This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.cer (raw, json) Hash identifier: uBx6HgtIpsAtDBJi6ZoP4oOT1LTnB2rQunlBItV0uwc= Subject key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83C0313F7C3EDC660142E6D1526B01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200567 IP: 45.146.132.0/22 IP: 46.16.216.0/21 IP: 185.39.176.0/22 IP: 185.70.144.0/22 IP: 185.109.32.0/22 IP: 192.109.223.0/24 IP: 192.109.231.0/24 IP: 192.109.235.0/24 IP: 192.109.239.0/24 IP: 2a02:4500::/29 IP: 2a05:2a80::/29 IP: 2a06:4e40::/29 IP: 2a0f:1000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c0:31:3f:7c:3e:dc:66:01:42:e6:d1:52:6b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:4d:91:ba:3b:06:c8:8f:2b:d0:b9:ab:35: 39:50:a9:6d:fa:a9:e1:39:3f:5c:61:10:dd:b1:d7: 95:57:08:6a:50:5f:fe:b1:41:a8:5e:0c:d6:d9:1d: b9:97:94:b7:3a:2e:b9:00:c4:b0:42:d6:4a:65:46: 97:5a:51:3d:fb:20:a2:b9:f8:39:03:1c:64:17:15: 73:ed:c7:cd:a4:d8:0e:a5:e7:d2:2b:26:6c:f2:a9: 66:86:7c:97:48:c0:75:82:a8:6f:31:a4:6c:ba:ab: e2:bd:84:8a:1e:a0:4b:3a:0f:ca:f4:1e:21:d7:9f: 7c:48:2e:e7:4d:3f:89:f0:48:78:9d:10:79:d8:53: e6:1c:8e:8b:a5:a7:26:30:de:28:3f:f2:2d:cd:29: c4:93:db:50:f6:00:07:2e:21:cd:2a:f7:57:f1:df: a9:39:75:8b:64:16:8f:6c:93:9d:03:0c:61:dd:86: 60:29:a3:a3:de:26:48:11:38:a1:95:47:ce:a4:46: 2b:3a:ce:cd:9c:8e:2a:a8:02:5c:5d:09:de:01:73: ae:8c:fb:d8:e1:68:fb:8a:3a:cb:15:36:65:e1:03: 11:cf:9a:6c:8b:b3:d8:ed:3c:44:35:06:e3:48:47: af:c9:e7:59:c0:5c:fa:5b:7c:0b:ed:60:5a:3d:83: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.132.0/22 46.16.216.0/21 185.39.176.0/22 185.70.144.0/22 185.109.32.0/22 192.109.223.0/24 192.109.231.0/24 192.109.235.0/24 192.109.239.0/24 IPv6: 2a02:4500::/29 2a05:2a80::/29 2a06:4e40::/29 2a0f:1000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200567 Signature Algorithm: sha256WithRSAEncryption ae:d3:b0:89:37:4a:b8:cf:4f:0b:c6:f9:e9:34:ee:52:6f:6b: c7:fb:8a:59:6f:58:ee:df:83:ee:48:c2:8f:59:37:25:e7:3b: f7:f9:bf:1e:b7:47:21:d1:ae:e5:25:65:fa:3b:ba:bd:30:95: 65:d1:ff:49:b1:a3:b0:69:d4:1d:68:ac:66:cd:da:06:c6:00: a2:50:4f:3e:42:45:19:9a:9a:66:5c:8e:7e:2d:c6:02:25:b8: 5d:5c:4f:92:3b:53:4f:f6:67:f8:ab:95:11:a1:0c:24:9a:40: de:e6:9b:c1:90:37:c3:b9:23:96:18:68:78:e2:e7:4e:4c:da: 39:40:e5:24:a2:18:2f:49:f6:4f:62:a3:67:fc:02:4c:7b:c4: 69:f9:2f:d7:d7:a8:82:ed:6e:08:e5:f0:07:34:4f:b8:2e:d4: 45:59:9a:e9:64:21:1d:a1:63:d3:f7:01:af:4f:0c:87:65:a1: 4f:12:aa:e5:88:45:26:f4:a9:96:2e:79:79:c2:4d:8b:1c:74: b5:81:71:37:81:d7:db:20:84:a0:07:af:74:3e:d6:34:19:7b: 84:6c:2d:51:cb:f7:e5:b1:c6:88:06:23:53:7f:ca:ee:2b:c4: a1:6c:59:64:f6:d3:e3:4e:2b:9c:46:e6:55:b3:45:19:34:2d: 3e:cf:08:43 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgISAZt/g8AxP3w+3GYBQubRUmsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTdiYzdmMmVhZjBjYWZhNjliZWU1ZmFiZTY3MTIyYjQzNjNmZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOBNkbo7BsiPK9C5qzU5UKlt+qnh OT9cYRDdsdeVVwhqUF/+sUGoXgzW2R25l5S3Oi65AMSwQtZKZUaXWlE9+yCiufg5 AxxkFxVz7cfNpNgOpefSKyZs8qlmhnyXSMB1gqhvMaRsuqvivYSKHqBLOg/K9B4h 1598SC7nTT+J8Eh4nRB52FPmHI6LpacmMN4oP/ItzSnEk9tQ9gAHLiHNKvdX8d+p OXWLZBaPbJOdAwxh3YZgKaOj3iZIETihlUfOpEYrOs7NnI4qqAJcXQneAXOujPvY 4Wj7ijrLFTZl4QMRz5psi7PY7TxENQbjSEevyedZwFz6W3wL7WBaPYNaxwIDAQAB o4IC9DCCAvAwHQYDVR0OBBYEFPV7x/Lq8Mr6ab7l+r5nEitDY/5yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzQ0NDFi NC1mOTgxLTRjMjYtOWI5OS0xMDEwNDczZjRmZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvNDQ0MWI0 LWY5ODEtNGMyNi05Yjk5LTEwMTA0NzNmNGZlOC8xLzlYdkg4dXJ3eXZwcHZ1WDZ2 bWNTSzBOal9uSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHMGCCsGAQUF BwEHAQH/BGQwYjA8BAIAATA2AwQCLZKEAwQDLhDYAwQCuSewAwQCuUaQAwQCuW0g AwQAwG3fAwQAwG3nAwQAwG3rAwQAwG3vMCIEAgACMBwDBQMqAkUAAwUDKgUqgAMF AyoGTkADBQMqDxAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPdzANBgkqhkiG 9w0BAQsFAAOCAQEArtOwiTdKuM9PC8b56TTuUm9rx/uKWW9Y7t+D7kjCj1k3Jec7 9/m/HrdHIdGu5SVl+ju6vTCVZdH/SbGjsGnUHWisZs3aBsYAolBPPkJFGZqaZlyO fi3GAiW4XVxPkjtTT/Zn+KuVEaEMJJpA3uabwZA3w7kjlhhoeOLnTkzaOUDlJKIY L0n2T2KjZ/wCTHvEafkv19eogu1uCOXwBzRPuC7URVma6WQhHaFj0/cBr08Mh2Wh TxKq5YhFJvSpli55ecJNixx0tYFxN4HX2yCEoAevdD7WNBl7hGwtUcv35bHGiAYj U3/K7ivEoWxZZPbT404rnEbmVbNFGTQtPs8IQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:30 2026 by rpki-client