This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer (raw, json) Hash identifier: YG0Ge8gawCNDkWz6xG9W4BAgIz/vz9fN1+MFW6kNVQQ= Subject key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD3DC9479BE31CA8138ED5E7F77F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208734 IP: 45.84.116.0/22 IP: 2a0d:ccc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d3:dc:94:79:be:31:ca:81:38:ed:5e:7f:77:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:12:ee:3b:c0:e2:17:1b:e9:73:e2:90:91: 2e:4e:fb:35:4a:f0:9c:4f:44:e6:18:45:dd:0f:62: c6:8c:e6:65:e9:37:b2:88:16:93:70:4b:81:c5:8b: b5:a7:7d:6b:ac:e9:04:02:d4:9d:56:1f:57:82:4c: 8c:28:74:6f:46:28:f6:e3:19:59:70:0f:14:8c:48: 13:a3:30:c6:64:2d:1c:76:7e:5e:80:a3:6a:0d:27: f9:49:c9:b8:5b:59:d4:54:66:0b:4b:11:56:93:88: 8c:39:a6:29:69:a9:63:ea:6d:73:b6:cc:82:b0:29: a0:6a:a0:9f:a2:c5:53:9d:c8:cc:ac:60:39:20:ee: 0f:de:02:08:a2:91:46:8d:c1:ef:00:0a:3f:95:37: e8:8b:4f:e6:e2:28:43:2e:01:f7:c2:7d:24:80:33: e7:0f:e5:8c:88:82:bc:43:8f:25:e3:2d:32:d3:15: c4:24:c6:15:e4:7b:0c:b4:51:e4:6e:c3:8f:08:37: 23:b1:e2:7e:2b:e7:5e:2c:34:50:ea:1d:ec:4e:e3: bd:db:08:1f:a4:3d:95:56:e2:00:6c:59:98:42:81: 1c:c8:82:4a:ae:66:8a:10:c2:e9:f0:b2:a5:b0:52: 58:a4:63:dd:bf:61:d5:e5:40:bc:9d:50:18:5c:b1: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.116.0/22 IPv6: 2a0d:ccc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208734 Signature Algorithm: sha256WithRSAEncryption 1b:b9:70:d6:5b:25:b1:8e:64:a6:89:5e:cc:e9:4f:71:be:7a: 3d:5f:ec:6d:c9:ca:66:c3:42:4f:0d:df:99:98:f3:97:b8:87: f7:49:04:0d:86:39:57:8f:46:3f:1e:e0:23:60:c9:6b:5c:82: 14:02:7c:a2:48:9b:14:bb:b2:39:3a:8f:03:56:67:a5:34:ae: 03:dc:c7:4f:9b:f0:4a:3c:b7:6d:6d:d2:8a:94:9c:82:cf:f7: 28:05:38:64:4c:3f:31:7f:f6:92:15:19:f6:66:9b:9e:67:c8: ab:d3:40:82:e2:8a:31:48:f1:39:06:80:8d:76:18:94:28:95: 28:0e:b0:cc:ac:67:7c:cb:78:82:02:27:38:e1:fb:a9:a5:40: 0d:77:28:0c:9a:49:58:8f:f5:ad:7d:f5:fe:83:1e:c0:fb:e9: ef:03:ea:70:3e:12:14:bc:ec:e0:67:ae:33:90:81:ed:77:0e: 28:e1:cb:eb:96:fa:42:97:32:4f:e9:db:8d:cf:1c:33:3d:87: fe:52:82:22:74:10:c2:c4:2f:76:9d:a7:24:b9:47:e9:09:a2: ce:d1:7b:20:5e:af:01:a0:03:86:98:2a:b5:53:32:7c:db:3e: 78:7e:08:d7:9f:1a:d5:36:24:89:9d:fb:18:dd:df:4f:5f:e6: 96:a8:14:89 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fdPclHm+McqBOO1ef3f2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTJmNjUyNDA4NWZhMTBlOGMwOThhYzJiNTgyOGExZjg4YzY5MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzAS7jvA4hcb6XPikJEuTvs1SvCc T0TmGEXdD2LGjOZl6TeyiBaTcEuBxYu1p31rrOkEAtSdVh9XgkyMKHRvRij24xlZ cA8UjEgTozDGZC0cdn5egKNqDSf5Scm4W1nUVGYLSxFWk4iMOaYpaalj6m1ztsyC sCmgaqCfosVTncjMrGA5IO4P3gIIopFGjcHvAAo/lTfoi0/m4ihDLgH3wn0kgDPn D+WMiIK8Q48l4y0y0xXEJMYV5HsMtFHkbsOPCDcjseJ+K+deLDRQ6h3sTuO92wgf pD2VVuIAbFmYQoEcyIJKrmaKEMLp8LKlsFJYpGPdv2HV5UC8nVAYXLEfdQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKUvZSQIX6EOjAmKwrWCih+IxpE8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzBlNDUw Ni0xNzRmLTQ0MGEtYTMxYy1iZmZmNTE0MjA1M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMGU0NTA2 LTE3NGYtNDQwYS1hMzFjLWJmZmY1MTQyMDUzZi8xL3BTOWxKQWhmb1E2TUNZckN0 WUtLSDRqR2tUdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVR0MA0EAgACMAcDBQMqDczAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvXjANBgkqhkiG9w0BAQsFAAOCAQEAG7lw1lslsY5k polezOlPcb56PV/sbcnKZsNCTw3fmZjzl7iH90kEDYY5V49GPx7gI2DJa1yCFAJ8 okibFLuyOTqPA1ZnpTSuA9zHT5vwSjy3bW3SipScgs/3KAU4ZEw/MX/2khUZ9mab nmfIq9NAguKKMUjxOQaAjXYYlCiVKA6wzKxnfMt4ggInOOH7qaVADXcoDJpJWI/1 rX31/oMewPvp7wPqcD4SFLzs4GeuM5CB7XcOKOHL65b6QpcyT+nbjc8cMz2H/lKC InQQwsQvdp2nJLlH6QmiztF7IF6vAaADhpgqtVMyfNs+eH4I158a1TYkiZ37GN3f T1/mlqgUiQ== -----END CERTIFICATE-----Generated at Fri Jan 9 07:46:06 2026 by rpki-client