This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer (raw, json) Hash identifier: 4h7qJVPHSwJI7XiVPYbFrsso6tGVSlhOZ5+ichVlRMY= Subject key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FE52560B185838245DC4B05A65060 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197540 AS: 214996 IP: 2.56.96.0/22 IP: 5.45.96.0/20 IP: 5.181.48.0/22 IP: 5.252.224.0/22 IP: 37.120.160.0/19 IP: 37.221.192.0/21 IP: 45.9.60.0/22 IP: 45.83.104.0/22 IP: 45.90.4.0/22 IP: 45.129.180.0/22 IP: 45.132.244.0/22 IP: 45.136.28.0/22 IP: 45.142.176.0/22 IP: 45.157.176.0/22 IP: 46.38.224.0/19 IP: 46.232.248.0/22 IP: 81.16.16.0/22 IP: 85.209.48.0/22 IP: 85.235.64.0/22 IP: 89.58.0.0/18 IP: 91.132.144.0/22 IP: 91.204.44.0/22 IP: 92.60.36.0/22 IP: 93.177.64.0/22 IP: 152.89.104.0/22 IP: 159.195.0.0/16 IP: 185.16.60.0/22 IP: 185.162.248.0/22 IP: 185.163.116.0/22 IP: 185.170.112.0/22 IP: 185.183.156.0/22 IP: 185.194.140.0/22 IP: 185.207.104.0/22 IP: 185.228.136.0/22 IP: 185.233.104.0/22 IP: 185.243.8.0/22 IP: 185.244.192.0/22 IP: 188.68.32.0/19 IP: 192.145.44.0/22 IP: 193.30.120.0/22 IP: 193.31.24.0/22 IP: 194.13.80.0/22 IP: 194.55.12.0/22 IP: 194.59.204.0/22 IP: 195.128.100.0/22 IP: 213.109.160.0/22 IP: 2a03:4000::/29 IP: 2a0a:4cc0::/32 IP: 2a0a:9d00::/32 IP: 2a0a:b000::/32 IP: 2a0b:1480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e5:25:60:b1:85:83:82:45:dc:4b:05:a6:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:99:1f:a6:44:b4:10:b6:41:02:77:87:42: bf:18:83:49:1f:51:4a:ea:a8:15:cc:8c:ae:63:98: 7f:d3:93:00:44:b0:0d:ca:70:73:bc:84:a1:a0:bc: 1b:11:04:e3:0b:58:c7:cc:84:ae:8d:93:13:c3:1f: 32:59:ce:56:ac:06:2c:cd:ce:b9:e7:33:e2:05:97: 84:1d:24:03:76:46:2d:ea:9a:81:88:1d:d7:d7:03: 3b:be:18:01:6e:f9:58:b6:d3:78:50:37:31:0e:8f: df:5b:59:f7:3d:33:e7:b6:24:c5:82:d9:7a:a6:2b: 4c:29:8a:bb:20:ed:62:08:51:27:3f:2a:19:97:e2: 4d:e8:1a:05:94:b1:a7:6a:58:7a:a0:ad:21:78:37: 18:d3:17:84:c0:1c:00:e4:b4:e6:fc:46:56:24:64: 92:f0:be:1f:1f:da:bd:7f:b1:4d:16:36:57:04:1b: 2d:69:27:b9:72:0e:dc:36:4f:85:64:7e:35:79:b2: c0:06:22:07:27:50:98:19:ce:6d:0f:c9:47:78:6c: 25:35:e2:5d:79:0d:f5:67:9e:39:46:05:8f:d3:e3: a2:fa:df:5e:0a:a4:ab:32:0b:e9:7a:db:1d:b8:05: 41:a9:40:41:7e:44:b6:1a:ce:94:b1:05:c4:bc:36: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.96.0/22 5.45.96.0/20 5.181.48.0/22 5.252.224.0/22 37.120.160.0/19 37.221.192.0/21 45.9.60.0/22 45.83.104.0/22 45.90.4.0/22 45.129.180.0/22 45.132.244.0/22 45.136.28.0/22 45.142.176.0/22 45.157.176.0/22 46.38.224.0/19 46.232.248.0/22 81.16.16.0/22 85.209.48.0/22 85.235.64.0/22 89.58.0.0/18 91.132.144.0/22 91.204.44.0/22 92.60.36.0/22 93.177.64.0/22 152.89.104.0/22 159.195.0.0/16 185.16.60.0/22 185.162.248.0/22 185.163.116.0/22 185.170.112.0/22 185.183.156.0/22 185.194.140.0/22 185.207.104.0/22 185.228.136.0/22 185.233.104.0/22 185.243.8.0/22 185.244.192.0/22 188.68.32.0/19 192.145.44.0/22 193.30.120.0/22 193.31.24.0/22 194.13.80.0/22 194.55.12.0/22 194.59.204.0/22 195.128.100.0/22 213.109.160.0/22 