This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer File: rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer (raw, json) Hash identifier: +0Z2U2lips/YhND/ev98Got5o/s4ejoGdBGkSJ1i92Y= Subject key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3592C4CBDE096336D64684F0DCB886 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15941 AS: 20818 AS: 39251 AS: 47624 IP: 77.76.16.0/20 IP: 85.217.224.0/19 IP: 91.92.72.0 -- 91.92.103.255 IP: 91.206.138.0/23 IP: 91.207.190.0/23 IP: 91.223.66.0/24 IP: 91.245.192.0/24 IP: 185.111.212.0/22 IP: 185.163.140.0/22 IP: 185.225.84.0/22 IP: 185.229.252.0/22 IP: 193.37.238.0/24 IP: 194.169.223.0/24 IP: 194.169.230.0/24 IP: 194.169.237.0/24 IP: 194.169.242.0/24 IP: 195.238.84.0/23 IP: 212.70.140.0 -- 212.70.147.255 IP: 213.232.88.0/22 IP: 2a0b:f800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:92:c4:cb:de:09:63:36:d6:46:84:f0:dc:b8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:80:23:85:ae:18:04:5f:03:14:9c:c0:00: 95:1e:2f:7d:67:51:8f:dc:e7:11:ff:41:7f:85:d2: 26:89:bb:22:30:d7:70:70:77:f5:10:78:00:3c:5c: fd:a5:c4:3d:0d:49:25:ad:29:01:1c:b2:5c:10:75: 45:2d:9a:80:f8:2b:db:85:c7:12:e0:d9:ca:ff:17: e3:ae:5b:05:cc:36:c5:7b:69:b1:4e:6b:7b:9b:19: 01:54:3b:28:4b:e6:0d:45:2b:83:fa:8c:d0:02:56: 45:b1:57:d6:54:93:e5:f8:32:40:a6:55:08:aa:ee: 60:dd:77:71:45:03:02:05:cd:cd:af:d2:e3:e5:99: e0:56:b1:fa:5d:a0:91:96:77:1a:72:ec:42:e4:cb: ac:b3:1f:38:da:b2:bd:03:97:43:82:2c:84:24:b4: 49:13:8c:b3:b1:4f:ce:56:3d:08:06:b1:d3:50:dd: 4f:e8:1d:30:88:35:6b:8f:ee:5f:39:f4:60:04:1e: 10:f9:dc:08:a6:76:41:06:40:82:ac:02:ea:8c:63: 65:48:13:91:6f:c7:53:b6:1d:04:99:f7:8d:39:12: 76:bc:e5:c8:75:04:9c:07:81:f5:37:c9:15:3a:cc: e7:9c:34:7c:96:b0:a3:fa:b5:60:db:2f:2a:ca:d4: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.16.0/20 85.217.224.0/19 91.92.72.0-91.92.103.255 91.206.138.0/23 91.207.190.0/23 91.223.66.0/24 91.245.192.0/24 185.111.212.0/22 185.163.140.0/22 185.225.84.0/22 185.229.252.0/22 193.37.238.0/24 194.169.223.0/24 194.169.230.0/24 194.169.237.0/24 194.169.242.0/24 195.238.84.0/23 212.70.140.0-212.70.147.255 213.232.88.0/22 IPv6: 2a0b:f800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15941 20818 39251 47624 Signature Algorithm: sha256WithRSAEncryption 11:a0:68:52:6f:fa:30:5e:65:9f:ae:0a:ec:c1:68:77:bc:0a: 2b:39:f4:4b:b7:d3:00:9e:92:81:1a:3f:97:ec:68:a0:6c:18: 