This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer File: F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer (raw, json) Hash identifier: Yb7wzhK/+HDXH6G8FAjfFoNnaeR6nQBSyb3/ReNtwUk= Subject key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A6E446A710F44D7794595B3E2D8D13428 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 10 Nov 2025 14:56:08 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 133153 AS: 140057 AS: 209178 AS: 212836 AS: 213221 IP: 45.93.16.0/22 IP: 45.134.144.0/22 IP: 45.135.236.0/22 IP: 45.139.188.0/22 IP: 45.155.88.0/22 IP: 45.155.224.0/22 IP: 45.156.220.0/22 IP: 45.158.252.0/22 IP: 85.92.112.0/22 IP: 91.209.182.0/24 IP: 103.100.168.0/22 IP: 103.146.100.0/23 IP: 103.148.116.0/23 IP: 103.211.100.0/22 IP: 103.240.148.0/22 IP: 124.155.240.0/20 IP: 160.238.64.0/22 IP: 172.110.208.0/20 IP: 185.233.16.0/22 IP: 185.235.164.0/22 IP: 185.243.4.0/22 IP: 185.245.0.0/22 IP: 193.107.216.0/22 IP: 194.62.214.0/23 IP: 194.76.0.0/23 IP: 194.120.144.0/24 IP: 194.120.164.0/24 IP: 194.120.171.0/24 IP: 194.120.230.0/24 IP: 194.145.237.0/24 IP: 202.71.4.0 -- 202.71.11.255 IP: 207.45.8.0/21 IP: 2a02:afc0::/29 IP: 2a06:da40::/29 IP: 2a0b:1f00::/29 IP: 2a0e:31c0::/29 IP: 2a0f:22c0::/29 IP: 2a0f:cf40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:44:6a:71:0f:44:d7:79:45:95:b3:e2:d8:d1:34:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 10 14:56:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:8c:20:96:6d:19:e5:e8:9b:be:7c:ba:e4: 46:01:92:ea:20:7d:45:e5:96:35:c0:a5:97:81:a2: 27:b2:5d:d6:74:d1:3f:98:55:0c:e5:67:c8:5d:ee: ca:1f:b5:1d:73:fc:c7:3b:15:bd:0a:21:b4:e7:03: a5:83:99:29:ec:7e:17:17:d7:12:71:97:2a:d1:be: 41:c7:d2:88:a7:38:11:6c:95:58:e1:a9:98:fa:97: 36:d3:b7:e8:25:52:e1:c2:47:ac:b9:a1:99:19:b3: b7:96:d2:65:31:f8:b7:64:5e:9b:ed:41:33:be:23: cb:54:39:d4:d0:2a:1f:64:97:e2:10:6d:8e:9d:8f: cc:fc:cf:6d:1f:d0:cb:72:c3:84:bc:86:d6:94:99: 8e:e0:18:dd:f0:8f:05:39:63:e6:90:b5:30:96:e3: ff:47:1d:99:c5:83:e2:b9:90:a7:ed:3c:2d:c1:ea: fd:87:83:c9:f0:a3:19:15:6c:5a:ce:79:79:b1:5d: a1:e0:88:b2:26:94:e8:33:94:c1:44:45:ae:66:dd: fb:93:fe:17:37:ee:ac:86:4a:84:46:77:e4:63:c6: 40:3d:ab:9f:8f:4d:a4:e9:84:37:a6:6f:9a:5e:fc: f4:9c:33:9d:ce:19:ee:e4:4a:23:cb:d0:a7:b1:a4: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.16.0/22 45.134.144.0/22 45.135.236.0/22 45.139.188.0/22 45.155.88.0/22 45.155.224.0/22 45.156.220.0/22 45.158.252.0/22 85.92.112.0/22 91.209.182.0/24 103.100.168.0/22 103.146.100.0/23 103.148.116.0/23 103.211.100.0/22 103.240.148.0/22 124.155.240.0/20 160.238.64.0/22 172.110.208.0/20 185.233.16.0/22 185.235.164.0/22 185.243.4.0/22 185.245.0.0/22 193.107.216.0/22 194.62.214.0/23 194.76.0.0/23 194.120.144.0/24 194.120.164.0/24 194.120.171.0/24 194.120.230.0/24 194.145.237.0/24 202.71.4.0-202.71.11.255 207.45.8.0/21 IPv6: 2a02:afc0::/29 2a06:da40::/29 2a0b:1f00::/29 