This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer (raw, json) Hash identifier: HroUWpuJaOgNnfyJMf4NV26S+L6WLlVazUX7+DjnKUs= Subject key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78344C7931DF5D0D69763F3071F69959 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207451 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4c:79:31:df:5d:0d:69:76:3f:30:71:f6:99:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:bc:79:42:1e:63:dc:9d:52:c0:b4:37:4e: 3f:b7:4a:10:4f:48:7d:46:ee:9e:26:0a:82:86:db: 82:41:ab:56:36:84:ea:ae:f2:63:24:11:e8:dd:3b: 25:e8:65:d8:dd:b8:65:af:e0:a4:bb:bd:fe:3b:e8: 8b:2d:d5:ef:e3:5a:2c:0b:1c:62:63:04:e5:28:2b: 11:87:5b:30:0b:eb:ca:01:89:71:45:36:f4:0c:7c: 78:5e:6e:92:ef:29:34:13:08:e5:d1:8f:a0:0c:cc: 97:d5:17:cc:e6:64:16:e5:8f:15:9a:db:55:a5:46: ad:91:34:ef:1a:e7:8f:18:9b:50:9c:3b:b9:cb:e5: 1c:33:5e:7f:8a:4e:79:70:14:16:f8:5b:d6:60:f0: 5c:e2:cf:fc:48:61:ce:55:4c:95:d8:43:74:11:90: 61:66:b0:b9:d2:ee:74:e1:dd:c1:c2:35:77:a9:75: 68:89:62:c4:7c:a9:bc:7c:36:30:6e:42:7d:b4:35: af:77:a1:25:d5:d3:fe:8a:5d:f4:d5:bb:1e:70:79: 77:c7:fc:5c:d9:58:fc:7b:77:c1:b1:34:79:ed:bc: c2:6e:3e:d5:c9:39:a9:d1:ad:dd:99:87:de:a8:64: 22:eb:56:5a:1b:4f:8c:91:a8:af:c6:5b:ae:bb:ff: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207451 Signature Algorithm: sha256WithRSAEncryption 7e:13:22:22:c9:74:2e:e5:7c:9c:11:df:e6:40:dd:9a:46:e4: 76:58:d3:dd:92:e1:92:71:49:a6:14:da:5b:4b:46:57:f0:e8: 6f:d8:d3:d5:ba:ac:20:2c:ba:0a:64:04:69:22:04:e1:a0:57: 3e:e6:aa:1a:da:bb:93:79:d8:6b:15:e8:e1:65:b4:c3:de:d3: 22:53:5e:c3:7f:89:74:4a:2d:53:1d:e5:ec:1d:46:22:98:b6: 4e:1e:75:38:af:ea:18:01:b4:fd:fa:db:3c:fd:3f:39:9a:7d: ec:b6:73:52:3b:b2:67:ad:da:62:aa:ab:62:d7:1e:81:6d:97: f5:ce:ae:a0:41:9f:2c:75:c5:f5:2e:3f:8c:5e:b8:46:d3:b2: 6c:5c:97:49:33:29:10:1e:97:1c:34:12:ac:06:94:4e:7b:c3: d0:47:a5:ad:2e:54:c3:8e:0c:7f:71:da:05:7d:95:72:8f:1f: 58:08:9a:09:c9:01:51:7c:9e:85:e1:5e:08:4e:9a:84:a6:b4: 3f:6d:81:53:23:f4:57:8e:5c:ae:4e:7c:d7:e6:34:eb:9f:68: e6:f5:68:7e:bd:10:18:e5:cf:0f:1c:d2:44:64:0b:2e:62:96: e6:03:36:c0:0a:70:2d:e7:37:d8:ef:54:13:bd:ac:50:85:4c: 6b:d9:e8:d6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NEx5Md9dDWl2PzBx9plZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ4OTMxZjYzNTc5NDI4YmYwOGNjYjE5OWEzYTk4ZGNiYTZiODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzC8eUIeY9ydUsC0N04/t0oQT0h9 Ru6eJgqChtuCQatWNoTqrvJjJBHo3Tsl6GXY3bhlr+Cku73+O+iLLdXv41osCxxi YwTlKCsRh1swC+vKAYlxRTb0DHx4Xm6S7yk0Ewjl0Y+gDMyX1RfM5mQW5Y8VmttV pUatkTTvGuePGJtQnDu5y+UcM15/ik55cBQW+FvWYPBc4s/8SGHOVUyV2EN0EZBh ZrC50u504d3BwjV3qXVoiWLEfKm8fDYwbkJ9tDWvd6El1dP+il301bsecHl3x/xc 2Vj8e3fBsTR57bzCbj7VyTmp0a3dmYfeqGQi61ZaG0+Mkaivxluuu/+8QQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIvYkx9jV5QovwjMsZmjqY3LprgkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzdhYzdi Yi0yMWRjLTRhMTEtOTc5MS00ZWUxNmQ2YzgwYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvN2FjN2Ji LTIxZGMtNGExMS05NzkxLTRlZTE2ZDZjODBhNi8xL2k5aVRIMk5YbENpX0NNeXht YU9wamN1bXVDUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMqWzANBgkqhkiG9w0BAQsFAAOCAQEAfhMiIsl0LuV8 nBHf5kDdmkbkdljT3ZLhknFJphTaW0tGV/Dob9jT1bqsICy6CmQEaSIE4aBXPuaq Gtq7k3nYaxXo4WW0w97TIlNew3+JdEotUx3l7B1GIpi2Th51OK/qGAG0/frbPP0/ OZp97LZzUjuyZ63aYqqrYtcegW2X9c6uoEGfLHXF9S4/jF64RtOybFyXSTMpEB6X HDQSrAaUTnvD0EelrS5Uw44Mf3HaBX2Vco8fWAiaCckBUXyeheFeCE6ahKa0P22B UyP0V45crk581+Y0659o5vVofr0QGOXPDxzSRGQLLmKW5gM2wApwLec32O9UE72s UIVMa9no1g== -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:39 2026 by rpki-client