This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer File: nSpHi7CwjmYbCy-fvok1vJwqKKE.cer (raw, json) Hash identifier: LsifcN+CYPltZkdGrZON9PUbnusCaJitPuL/TaUz43s= Subject key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15DB17591889B7A872581589108EB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2601 AS: 43109 AS: 43481 AS: 44519 AS: 56362 AS: 62206 IP: 2.56.108.0/22 IP: 5.181.84.0/22 IP: 45.9.28.0/22 IP: 45.13.188.0/22 IP: 45.81.112.0/22 IP: 45.88.136.0/22 IP: 45.94.168.0/22 IP: 45.132.180.0/22 IP: 45.138.180.0/22 IP: 45.144.212.0/22 IP: 45.151.0.0/22 IP: 77.83.36.0/22 IP: 85.209.120.0/22 IP: 91.223.110.0/24 IP: 146.19.125.0/24 IP: 185.43.248.0/22 IP: 185.200.60.0/22 IP: 193.28.177.0/24 IP: 193.30.240.0/22 IP: 193.57.40.0/22 IP: 194.15.52.0/22 IP: 194.242.96.0/22 IP: 195.62.24.0/23 IP: 195.177.92.0/22 IP: 195.211.188.0/22 IP: 2a01:7120::/32 IP: 2a07:9200::/29 IP: 2a09:340::/29 IP: 2a09:c440::/29 IP: 2a0c:5d40::/29 IP: 2a0c:a580::/29 IP: 2a10:dfc0::/29 IP: 2a10:fac0::/29 IP: 2a11:580::/29 IP: 2a11:1600::/29 IP: 2a11:2a80::/29 IP: 2a11:3900::/29 IP: 2a11:d680::/29 IP: 2a12:9f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:db:17:59:18:89:b7:a8:72:58:15:89:10:8e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:07:17:17:2e:6a:e7:87:9b:63:12:07:18: eb:b8:6d:4a:61:6c:67:e3:54:5c:9d:e3:65:0f:a4: 0c:57:dd:fa:22:6c:1d:38:47:0d:0d:8a:95:17:ef: 45:df:0f:ac:05:bb:af:4e:97:76:0d:fe:cc:ea:64: fe:14:2c:57:f0:89:c5:d1:05:09:e4:18:ef:0d:5e: 4c:09:f8:75:32:a6:18:cc:51:25:c3:67:1a:3e:6e: da:fe:a0:9e:71:97:14:a9:d4:38:f7:5e:6f:6a:fe: c6:d5:af:e4:0e:4f:f0:79:ad:9f:88:e2:06:61:40: ce:a1:4b:61:28:7a:6e:92:3f:e2:44:c2:53:aa:2b: b4:dc:1a:4b:19:56:8e:7f:78:8f:b2:a3:00:a7:c9: d6:92:3a:3d:b7:d5:e3:a6:5c:6e:61:71:fe:60:1e: 98:3a:da:e1:32:24:ad:59:46:b1:4c:7a:c1:8f:14: c4:80:fe:3c:cb:78:bf:fa:e3:fc:c2:f4:0f:5c:9a: b8:61:f5:19:ef:c0:ce:78:13:be:36:6b:56:a6:a5: b9:67:32:dd:ea:05:ff:55:f2:b0:d5:4b:20:0a:4c: 60:b9:36:06:b4:5e:f1:ee:18:00:7a:39:62:44:5e: 98:6b:c5:09:41:cd:53:70:a4:54:7a:3a:6d:cc:2d: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.108.0/22 5.181.84.0/22 45.9.28.0/22 45.13.188.0/22 45.81.112.0/22 45.88.136.0/22 45.94.168.0/22 45.132.180.0/22 45.138.180.0/22 45.144.212.0/22 45.151.0.0/22 77.83.36.0/22 85.209.120.0/22 91.223.110.0/24 146.19.125.0/24 185.43.248.0/22 185.200.60.0/22 193.28.177.0/24 193.30.240.0/22 193.57.40.0/22 194.15.52.0/22 194.242.96.0/22 195.62.24.0/23 195.177.92.0/22 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/29 2a09:c440::/29 2a0c:5d40::/29 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/29 2a11:580::/29 2a11:1600::/29 2a11:2a80::/29 2a11:3900::/29 2a11:d680::/29 