This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer File: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer (raw, json) Hash identifier: PLkttJUoRw62OxgUJ5Oj3Olmz/64rrFJiAjGXpFuWxM= Subject key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA36D0867FC3C5F8898A8E32C044B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47394 AS: 196838 IP: 46.255.144.0/21 IP: 93.159.192.0/21 IP: 95.107.128.0/17 IP: 109.69.160.0/21 IP: 141.8.200.0/21 IP: 185.118.148.0/22 IP: 185.122.228.0/22 IP: 194.156.252.0/22 IP: 2a03:8480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a3:6d:08:67:fc:3c:5f:88:98:a8:e3:2c:04:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f416539e74934d23a0572f6625dbfdb54e820873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:73:3d:4b:15:9e:7c:2c:67:aa:a7:56:b5: 2a:1a:45:6c:3b:95:0a:23:66:51:57:8a:db:ed:8c: 07:24:25:c5:f4:d9:c2:97:2a:1a:b2:ec:c0:c8:69: ff:12:cc:9f:0f:3c:e0:c7:56:f5:2d:51:84:9d:00: ac:e5:40:c2:cd:9a:c0:20:98:81:c9:9d:0d:51:9b: c7:02:16:ea:7c:fe:8d:ec:53:0e:52:08:c9:a9:e3: a9:15:e3:9a:ad:aa:17:04:d7:6a:7c:18:02:c3:27: 93:2d:8d:21:bd:09:6b:49:e8:9c:7f:48:c1:5a:a8: c5:7d:b4:b3:59:22:0b:81:09:3d:2f:6d:ef:44:95: 72:5e:58:d2:29:2c:45:6a:0b:9f:16:b5:bd:6d:42: ed:5a:a6:a0:a8:94:ee:42:6e:ad:c5:49:4d:6d:d0: be:86:28:d9:cb:59:d5:b8:ff:4d:20:f6:ae:35:ef: ad:94:06:97:fb:68:cf:74:ee:7a:f3:83:71:08:10: 3b:90:23:d7:a8:cd:b1:2b:ec:36:a8:dc:05:c3:b6: 0a:a8:06:12:4e:cc:51:cf:6d:f1:02:68:76:94:54: f4:ce:7b:57:93:bf:38:21:ea:45:73:dc:be:fe:38: 8f:d2:1c:17:00:3f:0e:65:13:c4:a0:b5:1e:8a:d2: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.144.0/21 93.159.192.0/21 95.107.128.0/17 109.69.160.0/21 141.8.200.0/21 185.118.148.0/22 185.122.228.0/22 194.156.252.0/22 IPv6: 2a03:8480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47394 196838 Signature Algorithm: sha256WithRSAEncryption 9b:e4:25:b9:7b:b1:3c:66:31:64:62:30:7c:5d:2e:c0:4c:66: fb:e1:7b:74:35:2e:14:8f:da:26:00:bc:ea:6b:06:77:28:5a: 82:a4:7f:29:e0:cd:4a:31:59:8f:55:9c:8a:c0:29:4c:89:ec: 52:19:0d:c2:c1:77:1f:93:97:b1:33:5c:6f:25:da:30:39:d3: f3:83:a2:28:b2:18:6d:8a:0e:97:ea:25:f0:c6:81:ee:7b:78: aa:f2:c6:3a:d8:00:1b:6c:95:54:7e:45:9a:e6:be:b6:25:65: 9a:03:c3:f6:3a:36:b9:5d:e3:14:1a:15:c0:54:74:ae:c4:3b: 6c:95:fb:4a:4c:ca:e4:64:6f:ff:a5:d8:6f:4e:28:3f:fc:65: f7:43:39:c1:07:af:88:7b:4f:51:0e:54:7e:50:4f:0d:5e:48: 39:e1:92:2b:f3:73:e8:5b:e0:65:e7:f3:17:25:06:36:a7:b3: 71:e9:1f:81:b6:4b:fa:eb:4c:32:2e:9b:0c:ef:3b:69:5a:e8: 0e:83:80:0c:27:e0:cc:55:27:a7:f0:58:26:b4:ad:c8:14:14: 9a:46:c7:b0:d3:66:ec:01:45:f5:64:62:be:10:2d:1b:9b:33: d5:83:63:2a:65:83:13:f6:d0:23:ef:84:4f:ec:2d:c4:f9:8f: c3:83:56:29 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt266NtCGf8PF+ImKjjLARLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE2NTM5ZTc0OTM0ZDIzYTA1NzJmNjYyNWRiZmRiNTRlODIwODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXJzPUsVnnwsZ6qnVrUqGkVsO5UK I2ZRV4rb7YwHJCXF9NnClyoasuzAyGn/EsyfDzzgx1b1LVGEnQCs5UDCzZrAIJiB yZ0NUZvHAhbqfP6N7FMOUgjJqeOpFeOaraoXBNdqfBgCwyeTLY0hvQlrSeicf0jB WqjFfbSzWSILgQk9L23vRJVyXljSKSxFagufFrW9bULtWqagqJTuQm6txUlNbdC+ hijZy1nVuP9NIPauNe+tlAaX+2jPdO5684NxCBA7kCPXqM2xK+w2qNwFw7YKqAYS TsxRz23xAmh2lFT0zntXk784IepFc9y+/jiP0hwXAD8OZRPEoLUeitKRZwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFPQWU550k00joFcvZiXb/bVOgghzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzUzZTQ5 Ni0wMDk3LTQ2MmEtYTk4OS1kNjdhNjFkNTQxNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvNTNlNDk2 LTAwOTctNDYyYS1hOTg5LWQ2N2E2MWQ1NDE2ZC8xLzlCWlRublNUVFNPZ1Z5OW1K ZHY5dFU2Q0NITS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDLv+QAwQDXZ/AAwQHX2uAAwQDbUWgAwQDjQjI AwQCuXaUAwQCuXrkAwQCwpz8MA0EAgACMAcDBQMqA4SAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwC5IgIDAwDmMA0GCSqGSIb3DQEBCwUAA4IBAQCb5CW5e7E8ZjFk YjB8XS7ATGb74Xt0NS4Uj9omALzqawZ3KFqCpH8p4M1KMVmPVZyKwClMiexSGQ3C wXcfk5exM1xvJdowOdPzg6Ioshhtig6X6iXwxoHue3iq8sY62AAbbJVUfkWa5r62 JWWaA8P2Oja5XeMUGhXAVHSuxDtslftKTMrkZG//pdhvTig//GX3QznBB6+Ie09R DlR+UE8NXkg54ZIr83PoW+Bl5/MXJQY2p7Nx6R+Btkv660wyLpsM7ztpWugOg4AM J+DMVSen8FgmtK3IFBSaRsew02bsAUX1ZGK+EC0bmzPVg2MqZYMT9tAj74RP7C3E +Y/Dg1Yp -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:44 2026 by rpki-client