This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer (raw, json) Hash identifier: afShvcbuSMr37wTv2YZyxdLkumWb6rBy6rUtGVbx3KU= Subject key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB4BDCA3D4DC22772CAE4931D582A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15955 IP: 185.101.48.0/22 IP: 212.77.32.0/19 IP: 2a06:1940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4b:dc:a3:d4:dc:22:77:2c:ae:49:31:d5:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:47:1c:2c:9a:d3:14:9e:ab:7f:33:88:12: ed:a1:22:66:46:a9:fa:d4:d0:52:05:32:8a:e9:74: 6e:51:04:31:1f:e8:58:26:e0:11:70:bc:a4:82:ea: 96:a2:75:57:fe:93:03:e6:76:e3:dc:2a:7a:b3:b5: be:36:67:e9:5d:95:d2:b3:0d:bc:c6:42:53:90:31: fa:b8:51:d1:ed:30:b3:75:c6:45:a0:02:fa:4b:0f: a5:3b:05:c3:34:28:cd:1b:2d:2c:73:97:fe:31:1d: 1a:c0:bc:8e:6c:9f:fb:2f:dd:75:17:a2:25:e9:fc: ae:a9:96:6b:ae:ab:77:32:d0:f5:4d:3e:4d:69:83: 68:fc:4b:56:d1:c7:88:30:20:b9:e0:52:58:64:6a: 1c:fa:90:5a:49:e3:91:ba:c2:ed:c0:c6:ea:52:92: bd:6e:25:95:a0:1d:d7:a3:b9:73:27:78:5e:32:94: ae:1e:6c:0d:6b:8b:74:51:e4:43:bd:c5:7b:c2:db: 90:1b:9a:75:a9:54:2a:8d:83:aa:7d:58:61:aa:ff: 8c:84:91:61:e0:27:b5:de:ca:fd:af:f3:ca:76:d9: c4:cd:ce:02:06:aa:16:c1:84:d6:bf:f7:fd:7f:89: eb:38:d8:9a:ee:ce:2c:33:73:51:30:14:d5:7f:f1: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.48.0/22 212.77.32.0/19 IPv6: 2a06:1940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15955 Signature Algorithm: sha256WithRSAEncryption 93:5d:da:cd:2f:1c:ee:41:42:73:90:34:1c:e1:15:72:4b:2b: 68:92:56:0e:ab:45:aa:4b:98:da:c2:6f:d3:95:eb:e2:32:51: 16:20:1d:ad:44:1b:8b:f1:a6:b4:27:d1:23:93:21:84:ea:7d: e2:53:d4:a0:c6:45:ae:34:1f:bc:73:2a:fc:9d:be:30:06:8f: 3e:09:4e:03:5f:a8:5f:35:7f:38:db:6f:0e:66:88:50:a9:cc: ef:52:a4:60:2c:d0:4d:25:f1:16:51:76:be:d5:55:93:54:db: 6d:8c:8b:e8:4c:da:4f:29:60:73:ff:f3:12:c4:53:56:41:ab: 40:01:a5:da:7a:1b:b5:a1:cf:e6:7a:e4:b2:9c:71:18:b5:1a: 6b:b7:85:ac:a9:dc:60:95:1c:ac:8c:d7:35:ef:75:8a:39:c6: 93:9c:6b:60:56:57:fb:d1:94:e3:6d:30:c4:80:a9:58:f5:58: 89:8d:e4:96:9c:10:d1:b1:58:31:4d:70:a8:f0:71:06:90:84: 14:e1:94:dd:8c:be:88:d0:a9:05:f5:dc:13:80:50:fe:5c:7c: 46:6c:2e:d0:3d:28:58:c5:03:bc:2a:71:2e:ea:b0:c0:af:dd: 6e:cf:aa:0d:f2:32:3f:aa:5f:66:c7:9d:3b:e5:e9:3b:98:f6: db:8f:93:f1 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9y0vco9TcIncsrkkx1YKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmQ2MmU0MmMwOGUxNjAxYzQ1NzFlMGQ4OGEzNDlhMDUwOWRlYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0xHHCya0xSeq38ziBLtoSJmRqn6 1NBSBTKK6XRuUQQxH+hYJuARcLykguqWonVX/pMD5nbj3Cp6s7W+NmfpXZXSsw28 xkJTkDH6uFHR7TCzdcZFoAL6Sw+lOwXDNCjNGy0sc5f+MR0awLyObJ/7L911F6Il 6fyuqZZrrqt3MtD1TT5NaYNo/EtW0ceIMCC54FJYZGoc+pBaSeORusLtwMbqUpK9 biWVoB3Xo7lzJ3heMpSuHmwNa4t0UeRDvcV7wtuQG5p1qVQqjYOqfVhhqv+MhJFh 4Ce13sr9r/PKdtnEzc4CBqoWwYTWv/f9f4nrONia7s4sM3NRMBTVf/FXlwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFH/WLkLAjhYBxFceDYijSaBQnepeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2I5MzRl ZS1jNGJhLTQzOTEtODBiMC1lNzVhNWVhODlmZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvYjkzNGVl LWM0YmEtNDM5MS04MGIwLWU3NWE1ZWE4OWZkMS8xL2Y5WXVRc0NPRmdIRVZ4NE5p S05Kb0ZDZDZsNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuWUwAwQF1E0gMA0EAgACMAcDBQMqBhlAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj5TMA0GCSqGSIb3DQEBCwUAA4IBAQCTXdrN LxzuQUJzkDQc4RVySytoklYOq0WqS5jawm/TleviMlEWIB2tRBuL8aa0J9EjkyGE 6n3iU9SgxkWuNB+8cyr8nb4wBo8+CU4DX6hfNX84228OZohQqczvUqRgLNBNJfEW UXa+1VWTVNttjIvoTNpPKWBz//MSxFNWQatAAaXaehu1oc/meuSynHEYtRprt4Ws qdxglRysjNc173WKOcaTnGtgVlf70ZTjbTDEgKlY9ViJjeSWnBDRsVgxTXCo8HEG kIQU4ZTdjL6I0KkF9dwTgFD+XHxGbC7QPShYxQO8KnEu6rDAr91uz6oN8jI/ql9m x5075ek7mPbbj5Px -----END CERTIFICATE-----Generated at Sun Jan 11 23:23:20 2026 by rpki-client