This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer File: F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer (raw, json) Hash identifier: KmH71SGxtyeHJdFN6u3k8pE9F3Yxgqu4BM1bLw6Njbc= Subject key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35FA30A53A8DB5165F306D971DC215 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 133153 AS: 140057 AS: 209178 AS: 212836 AS: 213221 IP: 45.93.16.0/22 IP: 45.134.144.0/22 IP: 45.135.236.0/22 IP: 45.139.188.0/22 IP: 45.155.88.0/22 IP: 45.155.224.0/22 IP: 45.156.220.0/22 IP: 45.158.252.0/22 IP: 85.92.112.0/22 IP: 91.209.182.0/24 IP: 103.100.168.0/22 IP: 103.146.100.0/23 IP: 103.148.116.0/23 IP: 103.211.100.0/22 IP: 103.240.148.0/22 IP: 124.155.240.0/20 IP: 160.238.64.0/22 IP: 172.110.208.0/20 IP: 185.233.16.0/22 IP: 185.235.164.0/22 IP: 185.243.4.0/22 IP: 185.245.0.0/22 IP: 193.107.216.0/22 IP: 194.62.214.0/23 IP: 194.76.0.0/23 IP: 194.120.144.0/24 IP: 194.120.164.0/24 IP: 194.120.171.0/24 IP: 194.120.230.0/24 IP: 194.145.237.0/24 IP: 202.71.4.0 -- 202.71.11.255 IP: 207.45.8.0/21 IP: 2a02:afc0::/29 IP: 2a06:da40::/29 IP: 2a0b:1f00::/29 IP: 2a0e:31c0::/29 IP: 2a0f:22c0::/29 IP: 2a0f:cf40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fa:30:a5:3a:8d:b5:16:5f:30:6d:97:1d:c2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:8c:20:96:6d:19:e5:e8:9b:be:7c:ba:e4: 46:01:92:ea:20:7d:45:e5:96:35:c0:a5:97:81:a2: 27:b2:5d:d6:74:d1:3f:98:55:0c:e5:67:c8:5d:ee: ca:1f:b5:1d:73:fc:c7:3b:15:bd:0a:21:b4:e7:03: a5:83:99:29:ec:7e:17:17:d7:12:71:97:2a:d1:be: 41:c7:d2:88:a7:38:11:6c:95:58:e1:a9:98:fa:97: 36:d3:b7:e8:25:52:e1:c2:47:ac:b9:a1:99:19:b3: b7:96:d2:65:31:f8:b7:64:5e:9b:ed:41:33:be:23: cb:54:39:d4:d0:2a:1f:64:97:e2:10:6d:8e:9d:8f: cc:fc:cf:6d:1f:d0:cb:72:c3:84:bc:86:d6:94:99: 8e:e0:18:dd:f0:8f:05:39:63:e6:90:b5:30:96:e3: ff:47:1d:99:c5:83:e2:b9:90:a7:ed:3c:2d:c1:ea: fd:87:83:c9:f0:a3:19:15:6c:5a:ce:79:79:b1:5d: a1:e0:88:b2:26:94:e8:33:94:c1:44:45:ae:66:dd: fb:93:fe:17:37:ee:ac:86:4a:84:46:77:e4:63:c6: 40:3d:ab:9f:8f:4d:a4:e9:84:37:a6:6f:9a:5e:fc: f4:9c:33:9d:ce:19:ee:e4:4a:23:cb:d0:a7:b1:a4: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.16.0/22 45.134.144.0/22 45.135.236.0/22 45.139.188.0/22 45.155.88.0/22 45.155.224.0/22 45.156.220.0/22 45.158.252.0/22 85.92.112.0/22 91.209.182.0/24 103.100.168.0/22 103.146.100.0/23 103.148.116.0/23 103.211.100.0/22 103.240.148.0/22 124.155.240.0/20 160.238.64.0/22 172.110.208.0/20 185.233.16.0/22 185.235.164.0/22 185.243.4.0/22 185.245.0.0/22 193.107.216.0/22 194.62.214.0/23 194.76.0.0/23 194.120.144.0/24 194.120.164.0/24 194.120.171.0/24 194.120.230.0/24 194.145.237.0/24 202.71.4.0-202.71.11.255 207.45.8.0/21 IPv6: 2a02:afc0::/29 2a06:da40::/29 2a0b:1f00::/29 2a0e:31c0::/29 2a0f:22c0::/29 