This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer File: 9RNpzL-GsehOGutG5tM20591Kuc.cer (raw, json) Hash identifier: PcdqWEi8IbE6aKHhhv8QdNH7t4JflPbMXj7apbQ9igU= Subject key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157C4E73ECE384121A67A6B5ED867A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5524 AS: 20857 AS: 21155 AS: 28878 AS: 29590 AS: 31586 AS: 35470 AS: 39700 AS: 49685 IP: 5.61.248.0/21 IP: 31.3.8.0/21 IP: 31.3.96.0/21 IP: 31.14.96.0/22 IP: 31.223.160.0/20 IP: 37.17.208.0/20 IP: 37.34.48.0/20 IP: 37.97.128.0/17 IP: 37.230.96.0/21 IP: 46.226.56.0/21 IP: 77.72.144.0/21 IP: 78.108.128.0/20 IP: 79.170.88.0/21 IP: 80.69.64.0/19 IP: 80.84.224.0/19 IP: 80.246.192.0/20 IP: 80.255.240.0/20 IP: 81.4.64.0 -- 81.4.99.255 IP: 81.4.112.0/21 IP: 81.21.136.0/21 IP: 81.30.32.0/20 IP: 83.96.128.0/17 IP: 84.247.8.0/21 IP: 85.10.128.0/18 IP: 85.158.248.0/21 IP: 85.222.224.0/21 IP: 86.105.244.0/22 IP: 87.253.128.0/19 IP: 89.31.96.0/21 IP: 89.41.168.0/22 IP: 91.142.240.0/20 IP: 91.189.208.0/22 IP: 91.205.32.0/22 IP: 91.216.162.0/24 IP: 93.119.0.0/20 IP: 93.191.128.0/21 IP: 94.142.208.0/21 IP: 95.170.64.0/19 IP: 141.138.136.0/21 IP: 141.138.192.0/20 IP: 141.255.176.0/21 IP: 149.210.128.0/17 IP: 171.33.128.0/21 IP: 176.74.224.0/19 IP: 178.18.80.0/20 IP: 185.3.208.0/22 IP: 185.10.48.0/22 IP: 185.15.248.0/22 IP: 185.21.188.0/22 IP: 185.65.52.0/22 IP: 185.69.232.0/22 IP: 185.84.72.0/22 IP: 185.89.152.0/22 IP: 185.95.68.0/22 IP: 185.96.4.0/22 IP: 185.105.204.0/22 IP: 185.105.216.0/22 IP: 185.108.112.0/22 IP: 185.110.172.0/22 IP: 185.110.200.0/22 IP: 188.240.52.0/22 IP: 188.241.148.0/22 IP: 193.93.172.0/22 IP: 193.138.204.0/22 IP: 193.242.119.0/24 IP: 194.60.207.0/24 IP: 195.8.195.0/24 IP: 195.135.195.0/24 IP: 213.187.240.0/21 IP: 217.21.240.0/20 IP: 217.149.128.0/20 IP: 2001:828::/32 IP: 2001:4cb8::/29 IP: 2a00:c080::/32 IP: 2a01:7c8::/29 IP: 2a01:7860::/32 IP: 2a02:348::/32 IP: 2a03:4f00::/32 IP: 2a03:5700::/32 IP: 2a05:2500::/29 IP: 2a05:a280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7c:4e:73:ec:e3:84:12:1a:67:a6:b5:ed:86:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:83:29:8d:e6:56:f9:91:21:8a:ee:ef:1d: d3:78:d5:81:e5:83:c5:9f:a4:4c:e5:be:95:42:89: a9:de:91:d9:57:e5:78:3f:5a:7e:4d:72:86:21:21: fc:2c:2b:55:8e:60:e9:cc:b0:bb:3f:2b:0c:4d:32: b6:26:20:f5:62:5f:8b:42:e8:5f:91:e0:c5:1d:f1: 3d:4d:75:35:4a:58:de:58:be:18:1c:c1:18:8c:44: d7:ff:c7:17:29:0f:2f:60:c0:25:05:47:5b:31:32: 