This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer (raw, json) Hash identifier: OMMpGHjB5RpP20KAGZPejK0kBd5OtLGLkZV0ZWcpCzc= Subject key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBBE635255C71F87518009AF53625B00F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 09:46:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206844 IP: 45.156.32.0/22 IP: 45.158.54.0/23 IP: 80.250.120.0/22 IP: 185.125.241.0/24 IP: 185.174.160.0/22 IP: 2a07:1280::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:e6:35:25:5c:71:f8:75:18:00:9a:f5:36:25:b0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 09:46:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740f65f302335baa90ed81c05384d53f2332391a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:12:0e:d4:85:e4:55:a8:4d:65:77:36:41: af:ef:40:39:cb:eb:61:85:e5:20:df:ae:5a:d8:bb: d1:39:2d:62:55:f0:64:fc:e7:97:a5:67:f1:bd:62: da:30:df:6c:62:e8:93:5e:ff:17:19:3a:52:70:09: 3a:1d:48:67:4d:39:7f:28:7d:80:79:ce:90:05:33: 05:57:5f:06:2c:42:95:c5:d8:02:5a:a8:7a:15:30: 1c:98:64:0b:79:4d:3a:d3:ed:19:c9:90:46:3a:57: 51:c2:08:d9:a3:ff:84:20:ce:61:dd:48:65:c8:2a: e0:fe:93:ee:13:7b:58:44:ff:a7:16:3b:43:09:28: 09:56:f1:fe:81:74:55:ab:14:f3:dc:8c:5c:57:f8: 76:60:da:55:a1:58:6e:83:97:41:ed:80:16:ed:e0: a2:4e:10:f9:1a:1d:d0:de:09:bc:a7:b3:0b:1f:f6: 1a:56:50:3a:d1:3f:1c:c7:77:2e:9d:9e:95:d9:84: 86:85:d9:6d:a8:aa:56:77:e4:03:60:b3:58:2c:ea: fb:cc:49:b7:9f:63:09:4c:a9:9e:a6:9a:31:d1:c3: b3:36:e7:50:2f:7d:a4:0b:2b:f2:da:b2:3d:e6:67: 1d:9c:0c:19:a4:01:25:96:50:f7:06:41:0e:c4:5b: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.32.0/22 45.158.54.0/23 80.250.120.0/22 185.125.241.0/24 185.174.160.0/22 IPv6: 2a07:1280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206844 Signature Algorithm: sha256WithRSAEncryption b1:98:5b:0b:f7:17:04:ba:11:7e:dd:59:51:82:33:19:60:c2: ab:b9:2c:b6:d3:7b:74:e1:e0:de:81:a6:3b:24:66:30:bb:22: 93:39:0c:f1:2f:05:88:f6:e1:79:3b:96:c4:5a:b6:69:c3:8f: 46:91:d9:36:86:b8:28:78:69:47:57:8e:52:04:6a:08:24:63: d0:d6:6e:66:8f:87:32:50:16:ed:c0:ab:0c:a7:de:7b:93:fe: 57:7f:48:ff:95:5b:e5:05:08:1b:8a:73:10:6e:55:ab:75:b3: 41:f3:ea:4c:3b:90:c5:7e:39:9d:48:c3:b5:c2:e3:b4:42:14: 43:fd:7c:9b:64:8a:83:b7:4f:b8:79:29:0c:c5:21:7a:08:77: 8a:50:3f:5f:4e:d0:fd:b5:03:82:a5:26:a4:c7:0c:20:69:a1: 0c:c7:e2:00:c7:0f:c8:57:ef:70:ab:0f:35:2f:20:f6:bb:c7: ad:49:92:5e:97:7e:0d:64:0d:57:ca:2b:1c:ae:8b:ad:9a:62: 95:a9:c2:77:2c:ad:8f:73:36:e1:2e:4f:37:96:bb:13:9f:cb: af:ca:b5:37:35:80:20:d3:14:1e:60:10:24:35:83:c5:14:ab: 5c:a9:80:30:f1:22:91:13:09:99:2f:82:fe:69:42:85:23:e2: 30:78:0a:fb -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZu75jUlXHH4dRgAmvU2JbAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MDk0NjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBmNjVmMzAyMzM1YmFhOTBlZDgxYzA1Mzg0ZDUzZjIzMzIzOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUUSDtSF5FWoTWV3NkGv70A5y+th heUg365a2LvROS1iVfBk/OeXpWfxvWLaMN9sYuiTXv8XGTpScAk6HUhnTTl/KH2A ec6QBTMFV18GLEKVxdgCWqh6FTAcmGQLeU060+0ZyZBGOldRwgjZo/+EIM5h3Uhl yCrg/pPuE3tYRP+nFjtDCSgJVvH+gXRVqxTz3IxcV/h2YNpVoVhug5dB7YAW7eCi ThD5Gh3Q3gm8p7MLH/YaVlA60T8cx3cunZ6V2YSGhdltqKpWd+QDYLNYLOr7zEm3 n2MJTKmeppox0cOzNudQL32kCyvy2rI95mcdnAwZpAElllD3BkEOxFvMLwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFHQPZfMCM1uqkO2BwFOE1T8jMjkaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzNiMWMx Zi0yZDhjLTQ4NjEtYjcxZC1kMDNhMmM0MzVhZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvM2IxYzFm LTJkOGMtNDg2MS1iNzFkLWQwM2EyYzQzNWFlYy8xL2RBOWw4d0l6VzZxUTdZSEFV NFRWUHlNeU9Sby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCLZwgAwQBLZ42AwQCUPp4AwQAuX3xAwQCua6g MA0EAgACMAcDBQAqBxKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMn/DANBgkq hkiG9w0BAQsFAAOCAQEAsZhbC/cXBLoRft1ZUYIzGWDCq7ksttN7dOHg3oGmOyRm MLsikzkM8S8FiPbheTuWxFq2acOPRpHZNoa4KHhpR1eOUgRqCCRj0NZuZo+HMlAW 7cCrDKfee5P+V39I/5Vb5QUIG4pzEG5Vq3WzQfPqTDuQxX45nUjDtcLjtEIUQ/18 m2SKg7dPuHkpDMUhegh3ilA/X07Q/bUDgqUmpMcMIGmhDMfiAMcPyFfvcKsPNS8g 9rvHrUmSXpd+DWQNV8orHK6LrZpilanCdyytj3M24S5PN5a7E5/Lr8q1NzWAINMU HmAQJDWDxRSrXKmAMPEikRMJmS+C/mlChSPiMHgK+w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:12 2026 by rpki-client