This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer File: 9u6hCvrPOpwm6hsexIjpVeTfoGo.cer (raw, json) Hash identifier: M4daUMClEFxs82Y4sbLN7Nw+ruB9WLaqNnn6Xbo6jC8= Subject key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B489313ECE39B77BA01F0D35FC06D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9026 AS: 31263 AS: 39448 AS: 50196 AS: 213414 IP: 31.44.160.0/20 IP: 31.193.144.0/20 IP: 45.67.40.0/22 IP: 45.94.0.0/22 IP: 45.142.184.0/22 IP: 46.102.173.0/24 IP: 62.212.0.0/19 IP: 77.81.166.0/24 IP: 77.240.224.0/20 IP: 77.241.0.0/20 IP: 79.133.100.0/22 IP: 80.68.176.0/20 IP: 80.88.160.0/20 IP: 84.247.16.0/24 IP: 84.247.192.0/18 IP: 85.204.252.0/24 IP: 89.34.203.0/24 IP: 92.62.80.0/20 IP: 93.91.128.0/20 IP: 119.12.32.0/20 IP: 151.2.16.0/22 IP: 151.2.64.0/19 IP: 151.2.112.0/20 IP: 176.62.48.0/20 IP: 178.175.192.0/18 IP: 178.238.48.0/20 IP: 185.5.196.0/22 IP: 185.120.40.0/22 IP: 185.229.172.0/22 IP: 193.135.15.0/24 IP: 193.135.24.0/24 IP: 2a02:20::/29 IP: 2a02:600::/29 IP: 2a07:580::/29 IP: 2a07:4f00::/29 IP: 2a07:55c0::/29 IP: 2a07:5ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:48:93:13:ec:e3:9b:77:ba:01:f0:d3:5f:c0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:7d:42:aa:36:2a:ac:dc:9d:13:25:81:b6: f4:5b:9c:8c:1b:57:7c:dc:64:dd:e2:7f:0a:f5:f2: 11:40:36:0b:aa:94:13:50:4e:b9:b2:48:6e:f4:5c: 65:85:2a:bc:18:b7:ae:cd:64:a7:a3:b2:9a:6e:70: 7f:d5:67:90:25:24:36:df:4b:0f:17:bd:c5:26:6a: 42:74:25:dc:d3:1f:cd:2e:b1:a3:0a:96:e8:ae:88: b7:14:cc:bd:fa:68:52:17:9d:56:c6:28:fb:5a:71: a4:a6:0c:b1:25:da:43:50:ba:9a:c7:5e:13:90:41: de:b3:58:38:97:b9:ab:32:8d:a2:e3:0f:7a:de:ba: c6:5a:0a:42:ac:d1:57:08:01:19:94:0c:e2:ae:2b: a8:5e:a4:c6:fc:c1:d4:25:a5:5c:af:42:18:31:98: 28:ba:97:c2:52:84:12:81:cc:71:8b:6a:f0:48:ef: a5:d9:88:ec:63:00:11:d3:d3:1b:3f:a3:e8:8d:a2: 26:b9:de:b0:ad:c8:3c:39:66:11:91:50:86:11:9a: 0d:a2:d1:0c:7f:7c:04:cc:23:28:75:78:ad:86:aa: 49:9c:af:cd:87:e1:a2:da:10:67:b8:70:ea:fc:f6: 79:52:68:72:61:f2:ff:35:19:2d:c6:42:4f:52:6c: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.160.0/20 31.193.144.0/20 45.67.40.0/22 45.94.0.0/22 45.142.184.0/22 46.102.173.0/24 62.212.0.0/19 77.81.166.0/24 77.240.224.0/20 77.241.0.0/20 79.133.100.0/22 80.68.176.0/20 80.88.160.0/20 84.247.16.0/24 84.247.192.0/18 85.204.252.0/24 89.34.203.0/24 92.62.80.0/20 93.91.128.0/20 119.12.32.0/20 151.2.16.0/22 151.2.64.0/19 151.2.112.0/20 176.62.48.0/20 178.175.192.0/18 178.238.48.0/20 185.5.196.0/22 185.120.40.0/22 185.229.172.0/22 193.135.15.0/24 193.135.24.0/24 IPv6: 2a02:20::/29 2a02:600::/29 2a07:580::/29 2a07:4f00::/29 2a07:55c0::/29 2a07:5ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9026 31263 39448 