This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer (raw, json) Hash identifier: 9aqjGZbIZ0KH7WCqtXMhDANVExPExk1XpdZ8GN33Sw4= Subject key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15587CD3E529559647E536352F9C28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42926 IP: 31.210.64.0/18 IP: 46.45.128.0/18 IP: 77.75.32.0/21 IP: 79.98.128.0/21 IP: 94.101.80.0/20 IP: 176.53.0.0/17 IP: 178.211.32.0/19 IP: 185.25.100.0/22 IP: 185.157.40.0/22 IP: 185.184.208.0/22 IP: 213.128.64.0/19 IP: 2a00:56a0::/32 IP: 2a01:790::/32 IP: 2a0b:5f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:58:7c:d3:e5:29:55:96:47:e5:36:35:2f:9c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:12:a2:85:b7:4f:09:6c:f4:a3:b8:c0:cd: e0:f5:e0:3c:5d:4e:de:05:5b:11:f5:74:79:d4:c3: 1d:1a:31:e1:80:85:4e:1f:a5:8d:f1:6d:82:07:a5: 5e:0c:da:4c:c7:36:1e:c2:e0:cf:20:a0:3a:73:03: 28:13:91:2d:f7:49:59:2c:ac:16:88:66:3e:10:da: 3d:d0:9c:dd:b8:77:23:f4:c3:96:6e:a1:0f:a2:8a: ce:e5:0b:53:e0:c7:8b:4f:ef:8e:99:07:7d:87:1d: c5:cd:8f:7f:fc:a3:b6:c2:65:53:68:11:ac:5a:5e: 5e:7d:18:a9:28:ee:71:e6:1d:fa:00:f6:75:a4:dc: 62:57:16:56:aa:20:aa:77:6c:2e:77:2e:59:45:9c: 61:08:97:19:09:19:0f:91:a9:6c:c6:21:c4:cd:e2: fc:9a:07:92:f6:53:6f:de:74:5f:75:d1:e8:bc:3b: 56:b5:10:a6:bb:7d:b4:41:33:80:7a:d0:75:61:9b: fb:a5:c5:a5:82:d9:bb:ad:03:cb:09:ef:ed:ca:cf: 1e:81:d6:58:ad:c3:b0:66:1e:f9:a2:80:d8:00:87: 2e:cf:fe:9b:9d:bf:d3:11:c5:0a:fa:69:b3:1e:86: e2:c2:e4:c7:87:25:0b:18:99:ee:54:6e:20:4d:a7: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.64.0/18 46.45.128.0/18 77.75.32.0/21 79.98.128.0/21 94.101.80.0/20 176.53.0.0/17 178.211.32.0/19 185.25.100.0/22 185.157.40.0/22 185.184.208.0/22 213.128.64.0/19 IPv6: 2a00:56a0::/32 2a01:790::/32 2a0b:5f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42926 Signature Algorithm: sha256WithRSAEncryption a1:bf:90:af:b9:58:82:6e:41:3e:c3:9b:87:de:51:8c:f1:70: fa:e9:c3:18:a8:2f:02:31:3e:fa:68:09:5a:eb:1e:e5:fc:76: b8:1a:f5:88:89:1d:60:55:bc:a8:58:3c:98:c2:43:d2:f1:de: 9e:db:f2:3c:c7:a2:b5:f2:15:b4:fc:73:7c:c3:2e:1d:5f:23: 0d:00:9e:76:fe:ca:01:76:b6:ba:40:f1:19:eb:f8:4b:fd:5c: ca:e6:d2:f2:36:f3:8d:75:2c:93:fa:d1:42:69:b2:0b:26:44: 84:2c:d9:e4:e5:bd:05:fe:c0:78:47:5c:63:19:d8:aa:f6:78: 5b:75:30:86:fb:80:05:ae:cb:81:d4:eb:c0:e6:44:b8:42:e5: 6d:b1:7d:34:af:6c:e9:2f:30:ac:90:49:d2:c7:86:9c:82:47: ff:29:50:9d:d7:1b:a6:a1:60:3d:be:ad:25:34:25:ca:42:30: 1d:ba:60:b1:31:cf:30:85:ca:47:6f:c6:54:43:cc:9c:85:4a: 31:a8:6e:73:95:22:13:c8:a5:14:94:d9:64:2d:00:25:48:6c: e2:af:94:74:9d:b2:a5:77:fa:4c:b9:a7:79:fa:42:85:00:91: e0:cf:05:d2:da:2a:c4:87:38:ca:6a:69:94:12:7a:01:0e:8b: 31:71:b4:b9 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt/FVh80+UpVZZH5TY1L5woMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTcxYmJmMWQzZDNjMGVmZTM2ZGUxMTAzOTJiZTBjN2FjNDQ3YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx70SooW3Twls9KO4wM3g9eA8XU7e BVsR9XR51MMdGjHhgIVOH6WN8W2CB6VeDNpMxzYewuDPIKA6cwMoE5Et90lZLKwW iGY+ENo90JzduHcj9MOWbqEPoorO5QtT4MeLT++OmQd9hx3FzY9//KO2wmVTaBGs Wl5efRipKO5x5h36APZ1pNxiVxZWqiCqd2wudy5ZRZxhCJcZCRkPkalsxiHEzeL8 mgeS9lNv3nRfddHovDtWtRCmu320QTOAetB1YZv7pcWlgtm7rQPLCe/tys8egdZY rcOwZh75ooDYAIcuz/6bnb/TEcUK+mmzHobiwuTHhyULGJnuVG4gTacwdQIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFPVxu/HT08Dv423hEDkr4MesRHqEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzY4MzAz Zi1lOGIwLTRmZTAtOTZiNi1hOTY1N2ViMWY4ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvNjgzMDNm LWU4YjAtNGZlMC05NmI2LWE5NjU3ZWIxZjhkNy8xLzlYRzc4ZFBUd09famJlRVFP U3ZneDZ4RWVvUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBIBAIAATBCAwQGH9JAAwQGLi2AAwQDTUsgAwQDT2KAAwQEXmVQ AwQHsDUAAwQFstMgAwQCuRlkAwQCuZ0oAwQCubjQAwQF1YBAMBsEAgACMBUDBQAq AFagAwUAKgEHkAMFAyoLX0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKeuMA0G CSqGSIb3DQEBCwUAA4IBAQChv5CvuViCbkE+w5uH3lGM8XD66cMYqC8CMT76aAla 6x7l/Ha4GvWIiR1gVbyoWDyYwkPS8d6e2/I8x6K18hW0/HN8wy4dXyMNAJ52/soB dra6QPEZ6/hL/VzK5tLyNvONdSyT+tFCabILJkSELNnk5b0F/sB4R1xjGdiq9nhb dTCG+4AFrsuB1OvA5kS4QuVtsX00r2zpLzCskEnSx4acgkf/KVCd1xumoWA9vq0l NCXKQjAdumCxMc8whcpHb8ZUQ8ychUoxqG5zlSITyKUUlNlkLQAlSGzir5R0nbKl d/pMuad5+kKFAJHgzwXS2irEhzjKammUEnoBDosxcbS5 -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:54 2026 by rpki-client