0a:3b:89:b1:2c:8a:10:07:cc:8c:db:10:65:6c:92: f1:c7:ea:b9:32:8d:50:24:94:44:34:3b:04:cf:ed: af:38:bd:9d:11:d8:6f:80:8c:72:07:59:6e:c8:1a: fe:4f:52:3a:b2:d1:79:10:6d:9a:c6:90:51:56:05: 83:a0:6b:52:3c:7e:30:d2:8c:b3:23:5a:2d:2d:8a: c5:71:56:9c:c6:4e:50:7f:ea:57:c6:5c:80:54:85: 28:e5:3d:80:8a:02:1a:13:20:25:23:97:3c:d4:f8: d6:15:69:b6:c5:17:25:6a:bd:d4:20:7b:a4:fb:d2: 92:49:01:82:f5:01:86:7c:14:9a:ea:1e:d1:0d:34: 75:db:e3:6a:fd:99:8d:02:de:a0:66:a5:82:df:20: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.248.0/21 31.3.8.0/21 31.3.96.0/21 31.14.96.0/22 31.223.160.0/20 37.17.208.0/20 37.34.48.0/20 37.97.128.0/17 37.230.96.0/21 46.226.56.0/21 77.72.144.0/21 78.108.128.0/20 79.170.88.0/21 80.69.64.0/19 80.84.224.0/19 80.246.192.0/20 80.255.240.0/20 81.4.64.0-81.4.99.255 81.4.112.0/21 81.21.136.0/21 81.30.32.0/20 83.96.128.0/17 84.247.8.0/21 85.10.128.0/18 85.158.248.0/21 85.222.224.0/21 86.105.244.0/22 87.253.128.0/19 89.31.96.0/21 89.41.168.0/22 91.142.240.0/20 91.189.208.0/22 91.205.32.0/22 91.216.162.0/24 93.119.0.0/20 93.191.128.0/21 94.142.208.0/21 95.170.64.0/19 141.138.136.0/21 141.138.192.0/20 141.255.176.0/21 149.210.128.0/17 171.33.128.0/21 176.74.224.0/19 178.18.80.0/20 185.3.208.0/22 185.10.48.0/22 185.15.248.0/22 185.21.188.0/22 185.65.52.0/22 185.69.232.0/22 185.84.72.0/22 185.89.152.0/22 185.95.68.0/22 185.96.4.0/22 185.105.204.0/22 185.105.216.0/22 185.108.112.0/22 185.110.172.0/22 185.110.200.0/22 188.240.52.0/22 188.241.148.0/22 193.93.172.0/22 193.138.204.0/22 193.242.119.0/24 194.60.207.0/24 195.8.195.0/24 195.135.195.0/24 213.187.240.0/21 217.21.240.0/20 217.149.128.0/20 IPv6: 2001:828::/32 2001:4cb8::/29 2a00:c080::/32 2a01:7c8::/29 2a01:7860::/32 2a02:348::/32 2a03:4f00::/32 2a03:5700::/32 2a05:2500::/29 2a05:a280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5524 20857 21155 28878 29590 31586 35470 39700 49685 Signature Algorithm: sha256WithRSAEncryption 4e:69:1c:5f:46:71:15:2e:78:3e:e1:15:f4:28:cb:57:8e:46: e0:2d:5b:ef:65:7b:35:4c:4a:c4:34:98:79:1c:39:d9:c1:ed: bd:4f:94:0e:58:7b:81:9d:82:c5:c3:2e:b7:32:23:77:d4:d9: f1:ac:e7:5c:ae:05:2b:ff:e5:c0:f6:a2:de:fe:8c:9d:e2:60: 90:90:16:cf:ec:3f:18:cf:d0:29:2e:7f:80:74:63:b0:2d:18: fc:46:94:cc:05:33:c4:98:6f:65:7c:47:b5:3a:44:66:7a:0a: f3:03:24:3a:7d:06:a2:bb:13:1f:50:b8:26:75:0c:e1:21:bf: d5:84:b6:47:8e:23:dd:22:98:32:be:0d:f4:39:96:06:7d:58: 30:28:44:80:5a:26:42:ef:d9:6d:02:20:c8:2f:8f:4b:0d:c8: e1:4d:d8:8b:01:36:3a:53:d1:b6:1c:f6:7f:84:03:24:b0:93: