This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer File: rw9am9KtHpaGXwDQhSK5qtPpGk0.cer (raw, json) Hash identifier: BFRZbw73NBVrR5lER6PCPGRJyr5mIUsFfJDvIuFTtO8= Subject key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B74A4390B3B2D4AFE7A58A92F3A59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39528 IP: 195.60.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:74:a4:39:0b:3b:2d:4a:fe:7a:58:a9:2f:3a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:3d:54:6b:cb:0f:bf:08:1f:f4:46:4a:85: b6:9a:a4:35:93:3f:25:64:91:6a:9a:11:fd:de:8c: ef:df:dd:b5:86:f7:5e:96:c0:29:aa:50:b6:e0:5f: 43:82:2d:d8:84:7e:6b:97:a1:8b:84:cc:82:d6:8e: 8d:bf:1f:57:73:4f:47:a8:6b:61:aa:6c:ee:da:a0: d4:df:fa:dd:e2:19:db:99:ae:9e:5a:c6:13:e2:52: 9b:18:c4:f1:a8:65:ff:ed:60:73:6c:10:79:cd:01: d8:77:1d:3f:01:2a:7d:f4:a0:35:a6:30:ad:7f:a0: 54:05:db:75:72:c9:a5:03:36:2e:4c:38:cb:1c:62: 75:b4:b9:84:bd:d3:f4:bc:cf:67:6a:aa:34:de:18: b4:c2:dd:d3:23:51:c2:6a:be:58:86:ad:4c:d3:17: 55:a6:fc:c6:bf:0d:37:cc:34:21:91:64:a2:0e:65: f0:33:34:f9:a1:48:da:7a:2a:11:42:57:c4:1b:ea: c9:95:52:fc:2d:3b:fc:03:f5:d9:cb:0a:bb:ce:44: 52:f3:cc:df:9d:ba:43:bd:ee:55:3a:55:23:02:85: 7d:68:d5:09:3d:2a:0c:bb:c3:b4:97:e7:d3:bc:74: 24:f5:17:1a:90:6a:a1:ff:41:fa:28:2f:25:20:9d: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.224.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39528 Signature Algorithm: sha256WithRSAEncryption 1f:5f:a6:db:95:87:ce:04:ad:4e:6c:76:ff:3c:f5:e6:13:fa: 69:f3:20:27:fb:05:b9:30:4f:99:d5:43:9c:32:6d:87:7d:a3: c1:12:a9:1a:c2:f7:21:c1:ab:f4:a4:e4:cb:2f:0f:79:8c:ab: 68:75:b3:59:b4:8f:bb:9c:a7:63:8a:a2:82:50:87:52:05:25: 88:c9:ad:e0:d2:0d:c1:7e:d5:e0:0c:5f:4a:56:53:66:a8:ef: be:0b:92:d9:19:76:7a:df:09:b1:99:63:1f:1a:1c:49:35:cd: 10:3c:3b:62:5e:5e:ce:44:be:1f:3c:eb:67:10:89:74:75:9c: 7f:cc:11:21:ce:29:cc:ef:01:77:33:7c:78:57:f4:bc:8c:6f: b3:52:84:86:94:5a:02:34:dd:92:1c:93:76:ed:dd:e9:a5:26: 93:c2:c8:ef:a1:7c:56:be:59:89:ae:2f:18:85:d9:1a:a3:e4: 17:e2:25:aa:5d:8f:80:b4:42:c6:ee:d1:50:97:b5:bd:02:82: 90:3c:c7:1b:07:d3:5d:3a:6b:3c:4b:c8:f4:a6:56:e7:59:19: eb:a7:30:b4:55:33:2d:5e:c9:44:56:10:42:34:db:f6:46:74: 73:1c:02:23:0a:e2:81:88:3d:20:ee:aa:0c:cc:f7:47:2a:c4: 96:91:6e:ee -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9W3SkOQs7LUr+elipLzpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjBmNWE5YmQyYWQxZTk2ODY1ZjAwZDA4NTIyYjlhYWQzZTkxYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbs9VGvLD78IH/RGSoW2mqQ1kz8l ZJFqmhH93ozv3921hvdelsApqlC24F9Dgi3YhH5rl6GLhMyC1o6Nvx9Xc09HqGth qmzu2qDU3/rd4hnbma6eWsYT4lKbGMTxqGX/7WBzbBB5zQHYdx0/ASp99KA1pjCt f6BUBdt1csmlAzYuTDjLHGJ1tLmEvdP0vM9naqo03hi0wt3TI1HCar5Yhq1M0xdV pvzGvw03zDQhkWSiDmXwMzT5oUjaeioRQlfEG+rJlVL8LTv8A/XZywq7zkRS88zf nbpDve5VOlUjAoV9aNUJPSoMu8O0l+fTvHQk9RcakGqh/0H6KC8lIJ1htQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK8PWpvSrR6Whl8A0IUiuarT6RpNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzZhZDli OC05ZjBlLTRhZDAtYTIyMC0zYWMzYjY3MzcwNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNmFkOWI4 LTlmMGUtNGFkMC1hMjIwLTNhYzNiNjczNzA0Mi8xL3J3OWFtOUt0SHBhR1h3RFFo U0s1cXRQcEdrMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwzzgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCaaDANBgkqhkiG9w0BAQsFAAOCAQEAH1+m25WHzgStTmx2/zz15hP6afMgJ/sF uTBPmdVDnDJth32jwRKpGsL3IcGr9KTkyy8PeYyraHWzWbSPu5ynY4qiglCHUgUl iMmt4NINwX7V4AxfSlZTZqjvvguS2Rl2et8JsZljHxocSTXNEDw7Yl5ezkS+Hzzr ZxCJdHWcf8wRIc4pzO8BdzN8eFf0vIxvs1KEhpRaAjTdkhyTdu3d6aUmk8LI76F8 Vr5Zia4vGIXZGqPkF+Ilql2PgLRCxu7RUJe1vQKCkDzHGwfTXTprPEvI9KZW51kZ 66cwtFUzLV7JRFYQQjTb9kZ0cxwCIwrigYg9IO6qDMz3RyrElpFu7g== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:09 2026 by rpki-client