This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer File: z9bhYdz7e3J3UUnUNbebqdVtFBc.cer (raw, json) Hash identifier: yyQOzcsDeOjYAB+rempUlD2RLE8wovU/ibjViQ6JH5o= Subject key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA43C6F61028D89D99482D23FE1278E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2855 -- 2856 AS: 6871 AS: 25041 AS: 25127 AS: 49182 AS: 57688 AS: 204047 AS: 212556 IP: 5.80.0.0/15 IP: 31.48.0.0/13 IP: 31.185.32.0/19 IP: 31.185.128.0/17 IP: 37.152.192.0/18 IP: 46.208.0.0/16 IP: 51.6.0.0/15 IP: 51.9.0.0/16 IP: 51.14.0.0/16 IP: 62.6.0.0/15 IP: 62.172.0.0/16 IP: 80.189.0.0/16 IP: 80.229.0.0/16 IP: 81.128.0.0/11 IP: 81.174.128.0/17 IP: 83.216.128.0/19 IP: 84.51.128.0/18 IP: 84.92.0.0/15 IP: 86.128.0.0/10 IP: 87.112.0.0/14 IP: 91.125.0.0/16 IP: 95.129.184.0/21 IP: 109.144.0.0/12 IP: 146.66.32.0/19 IP: 146.90.0.0/16 IP: 185.52.108.0/22 IP: 185.93.168.0/22 IP: 192.12.73.0/24 IP: 192.122.217.0 -- 192.122.234.255 IP: 193.37.160.0/20 IP: 194.72.0.0/14 IP: 194.79.48.0/22 IP: 195.99.0.0/16 IP: 195.166.128.0/19 IP: 195.171.0.0/16 IP: 195.213.0.0/16 IP: 212.56.64.0/18 IP: 212.82.0.0/19 IP: 212.140.0.0/16 IP: 212.159.0.0/17 IP: 213.1.0.0/16 IP: 213.31.0.0/16 IP: 213.120.0.0/14 IP: 213.162.96.0/19 IP: 217.32.0.0/12 IP: 2a01:7ae0::/32 IP: 2a02:16c8::/32 IP: 2a06:7200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3c:6f:61:02:8d:89:d9:94:82:d2:3f:e1:27:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:8f:0b:e7:9e:d9:9a:67:97:ac:4d:43:d2: 4f:cc:b9:4a:c5:ca:87:1f:ab:e4:e0:bf:45:09:bf: dd:a8:1b:c3:c6:6a:8e:4c:2f:1e:7d:ff:f2:71:9a: 4e:69:26:e2:7e:a6:03:c9:40:0b:b4:b1:77:d4:3d: eb:5d:49:6c:ec:84:7f:68:b2:de:a2:85:29:00:a1: 72:6e:1b:ce:60:cb:b5:3d:9b:14:f0:d7:65:cb:ad: c7:2e:af:43:d2:3d:bb:ad:58:21:d0:18:81:39:52: 77:16:00:cf:18:cc:5e:a9:9e:e6:e3:1e:52:4b:7f: 2c:5a:9d:92:d7:fc:1f:7b:90:3c:9c:4d:c8:62:1d: 0e:44:63:d2:e6:d6:f0:a6:54:74:4e:02:67:d4:31: 0e:35:9a:77:08:6e:ab:4f:94:e0:6f:84:f9:11:bb: 90:47:1f:c3:5c:53:91:4e:98:20:90:59:e0:5c:85: fc:69:ad:ff:68:49:ee:04:72:79:84:a5:6d:e8:7b: 63:40:9c:23:81:88:47:03:7e:39:61:2a:12:58:68: 85:d3:01:3f:64:15:57:d2:67:11:fd:45:d1:f9:41: cd:b8:0f:8b:8d:6c:5c:af:13:6d:dc:ac:e2:62:f7: 2b:1c:7d:a1:50:80:ce:29:e4:ee:14:c4:76:35:86: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.80.0.0/15 31.48.0.0/13 31.185.32.0/19 31.185.128.0/17 37.152.192.0/18 46.208.0.0/16 51.6.0.0/15 51.9.0.0/16 51.14.0.0/16 62.6.0.0/15 62.172.0.0/16 80.189.0.0/16 80.229.0.0/16 81.128.0.0/11 81.174.128.0/17 83.216.128.0/19 84.51.128.0/18 84.92.0.0/15 86.128.0.0/10 87.112.0.0/14 91.125.0.0/16 95.129.184.0/21 109.144.0.0/12 146.66.32.0/19 146.90.0.0/16 185.52.108.0/22 185.93.168.0/22 192.12.73.0/24 192.122.217.0-192.122.234.255 193.37.160.0/20 194.72.0.0/14 194.79.48.0/22 195.99.0.0/16 195.166.128.0/19 195.171.0.0/16 195.213.0.0/16 212.56.64.0/18 212.82.0.0/19 212.140.0.0/16 212.159.0.0/17 213.1.0.0/16 213.31.0.0/16 