This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer File: 9cNx86NKvxlX0Yld-AY_TWIH7AI.cer (raw, json) Hash identifier: zc0EpI1YYl59BG2rRdKjhdQRWiLGY2hw68Zz+RsC3Yo= Subject key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC95D6356C9C705434CFDF571986F35 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202468 AS: 205585 IP: 37.32.0.0/19 IP: 37.152.176.0/20 IP: 94.101.176.0/20 IP: 185.97.116.0/22 IP: 185.143.232.0/22 IP: 185.206.92.0/22 IP: 185.220.224.0/22 IP: 185.226.116.0/22 IP: 185.228.236.0/22 IP: 185.231.180.0/22 IP: 185.239.104.0/22 IP: 188.121.96.0/19 IP: 193.176.240.0/22 IP: 2a07:3900::/29 IP: 2a0c:a7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:5d:63:56:c9:c7:05:43:4c:fd:f5:71:98:6f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:6a:57:c0:03:e8:69:6c:51:82:09:70:b6: b5:74:22:c9:d0:04:fc:da:50:61:27:35:69:f6:fe: e1:71:88:5e:ae:b8:11:d7:75:b8:51:3f:8c:f8:df: 19:fc:42:d9:62:20:61:c0:ba:97:98:7d:31:06:37: 40:a7:4a:33:44:f8:c8:b6:d1:35:b4:52:e7:ab:af: dc:ff:4e:db:e6:84:65:0f:f1:ba:d5:c8:42:65:b1: 75:12:8a:0c:fd:d2:d2:ac:26:78:6e:23:7e:8a:c5: b5:7a:cc:7d:c5:6c:1d:7c:c9:43:31:39:40:af:00: 02:f5:6e:57:50:b4:17:14:1d:66:a1:40:99:ab:f4: fb:3d:7f:0d:d7:35:31:bd:d5:ae:86:af:ce:43:01: e1:8b:37:76:aa:42:77:45:b8:d3:f2:9d:c7:f7:a8: d7:2b:ef:c7:bd:85:4c:b3:15:fd:c1:66:55:da:89: 2c:c4:e3:f6:b7:d2:5d:7d:ff:10:29:82:e1:f2:ca: c4:f6:9d:ea:c7:f1:a9:36:ea:2e:7f:74:fc:88:17: 6d:8d:10:2a:48:03:ae:d5:d4:1c:a3:b2:19:bc:3b: 74:42:b5:48:da:76:e3:ab:c8:a7:b0:87:9f:5b:05: 77:25:4a:50:4d:2a:9d:4a:93:d7:eb:bf:e0:5b:3a: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.0.0/19 37.152.176.0/20 94.101.176.0/20 185.97.116.0/22 185.143.232.0/22 185.206.92.0/22 185.220.224.0/22 185.226.116.0/22 185.228.236.0/22 185.231.180.0/22 185.239.104.0/22 188.121.96.0/19 193.176.240.0/22 IPv6: 2a07:3900::/29 2a0c:a7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202468 205585 Signature Algorithm: sha256WithRSAEncryption 3b:6b:5e:25:06:23:52:6f:0e:63:01:c9:6b:44:2a:cb:ef:44: 2f:bd:14:74:78:0e:66:79:9f:aa:03:13:49:41:6c:f1:19:4d: bc:61:30:29:c8:d0:92:3e:04:d8:bd:1f:0b:05:2f:97:f5:70: 44:13:74:c7:2d:8f:62:43:45:17:b7:ef:2f:0e:76:6f:d9:1f: f4:10:54:a2:76:e8:df:12:84:63:74:20:ed:07:bf:08:fe:43: e8:81:ea:08:ea:5c:08:1f:da:ab:c3:66:cd:c3:be:1d:cc:48: 87:8f:49:3c:30:23:89:69:b8:bb:22:6a:31:d0:e1:4d:99:ce: 5f:cf:95:fe:ef:14:bf:f7:1c:cb:52:d3:f6:88:16:b8:0a:bb: 2d:d2:93:ca:fe:42:27:0f:aa:d8:a4:b3:94:59:80:8c:f1:7c: 2f:c0:07:7b:d7:3d:6a:8c:33:d7:5b:9c:2f:f0:41:73:16:61: 71:88:16:a5:7a:f9:2e:43:28:20:7a:df:16:ad:f9:e7:a5:e9: 63:61:08:cc:f2:3e:aa:ad:e6:db:bf:67:7b:01:26:c4:e8:74: e0:65:b0:0f:20:d4:d1:57:5e:c5:c3:39:a2:09:c6:7e:bd:cd: ea:c8:a2:74:eb:d8:9b:48:4e:f7:82:73:74:50:58:45:d9:61: 0c:81:1e:69 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZt9yV1jVsnHBUNM/fVxmG81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWMzNzFmM2EzNGFiZjE5NTdkMTg5NWRmODA2M2Y0ZDYyMDdlYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2NqV8AD6GlsUYIJcLa1dCLJ0AT8 2lBhJzVp9v7hcYherrgR13W4UT+M+N8Z/ELZYiBhwLqXmH0xBjdAp0ozRPjIttE1 tFLnq6/c/07b5oRlD/G61chCZbF1EooM/dLSrCZ4biN+isW1esx9xWwdfMlDMTlA rwAC9W5XULQXFB1moUCZq/T7PX8N1zUxvdWuhq/OQwHhizd2qkJ3RbjT8p3H96jX K+/HvYVMsxX9wWZV2oksxOP2t9Jdff8QKYLh8srE9p3qx/GpNuouf3T8iBdtjRAq SAOu1dQco7IZvDt0QrVI2nbjq8insIefWwV3JUpQTSqdSpPX67/gWzpVRQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFPXDcfOjSr8ZV9GJXfgGP01iB+wCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzViMGNk OS1lMjc5LTQ2YWEtODFkYS0xYmIxN2E4YjI2ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNWIwY2Q5 LWUyNzktNDZhYS04MWRhLTFiYjE3YThiMjZmZS8xLzljTng4Nk5LdnhsWDBZbGQt QVlfVFdJSDdBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH0GCCsGAQUF BwEHAQH/BG4wbDBUBAIAATBOAwQFJSAAAwQEJZiwAwQEXmWwAwQCuWF0AwQCuY/o AwQCuc5cAwQCudzgAwQCueJ0AwQCueTsAwQCuee0AwQCue9oAwQFvHlgAwQCwbDw MBQEAgACMA4DBQMqBzkAAwUDKgynwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMD FuQCAwMjETANBgkqhkiG9w0BAQsFAAOCAQEAO2teJQYjUm8OYwHJa0Qqy+9EL70U dHgOZnmfqgMTSUFs8RlNvGEwKcjQkj4E2L0fCwUvl/VwRBN0xy2PYkNFF7fvLw52 b9kf9BBUonbo3xKEY3Qg7Qe/CP5D6IHqCOpcCB/aq8NmzcO+HcxIh49JPDAjiWm4 uyJqMdDhTZnOX8+V/u8Uv/ccy1LT9ogWuAq7LdKTyv5CJw+q2KSzlFmAjPF8L8AH e9c9aowz11ucL/BBcxZhcYgWpXr5LkMoIHrfFq3556XpY2EIzPI+qq3m279newEm xOh04GWwDyDU0VdexcM5ognGfr3N6siidOvYm0hO94JzdFBYRdlhDIEeaQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:52 2026 by rpki-client