dd:34:b9:33:4d:25:de:5a:5e:06:8c:6b:12:96:66:00:d6:93: d0:d3:df:c2:bd:37:39:9b:82:75:f6:2e:96:88:50:e3:13:d1: bd:66:bc:07:eb:ac:92:09:f2:26:39:f2:48:b6:b6:75:df:96: 5d:21:d7:7e:b3:1a:d8:8d:8d:06:6c:3e:56:5b:ff:f9:df:79: 5c:b9:3f:5e -----BEGIN CERTIFICATE----- MIIHujCCBqKgAwIBAgISAZt/FXxOc+zjhBIaZ6a17YZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTEzNjljY2JmODZiMWU4NGUxYWViNDZlNmQzMzZkMzlmNzUyYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA112DKY3mVvmRIYru7x3TeNWB5YPF n6RM5b6VQomp3pHZV+V4P1p+TXKGISH8LCtVjmDpzLC7PysMTTK2JiD1Yl+LQuhf keDFHfE9TXU1SljeWL4YHMEYjETX/8cXKQ8vYMAlBUdbMTIKO4mxLIoQB8yM2xBl bJLxx+q5Mo1QJJRENDsEz+2vOL2dEdhvgIxyB1luyBr+T1I6stF5EG2axpBRVgWD oGtSPH4w0oyzI1otLYrFcVacxk5Qf+pXxlyAVIUo5T2AigIaEyAlI5c81PjWFWm2 xRclar3UIHuk+9KSSQGC9QGGfBSa6h7RDTR12+Nq/ZmNAt6gZqWC3yCGoQIDAQAB o4IExjCCBMIwHQYDVR0OBBYEFPUTacy/hrHoThrrRubTNtOfdSrnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzJkNWJk Zi01MjY1LTQ5YjgtOGFmZS0yYjkyMGJkZTM5OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMmQ1YmRm LTUyNjUtNDliOC04YWZlLTJiOTIwYmRlMzk5MC8xLzlSTnB6TC1Hc2VoT0d1dEc1 dE0yMDU5MUt1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICIQYIKwYB BQUHAQcBAf8EggIQMIICDDCCAboEAgABMIIBsgMEAwU9+AMEAx8DCAMEAx8DYAME Ah8OYAMEBB/foAMEBCUR0AMEBCUiMAMEByVhgAMEAyXmYAMEAy7iOAMEA01IkAME BE5sgAMEA0+qWAMEBVBFQAMEBVBU4AMEBFD2wAMEBFD/8DAMAwQGUQRAAwQCUQRg AwQDUQRwAwQDURWIAwQEUR4gAwQHU2CAAwQDVPcIAwQGVQqAAwQDVZ74AwQDVd7g AwQCVmn0AwQFV/2AAwQDWR9gAwQCWSmoAwQEW47wAwQCW73QAwQCW80gAwQAW9ii AwQEXXcAAwQDXb+AAwQDXo7QAwQFX6pAAwQDjYqIAwQEjYrAAwQDjf+wAwQHldKA AwQDqyGAAwQFsErgAwQEshJQAwQCuQPQAwQCuQowAwQCuQ/4AwQCuRW8AwQCuUE0 AwQCuUXoAwQCuVRIAwQCuVmYAwQCuV9EAwQCuWAEAwQCuWnMAwQCuWnYAwQCuWxw AwQCuW6sAwQCuW7IAwQCvPA0AwQCvPGUAwQCwV2sAwQCwYrMAwQAwfJ3AwQAwjzP AwQAwwjDAwQAw4fDAwQD1bvwAwQE2RXwAwQE2ZWAMEwEAgACMEYDBQAgAQgoAwUD IAFMuAMFACoAwIADBQMqAQfIAwUAKgF4YAMFACoCA0gDBQAqA08AAwUAKgNXAAMF AyoFJQADBQMqBaKAMDwGCCsGAQUFBwEIAQH/BC0wK6ApMCcCAhWUAgJReQICUqMC AnDOAgJzlgICe2ICAwCKjgIDAJsUAgMAwhUwDQYJKoZIhvcNAQELBQADggEBAE5p HF9GcRUueD7hFfQoy1eORuAtW+9lezVMSsQ0mHkcOdnB7b1PlA5Ye4GdgsXDLrcy I3fU2fGs51yuBSv/5cD2ot7+jJ3iYJCQFs/sPxjP0Ckuf4B0Y7AtGPxGlMwFM8SY b2V8R7U6RGZ6CvMDJDp9BqK7Ex9QuCZ1DOEhv9WEtkeOI90imDK+DfQ5lgZ9WDAo RIBaJkLv2W0CIMgvj0sNyOFN2IsBNjpT0bYc9n+EAySwk900uTNNJd5aXgaMaxKW ZgDWk9DT38K9NzmbgnX2LpaIUOMT0b1mvAfrrJIJ8iY58ki2tnXfll0h136zGtiN jQZsPlZb//nfeVy5P14= -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:01 2026 by rpki-client