This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer (raw, json) Hash identifier: NWN0Jgf3BUsHxYOVkq0leSmgEu5R2KUYJVSRF16KG3k= Subject key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B6A8D5DE2D324AB1D7330D6ACFBA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60781 IP: 5.79.64.0/18 IP: 37.48.64.0/18 IP: 62.212.64.0/19 IP: 81.17.32.0 -- 81.17.55.255 IP: 81.171.0.0/19 IP: 82.192.64.0/19 IP: 83.149.64.0/18 IP: 85.17.0.0/16 IP: 89.149.192.0/18 IP: 94.75.192.0/18 IP: 95.168.160.0/20 IP: 95.211.0.0/16 IP: 173.234.68.0/22 IP: 178.162.128.0/18 IP: 185.17.184.0/22 IP: 212.7.192.0 -- 212.7.211.255 IP: 212.32.224.0/19 IP: 213.227.128.0/19 IP: 2001:1af8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6a:8d:5d:e2:d3:24:ab:1d:73:30:d6:ac:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:90:eb:6f:a3:53:10:43:12:ae:cb:a6:9e: 04:e1:8e:b9:7f:84:80:ca:56:43:e2:99:84:a4:63: 31:54:40:4d:40:9d:6b:2d:f8:b5:02:a3:e8:74:63: d5:e7:5d:f1:f2:d9:f7:60:ad:e1:1d:fd:62:98:76: 29:cf:10:d1:7e:d6:71:66:b4:c5:9a:b3:b3:3e:7c: ba:39:5a:44:d4:43:a4:c4:91:5f:8b:42:f6:8c:26: e8:05:e3:52:16:8b:31:31:13:db:5f:83:03:4d:b9: 5b:55:1e:1c:87:fe:59:9e:21:45:33:1e:7a:f5:0f: 4d:5d:89:73:3b:71:02:78:24:e3:d9:24:c9:36:7f: b9:09:62:10:05:17:f2:08:27:87:1a:ac:5a:cb:63: 3f:f3:cf:94:55:81:4e:4f:7a:3e:71:80:9b:10:0f: 26:32:7b:dc:cf:33:2b:57:1f:1b:79:fc:07:1c:b7: a5:eb:be:41:44:77:22:0b:30:f5:f3:c0:e3:2a:d0: 51:c4:66:67:ae:28:97:e2:be:dc:cb:dd:86:61:d1: b0:c8:78:e6:2f:4f:2a:81:33:60:c4:6a:cf:5c:20: b8:7f:e1:f7:ff:a6:c6:4a:5a:c3:39:d4:b8:0a:5b: 2d:6c:b9:6f:cd:10:6b:13:ea:06:fc:00:bc:d2:2d: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.79.64.0/18 37.48.64.0/18 62.212.64.0/19 81.17.32.0-81.17.55.255 81.171.0.0/19 82.192.64.0/19 83.149.64.0/18 85.17.0.0/16 89.149.192.0/18 94.75.192.0/18 95.168.160.0/20 95.211.0.0/16 173.234.68.0/22 178.162.128.0/18 185.17.184.0/22 212.7.192.0-212.7.211.255 212.32.224.0/19 213.227.128.0/19 IPv6: 2001:1af8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60781 Signature Algorithm: sha256WithRSAEncryption 8e:fe:df:b8:4c:88:44:4c:cb:85:84:37:5e:b0:89:95:1a:53: 4f:1f:f3:38:20:3d:27:f0:e1:39:be:74:09:d2:a9:2d:84:28: 85:51:d3:4f:ba:dd:ed:84:1a:27:a1:28:0c:52:36:c4:a5:07: 09:5c:37:95:a3:60:35:95:9f:20:4e:dd:32:7c:bd:24:12:9b: 