This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer (raw, json) Hash identifier: faO7tsszLM482USjChF33nwTQ8T/A6onZ4ScrT1H/xM= Subject key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED35EF3CCF0EFFBDD1FEDA3E27DA15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 133944 AS: 201341 AS: 202496 AS: 203098 AS: 212144 IP: 5.182.12.0/22 IP: 37.153.134.0/24 IP: 37.156.6.0/24 IP: 43.229.8.0/22 IP: 43.230.56.0/22 IP: 43.245.116.0/23 IP: 43.245.119.0/24 IP: 45.113.238.0/24 IP: 45.141.80.0/22 IP: 45.251.60.0/22 IP: 46.102.251.0/24 IP: 79.110.239.0/24 IP: 85.204.245.0/24 IP: 85.204.251.0/24 IP: 86.104.215.0/24 IP: 86.104.227.0/24 IP: 86.105.7.0/24 IP: 86.105.13.0/24 IP: 86.107.102.0/24 IP: 89.32.200.0/24 IP: 89.32.204.0/24 IP: 89.33.83.0/24 IP: 89.33.117.0 -- 89.33.118.255 IP: 89.34.172.0/24 IP: 89.35.126.0/24 IP: 89.36.142.0/24 IP: 89.36.225.0/24 IP: 89.37.234.0/24 IP: 89.39.122.0/24 IP: 89.42.8.0/24 IP: 89.43.32.0/24 IP: 89.47.34.0/24 IP: 91.247.40.0 -- 91.247.51.255 IP: 93.118.38.0/24 IP: 94.176.106.0/24 IP: 94.177.22.0/24 IP: 103.47.52.0/22 IP: 103.49.84.0/22 IP: 103.243.204.0/22 IP: 115.124.32.0/22 IP: 147.185.217.0/24 IP: 147.185.226.0/24 IP: 147.185.250.0/24 IP: 162.218.157.0 -- 162.218.158.255 IP: 176.223.67.0/24 IP: 185.48.52.0/22 IP: 185.77.164.0/22 IP: 185.99.28.0/22 IP: 185.170.108.0/22 IP: 185.183.44.0/22 IP: 185.207.37.0 -- 185.207.38.255 IP: 188.208.102.0/24 IP: 188.211.26.0/24 IP: 188.212.6.0/23 IP: 188.213.218.0/24 IP: 188.215.5.0/24 IP: 188.215.34.0/24 IP: 188.240.69.0/24 IP: 188.240.211.0/24 IP: 193.36.76.0/24 IP: 193.36.86.0/24 IP: 193.36.172.0/24 IP: 193.148.92.0/23 IP: 193.200.96.0/23 IP: 194.26.149.0/24 IP: 194.29.67.0/24 IP: 194.29.70.0/24 IP: 194.29.80.0/24 IP: 195.69.77.0 -- 195.69.78.255 IP: 202.170.196.0/22 IP: 204.225.218.0/24 IP: 207.244.216.0/22 IP: 209.35.4.0/23 IP: 209.35.99.0/24 IP: 209.35.113.0/24 IP: 212.102.116.0/24 IP: 2a05:6300::/29 IP: 2a07:4a80::/29 IP: 2a0a:eb00::/29 IP: 2a0f:c840::/29 IP: 2a11:3bc0::/29 IP: 2a12:7700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:ef:3c:cf:0e:ff:bd:d1:fe:da:3e:27:da:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:31:8e:cd:59:9b:b6:d5:ea:13:d9:1d:d2:24: 40:fa:6f:56:84:e5:d6:24:2e:4b:23:b2:06:ba:0c: 45:07:56:00:5c:f4:1b:ba:8a:d1:90:9a:d1:57:a4: ca:20:a3:af:19:31:fa:79:50:fa:d3:4b:8c:df:89: a7:ff:f0:83:f6:a5:75:b7:7b:41:84:fa:c4:5a:40: 1e:9f:8b:1b:b5:5b:6a:88:68:52:86:cd:3d:81:da: cd:fe:cd:9d:cd:bc:eb:29:b2:9a:22:bd:74:3a:72: 