This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer File: dn871L-9MHHDjNTXCSvTSQkgw9k.cer (raw, json) Hash identifier: 0zn0JNwFzONtAMwoqvnxVSZgt6fnDgSKWYzA7euYir4= Subject key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2FAA89FD80F071E2C23BCCC5CA4F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213820 IP: 5.57.213.0/24 IP: 45.91.148.0/24 IP: 46.31.66.0/24 IP: 46.253.136.0/24 IP: 62.3.51.0/24 IP: 62.106.80.0/24 IP: 77.72.82.0/24 IP: 84.246.83.0/24 IP: 91.132.225.0/24 IP: 91.246.57.0/24 IP: 94.247.139.0/24 IP: 146.19.69.0/24 IP: 146.19.229.0/24 IP: 176.116.13.0/24 IP: 178.22.29.0/24 IP: 185.155.103.0/24 IP: 185.213.193.0/24 IP: 185.252.211.0/24 IP: 188.244.123.0/24 IP: 193.9.124.0/24 IP: 193.163.95.0/24 IP: 194.62.16.0/24 IP: 212.18.107.0/24 IP: 212.24.113.0/24 IP: 213.109.152.0/24 IP: 2a11:c40::/29 IP: 2a11:1000::/29 IP: 2a11:1100::/29 IP: 2a11:1e80::/29 IP: 2a11:2040::/29 IP: 2a11:37c0::/29 IP: 2a11:4300::/29 IP: 2a11:4600::/29 IP: 2a11:4ec0::/29 IP: 2a11:74c0::/29 IP: 2a11:8580::/29 IP: 2a11:8d40::/29 IP: 2a11:9100::/29 IP: 2a11:bec0::/29 IP: 2a11:d300::/29 IP: 2a11:d780::/29 IP: 2a11:e240::/29 IP: 2a11:ea40::/29 IP: 2a12:700::/29 IP: 2a12:980::/29 IP: 2a12:1600::/29 IP: 2a12:6080::/29 IP: 2a12:6f80::/29 IP: 2a12:7b00::/29 IP: 2a12:c780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fa:a8:9f:d8:0f:07:1e:2c:23:bc:cc:5c:a4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:73:a2:8f:9a:e4:10:fb:61:6b:21:2e:53: ea:15:d6:1f:b8:cb:fc:0a:ff:a0:9e:cd:97:ae:4f: 77:ef:98:d6:d8:d5:e0:5e:b2:41:d5:ec:c7:10:fd: 13:13:8e:60:3f:52:00:7d:5a:da:66:64:e5:af:f8: 37:12:ef:1b:68:21:0b:c6:46:30:70:a7:37:4b:c3: 0c:96:7b:2f:10:6b:38:52:c9:74:47:52:c4:fc:c7: 31:c2:d9:bb:74:3c:a7:d8:99:7c:1c:01:2e:5b:0b: 0e:9e:05:62:5b:9b:10:d8:ed:e9:d7:ab:67:f0:04: 8e:f4:ee:4b:b7:cf:03:b7:47:ea:3b:4a:7f:37:e4: b1:ff:c9:6d:6a:35:6e:87:80:35:ca:15:11:64:b6: ae:31:19:ef:24:fa:41:47:8c:46:85:db:80:aa:54: b0:b9:82:88:6f:b9:84:0c:b9:e4:38:8c:63:10:24: a6:5f:b0:4b:39:71:3b:ae:f8:22:1b:33:77:c1:ca: 94:52:a1:fd:3f:f4:0b:60:db:03:68:e0:46:6c:67: 84:cc:4f:a8:52:38:f8:14:d9:92:b5:18:e9:6d:05: bd:1b:e3:1f:d8:f0:45:43:85:6b:2f:01:f5:7b:7d: b1:41:9f:de:ac:c0:a7:d2:42:e8:82:ce:b0:62:86: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.213.0/24 45.91.148.0/24 46.31.66.0/24 46.253.136.0/24 62.3.51.0/24 62.106.80.0/24 77.72.82.0/24 84.246.83.0/24 91.132.225.0/24 91.246.57.0/24 94.247.139.0/24 146.19.69.0/24 146.19.229.0/24 176.116.13.0/24 178.22.29.0/24 185.155.103.0/24 185.213.193.0/24 185.252.211.0/24 188.244.123.0/24 193.9.124.0/24 193.163.95.0/24 194.62.16.0/24 212.18.107.0/24 212.24.113.0/24 213.109.152.0/24 IPv6: 2a11:c40::/29 2a11:1000::/29 2a11:1100::/29 2a11:1e80::/29 2a11:2040::/29 2a11:37c0::/29 2a11:4300::/29 2a11:4600::/29 2a11:4ec0::/29 2a11:74c0::/29 2a11:8580::/29 2a11:8d40::/29 2a11:9100::/29 2a11:bec0::/29 2a11:d300::/29 2a11:d780::/29 2a11:e240::/29 2a11:ea40::/29 