50196 213414 Signature Algorithm: sha256WithRSAEncryption 2d:66:79:de:62:e8:fe:be:a8:ca:68:ff:41:c2:5e:61:1f:1a: 5a:3e:0f:b1:99:20:3e:ee:33:3f:e6:d5:f7:15:4a:81:5e:ff: d8:09:70:66:7f:29:eb:18:3d:b3:cf:91:71:39:83:83:2f:1c: 48:bf:4b:4c:f2:6a:a8:24:09:df:6a:18:02:30:d1:ef:26:0f: 4d:71:a9:08:ab:72:9e:0e:3b:dd:e8:31:fb:74:58:bc:a8:e4: 7c:38:80:a1:2d:34:d4:7d:14:4a:d7:cc:d9:4f:b8:6a:7d:ff: 2b:25:94:92:94:68:22:38:7a:91:1b:e7:09:34:9d:41:fe:94: 68:dc:4f:66:49:ac:ae:da:5b:93:bf:58:f7:de:0d:f3:91:b2: 5b:1b:25:2a:d2:d3:ba:2b:60:ac:be:a6:50:a3:af:b4:2d:66: e5:22:28:32:d2:ad:ff:10:6a:18:eb:85:fd:85:42:6c:d0:2e: aa:09:98:65:f7:ad:14:d7:e3:f5:e4:53:2a:ab:95:20:c6:3c: a6:82:43:0a:40:6a:af:ed:56:34:e3:3a:b3:62:23:36:f0:87: 91:67:ac:3a:da:a7:28:60:2a:cc:49:0d:a5:d5:d3:01:44:ce: 6a:2e:88:84:b5:b5:5d:a5:9c:47:d4:0a:0c:1a:34:34:c3:00: ef:c8:25:9f -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgISAZt6W0iTE+zjm3e6AfDTX8BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmVlYTEwYWZhY2YzYTljMjZlYTFiMWVjNDg4ZTk1NWU0ZGZhMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnF9Qqo2KqzcnRMlgbb0W5yMG1d8 3GTd4n8K9fIRQDYLqpQTUE65skhu9FxlhSq8GLeuzWSno7KabnB/1WeQJSQ230sP F73FJmpCdCXc0x/NLrGjCpboroi3FMy9+mhSF51Wxij7WnGkpgyxJdpDULqax14T kEHes1g4l7mrMo2i4w963rrGWgpCrNFXCAEZlAziriuoXqTG/MHUJaVcr0IYMZgo upfCUoQSgcxxi2rwSO+l2YjsYwAR09MbP6PojaImud6wrcg8OWYRkVCGEZoNotEM f3wEzCModXithqpJnK/Nh+Gi2hBnuHDq/PZ5UmhyYfL/NRktxkJPUmwN4wIDAQAB o4IDnjCCA5owHQYDVR0OBBYEFPbuoQr6zzqcJuobHsSI6VXk36BqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzZmNTc0 Ni1iNDA2LTRjMDUtOTc0MS01NGQ4ZjZiMDZiODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvNmY1NzQ2 LWI0MDYtNGMwNS05NzQxLTU0ZDhmNmIwNmI4My8xLzl1NmhDdnJQT3B3bTZoc2V4 SWpwVmVUZm9Hby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBCQYIKwYB BQUHAQcBAf8EgfkwgfYwgcEEAgABMIG6AwQEHyygAwQEH8GQAwQCLUMoAwQCLV4A AwQCLY64AwQALmatAwQFPtQAAwQATVGmAwQETfDgAwQETfEAAwQCT4VkAwQEUESw AwQEUFigAwQAVPcQAwQGVPfAAwQAVcz8AwQAWSLLAwQEXD5QAwQEXVuAAwQEdwwg AwQClwIQAwQFlwJAAwQElwJwAwQEsD4wAwQGsq/AAwQEsu4wAwQCuQXEAwQCuXgo AwQCueWsAwQAwYcPAwQAwYcYMDAEAgACMCoDBQMqAgAgAwUDKgIGAAMFAyoHBYAD BQMqB08AAwUDKgdVwAMFAyoHXsAwLAYIKwYBBQUHAQgBAf8EHTAboBkwFwICI0IC AnofAgMAmhgCAwDEFAIDA0GmMA0GCSqGSIb3DQEBCwUAA4IBAQAtZnneYuj+vqjK aP9Bwl5hHxpaPg+xmSA+7jM/5tX3FUqBXv/YCXBmfynrGD2zz5FxOYODLxxIv0tM 8mqoJAnfahgCMNHvJg9NcakIq3KeDjvd6DH7dFi8qOR8OIChLTTUfRRK18zZT7hq ff8rJZSSlGgiOHqRG+cJNJ1B/pRo3E9mSayu2luTv1j33g3zkbJbGyUq0tO6K2Cs vqZQo6+0LWblIigy0q3/EGoY64X9hUJs0C6qCZhl960U1+P15FMqq5UgxjymgkMK QGqv7VY04zqzYiM28IeRZ6w62qcoYCrMSQ2l1dMBRM5qLoiEtbVdpZxH1AoMGjQ0 wwDvyCWf -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:57 2026 by rpki-client