This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer File: mo9LAp4p7t8n1FzU05AQgya-JvA.cer (raw, json) Hash identifier: yhZBnYIqdmqjQJorrxD4sKZvad7qq6w/eQWrm1FFG3c= Subject key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C8127FB167126315184615EE4423A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49636 IP: 91.213.80.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:81:27:fb:16:71:26:31:51:84:61:5e:e4:42:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:85:26:e7:41:66:d1:24:22:e3:d0:ee:d9: e5:02:5c:86:c9:6d:44:de:e8:17:8e:a5:c6:b1:f5: aa:58:a3:d7:eb:ed:ac:b5:f6:d6:78:ef:c9:c3:44: 73:77:bc:79:b8:ab:d6:79:1d:a0:ee:74:58:f1:b3: 5b:f8:9f:f2:2f:d3:21:e0:1a:49:8c:9f:08:f1:e7: 8a:eb:a5:c7:89:2b:c1:4e:7a:f3:8f:23:69:f4:f5: 3e:93:2f:28:90:38:f2:38:30:92:35:7e:fd:93:b9: c1:7e:88:46:e8:bf:03:e7:cc:01:e9:71:81:01:75: 88:27:a5:ca:58:aa:e8:2d:11:6d:c4:8a:76:99:81: 8e:5a:0f:ce:d8:13:c8:36:b4:43:f1:8a:5c:07:94: ac:72:2a:35:e2:de:0c:22:90:94:91:ce:05:3b:cf: 54:a0:aa:9b:1b:51:a7:29:31:ef:28:f6:4e:c2:ce: d5:59:c1:62:77:05:70:c0:7f:a0:7c:a5:c6:34:a8: e5:78:42:59:d4:9d:01:44:39:ae:73:02:27:7c:15: 7c:c5:a8:9f:cc:1c:2c:05:d5:be:a7:0b:eb:82:a8: bd:b5:4b:1c:02:bc:95:28:62:87:97:fb:7a:98:fc: 8f:8d:1b:79:c5:8b:0f:24:30:90:cf:03:ff:fb:08: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.80.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49636 Signature Algorithm: sha256WithRSAEncryption 8b:9f:39:cf:16:54:d5:31:cc:60:99:d3:cd:60:b0:5a:ec:0d: 4c:00:2e:42:62:71:61:5e:cc:a9:83:15:11:eb:71:47:8b:b5: 4c:5c:17:40:74:c0:b4:49:23:10:da:ba:52:7e:52:7f:80:a2: 17:df:1f:87:04:3b:9d:d0:24:71:01:de:db:78:b4:96:5d:41: 9d:f8:82:c8:de:ac:6d:57:bb:ed:1d:06:29:86:3b:20:a2:7f: 29:43:d6:3a:83:38:49:d4:a7:15:b4:b4:a2:d4:91:78:44:d4: 49:2c:1f:cb:dd:7e:58:bb:8e:50:7b:2f:03:05:9e:2b:12:75: 24:e9:7b:5d:6d:fe:aa:14:c2:e7:6b:ea:7c:9f:65:bc:2f:af: dd:5f:f8:f3:ac:d2:5f:53:30:a8:ba:53:0a:22:b6:f6:a8:42: 92:d1:59:e8:74:52:26:a3:39:ec:56:22:07:9d:8c:31:7a:37: 88:58:70:b6:be:85:e5:70:85:45:57:5b:56:ac:45:fb:6e:1c: 51:6b:d3:91:4a:16:5d:fb:57:0b:80:82:78:b6:f5:8e:07:b6: d2:54:43:df:ce:6f:ae:55:a1:a0:23:50:ee:c3:bb:e6:4e:52: a1:ee:3c:24:06:f7:fa:1c:70:c3:0c:eb:01:92:14:94:70:8e: 1f:9e:c2:a9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XIEn+xZxJjFRhGFe5EI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YThmNGIwMjllMjllZWRmMjdkNDVjZDRkMzkwMTA4MzI2YmUyNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1OFJudBZtEkIuPQ7tnlAlyGyW1E 3ugXjqXGsfWqWKPX6+2stfbWeO/Jw0Rzd7x5uKvWeR2g7nRY8bNb+J/yL9Mh4BpJ jJ8I8eeK66XHiSvBTnrzjyNp9PU+ky8okDjyODCSNX79k7nBfohG6L8D58wB6XGB AXWIJ6XKWKroLRFtxIp2mYGOWg/O2BPINrRD8YpcB5Sscio14t4MIpCUkc4FO89U oKqbG1GnKTHvKPZOws7VWcFidwVwwH+gfKXGNKjleEJZ1J0BRDmucwInfBV8xaif zBwsBdW+pwvrgqi9tUscAryVKGKHl/t6mPyPjRt5xYsPJDCQzwP/+wjrEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJqPSwKeKe7fJ9Rc1NOQEIMmvibwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzE5NDU4 OS02YzZlLTQ3Y2UtOTczMy0xMzk1MjY0M2YxMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMTk0NTg5 LTZjNmUtNDdjZS05NzMzLTEzOTUyNjQzZjExNC8xL21vOUxBcDRwN3Q4bjFGelUw NUFRZ3lhLUp2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDB5DANBgkqhkiG9w0BAQsFAAOCAQEAi585zxZU1THMYJnTzWCwWuwNTAAuQmJx YV7MqYMVEetxR4u1TFwXQHTAtEkjENq6Un5Sf4CiF98fhwQ7ndAkcQHe23i0ll1B nfiCyN6sbVe77R0GKYY7IKJ/KUPWOoM4SdSnFbS0otSReETUSSwfy91+WLuOUHsv AwWeKxJ1JOl7XW3+qhTC52vqfJ9lvC+v3V/486zSX1MwqLpTCiK29qhCktFZ6HRS JqM57FYiB52MMXo3iFhwtr6F5XCFRVdbVqxF+24cUWvTkUoWXftXC4CCeLb1jge2 0lRD385vrlWhoCNQ7sO75k5Soe48JAb3+hxwwwzrAZIUlHCOH57CqQ== -----END CERTIFICATE-----Generated at Tue Jan 13 04:18:51 2026 by rpki-client