This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer (raw, json) Hash identifier: HC1B5Ia5gp7kkQCDOmlHZZpR22Ckgx3JZMWYaXTfkes= Subject key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14539F48CB0390D45D9CDEA981EB4F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20765 IP: 139.3.0.0/16 IP: 185.84.216.0/22 IP: 193.8.213.0/24 IP: 193.56.217.0 -- 193.56.219.255 IP: 193.96.96.0/21 IP: 193.102.32.0/22 IP: 193.103.148.0/24 IP: 193.187.12.0 -- 193.187.43.255 IP: 194.45.0.0/22 IP: 194.45.6.0/23 IP: 194.115.4.0/24 IP: 2a05:a880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:53:9f:48:cb:03:90:d4:5d:9c:de:a9:81:eb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:7c:79:08:af:fc:25:0c:06:5f:63:c9:e5: ca:4a:9f:02:ee:26:a7:0b:cb:d4:dd:ff:36:47:ea: e8:81:4d:1c:de:04:31:31:5c:cf:47:fa:33:5b:28: 9c:40:e5:29:16:18:a1:e2:3d:fe:e5:e1:66:94:d0: a2:23:75:d3:ad:f4:04:15:f1:a3:90:75:af:c8:9b: 5c:14:ce:c5:60:51:25:fc:d8:41:19:86:5c:a2:9f: 06:84:57:00:ae:16:78:97:9d:b2:42:d2:f4:d0:47: b6:9b:c4:80:ad:40:9f:59:4f:72:8b:fc:67:30:ee: 6e:a2:f9:ee:4f:29:1a:d5:df:eb:c5:cb:91:c4:27: 64:df:00:17:5e:21:4a:7d:cc:5d:dc:08:c9:1f:66: a6:92:30:66:b2:53:df:f2:57:19:e7:dc:01:e4:9e: 6e:dc:13:3c:96:45:9c:8b:14:09:3d:3f:cd:4a:27: 95:a8:15:f0:f1:8f:7b:94:f0:c9:be:1e:c9:e7:ce: 88:5c:c2:5f:66:d1:d0:91:fc:5a:1a:8b:7b:ff:bc: 21:00:ae:77:51:db:57:29:8b:7e:c2:39:1f:06:bd: a2:58:cb:aa:c0:bc:10:d1:d5:d4:82:5b:e7:fb:a6: 24:9c:3f:d5:6e:78:91:4b:f9:54:e9:17:11:80:e9: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.3.0.0/16 185.84.216.0/22 193.8.213.0/24 193.56.217.0-193.56.219.255 193.96.96.0/21 193.102.32.0/22 193.103.148.0/24 193.187.12.0-193.187.43.255 194.45.0.0/22 194.45.6.0/23 194.115.4.0/24 IPv6: 2a05:a880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20765 Signature Algorithm: sha256WithRSAEncryption 3c:ed:9a:43:f1:01:1e:7a:9f:ee:33:ca:62:ab:7e:bb:ec:54: 4d:f2:d0:15:63:7f:c2:28:81:61:fb:7a:1f:8a:1f:07:57:81: 3f:9f:95:56:06:9b:68:ec:9d:18:a6:70:5c:fd:54:92:1a:ec: ac:dc:a3:4c:86:57:2e:f9:19:57:9a:e9:14:09:ce:de:65:58: 7e:b2:de:18:7a:e8:27:44:37:53:d4:63:39:86:1d:16:a4:d8: 8c:06:71:b0:6f:f4:cb:39:80:9f:c6:bd:40:0d:48:da:75:6f: bd:f2:70:92:e8:51:ab:fd:34:f0:c6:4d:3d:80:b3:b8:26:f8: fc:7e:30:3b:53:75:9c:15:52:89:51:db:0c:e8:f9:b2:37:dd: 4c:94:94:1a:d8:d2:2c:b6:65:ee:81:6b:ab:6c:84:42:2e:db: cd:ba:8f:20:4f:78:ec:35:f9:8b:90:01:a7:d4:ff:f8:08:1c: 68:36:aa:57:af:cf:4b:2e:e9:79:c9:54:be:a8:06:26:a2:9b: 26:16:60:42:9a:54:5c:45:2f:27:ba:33:9f:ba:d4:53:5e:40: ed:0c:d0:d9:20:a4:bb:bb:8b:f6:9a:a7:85:4b:1b:f1:a0:94: 2b:5f:6f:15:4c:19:96:46:79:ea:c8:64:6c:57:7d:e2:f3:6b: c1:b7:78:2e -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt/FFOfSMsDkNRdnN6pgetPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2VkYThmNzI2YTY5YjUwNGRlOTk0OTQzYjBhNWYyMzA4YzJhOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/x8eQiv/CUMBl9jyeXKSp8C7ian C8vU3f82R+rogU0c3gQxMVzPR/ozWyicQOUpFhih4j3+5eFmlNCiI3XTrfQEFfGj kHWvyJtcFM7FYFEl/NhBGYZcop8GhFcArhZ4l52yQtL00Ee2m8SArUCfWU9yi/xn MO5uovnuTyka1d/rxcuRxCdk3wAXXiFKfcxd3AjJH2amkjBmslPf8lcZ59wB5J5u 3BM8lkWcixQJPT/NSieVqBXw8Y97lPDJvh7J586IXMJfZtHQkfxaGot7/7whAK53 UdtXKYt+wjkfBr2iWMuqwLwQ0dXUglvn+6YknD/VbniRS/lU6RcRgOlHswIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFHftqPcmpptQTemUlDsKXyMIwqlrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzcyNzZm My1jODhlLTQ4MTktOWU1OS02MDg0Y2ZjNmU0YzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNzI3NmYz LWM4OGUtNDgxOS05ZTU5LTYwODRjZmM2ZTRjNC8xL2QtMm85eWFtbTFCTjZaU1VP d3BmSXdqQ3FXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkGCCsGAQUF BwEHAQH/BGowaDBXBAIAATBRAwMAiwMDBAK5VNgDBADBCNUwDAMEAME42QMEAsE4 2AMEA8FgYAMEAsFmIAMEAMFnlDAMAwQCwbsMAwQCwbsoAwQCwi0AAwQBwi0GAwQA wnMEMA0EAgACMAcDBQMqBaiAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlEdMA0G CSqGSIb3DQEBCwUAA4IBAQA87ZpD8QEeep/uM8piq3677FRN8tAVY3/CKIFh+3of ih8HV4E/n5VWBpto7J0YpnBc/VSSGuys3KNMhlcu+RlXmukUCc7eZVh+st4Yeugn RDdT1GM5hh0WpNiMBnGwb/TLOYCfxr1ADUjadW+98nCS6FGr/TTwxk09gLO4Jvj8 fjA7U3WcFVKJUdsM6PmyN91MlJQa2NIstmXugWurbIRCLtvNuo8gT3jsNfmLkAGn 1P/4CBxoNqpXr89LLul5yVS+qAYmopsmFmBCmlRcRS8nujOfutRTXkDtDNDZIKS7 u4v2mqeFSxvxoJQrX28VTBmWRnnqyGRsV33i82vBt3gu -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:50 2026 by rpki-client