This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer (raw, json) Hash identifier: fSxm+oQfO4xkftyjZfas13S9KAuqx7YrO+8qjBkWT68= Subject key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F843895F5B46AE1078BF5241A9401E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213166 IP: 37.44.214.0/24 IP: 86.105.182.0/24 IP: 91.194.110.0/24 IP: 92.243.84.0/24 IP: 176.223.109.0/24 IP: 185.197.160.0/22 IP: 193.42.108.0/22 IP: 2a0f:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:38:95:f5:b4:6a:e1:07:8b:f5:24:1a:94:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:3f:eb:62:27:98:cb:95:64:50:51:60:ac: 64:7e:dc:31:97:6b:2a:ab:d5:b3:5e:5c:8e:94:e5: 53:fd:f5:b6:7e:95:78:9e:1e:ea:1d:0e:cd:79:bd: 7a:10:ba:55:e8:d0:f6:7b:50:9b:62:bc:0d:62:97: 46:11:ee:8e:44:f8:dc:7c:bd:74:cd:b1:bf:d8:cc: a1:36:79:90:4f:89:bb:95:7e:9d:c7:f6:dc:4b:b7: 7b:08:43:b6:18:8d:5f:b3:e2:e7:e6:27:27:b4:77: 1e:e6:ae:59:3b:bc:61:a6:1c:9a:0c:d6:2b:a2:a5: 43:b8:a2:5a:77:87:69:ed:fd:c6:c2:d1:55:cd:bd: 74:3f:42:c8:75:d0:9b:3f:80:3c:c0:78:c9:e2:55: 9b:e1:17:79:82:65:7a:18:5e:b2:ab:80:4b:6c:d9: 2c:a1:ff:f4:af:54:c9:21:3a:f5:41:76:0c:78:68: 82:1f:00:90:44:9e:10:4f:41:fc:e0:17:a2:8f:fb: 9d:00:b7:24:df:0d:47:04:e4:d0:a0:29:68:0f:c6: 31:f3:ad:8f:41:79:16:37:9d:00:f0:9d:04:b5:48: a3:2e:a3:65:6a:a8:2c:85:a8:59:28:a4:84:9b:24: 55:2c:de:1c:25:43:dd:a8:d7:90:cc:2d:41:31:e2: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.214.0/24 86.105.182.0/24 91.194.110.0/24 92.243.84.0/24 176.223.109.0/24 185.197.160.0/22 193.42.108.0/22 IPv6: 2a0f:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213166 Signature Algorithm: sha256WithRSAEncryption 83:9c:c8:5c:7a:54:0b:05:9e:18:e9:1e:8c:6a:d2:6d:43:90: 52:93:f3:41:97:99:62:2f:a6:02:57:f3:fd:44:4e:a9:bc:c1: 0b:d2:54:77:92:f4:4b:0b:29:b7:72:fb:f8:c8:74:8d:a8:1a: 54:4f:80:6a:ec:17:0c:67:da:29:4c:67:bf:41:bc:c5:1c:ca: f4:2b:76:c3:eb:b6:3c:cf:4b:c0:18:f0:87:68:aa:42:8a:cc: 6f:6e:1e:39:09:f8:5a:31:3b:88:53:07:fc:1d:28:1a:38:d0: 42:b1:e5:a6:a3:15:a2:60:6c:c9:74:fc:33:8c:0b:65:85:a0: de:05:52:80:9b:4e:28:84:b2:77:f2:d6:f6:46:d5:d2:0c:52: 60:52:10:3e:fb:c4:88:86:6b:fb:b9:8d:7d:78:4b:be:45:2f: 8e:d2:d4:be:64:25:56:ad:87:f0:35:f0:da:29:c2:2b:ca:d1: cd:51:2f:8b:39:14:c2:25:b7:5a:96:89:9a:9e:0c:78:6d:d8: a6:52:a5:26:d4:68:aa:15:72:02:19:5a:6a:83:71:6a:b6:c0: ba:b9:c7:47:af:e0:1a:68:72:06:18:48:96:f3:cc:ec:0d:44: b1:fc:29:06:4b:15:c7:56:b9:1b:fb:ae:e1:8b:55:18:4f:f0: be:8e:80:66 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt/hDiV9bRq4QeL9SQalAHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWNmNzNiM2U0NWY3NzJmYWUxYjkxNTY5MGIzMTczNDRjM2Y0NDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TE/62InmMuVZFBRYKxkftwxl2sq q9WzXlyOlOVT/fW2fpV4nh7qHQ7Neb16ELpV6ND2e1CbYrwNYpdGEe6ORPjcfL10 zbG/2MyhNnmQT4m7lX6dx/bcS7d7CEO2GI1fs+Ln5icntHce5q5ZO7xhphyaDNYr oqVDuKJad4dp7f3GwtFVzb10P0LIddCbP4A8wHjJ4lWb4Rd5gmV6GF6yq4BLbNks of/0r1TJITr1QXYMeGiCHwCQRJ4QT0H84Beij/udALck3w1HBOTQoCloD8Yx862P QXkWN50A8J0EtUijLqNlaqgshahZKKSEmyRVLN4cJUPdqNeQzC1BMeI4qQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFPXPc7PkX3cvrhuRVpCzFzRMP0QrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzNiZTg2 NS01Yzc5LTQ3YzAtYWE0ZC0xYzY1NGUwMmQ3NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvM2JlODY1 LTVjNzktNDdjMC1hYTRkLTFjNjU0ZTAyZDc1ZC8xLzljOXpzLVJmZHktdUc1Rldr TE1YTkV3X1JDcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQAJSzWAwQAVmm2AwQAW8JuAwQAXPNUAwQAsN9t AwQCucWgAwQCwSpsMA0EAgACMAcDBQMqD+qAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNArjANBgkqhkiG9w0BAQsFAAOCAQEAg5zIXHpUCwWeGOkejGrSbUOQUpPz QZeZYi+mAlfz/UROqbzBC9JUd5L0Swspt3L7+Mh0jagaVE+AauwXDGfaKUxnv0G8 xRzK9Ct2w+u2PM9LwBjwh2iqQorMb24eOQn4WjE7iFMH/B0oGjjQQrHlpqMVomBs yXT8M4wLZYWg3gVSgJtOKISyd/LW9kbV0gxSYFIQPvvEiIZr+7mNfXhLvkUvjtLU vmQlVq2H8DXw2inCK8rRzVEvizkUwiW3WpaJmp4MeG3YplKlJtRoqhVyAhlaaoNx arbAurnHR6/gGmhyBhhIlvPM7A1EsfwpBksVx1a5G/uu4YtVGE/wvo6AZg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:00 2026 by rpki-client