0d:ec:21:42:56:68:4a:a2:e1:08:ac:8e:c7:70:d8:c8:7d:f0: 3c:83:2a:75:d0:22:7c:3a:df:49:50:1d:40:20:ba:f2:c3:1b: cb:91:83:13:87:3d:f3:74:41:0d:53:12:d9:49:8b:3e:e1:0b: 74:e9:f7:2b:64:43:27:c7:7b:58:89:ab:f8:9f:e5:7a:de:34: 1b:9c:aa:66:80:bb:df:73:90:9e:fd:c5:97:c1:3b:e4:42:42: 3b:0d:0d:56:65:73:98:68:75:42:e6:07:8d:8a:a8:0c:4e:75: 96:51:cc:d6:4a:2d:d9:a7:e3:fe:01:2b:26:75:47:d9:2a:48: 61:e9:7e:39:13:fb:e0:6e:98:1c:f1:b5:5a:0b:b6:d3:ad:49: aa:fa:0c:6a:a4:2a:c3:a2:31:4d:18:12:2d:96:13:3f:95:82: a9:6f:bb:d1:42:fc:37:bf:11:c0:08:75:54:9e:17:8d:d3:84: 53:c0:0f:96 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAZt6W2qNXeLTJKsdczDWrPugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2Q3MzA0YzFiNTlkYzIyNzMxYmI1M2VmZjVhODRlZDlhMzA2MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbSQ62+jUxBDEq7Lpp4E4Y65f4SA ylZD4pmEpGMxVEBNQJ1rLfi1AqPodGPV513x8tn3YK3hHf1imHYpzxDRftZxZrTF mrOzPny6OVpE1EOkxJFfi0L2jCboBeNSFosxMRPbX4MDTblbVR4ch/5ZniFFMx56 9Q9NXYlzO3ECeCTj2STJNn+5CWIQBRfyCCeHGqxay2M/88+UVYFOT3o+cYCbEA8m MnvczzMrVx8befwHHLel675BRHciCzD188DjKtBRxGZnriiX4r7cy92GYdGwyHjm L08qgTNgxGrPXCC4f+H3/6bGSlrDOdS4ClstbLlvzRBrE+oG/AC80i3Y8wIDAQAB o4IDJzCCAyMwHQYDVR0OBBYEFCfXMEwbWdwicxu1Pv9ahO2aMGFMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2MxM2Ux Mi1lNTBkLTQzMzgtOGEyZi1mZmZiNWE0ZTc2MmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvYzEzZTEy LWU1MGQtNDMzOC04YTJmLWZmZmI1YTRlNzYyYS8xL0o5Y3dUQnRaM0NKekc3VS1f MXFFN1pvd1lVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGlBggrBgEF BQcBBwEB/wSBlTCBkjCBgAQCAAEwegMEBgVPQAMEBiUwQAMEBT7UQDAMAwQFUREg AwQDUREwAwQFUasAAwQFUsBAAwQGU5VAAwMAVREDBAZZlcADBAZeS8ADBARfqKAD AwBf0wMEAq3qRAMEBrKigAMEArkRuDAMAwQG1AfAAwQC1AfQAwQF1CDgAwQF1eOA MA0EAgACMAcDBQAgARr4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtbTANBgkq hkiG9w0BAQsFAAOCAQEAjv7fuEyIREzLhYQ3XrCJlRpTTx/zOCA9J/DhOb50CdKp LYQohVHTT7rd7YQaJ6EoDFI2xKUHCVw3laNgNZWfIE7dMny9JBKbDewhQlZoSqLh CKyOx3DYyH3wPIMqddAifDrfSVAdQCC68sMby5GDE4c983RBDVMS2UmLPuELdOn3 K2RDJ8d7WImr+J/let40G5yqZoC733OQnv3Fl8E75EJCOw0NVmVzmGh1QuYHjYqo DE51llHM1kot2afj/gErJnVH2SpIYel+ORP74G6YHPG1Wgu2061JqvoMaqQqw6Ix TRgSLZYTP5WCqW+70UL8N78RwAh1VJ4XjdOEU8APlg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:59 2026 by rpki-client