82:a0:b7:09:88:41:6d:cf:7c: d2:7c:c2:40:07:5a:bb:ab:33:52:47:f0:df:87:36:99:57:b0: d5:b4:e3:ca:9a:10:18:c3:ee:24:12:84:ec:d0:ca:91:9d:8a: 33:42:24:66:38:12:0e:20:0b:1c:e5:26:c4:0f:d0:f0:37:c2: c0:5a:94:be:f9:74:af:5c:9a:20:5e:8e:90:f8:80:e2:40:6d: cc:ac:93:6c:de:09:3f:5c:cb:a9:86:4e:eb:5e:cb:ac:b2:ed: be:67:07:8f:2b:d0:d7:9a:3f:93:26:41:fb:e1:76:29:3b:8c: 87:bb:85:ff:7d:64:ee:1c:f4:58:2d:d4:82:18:b6:db:ef:a1: b6:74:5e:f7:18:ca:fa:ad:ab:f6:53:57:ca:95:6c:4a:c7:d5: 44:1e:7a:0f:1e:d8:69:3c:26:bf:55:fe:e1:ed:8f:97:94:44: 89:9a:44:11:c0:f4:b2:eb:17:e7:55:2b:c2:db:14:19:98:d8: bd:27:69:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8pWM7LBMrpJ23MQba7YjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ4ZDcyYjFjYmZjNjdjMzc5YWQ5YTkyYzY2ZmFjNmM4ZDMyMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYZzZY4f5gdXOhd98CuZxCK5e7tp NdfzQhp1sllXN2JLRM+6tYCjX2VOPMgnkwB6+akhgKorcOPwXeL7GtDaXFqFbcVO NTX5mXD+CxEYY7wxyoaR8gFTyQxBSMJttNzxFhy3K0Gu9EUL+k20U4dyCiX9sjAZ s7kRNVbTRt381UXPv/OE6IntQM10RZicunPxHbo+fv+qhEGUzvxN0t/WWX2rB8tC BGbVGjI8J10Dbz2DBfwGZMoIA4mzHmUGmdfInqFaYbIiqnk+58eoW02pwEmjec7O xPmmPUS7CdFFgDc+ZYiyA51m82mUwULos6vSFKNmmyznwBLUW9YhlXOP/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFvY1yscv8Z8N5rZqSxm+sbI0yM6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2QyOTZh OC1hNWIxLTRhMzQtODEyOC04OTM1OWU3ODMyMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZDI5NmE4 LWE1YjEtNGEzNC04MTI4LTg5MzU5ZTc4MzIyNC8xL1c5alhLeHlfeG53M210bXBM R2I2eHNqVEl6by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubGQMA0EAgACMAcDBQMqCk+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtZzANBgkqhkiG9w0BAQsFAAOCAQEAFPB6rPTz2rzc 1Lu5K8+ktpAxCPULIPXXOV+FqiSOSlG3TelTgP97VvkBYzsRKgcZP1amEEHs7RlL VLMKynZTgqC3CYhBbc980nzCQAdau6szUkfw34c2mVew1bTjypoQGMPuJBKE7NDK kZ2KM0IkZjgSDiALHOUmxA/Q8DfCwFqUvvl0r1yaIF6OkPiA4kBtzKyTbN4JP1zL qYZO617LrLLtvmcHjyvQ15o/kyZB++F2KTuMh7uF/31k7hz0WC3Ughi22++htnRe 9xjK+q2r9lNXypVsSsfVRB56Dx7YaTwmv1X+4e2Pl5REiZpEEcD0susX51UrwtsU GZjYvSdpPQ== -----END CERTIFICATE-----Generated at Mon Jan 12 15:12:55 2026 by rpki-client