This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer File: 2sedKFW4l0GCCNR7puUUYAFbXXs.cer (raw, json) Hash identifier: h3GP2X283FOnrO815Rm6yhcSX4jhty2/pA9jqgorp4I= Subject key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1A7F0E8B064F711C1BB028140009 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56871 IP: 91.193.248.0/22 IP: 91.197.200.0/22 IP: 185.54.24.0/22 IP: 185.92.172.0/22 IP: 185.95.188.0/22 IP: 185.145.136.0/22 IP: 185.154.216.0/22 IP: 185.226.68.0/22 IP: 185.227.40.0/22 IP: 185.227.248.0/22 IP: 185.231.248.0/22 IP: 185.233.224.0/22 IP: 185.240.192.0/22 IP: 185.241.12.0/22 IP: 185.242.240.0/22 IP: 185.243.196.0/22 IP: 185.244.88.0/22 IP: 185.245.216.0/22 IP: 185.246.108.0/22 IP: 185.246.136.0/22 IP: 185.246.244.0/22 IP: 185.247.72.0/22 IP: 185.248.232.0/22 IP: 185.249.128.0/22 IP: 185.249.244.0 -- 185.249.251.255 IP: 185.251.156.0/22 IP: 185.251.168.0/22 IP: 185.252.104.0/22 IP: 185.254.184.0/22 IP: 185.255.224.0/22 IP: 192.145.224.0/22 IP: 193.43.20.0/22 IP: 193.56.212.0/22 IP: 193.223.64.0/22 IP: 194.33.88.0/22 IP: 213.184.80.0/22 IP: 2a07:8f80::/29 IP: 2a12:cdc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1a:7f:0e:8b:06:4f:71:1c:1b:b0:28:14:00:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dac79d2855b897418208d47ba6e51460015b5d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:27:85:2f:0f:15:d8:d5:7f:3d:fd:c7:82: a4:07:d8:3a:42:68:9d:94:c0:2a:e1:e3:c5:24:4c: 43:f1:ff:aa:a5:da:35:7c:bf:f5:3d:59:42:a5:1a: 6a:e1:ca:9e:01:99:7b:7d:02:41:36:a1:8a:9b:c1: e0:46:54:0b:f7:53:40:46:be:76:22:eb:c2:45:cf: 58:63:d5:36:a3:60:d3:a0:3e:28:b8:a9:c7:03:11: 26:ad:38:49:f4:77:96:cf:99:f2:26:20:5d:6b:1a: 39:08:e4:6b:0b:84:4d:f0:6c:9a:39:be:fc:f9:f1: 9a:4c:7a:44:6d:be:2e:94:70:37:f0:67:7b:e3:d7: 7b:49:1d:bd:b5:f5:a6:f9:d5:89:d6:5e:f8:e2:cf: 51:46:27:90:b6:c6:5b:87:24:13:95:bb:58:c6:cb: 4a:a5:e6:19:bd:5d:3a:07:92:28:2a:17:95:b9:da: ce:34:a5:15:46:dc:2a:04:8b:25:d0:bd:b5:32:4a: 8a:66:71:e0:5a:f8:40:9a:39:74:bf:01:48:d6:b2: 5c:42:0e:b0:e8:e6:4c:5a:09:ce:76:a4:69:4e:bf: b2:f2:af:d2:8f:c8:02:f4:a4:2d:bf:e4:a4:f6:11: 7d:aa:55:e8:2f:1c:e0:2d:86:ce:f1:ca:f5:39:7b: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.248.0/22 91.197.200.0/22 185.54.24.0/22 185.92.172.0/22 185.95.188.0/22 185.145.136.0/22 185.154.216.0/22 185.226.68.0/22 185.227.40.0/22 185.227.248.0/22 185.231.248.0/22 185.233.224.0/22 185.240.192.0/22 185.241.12.0/22 185.242.240.0/22 185.243.196.0/22 185.244.88.0/22 185.245.216.0/22 185.246.108.0/22 185.246.136.0/22 185.246.244.0/22 185.247.72.0/22 185.248.232.0/22 185.249.128.0/22 185.249.244.0-185.249.251.255 185.251.156.0/22 185.251.168.0/22 185.252.104.0/22 185.254.184.0/22 185.255.224.0/22 192.145.224.0/22 193.43.20.0/22 193.56.212.0/22 193.223.64.0/22 