This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.cer (raw, json) Hash identifier: hsjxwDRgEZhxtmKJm0SggIa3NX30R2bZGc9mYszseTQ= Subject key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C802FC695EE85128416D1C9458D0B8B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47956 IP: 5.102.192.0/18 IP: 31.210.176.0 -- 31.210.187.255 IP: 37.46.32.0/20 IP: 91.205.152.0/22 IP: 94.230.80.0/20 IP: 141.226.0.0 -- 141.226.54.255 IP: 141.226.56.0 -- 141.226.70.255 IP: 141.226.72.0/21 IP: 141.226.144.0 -- 141.226.183.255 IP: 188.120.128.0/19 IP: 2a02:ed0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2f:c6:95:ee:85:12:84:16:d1:c9:45:8d:0b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:c8:d2:56:2d:19:22:b0:d3:7d:aa:0b:d8: fd:f3:3f:70:44:39:9c:e1:b1:e3:09:4a:60:7e:9a: 74:53:c7:4f:f3:af:8e:a8:be:ca:52:44:ad:35:c7: 7c:e8:74:2f:bc:08:2e:ba:48:04:aa:ef:c4:c5:ad: 63:90:69:54:19:8c:d8:ee:45:3c:1b:6c:01:b1:ee: e5:81:bc:b3:3a:3f:44:e1:0b:6d:5e:eb:5e:38:33: 97:1c:b9:de:35:06:51:2c:01:b6:54:b6:d9:21:7a: 38:35:c6:99:9a:32:7b:bd:26:f1:f5:6a:ec:af:04: fb:c7:19:5a:7a:6b:cb:b5:6b:ad:f9:39:50:3d:e1: 5f:a8:b9:87:d2:3c:28:5d:50:28:33:43:dd:b0:3c: c7:3f:d3:d7:6d:07:76:9b:a3:18:bf:1d:3e:3f:60: c2:97:9c:10:25:6e:50:dc:46:32:db:fe:b0:43:b4: a0:be:20:c0:40:ed:00:22:6a:73:04:98:79:56:b0: 5b:56:02:61:4f:af:5f:90:27:fe:19:f5:e4:b9:50: 9d:a2:03:56:1e:8f:08:3e:3a:b2:43:8b:6a:ad:66: e5:25:cc:b2:ea:93:22:c5:f3:ab:86:0b:97:b4:ea: 19:66:63:86:93:db:a3:28:bb:3a:80:4a:8b:60:17: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.192.0/18 31.210.176.0-31.210.187.255 37.46.32.0/20 91.205.152.0/22 94.230.80.0/20 141.226.0.0-141.226.54.255 141.226.56.0-141.226.70.255 141.226.72.0/21 141.226.144.0-141.226.183.255 188.120.128.0/19 IPv6: 2a02:ed0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47956 Signature Algorithm: sha256WithRSAEncryption a7:8e:e4:05:48:90:02:c9:64:e9:1a:0b:73:6a:86:f9:57:7a: 9a:93:33:8a:15:2a:32:6a:0b:c6:18:64:4b:ec:cb:7f:74:66: e4:98:10:a3:48:cb:52:9c:85:82:8a:c6:23:1b:08:ad:55:16: 4b:e5:cc:e6:69:7e:d7:6a:6c:0c:89:70:c1:fb:f7:1d:00:4b: 62:7c:cc:94:8d:b9:02:b4:6b:55:bc:35:0c:72:ee:7d:4d:a9: d7:c9:14:d0:d6:b1:a9:5a:0e:af:f0:8a:71:35:2e:7a:54:51: 7b:76:6f:b4:c7:5e:d2:e5:01:ae:51:82:6b:ba:61:b3:ad:0d: 3c:aa:ce:32:de:5c:b8:07:6f:33:b8:6c:82:b0:01:76:f5:53: d5:cb:b0:b3:71:d2:fc:87:44:2b:8d:1a:c6:19:1a:10:2d:00: c5:c1:e8:95:5e:78:4b:61:26:36:c3:c1:84:9a:3b:a8:72:6e: 30:7b:17:76:25:67:86:e8:bb:cc:65:fd:b2:1c:cc:1e:b1:c6: f5:41:61:73:91:c9:99:2f:64:52:28:ba:c0:ff:cb:c6:e2:0f: 4a:35:3d:3a:45:93:63:77:fa:48:85:2f:f9:4d:1e:d7:81:f2: 8f:b6:b8:3b:c1:74:46:2a:56:fb:b3:8f:7b:8b:e2:90:50:89: d2:3e:06:88 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt8gC/Gle6FEoQW0clFjQuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGMwYWE3YjNlM2NiZmY4ODI2MmFkZDkyYjMzOWUzNTA1MWNlMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n/I0lYtGSKw032qC9j98z9wRDmc 4bHjCUpgfpp0U8dP86+OqL7KUkStNcd86HQvvAguukgEqu/Exa1jkGlUGYzY7kU8 G2wBse7lgbyzOj9E4QttXuteODOXHLneNQZRLAG2VLbZIXo4NcaZmjJ7vSbx9Wrs rwT7xxlaemvLtWut+TlQPeFfqLmH0jwoXVAoM0PdsDzHP9PXbQd2m6MYvx0+P2DC l5wQJW5Q3EYy2/6wQ7SgviDAQO0AImpzBJh5VrBbVgJhT69fkCf+GfXkuVCdogNW Ho8IPjqyQ4tqrWblJcyy6pMixfOrhguXtOoZZmOGk9ujKLs6gEqLYBeAiQIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFPTAqns+PL/4gmKt2SsznjUFHOGgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzllMmIx YS0xNjNiLTQ4NTQtOTYxYS1lYTc1ZGRmNDdiNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvOWUyYjFh LTE2M2ItNDg1NC05NjFhLWVhNzVkZGY0N2I0YS8xLzlNQ3FlejQ4dl9pQ1lxM1pL ek9lTlFVYzRhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF BQcBBwEB/wR0MHIwYQQCAAEwWwMEBgVmwDAMAwQEH9KwAwQCH9K4AwQEJS4gAwQC W82YAwQEXuZQMAsDAwGN4gMEAI3iNjAMAwQDjeI4AwQAjeJGAwQDjeJIMAwDBASN 4pADBAON4rADBAW8eIAwDQQCAAIwBwMFAyoCDtAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALtUMA0GCSqGSIb3DQEBCwUAA4IBAQCnjuQFSJACyWTpGgtzaob5V3qa kzOKFSoyagvGGGRL7Mt/dGbkmBCjSMtSnIWCisYjGwitVRZL5czmaX7XamwMiXDB +/cdAEtifMyUjbkCtGtVvDUMcu59TanXyRTQ1rGpWg6v8IpxNS56VFF7dm+0x17S 5QGuUYJrumGzrQ08qs4y3ly4B28zuGyCsAF29VPVy7CzcdL8h0QrjRrGGRoQLQDF weiVXnhLYSY2w8GEmjuocm4wexd2JWeG6LvMZf2yHMwescb1QWFzkcmZL2RSKLrA /8vG4g9KNT06RZNjd/pIhS/5TR7XgfKPtrg7wXRGKlb7s497i+KQUInSPgaI -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:29 2026 by rpki-client