2a0e:31c0::/29 2a0f:22c0::/29 2a0f:cf40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 133153 140057 209178 212836 213221 Signature Algorithm: sha256WithRSAEncryption 09:d8:02:87:4e:e7:05:4d:d1:58:7e:d7:22:ac:0e:8f:42:ac: e6:2f:39:db:b7:cc:a6:ee:e4:25:8f:55:68:77:62:06:f9:0d: 1d:94:b6:69:3a:e9:0b:4c:9a:b5:c0:62:e9:d1:6f:7d:5d:3c: 12:99:e7:ff:f2:14:ed:fc:ff:ab:b4:e7:b3:d2:37:35:79:94: 8f:bd:c9:39:de:97:54:4e:a7:36:f4:b7:25:18:9c:ca:13:f9: 0d:fb:23:94:9b:c5:ef:1e:35:c6:1a:97:f2:23:8a:04:90:56: ef:7d:a2:72:78:b3:f5:86:3a:85:1f:14:51:62:be:2d:c9:c5: 08:06:65:7c:3d:0a:ad:ba:ce:70:6e:2f:d6:a1:d3:b0:de:e1: 85:f7:c6:da:69:d9:02:d3:02:ca:7a:ce:9b:79:a8:77:d1:10: 96:34:53:a8:d5:93:5d:67:ff:fb:70:55:2d:89:39:68:6f:86: 58:e4:1d:58:9c:a8:ca:4d:70:43:ef:b0:d9:bf:e8:55:cf:b8: a0:f1:59:56:78:f3:3e:f1:87:5d:6e:fc:6d:ea:a2:78:55:e5: 61:30:7b:ee:ab:f3:05:7f:a4:f4:8c:c1:f3:b9:45:ae:85:23: 2a:51:b3:2f:01:5b:03:94:46:5e:f2:ae:b6:8f:ca:9e:13:d0: 33:ea:bc:91 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgISAZpuRGpxD0TXeUWVs+LY0TQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEwMTQ1NjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2QwM2YyOTgxODBjYzEwOWYxOWQ0YjE5OTJjN2Q3MWM1NmM4ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeCMIJZtGeXom758uuRGAZLqIH1F 5ZY1wKWXgaInsl3WdNE/mFUM5WfIXe7KH7Udc/zHOxW9CiG05wOlg5kp7H4XF9cS cZcq0b5Bx9KIpzgRbJVY4amY+pc207foJVLhwkesuaGZGbO3ltJlMfi3ZF6b7UEz viPLVDnU0CofZJfiEG2OnY/M/M9tH9DLcsOEvIbWlJmO4Bjd8I8FOWPmkLUwluP/ Rx2ZxYPiuZCn7Twtwer9h4PJ8KMZFWxaznl5sV2h4IiyJpToM5TBREWuZt37k/4X N+6shkqERnfkY8ZAPaufj02k6YQ3pm+aXvz0nDOdzhnu5Eojy9CnsaSNZwIDAQAB o4IDsDCCA6wwHQYDVR0OBBYEFBfQPymBgMwQnxnUsZksfXHFbI3MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzgyZTI1 My0wMTc3LTRhMjAtYmVmZS05MThhYzY0NjI2NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvODJlMjUz LTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8xL0Y5QV9LWUdBekJDZkdkU3ht U3g5Y2NWc2pjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGQYIKwYB BQUHAQcBAf8EggEIMIIBBDCBzwQCAAEwgcgDBAItXRADBAIthpADBAIth+wDBAIt i7wDBAItm1gDBAItm+ADBAItnNwDBAItnvwDBAJVXHADBABb0bYDBAJnZKgDBAFn kmQDBAFnlHQDBAJn02QDBAJn8JQDBAR8m/ADBAKg7kADBASsbtADBAK56RADBAK5 66QDBAK58wQDBAK59QADBALBa9gDBAHCPtYDBAHCTAADBADCeJADBADCeKQDBADC eKsDBADCeOYDBADCke0wDAMEAspHBAMEAspHCAMEA88tCDAwBAIAAjAqAwUDKgKv wAMFAyoG2kADBQMqCx8AAwUDKg4xwAMFAyoPIsADBQMqD89AMC4GCCsGAQUFBwEI AQH/BB8wHaAbMBkCAwIIIQIDAiMZAgMDMRoCAwM/ZAIDA0DlMA0GCSqGSIb3DQEB CwUAA4IBAQAJ2AKHTucFTdFYftcirA6PQqzmLznbt8ym7uQlj1Vod2IG+Q0dlLZp OukLTJq1wGLp0W99XTwSmef/8hTt/P+rtOez0jc1eZSPvck53pdUTqc29LclGJzK E/kN+yOUm8XvHjXGGpfyI4oEkFbvfaJyeLP1hjqFHxRRYr4tycUIBmV8PQqtus5w bi/WodOw3uGF98baadkC0wLKes6beah30RCWNFOo1ZNdZ//7cFUtiTlob4ZY5B1Y nKjKTXBD77DZv+hVz7ig8VlWePM+8Yddbvxt6qJ4VeVhMHvuq/MFf6T0jMHzuUWu hSMqUbMvAVsDlEZe8q62j8qeE9Az6ryR -----END CERTIFICATE-----Generated at Sat Dec 6 06:06:16 2025 by rpki-client