194.33.88.0/22 213.184.80.0/22 IPv6: 2a07:8f80::/29 2a12:cdc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56871 Signature Algorithm: sha256WithRSAEncryption 79:8c:3e:03:5b:ea:e7:70:14:36:44:3e:50:c6:b9:80:6a:f1: 49:15:17:a3:ce:e7:bb:53:2a:04:cb:c5:38:fc:eb:07:a0:1b: d0:4d:95:48:d6:8c:17:f0:e3:c4:e8:86:85:4e:86:32:48:9e: 2e:7c:50:51:43:32:d3:06:7b:26:0f:11:96:19:1b:81:1f:6c: 50:5d:18:1b:b9:a1:49:2a:eb:e2:b4:76:f4:6d:16:30:e2:36: 41:42:ac:d2:e4:09:41:d0:6f:cd:a6:4b:2d:41:0b:a3:45:cf: 93:0a:09:74:09:ce:a6:5c:a8:e1:7a:18:85:b1:f4:de:ed:9f: 1d:b9:27:12:2a:77:81:8f:c6:0b:93:16:c8:30:66:8f:dd:70: b8:cc:5b:03:f3:2e:f3:94:01:2a:b7:ec:63:0c:79:47:bb:1e: 01:4f:a8:bb:5e:4d:45:8b:11:1f:d7:6c:85:a3:b3:97:13:cf: 67:27:41:b4:48:4e:cc:2c:3d:e2:fd:4f:4d:8f:be:7a:44:af: 69:ef:be:7c:be:f1:46:e5:20:28:32:b7:86:65:84:5e:5b:aa: 37:ee:c1:97:bc:49:47:bd:6e:9b:49:28:eb:f9:ab:a7:9f:57: bb:6e:63:d9:77:bf:81:75:aa:06:4f:a1:87:92:6a:4e:73:8c: 99:3d:89:1a -----BEGIN CERTIFICATE----- MIIGjDCCBXSgAwIBAgISAZt5fxp/DosGT3EcG7AoFAAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWM3OWQyODU1Yjg5NzQxODIwOGQ0N2JhNmU1MTQ2MDAxNWI1ZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTsnhS8PFdjVfz39x4KkB9g6Qmid lMAq4ePFJExD8f+qpdo1fL/1PVlCpRpq4cqeAZl7fQJBNqGKm8HgRlQL91NARr52 IuvCRc9YY9U2o2DToD4ouKnHAxEmrThJ9HeWz5nyJiBdaxo5CORrC4RN8GyaOb78 +fGaTHpEbb4ulHA38Gd749d7SR29tfWm+dWJ1l744s9RRieQtsZbhyQTlbtYxstK peYZvV06B5IoKheVudrONKUVRtwqBIsl0L21MkqKZnHgWvhAmjl0vwFI1rJcQg6w 6OZMWgnOdqRpTr+y8q/Sj8gC9KQtv+Sk9hF9qlXoLxzgLYbO8cr1OXtFAQIDAQAB o4IDmDCCA5QwHQYDVR0OBBYEFNrHnShVuJdBggjUe6blFGABW117MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzViMTE0 OS02NDdkLTQwNjctOTgwNy00NDVkNDU4OGMzMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNWIxMTQ5 LTY0N2QtNDA2Ny05ODA3LTQ0NWQ0NTg4YzMxMi8xLzJzZWRLRlc0bDBHQ0NOUjdw dVVVWUFGYlhYcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBFQYIKwYB BQUHAQcBAf8EggEEMIIBADCB5wQCAAEwgeADBAJbwfgDBAJbxcgDBAK5NhgDBAK5 XKwDBAK5X7wDBAK5kYgDBAK5mtgDBAK54kQDBAK54ygDBAK54/gDBAK55/gDBAK5 6eADBAK58MADBAK58QwDBAK58vADBAK588QDBAK59FgDBAK59dgDBAK59mwDBAK5 9ogDBAK59vQDBAK590gDBAK5+OgDBAK5+YAwDAMEArn59AMEArn5+AMEArn7nAME Arn7qAMEArn8aAMEArn+uAMEArn/4AMEAsCR4AMEAsErFAMEAsE41AMEAsHfQAME AsIhWAMEAtW4UDAUBAIAAjAOAwUDKgePgAMFAyoSzcAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAN4nMA0GCSqGSIb3DQEBCwUAA4IBAQB5jD4DW+rncBQ2RD5QxrmA avFJFRejzue7UyoEy8U4/OsHoBvQTZVI1owX8OPE6IaFToYySJ4ufFBRQzLTBnsm DxGWGRuBH2xQXRgbuaFJKuvitHb0bRYw4jZBQqzS5AlB0G/NpkstQQujRc+TCgl0 Cc6mXKjhehiFsfTe7Z8duScSKneBj8YLkxbIMGaP3XC4zFsD8y7zlAEqt+xjDHlH ux4BT6i7Xk1FixEf12yFo7OXE89nJ0G0SE7MLD3i/U9Nj756RK9p7758vvFG5SAo MreGZYReW6o37sGXvElHvW6bSSjr+aunn1e7bmPZd7+BdaoGT6GHkmpOc4yZPYka -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:27 2026 by rpki-client