This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer (raw, json) Hash identifier: S3EMXwVLSB6kp895U7QLjnjtZqjPvJyql42P7HT1JK0= Subject key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1280E3D65338420D9F5C5D91A78E17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214480 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:80:e3:d6:53:38:42:0d:9f:5c:5d:91:a7:8e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73d85f8438d73b5668e89cc692646f9487965fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:60:58:2b:e6:3d:1b:d6:14:7d:71:a5:2c: f9:74:07:cf:38:1c:9e:b2:7f:58:3b:83:69:88:63: 13:cd:69:71:07:47:11:de:13:27:81:d7:38:af:5e: 8d:d8:db:ec:c5:dc:02:f2:89:fa:5e:0e:74:ea:55: 21:e4:8e:f4:1d:38:d2:2b:13:51:3c:e4:b3:ab:ca: b8:d2:70:42:2f:f5:47:aa:94:21:44:35:aa:eb:9e: 7d:d4:5a:22:11:9b:1c:35:28:73:50:0c:8c:54:bd: 81:f3:27:00:22:82:e0:d3:59:bf:9f:6e:a2:a0:f2: 07:8e:37:47:c0:61:0c:b6:9c:2e:c2:73:09:9a:6b: 4a:3b:9e:d6:9d:21:22:78:85:78:b8:fe:30:b7:b7: d8:aa:0f:a5:ce:81:e4:33:f1:5b:92:91:26:b2:cb: 20:0f:3c:28:a4:14:0a:75:fe:66:be:f9:23:fb:ed: 81:9e:d8:85:ad:08:b2:e1:94:a6:61:e7:61:44:d8: 9e:ce:e9:59:a8:f8:5a:72:9b:17:c3:23:35:27:69: eb:2a:7e:d5:99:ea:32:57:3f:6e:ee:22:1d:01:a8: 44:a3:e7:19:99:09:a2:00:9f:41:68:fa:ef:7b:07: 00:01:cf:f0:ad:90:9d:0e:54:07:19:b4:38:d9:58: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214480 Signature Algorithm: sha256WithRSAEncryption 57:2e:83:30:f7:7c:76:5a:52:44:8b:e3:eb:41:74:ec:08:30: 14:0a:f2:03:02:6b:99:8e:d2:15:ce:ad:a3:6f:b7:94:c6:39: a7:dc:c5:e6:3b:21:ca:c6:20:a4:95:29:5d:6c:91:69:1a:25: 8d:f7:13:26:5b:04:df:38:1b:a7:d6:a2:38:3b:14:f4:1c:a8: 5b:22:b6:d2:12:00:82:59:23:1c:1d:34:fd:44:94:cb:40:53: 47:1d:d5:c2:63:b4:33:d5:2f:fc:57:14:cb:95:bd:5b:b8:78: f5:8d:7c:b7:c5:29:68:e9:ae:d0:ca:b3:de:0b:66:5f:71:05: 5f:b5:b5:81:e5:7e:3f:12:62:d3:b5:3d:d6:72:f9:6e:ad:7b: a4:73:12:13:98:74:fa:1a:bf:62:80:0f:c7:1b:0c:a0:a3:92: 7d:b3:b4:f1:b1:41:10:2b:6f:45:57:f9:b9:d7:a7:76:a4:de: 6d:70:7d:42:1f:6a:91:ed:21:7d:be:86:55:91:99:1d:6c:75: b6:87:ea:eb:78:0a:7d:66:eb:38:b6:84:03:9e:68:b7:39:e7: 39:18:3c:b8:10:29:0d:d8:4a:9b:5e:a4:0f:bb:dd:59:5d:ee: bb:2a:aa:6c:e8:9b:0f:18:3e:91:f6:4d:31:b3:d0:16:36:6c: a0:77:8d:2d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EoDj1lM4Qg2fXF2Rp44XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Q4NWY4NDM4ZDczYjU2NjhlODljYzY5MjY0NmY5NDg3OTY1ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VNgWCvmPRvWFH1xpSz5dAfPOBye sn9YO4NpiGMTzWlxB0cR3hMngdc4r16N2NvsxdwC8on6Xg506lUh5I70HTjSKxNR POSzq8q40nBCL/VHqpQhRDWq65591FoiEZscNShzUAyMVL2B8ycAIoLg01m/n26i oPIHjjdHwGEMtpwuwnMJmmtKO57WnSEieIV4uP4wt7fYqg+lzoHkM/FbkpEmsssg DzwopBQKdf5mvvkj++2BntiFrQiy4ZSmYedhRNiezulZqPhacpsXwyM1J2nrKn7V meoyVz9u7iIdAahEo+cZmQmiAJ9BaPrvewcAAc/wrZCdDlQHGbQ42Vio3QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHPYX4Q41ztWaOicxpJkb5SHll+pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2Y2ZDQ3 Ni01ZWMxLTQyN2EtODJlMC1hZWUwYzgyNDA5OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvZjZkNDc2 LTVlYzEtNDI3YS04MmUwLWFlZTBjODI0MDk5ZS8xL2M5aGZoRGpYTzFabzZKekdr bVJ2bEllV1g2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNF0DANBgkqhkiG9w0BAQsFAAOCAQEAVy6DMPd8dlpS RIvj60F07AgwFAryAwJrmY7SFc6to2+3lMY5p9zF5jshysYgpJUpXWyRaRoljfcT JlsE3zgbp9aiODsU9ByoWyK20hIAglkjHB00/USUy0BTRx3VwmO0M9Uv/FcUy5W9 W7h49Y18t8UpaOmu0Mqz3gtmX3EFX7W1geV+PxJi07U91nL5bq17pHMSE5h0+hq/ YoAPxxsMoKOSfbO08bFBECtvRVf5udendqTebXB9Qh9qke0hfb6GVZGZHWx1tofq 63gKfWbrOLaEA55otznnORg8uBApDdhKm16kD7vdWV3uuyqqbOibDxg+kfZNMbPQ FjZsoHeNLQ== -----END CERTIFICATE-----Generated at Fri Jan 9 07:49:12 2026 by rpki-client