2a0f:cf40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 133153 140057 209178 212836 213221 Signature Algorithm: sha256WithRSAEncryption 1e:ee:2e:da:2b:4c:ba:e3:cd:3b:f5:a2:16:f7:10:26:47:f0: 48:69:fe:0b:32:4d:2e:71:7d:50:1b:9c:53:3d:60:06:77:cf: b8:2a:12:21:8a:e6:8d:85:72:17:db:ce:23:c8:a3:a0:3b:e6: f9:44:67:cc:f9:12:c0:4a:5d:fb:6f:20:19:09:93:ed:0f:ff: 2e:61:ba:10:c9:6a:f6:6e:e6:f2:4e:f4:f7:b4:92:b3:50:24: 1b:93:3d:df:52:1a:ad:dc:74:3c:53:9a:1f:58:18:d2:da:72: e7:37:9a:1f:cd:ae:a5:3f:7a:11:ba:17:30:61:02:da:f3:24: 42:db:4c:c7:e1:07:97:f3:d7:82:d5:c6:4f:c5:29:08:0a:41: 4d:ea:ff:31:32:f4:22:7b:82:a5:c8:9e:ed:a3:6d:3a:c2:a0: 2f:f1:5c:2c:9e:1b:74:86:e0:5d:4f:d8:6d:47:99:ed:49:0d: d0:a3:a6:7d:6b:96:9d:bb:d3:30:03:15:83:56:5f:3b:a7:b9: b5:80:8f:6e:21:2d:e3:e1:43:7e:79:89:47:c6:bd:27:f6:a8: a5:19:ec:c1:fc:ea:0b:b9:07:1a:f1:69:20:b1:9c:f0:3a:97: 1d:c3:fe:b9:76:cf:76:42:1e:14:9e:4d:35:4a:3d:14:40:28: 8c:a0:46:03 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgISAZt7NfowpTqNtRZfMG2XHcIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2QwM2YyOTgxODBjYzEwOWYxOWQ0YjE5OTJjN2Q3MWM1NmM4ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeCMIJZtGeXom758uuRGAZLqIH1F 5ZY1wKWXgaInsl3WdNE/mFUM5WfIXe7KH7Udc/zHOxW9CiG05wOlg5kp7H4XF9cS cZcq0b5Bx9KIpzgRbJVY4amY+pc207foJVLhwkesuaGZGbO3ltJlMfi3ZF6b7UEz viPLVDnU0CofZJfiEG2OnY/M/M9tH9DLcsOEvIbWlJmO4Bjd8I8FOWPmkLUwluP/ Rx2ZxYPiuZCn7Twtwer9h4PJ8KMZFWxaznl5sV2h4IiyJpToM5TBREWuZt37k/4X N+6shkqERnfkY8ZAPaufj02k6YQ3pm+aXvz0nDOdzhnu5Eojy9CnsaSNZwIDAQAB o4IDsDCCA6wwHQYDVR0OBBYEFBfQPymBgMwQnxnUsZksfXHFbI3MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzgyZTI1 My0wMTc3LTRhMjAtYmVmZS05MThhYzY0NjI2NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvODJlMjUz LTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8xL0Y5QV9LWUdBekJDZkdkU3ht U3g5Y2NWc2pjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGQYIKwYB BQUHAQcBAf8EggEIMIIBBDCBzwQCAAEwgcgDBAItXRADBAIthpADBAIth+wDBAIt i7wDBAItm1gDBAItm+ADBAItnNwDBAItnvwDBAJVXHADBABb0bYDBAJnZKgDBAFn kmQDBAFnlHQDBAJn02QDBAJn8JQDBAR8m/ADBAKg7kADBASsbtADBAK56RADBAK5 66QDBAK58wQDBAK59QADBALBa9gDBAHCPtYDBAHCTAADBADCeJADBADCeKQDBADC eKsDBADCeOYDBADCke0wDAMEAspHBAMEAspHCAMEA88tCDAwBAIAAjAqAwUDKgKv wAMFAyoG2kADBQMqCx8AAwUDKg4xwAMFAyoPIsADBQMqD89AMC4GCCsGAQUFBwEI AQH/BB8wHaAbMBkCAwIIIQIDAiMZAgMDMRoCAwM/ZAIDA0DlMA0GCSqGSIb3DQEB CwUAA4IBAQAe7i7aK0y648079aIW9xAmR/BIaf4LMk0ucX1QG5xTPWAGd8+4KhIh iuaNhXIX284jyKOgO+b5RGfM+RLASl37byAZCZPtD/8uYboQyWr2bubyTvT3tJKz UCQbkz3fUhqt3HQ8U5ofWBjS2nLnN5ofza6lP3oRuhcwYQLa8yRC20zH4QeX89eC 1cZPxSkICkFN6v8xMvQie4KlyJ7to206wqAv8Vwsnht0huBdT9htR5ntSQ3Qo6Z9 a5adu9MwAxWDVl87p7m1gI9uIS3j4UN+eYlHxr0n9qilGezB/OoLuQca8WkgsZzw Opcdw/65ds92Qh4Unk01Sj0UQCiMoEYD -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:46 2026 by rpki-client