213.120.0.0/14 213.162.96.0/19 217.32.0.0/12 IPv6: 2a01:7ae0::/32 2a02:16c8::/32 2a06:7200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2855-2856 6871 25041 25127 49182 57688 204047 212556 Signature Algorithm: sha256WithRSAEncryption 54:93:54:e5:4c:2e:92:92:83:bb:4f:77:85:09:af:a1:5f:cc: aa:c0:79:36:fd:b2:81:4b:e1:be:53:70:cc:f6:96:db:d1:79: 32:8d:cd:0b:e9:56:7a:42:3b:94:9f:11:f1:69:95:7a:c9:ac: 61:33:78:06:1f:1a:3c:47:82:75:6f:31:c6:86:f0:9f:00:16: 57:85:3d:9e:45:71:a5:ae:a7:12:71:d7:5f:56:41:78:07:6b: ac:b5:26:7a:df:dc:31:38:c5:0b:34:50:80:10:2d:bd:d3:1f: 13:f7:62:fa:7d:f7:64:f0:ee:d4:34:7d:7d:67:cf:10:05:b7: 40:f0:be:41:c9:d4:d6:1b:0e:b5:c6:df:da:5d:02:e6:07:34: e9:79:76:bf:fe:5b:9f:6c:bc:00:7b:44:39:f2:79:6b:52:e4: 84:c9:d5:a2:4a:07:01:b1:0c:63:86:d2:fa:eb:b5:07:9a:ce: 3c:23:15:0e:d1:d2:04:b5:fc:e7:1f:44:42:dd:b5:e5:17:22: e1:c7:69:af:cd:d5:4c:f4:be:00:0f:71:8f:07:c0:a6:1b:79: 9b:04:31:3e:ed:f0:db:65:ba:fc:b2:d8:35:09:26:e9:e4:6e: d2:7c:dd:33:91:e1:f1:39:de:a3:87:20:4b:17:0f:aa:3d:cf: 5e:f4:c5:40 -----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgISAZt7pDxvYQKNidmUgtI/4SeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmQ2ZTE2MWRjZmI3YjcyNzc1MTQ5ZDQzNWI3OWJhOWQ1NmQxNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt+PC+ee2Zpnl6xNQ9JPzLlKxcqH H6vk4L9FCb/dqBvDxmqOTC8eff/ycZpOaSbifqYDyUALtLF31D3rXUls7IR/aLLe ooUpAKFybhvOYMu1PZsU8Ndly63HLq9D0j27rVgh0BiBOVJ3FgDPGMxeqZ7m4x5S S38sWp2S1/wfe5A8nE3IYh0ORGPS5tbwplR0TgJn1DEONZp3CG6rT5Tgb4T5EbuQ Rx/DXFORTpggkFngXIX8aa3/aEnuBHJ5hKVt6HtjQJwjgYhHA345YSoSWGiF0wE/ ZBVX0mcR/UXR+UHNuA+LjWxcrxNt3KziYvcrHH2hUIDOKeTuFMR2NYbocwIDAQAB o4ID4TCCA90wHQYDVR0OBBYEFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzg1MjE0 MC1hMjdmLTQ0OWItYjVmZi0yMjM3NDJlZTQzNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvODUyMTQw LWEyN2YtNDQ5Yi1iNWZmLTIyMzc0MmVlNDM3NS8xL3o5YmhZZHo3ZTNKM1VVblVO YmVicWRWdEZCYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBOQYIKwYB BQUHAQcBAf8EggEoMIIBJDCCAQMEAgABMIH8AwMBBVADAwMfMAMEBR+5IAMEBx+5 gAMEBiWYwAMDAC7QAwMBMwYDAwAzCQMDADMOAwMBPgYDAwA+rAMDAFC9AwMAUOUD AwVRgAMEB1GugAMEBVPYgAMEBlQzgAMDAVRcAwMGVoADAwJXcAMDAFt9AwQDX4G4 AwMEbZADBAWSQiADAwCSWgMEArk0bAMEArldqAMEAMAMSTAMAwQAwHrZAwQAwHrq AwQEwSWgAwMCwkgDBALCTzADAwDDYwMEBcOmgAMDAMOrAwMAw9UDBAbUOEADBAXU UgADAwDUjAMEB9SfAAMDANUBAwMA1R8DAwLVeAMEBdWiYAMDBNkgMBsEAgACMBUD BQAqAXrgAwUAKgIWyAMFAyoGcgAwPwYIKwYBBQUHAQgBAf8EMDAuoCwwKjAIAgIL JwICCygCAhrXAgJh0QICYicCAwDAHgIDAOFYAgMDHQ8CAwM+TDANBgkqhkiG9w0B AQsFAAOCAQEAVJNU5UwukpKDu093hQmvoV/MqsB5Nv2ygUvhvlNwzPaW29F5Mo3N C+lWekI7lJ8R8WmVesmsYTN4Bh8aPEeCdW8xxobwnwAWV4U9nkVxpa6nEnHXX1ZB eAdrrLUmet/cMTjFCzRQgBAtvdMfE/di+n33ZPDu1DR9fWfPEAW3QPC+QcnU1hsO tcbf2l0C5gc06Xl2v/5bn2y8AHtEOfJ5a1LkhMnVokoHAbEMY4bS+uu1B5rOPCMV DtHSBLX85x9EQt215Rci4cdpr83VTPS+AA9xjwfApht5mwQxPu3w22W6/LLYNQkm 6eRu0nzdM5Hh8Tneo4cgSxcPqj3PXvTFQA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:18 2026 by rpki-client