47:ee:8e:0f:72:f6:74:3a:0e:48:81:2f:75:4f:45: 9d:6f:52:ff:ea:09:63:66:fe:45:52:45:ec:85:82: 25:cd:b5:87:94:43:da:e9:8f:14:e5:a8:eb:af:11: 01:12:aa:5e:06:00:bb:55:eb:57:07:04:1e:34:5c: 04:c5:e4:a0:3d:4e:79:2e:ac:35:1a:47:e9:e9:ac: f2:f9:7d:93:d1:99:d1:06:ed:f6:c9:32:f2:d6:d3: 15:66:75:3a:18:4e:ef:35:93:e4:5b:43:e6:90:09: d3:9a:e6:9f:c9:f8:62:d6:55:a0:d5:eb:76:33:57: ee:6e:3e:9f:1a:b9:49:92:60:5f:92:6f:c3:5c:54: b9:90:ce:1c:59:5a:3c:a4:27:74:de:b7:79:85:49: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.12.0/22 37.153.134.0/24 37.156.6.0/24 43.229.8.0/22 43.230.56.0/22 43.245.116.0/23 43.245.119.0/24 45.113.238.0/24 45.141.80.0/22 45.251.60.0/22 46.102.251.0/24 79.110.239.0/24 85.204.245.0/24 85.204.251.0/24 86.104.215.0/24 86.104.227.0/24 86.105.7.0/24 86.105.13.0/24 86.107.102.0/24 89.32.200.0/24 89.32.204.0/24 89.33.83.0/24 89.33.117.0-89.33.118.255 89.34.172.0/24 89.35.126.0/24 89.36.142.0/24 89.36.225.0/24 89.37.234.0/24 89.39.122.0/24 89.42.8.0/24 89.43.32.0/24 89.47.34.0/24 91.247.40.0-91.247.51.255 93.118.38.0/24 94.176.106.0/24 94.177.22.0/24 103.47.52.0/22 103.49.84.0/22 103.243.204.0/22 115.124.32.0/22 147.185.217.0/24 147.185.226.0/24 147.185.250.0/24 162.218.157.0-162.218.158.255 176.223.67.0/24 185.48.52.0/22 185.77.164.0/22 185.99.28.0/22 185.170.108.0/22 185.183.44.0/22 185.207.37.0-185.207.38.255 188.208.102.0/24 188.211.26.0/24 188.212.6.0/23 188.213.218.0/24 188.215.5.0/24 188.215.34.0/24 188.240.69.0/24 188.240.211.0/24 193.36.76.0/24 193.36.86.0/24 193.36.172.0/24 193.148.92.0/23 193.200.96.0/23 194.26.149.0/24 194.29.67.0/24 194.29.70.0/24 194.29.80.0/24 195.69.77.0-195.69.78.255 202.170.196.0/22 204.225.218.0/24 207.244.216.0/22 209.35.4.0/23 209.35.99.0/24 209.35.113.0/24 212.102.116.0/24 IPv6: 2a05:6300::/29 2a07:4a80::/29 2a0a:eb00::/29 2a0f:c840::/29 2a11:3bc0::/29 2a12:7700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 133944 201341 202496 203098 212144 Signature Algorithm: sha256WithRSAEncryption 72:97:be:90:16:a4:28:6e:47:2e:88:71:d9:6e:a1:a6:04:50: c7:99:44:15:8e:84:06:a2:ce:a5:74:ec:ab:03:c6:f5:d3:cb: 75:f3:e0:9d:1b:3a:b8:67:a4:91:5b:5a:d6:f1:5d:18:b2:8a: b9:3b:9d:26:0e:cf:fc:c6:6e:25:30:ac:69:f4:d6:5c:01:66: 88:4c:1c:3f:06:b6:2c:37:0e:70:26:63:48:82:a3:d2:81:fb: 97:68:43:e8:bd:39:09:3b:ef:0b:10:18:92:ea:cd:f8:56:06: ae:a5:c6:25:00:b7:48:8b:0f:55:33:2b:9d:47:95:ca:38:3c: 4d:3d:99:1e:be:8b:6d:4f:66:7b:81:9f:80:ab:bc:8b:ca:00: 18:1a:62:45:b3:9f:38:32:ec:b5:df:d3:cd:6f:d7:40:ca:a0: 06:c4:aa:5a:c7:e3:ab:27:80:bb:cd:b7:e8:5f:aa:6f:e3:aa: 