IPv6: 2a03:4000::/29 2a0a:4cc0::/32 2a0a:9d00::/32 2a0a:b000::/32 2a0b:1480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197540 214996 Signature Algorithm: sha256WithRSAEncryption b1:d0:81:05:70:e8:c9:1f:79:7d:82:eb:90:fb:2b:7f:99:00: e5:e1:41:7d:81:91:7d:f0:00:cf:e1:c4:80:3e:dc:6c:b9:f4: 03:97:75:84:ba:57:72:c3:ef:ad:d8:4a:a7:a5:8f:83:5a:0c: 55:2d:1d:f8:d2:48:73:04:ac:d1:24:50:ab:27:9d:5e:be:de: b1:44:50:75:b5:cc:b8:0f:18:c1:a7:64:47:08:e3:36:18:4f: f2:c4:4b:56:2a:1a:7b:1e:30:76:d1:e7:db:65:e8:0f:6c:6d: 15:1d:c0:7b:f0:6d:5b:a7:9c:b8:18:c4:5b:b1:9d:90:f6:41: 60:1c:86:5c:fd:fd:ac:53:a6:01:f5:b6:35:ea:62:42:ba:f4: c4:47:7d:32:90:65:b7:53:3a:1d:47:87:8e:32:a8:45:91:86: 44:af:ef:cf:a8:b9:b7:78:d1:3a:fe:97:51:a2:51:e5:4f:d1: e1:1a:f2:5b:b9:57:6a:a3:8b:53:d1:49:e7:79:b2:e7:96:93: 5b:12:14:ce:49:f7:c0:05:51:90:b1:0c:e5:b5:f7:cb:6d:50: 40:4f:d9:e1:0b:6d:ee:0b:80:2e:1f:e9:7f:1d:12:b6:b1:cd: 3b:ea:48:96:d3:29:70:16:63:2b:2f:1c:7e:93:98:c6:8a:d5: 34:30:d6:f9 -----BEGIN CERTIFICATE----- MIIG2zCCBcOgAwIBAgISAZt8f+UlYLGFg4JF3EsFplBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjJlZWI4NzkwODVjOTQxOTQyOTdkZDllNGNkMjQ5Y2QyNTE2NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBqZH6ZEtBC2QQJ3h0K/GINJH1FK 6qgVzIyuY5h/05MARLANynBzvIShoLwbEQTjC1jHzISujZMTwx8yWc5WrAYszc65 5zPiBZeEHSQDdkYt6pqBiB3X1wM7vhgBbvlYttN4UDcxDo/fW1n3PTPntiTFgtl6 pitMKYq7IO1iCFEnPyoZl+JN6BoFlLGnalh6oK0heDcY0xeEwBwA5LTm/EZWJGSS 8L4fH9q9f7FNFjZXBBstaSe5cg7cNk+FZH41ebLABiIHJ1CYGc5tD8lHeGwlNeJd eQ31Z545RgWP0+Oi+t9eCqSrMgvpetsduAVBqUBBfkS2Gs6UsQXEvDYdvwIDAQAB o4ID5zCCA+MwHQYDVR0OBBYEFPYu64eQhclBlCl92eTNJJzSUWUVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzkxZGE4 Yi0wNTAyLTQ4ZGYtODUzMi01ZmJmOWEyOWI2ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOTFkYThi LTA1MDItNDhkZi04NTMyLTVmYmY5YTI5YjZlMS8xLzlpN3JoNUNGeVVHVUtYM1o1 TTBrbk5KUlpSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBXwYIKwYB BQUHAQcBAf8EggFOMIIBSjCCARsEAgABMIIBEwMEAgI4YAMEBAUtYAMEAgW1MAME AgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1TaAMEAi1aBAMEAi2BtAMEAi2E9AME Ai2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o+AMEAlEQEAMEAlXRMAMEAlXrQAME Blk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2xQAMEAphZaAMDAJ/DAwQCuRA8AwQC uaL4AwQCuaN0AwQCuapwAwQCubecAwQCucKMAwQCuc9oAwQCueSIAwQCueloAwQC ufMIAwQCufTAAwQFvEQgAwQCwJEsAwQCwR54AwQCwR8YAwQCwg1QAwQCwjcMAwQC wjvMAwQCw4BkAwQC1W2gMCkEAgACMCMDBQMqA0AAAwUAKgpMwAMFACoKnQADBQAq CrAAAwUAKgsUgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDA6QCAwNH1DANBgkq hkiG9w0BAQsFAAOCAQEAsdCBBXDoyR95fYLrkPsrf5kA5eFBfYGRffAAz+HEgD7c bLn0A5d1hLpXcsPvrdhKp6WPg1oMVS0d+NJIcwSs0SRQqyedXr7esURQdbXMuA8Y wadkRwjjNhhP8sRLVioaex4wdtHn22XoD2xtFR3Ae/BtW6ecuBjEW7GdkPZBYByG XP39rFOmAfW2NepiQrr0xEd9MpBlt1M6HUeHjjKoRZGGRK/vz6i5t3jROv6XUaJR 5U/R4RryW7lXaqOLU9FJ53my55aTWxIUzkn3wAVRkLEM5bX3y21QQE/Z4Qtt7guA Lh/pfx0StrHNO+pIltMpcBZjKy8cfpOYxorVNDDW+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:50 2026 by rpki-client