2a12:700::/29 2a12:980::/29 2a12:1600::/29 2a12:6080::/29 2a12:6f80::/29 2a12:7b00::/29 2a12:c780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213820 Signature Algorithm: sha256WithRSAEncryption 9e:0f:61:56:26:1e:4f:af:1a:93:a0:af:d7:bc:0e:41:7a:47: 57:3c:a5:ab:f9:7c:34:42:f7:18:7a:b3:c8:9d:12:9a:21:75: ca:7d:fc:4b:d8:8e:36:aa:77:3c:0b:54:bb:46:14:91:91:39: c7:93:cf:12:03:f8:bd:2a:67:c4:f2:f4:67:57:9f:f3:71:2c: 75:00:fa:10:6f:d6:5b:63:46:3c:c5:02:bb:9e:0b:c5:a0:f1: 1a:02:fd:24:91:75:3d:75:a3:00:98:d1:5a:ca:75:4b:27:93: 12:7e:aa:c6:6a:64:b3:c4:76:8e:89:93:1a:64:ed:c2:51:0b: c6:1a:1f:72:1a:8b:ad:f6:7c:d4:10:43:af:d6:cd:fd:8a:86: 37:97:9b:f4:6e:c2:b6:93:af:de:86:97:43:6f:4e:e3:50:a1: b0:ca:db:d8:2f:ae:5f:f6:07:15:df:9a:d7:a7:a1:b2:e9:68: f0:af:ee:62:df:f5:f2:11:7f:c9:b1:04:48:59:66:8e:aa:8e: 00:f7:9b:0d:7d:34:df:2a:2b:4d:6c:d6:ae:e1:e6:f8:c5:cb: 05:62:1f:cf:ef:9c:19:28:d1:8c:5c:40:e7:0f:ee:03:89:15: 46:c4:b9:45:54:17:43:91:40:83:b1:2e:93:24:d5:7d:36:27: 45:87:55:c7 -----BEGIN CERTIFICATE----- MIIG5TCCBc2gAwIBAgISAZt4ovqon9gPBx4sI7zMXKT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjdmM2JkNGJmYmQzMDcxYzM4Y2Q0ZDcwOTJiZDM0OTA5MjBjM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvplzoo+a5BD7YWshLlPqFdYfuMv8 Cv+gns2Xrk9375jW2NXgXrJB1ezHEP0TE45gP1IAfVraZmTlr/g3Eu8baCELxkYw cKc3S8MMlnsvEGs4Usl0R1LE/Mcxwtm7dDyn2Jl8HAEuWwsOngViW5sQ2O3p16tn 8ASO9O5Lt88Dt0fqO0p/N+Sx/8ltajVuh4A1yhURZLauMRnvJPpBR4xGhduAqlSw uYKIb7mEDLnkOIxjECSmX7BLOXE7rvgiGzN3wcqUUqH9P/QLYNsDaOBGbGeEzE+o Ujj4FNmStRjpbQW9G+Mf2PBFQ4VrLwH1e32xQZ/erMCn0kLogs6wYoborQIDAQAB o4ID8TCCA+0wHQYDVR0OBBYEFHZ/O9S/vTBxw4zU1wkr00kJIMPZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2ZmNWNj Ni04ZjYxLTQ0N2ItYjY1OC00ZmI1NTliM2I5YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvZmY1Y2M2 LThmNjEtNDQ3Yi1iNjU4LTRmYjU1OWIzYjliMy8xL2RuODcxTC05TUhIRGpOVFhD U3ZUU1FrZ3c5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBbgYIKwYB BQUHAQcBAf8EggFdMIIBWTCBnQQCAAEwgZYDBAAFOdUDBAAtW5QDBAAuH0IDBAAu /YgDBAA+AzMDBAA+alADBABNSFIDBABU9lMDBABbhOEDBABb9jkDBABe94sDBACS E0UDBACSE+UDBACwdA0DBACyFh0DBAC5m2cDBAC51cEDBAC5/NMDBAC89HsDBADB CXwDBADBo18DBADCPhADBADUEmsDBADUGHEDBADVbZgwgbYEAgACMIGvAwUDKhEM QAMFAyoREAADBQMqEREAAwUDKhEegAMFAyoRIEADBQMqETfAAwUDKhFDAAMFAyoR RgADBQMqEU7AAwUDKhF0wAMFAyoRhYADBQMqEY1AAwUDKhGRAAMFAyoRvsADBQMq EdMAAwUDKhHXgAMFAyoR4kADBQMqEepAAwUDKhIHAAMFAyoSCYADBQMqEhYAAwUD KhJggAMFAyoSb4ADBQMqEnsAAwUDKhLHgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQzwwDQYJKoZIhvcNAQELBQADggEBAJ4PYVYmHk+vGpOgr9e8DkF6R1c8pav5 fDRC9xh6s8idEpohdcp9/EvYjjaqdzwLVLtGFJGROceTzxID+L0qZ8Ty9GdXn/Nx LHUA+hBv1ltjRjzFArueC8Wg8RoC/SSRdT11owCY0VrKdUsnkxJ+qsZqZLPEdo6J kxpk7cJRC8YaH3Iai632fNQQQ6/Wzf2KhjeXm/RuwraTr96Gl0NvTuNQobDK29gv rl/2BxXfmtenobLpaPCv7mLf9fIRf8mxBEhZZo6qjgD3mw19NN8qK01s1q7h5vjF ywViH8/vnBko0YxcQOcP7gOJFUbEuUVUF0ORQIOxLpMk1X02J0WHVcc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:23 2026 by rpki-client