4c:72:d7:8a:2f:60:81:ef:7b:55:61:8d:8b:38:d8:0d:00:b2: e8:6a:74:1d:fb:a3:ae:e0:76:99:cb:69:85:c7:16:52:1f:4f: 13:47:49:a9:e4:59:40:f3:5b:7b:ca:6a:38:c6:55:fb:e9:ae: 37:df:55:32:6f:43:fa:27:fa:1e:60:af:b5:ad:71:e9:fc:a6: 9a:ac:a5:04 -----BEGIN CERTIFICATE----- MIIHzjCCBragAwIBAgISAZt57TXvPM8O/73R/to+J9oVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWZiMzJkMjI2NmIxZjliY2U1N2NhYzk4YmMwMjQ3ZjJjOTE5N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TGOzVmbttXqE9kd0iRA+m9WhOXW JC5LI7IGugxFB1YAXPQbuorRkJrRV6TKIKOvGTH6eVD600uM34mn//CD9qV1t3tB hPrEWkAen4sbtVtqiGhShs09gdrN/s2dzbzrKbKaIr10OnJH7o4PcvZ0Og5IgS91 T0Wdb1L/6gljZv5FUkXshYIlzbWHlEPa6Y8U5ajrrxEBEqpeBgC7VetXBwQeNFwE xeSgPU55Lqw1Gkfp6azy+X2T0ZnRBu32yTLy1tMVZnU6GE7vNZPkW0PmkAnTmuaf yfhi1lWg1et2M1fubj6fGrlJkmBfkm/DXFS5kM4cWVo8pCd03rd5hUnVZwIDAQAB o4IE2jCCBNYwHQYDVR0OBBYEFPX7MtImax+bzlfKyYvAJH8skZfyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2ZiNDJl Yy0xMGI0LTRkY2YtYmVmMC0yZDE0M2Q3Yjg1M2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZmI0MmVj LTEwYjQtNGRjZi1iZWYwLTJkMTQzZDdiODUzYy8xLzlmc3kwaVpySDV2T1Y4ckpp OEFrZnl5UmxfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICQwYIKwYB BQUHAQcBAf8EggIyMIICLjCCAfgEAgABMIIB8AMEAgW2DAMEACWZhgMEACWcBgME AivlCAMEAivmOAMEASv1dAMEACv1dwMEAC1x7gMEAi2NUAMEAi37PAMEAC5m+wME AE9u7wMEAFXM9QMEAFXM+wMEAFZo1wMEAFZo4wMEAFZpBwMEAFZpDQMEAFZrZgME AFkgyAMEAFkgzAMEAFkhUzAMAwQAWSF1AwQAWSF2AwQAWSKsAwQAWSN+AwQAWSSO AwQAWSThAwQAWSXqAwQAWSd6AwQAWSoIAwQAWSsgAwQAWS8iMAwDBANb9ygDBAJb 9zADBABddiYDBABesGoDBABesRYDBAJnLzQDBAJnMVQDBAJn88wDBAJzfCADBACT udkDBACTueIDBACTufowDAMEAKLanQMEAKLangMEALDfQwMEArkwNAMEArlNpAME ArljHAMEArmqbAMEArm3LDAMAwQAuc8lAwQAuc8mAwQAvNBmAwQAvNMaAwQBvNQG AwQAvNXaAwQAvNcFAwQAvNciAwQAvPBFAwQAvPDTAwQAwSRMAwQAwSRWAwQAwSSs AwQBwZRcAwQBwchgAwQAwhqVAwQAwh1DAwQAwh1GAwQAwh1QMAwDBADDRU0DBADD RU4DBALKqsQDBADM4doDBALP9NgDBAHRIwQDBADRI2MDBADRI3EDBADUZnQwMAQC AAIwKgMFAyoFYwADBQMqB0qAAwUDKgrrAAMFAyoPyEADBQMqETvAAwUDKhJ3ADAu BggrBgEFBQcBCAEB/wQfMB2gGzAZAgMCCzgCAwMSfQIDAxcAAgMDGVoCAwM8sDAN BgkqhkiG9w0BAQsFAAOCAQEAcpe+kBakKG5HLohx2W6hpgRQx5lEFY6EBqLOpXTs qwPG9dPLdfPgnRs6uGekkVta1vFdGLKKuTudJg7P/MZuJTCsafTWXAFmiEwcPwa2 LDcOcCZjSIKj0oH7l2hD6L05CTvvCxAYkurN+FYGrqXGJQC3SIsPVTMrnUeVyjg8 TT2ZHr6LbU9me4GfgKu8i8oAGBpiRbOfODLstd/TzW/XQMqgBsSqWsfjqyeAu823 6F+qb+OqTHLXii9gge97VWGNizjYDQCy6Gp0HfujruB2mctphccWUh9PE0dJqeRZ QPNbe8pqOMZV++muN99VMm9D+if6HmCvta1x6fymmqylBA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:02 2026 by rpki-client