2a12:9f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2601 43109 43481 44519 56362 62206 Signature Algorithm: sha256WithRSAEncryption 54:83:9a:e4:89:46:b2:a8:f1:56:4f:33:06:4d:2c:66:e7:6d: fd:98:64:f5:fc:1d:2d:12:b5:9f:e0:15:16:bc:cf:5e:31:85: 25:7b:35:02:2f:ff:4f:15:29:85:be:ec:bc:f2:85:66:ef:d7: a9:fe:b2:ed:f7:17:31:ea:97:47:e5:68:fd:8c:f4:52:bd:f3: 4c:c1:76:c3:e3:15:8b:fb:79:09:a0:43:d1:fa:16:ec:27:56: 28:1f:7b:57:e0:d1:ff:cc:34:cf:01:fe:88:49:12:e7:fb:18: 1f:f8:b8:c8:3c:e3:83:31:9e:d4:fb:72:f2:7c:59:87:d7:7a: c9:38:c5:a6:ba:53:fd:b8:70:cf:16:0e:e2:08:fd:07:72:e5: 04:37:4c:cb:7c:6f:68:03:18:62:b3:0f:85:d7:23:9b:15:07: 11:7e:bf:2c:bc:63:27:a2:23:8f:3c:3b:97:b4:12:32:14:af: ac:3d:bb:44:32:ee:f3:a2:84:c1:30:e5:4d:d3:0e:f3:08:e2: d0:e4:bc:9c:ec:97:8d:3f:a4:7e:f2:9f:50:10:6c:b6:95:fe: 2b:99:c9:e1:7f:ba:9c:bf:0f:34:7e:8a:0a:55:8a:59:36:94: 51:37:f0:2a:be:fa:d0:0c:26:08:5b:8b:b1:f3:a4:a0:06:c7: b4:b8:b7:68 -----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgISAZt/FdsXWRiJt6hyWBWJEI63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQsHFxcuaueHm2MSBxjruG1KYWxn 41RcneNlD6QMV936ImwdOEcNDYqVF+9F3w+sBbuvTpd2Df7M6mT+FCxX8InF0QUJ 5BjvDV5MCfh1MqYYzFElw2caPm7a/qCecZcUqdQ4915vav7G1a/kDk/wea2fiOIG YUDOoUthKHpukj/iRMJTqiu03BpLGVaOf3iPsqMAp8nWkjo9t9XjplxuYXH+YB6Y OtrhMiStWUaxTHrBjxTEgP48y3i/+uP8wvQPXJq4YfUZ78DOeBO+NmtWpqW5ZzLd 6gX/VfKw1UsgCkxguTYGtF7x7hgAejliRF6Ya8UJQc1TcKRUejptzC1b/QIDAQAB o4IDujCCA7YwHQYDVR0OBBYEFJ0qR4uwsI5mGwsvn76JNbycKiihMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzY2M2Rm NS01ODBjLTRmMmMtYTY2Yy1lZWYzNTExZjZjNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNjYzZGY1 LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1ZYkN5LWZ2 b2sxdkp3cUtLRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBHwYIKwYB BQUHAQcBAf8EggEOMIIBCjCBnQQCAAEwgZYDBAICOGwDBAIFtVQDBAItCRwDBAIt DbwDBAItUXADBAItWIgDBAItXqgDBAIthLQDBAItirQDBAItkNQDBAItlwADBAJN UyQDBAJV0XgDBABb324DBACSE30DBAK5K/gDBAK5yDwDBADBHLEDBALBHvADBALB OSgDBALCDzQDBALC8mADBAHDPhgDBALDsVwDBALD07wwaAQCAAIwYgMFACoBcSAD BQMqB5IAAwUDKgkDQAMFAyoJxEADBQMqDF1AAwUDKgylgAMFAyoQ38ADBQMqEPrA AwUDKhEFgAMFAyoRFgADBQMqESqAAwUDKhE5AAMFAyoR1oADBQMqEp8AMDIGCCsG AQUFBwEIAQH/BCMwIaAfMB0CAgopAgMAqGUCAwCp2QIDAK3nAgMA3CoCAwDy/jAN BgkqhkiG9w0BAQsFAAOCAQEAVIOa5IlGsqjxVk8zBk0sZudt/Zhk9fwdLRK1n+AV FrzPXjGFJXs1Ai//TxUphb7svPKFZu/Xqf6y7fcXMeqXR+Vo/Yz0Ur3zTMF2w+MV i/t5CaBD0foW7CdWKB97V+DR/8w0zwH+iEkS5/sYH/i4yDzjgzGe1Pty8nxZh9d6 yTjFprpT/bhwzxYO4gj9B3LlBDdMy3xvaAMYYrMPhdcjmxUHEX6/LLxjJ6Ijjzw7 l7QSMhSvrD27RDLu86KEwTDlTdMO8wji0OS8nOyXjT+kfvKfUBBstpX+K5nJ4X+6 nL8PNH6KClWKWTaUUTfwKr760AwmCFuLsfOkoAbHtLi3aA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:31 2026 by rpki-client