27:af:3a:d5:1c:ba:c6:2a:a8:14:2d:39:84:d8:a7:a8:7c:b3: c1:95:bb:a5:e4:1d:a7:61:30:6f:a8:35:3b:c2:c5:4a:b1:67: 9b:f8:e5:70:3d:6f:f9:ea:7f:57:b0:96:a0:e0:6f:67:33:86: 0d:f6:93:01:94:f2:23:0b:1a:da:6f:77:30:6c:63:d4:8a:47: 39:fd:27:8e:89:1c:da:4e:e9:3e:9c:ce:85:35:77:0f:ef:89: 61:d0:0a:76:10:6e:c4:92:39:72:e4:46:ce:0b:1c:ca:f7:a0: ea:4d:50:fc:fa:83:cb:eb:02:5e:af:67:6b:81:87:1e:14:fb: 37:0f:91:f4:4e:31:f8:56:2a:dd:b8:ed:67:31:32:76:dc:5c: 2c:3e:72:df:98:81:5d:b5:77:b6:19:83:87:84:ac:88:fe:2c: f1:be:1d:58:43:2e:98:bf:9d:3e:b2:f7:1c:ab:6a:95:0c:d7: 24:a6:d6:1f:9e:08:e3:17:a5:02:27:31:0f:01:72:75:af:0f: 5e:b2:46:ba:a3:2e:6f:61:0b:c8:8f:e5:d1:b1:4b:8b:11:f4: 45:70:6f:4c -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgISAZt7NZLEy94JYzbWRoTw3LiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzFmNzIxYjdiN2U2ZDA0OWZiZmU1MjBlMWNhODljMWNhMjU2ODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+AI4WuGARfAxScwACVHi99Z1GP 3OcR/0F/hdImibsiMNdwcHf1EHgAPFz9pcQ9DUklrSkBHLJcEHVFLZqA+CvbhccS 4NnK/xfjrlsFzDbFe2mxTmt7mxkBVDsoS+YNRSuD+ozQAlZFsVfWVJPl+DJAplUI qu5g3XdxRQMCBc3Nr9Lj5ZngVrH6XaCRlncacuxC5Mussx842rK9A5dDgiyEJLRJ E4yzsU/OVj0IBrHTUN1P6B0wiDVrj+5fOfRgBB4Q+dwIpnZBBkCCrALqjGNlSBOR b8dTth0EmfeNORJ2vOXIdQScB4H1N8kVOsznnDR8lrCj+rVg2y8qytSN5QIDAQAB o4IDPTCCAzkwHQYDVR0OBBYEFKwfcht7fm0En7/lIOHKicHKJWgTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzU2ZDI2 Ny0xYzQzLTQ3YzgtYWZiMi02NGQyOWM4NmJmM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNTZkMjY3 LTFjNDMtNDdjOC1hZmIyLTY0ZDI5Yzg2YmYzZS8xL3JCOXlHM3QtYlFTZnYtVWc0 Y3FKd2NvbGFCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGuBggrBgEF BQcBBwEB/wSBnjCBmzCBiQQCAAEwgYIDBARNTBADBAVV2eAwDAMEA1tcSAMEA1tc YAMEAVvOigMEAVvPvgMEAFvfQgMEAFv1wAMEArlv1AMEArmjjAMEArnhVAMEArnl /AMEAMEl7gMEAMKp3wMEAMKp5gMEAMKp7QMEAMKp8gMEAcPuVDAMAwQC1EaMAwQC 1EaQAwQC1ehYMA0EAgACMAcDBQMqC/gAMCcGCCsGAQUFBwEIAQH/BBgwFqAUMBIC Aj5FAgJRUgIDAJlTAgMAuggwDQYJKoZIhvcNAQELBQADggEBABGgaFJv+jBeZZ+u CuzBaHe8Cis59Eu30wCekoEaP5fsaKBsGCevOtUcusYqqBQtOYTYp6h8s8GVu6Xk HadhMG+oNTvCxUqxZ5v45XA9b/nqf1ewlqDgb2czhg32kwGU8iMLGtpvdzBsY9SK Rzn9J46JHNpO6T6czoU1dw/viWHQCnYQbsSSOXLkRs4LHMr3oOpNUPz6g8vrAl6v Z2uBhx4U+zcPkfROMfhWKt247WcxMnbcXCw+ct+YgV21d7YZg4eErIj+LPG+HVhD Lpi/nT6y9xyrapUM1ySm1h+eCOMXpQInMQ8BcnWvD16yRrqjLm9hC8iP5dGxS4sR 9EVwb0w= -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:34 2026 by rpki-client