This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer File: AZlprHWrzVlo8Yng1F272rKYK9o.cer (raw, json) Hash identifier: 0+j5xENQIw3p+Wx1SRiTXjcEBbC4OMDyq5l1jTLAZU8= Subject key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C2A0F1D15200AA86E428FF5B3627 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9143 IP: 62.145.192.0/18 IP: 80.112.0.0/17 IP: 80.114.0.0/17 IP: 80.114.192.0 -- 80.115.191.255 IP: 82.72.0.0/14 IP: 82.101.192.0/18 IP: 82.151.160.0/19 IP: 82.217.0.0/16 IP: 83.80.0.0/13 IP: 84.24.0.0/13 IP: 84.104.0.0/14 IP: 85.147.0.0/16 IP: 89.220.128.0/17 IP: 94.208.0.0/13 IP: 185.130.168.0/22 IP: 212.54.32.0/19 IP: 212.120.64.0/18 IP: 212.127.128.0/17 IP: 212.204.128.0/18 IP: 213.34.96.0/19 IP: 213.51.0.0/16 IP: 213.73.128.0/17 IP: 217.62.0.0 -- 217.63.63.255 IP: 217.63.192.0/18 IP: 217.101.0.0/16 IP: 217.102.128.0 -- 217.102.223.255 IP: 217.104.0.0/17 IP: 217.105.64.0 -- 217.105.191.255 IP: 217.120.0.0/14 IP: 2001:b88::/29 IP: 2001:1c00::/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c2:a0:f1:d1:52:00:aa:86:e4:28:ff:5b:36:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=019969ac75abcd5968f189e0d45dbbdab2982bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:e4:4d:d4:4f:63:09:7f:ee:33:4f:ae:fb: 12:39:51:d2:f2:91:af:86:88:7c:fc:ca:df:d6:09: 97:92:a8:77:fe:c8:3b:59:f3:9e:82:59:17:1f:64: 6d:ea:db:51:08:fe:90:e0:44:75:3c:22:93:f6:bd: c0:68:74:5c:43:46:83:ea:4a:56:62:7e:e4:04:e8: e7:71:a2:9e:53:82:98:e9:bb:f4:ec:c5:e4:cf:81: dc:93:23:45:5e:81:88:aa:96:81:13:12:1a:10:02: 27:a0:ad:6d:2b:68:e9:1e:56:1e:e0:4c:24:fc:d0: 3d:15:37:6a:21:c6:29:f6:de:92:95:52:fc:4a:cc: 74:ae:26:d1:69:14:8c:f1:f9:bf:aa:9c:fd:35:f6: 4a:d5:46:c4:6e:4e:5a:37:8f:57:b5:01:d3:91:71: 00:46:5d:c5:22:b8:ff:e5:6a:2f:54:31:94:67:33: e1:8b:e6:20:1e:d5:65:55:a8:77:86:44:85:0b:e4: d8:cf:a7:a2:89:01:9d:c1:11:05:5f:55:fd:fc:e2: f1:58:57:20:dd:24:fb:c3:01:6a:cb:a8:6d:c1:22: 04:c9:5e:04:7c:6e:52:b4:27:81:1c:cf:27:f7:a0: bf:4f:43:d2:0e:67:7e:e0:e4:31:0a:c0:c7:eb:cc: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.145.192.0/18 80.112.0.0/17 80.114.0.0/17 80.114.192.0-80.115.191.255 82.72.0.0/14 82.101.192.0/18 82.151.160.0/19 82.217.0.0/16 83.80.0.0/13 84.24.0.0/13 84.104.0.0/14 85.147.0.0/16 89.220.128.0/17 94.208.0.0/13 185.130.168.0/22 212.54.32.0/19 212.120.64.0/18 212.127.128.0/17 212.204.128.0/18 213.34.96.0/19 213.51.0.0/16 213.73.128.0/17 217.62.0.0-217.63.63.255 217.63.192.0/18 217.101.0.0/16 217.102.128.0-217.102.223.255 217.104.0.0/17 217.105.64.0-217.105.191.255 217.120.0.0/14 IPv6: 2001:b88::/29 2001:1c00::/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9143 Signature Algorithm: sha256WithRSAEncryption 92:e7:df:da:68:e0:3a:14:e2:04:6f:a5:76:49:11:51:cc:04: 60:8b:52:eb:10:24:19:51:eb:bd:2a:b2:b0:7c:bb:ca:e1:52: 3b:54:b7:85:c7:11:e0:ff:28:de:82:77:74:68:2f:4f:bc:ea: 1f:57:ca:eb:78:a5:01:90:d6:8b:10:9e:63:d4:0a:41:62:56: 6f:d9:b0:10:7d:1c:3b:bf:2d:2e:02:9f:9a:13:32:77:98:86: 04:8f:c7:20:0b:f7:5f:5e:1f:46:3a:31:bf:c5:09:d7:5e:71: 12:78:38:d8:32:ef:f4:63:33:22:d4:66:a9:de:33:e3:7f:76: fa:2c:e2:a0:cd:27:10:f1:23:fd:35:2b:eb:f7:19:2b:99:f6: 88:19:21:5f:73:98:a9:54:59:e3:75:34:95:7e:90:64:9a:e7: 86:c7:8b:37:de:29:ae:19:45:6d:9a:da:63:61:09:bc:53:3e: 2f:ae:d1:85:6d:4b:b6:b0:87:17:b1:14:75:34:f1:e9:90:74: 3e:19:3e:94:6b:5f:a7:2c:8c:7e:ab:b6:48:ee:93:75:15:24: 5d:68:35:ad:3a:2f:32:1f:52:84:63:2d:8c:41:4a:e2:9c:cf: 11:a0:34:2b:1a:f6:81:28:93:3d:25:3a:11:24:92:f6:6f:fe: ce:ef:66:2a -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgISAZt4NMKg8dFSAKqG5Cj/WzYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTk5NjlhYzc1YWJjZDU5NjhmMTg5ZTBkNDVkYmJkYWIyOTgyYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkbkTdRPYwl/7jNPrvsSOVHS8pGv hoh8/Mrf1gmXkqh3/sg7WfOeglkXH2Rt6ttRCP6Q4ER1PCKT9r3AaHRcQ0aD6kpW Yn7kBOjncaKeU4KY6bv07MXkz4HckyNFXoGIqpaBExIaEAInoK1tK2jpHlYe4Ewk /NA9FTdqIcYp9t6SlVL8Ssx0ribRaRSM8fm/qpz9NfZK1UbEbk5aN49XtQHTkXEA Rl3FIrj/5WovVDGUZzPhi+YgHtVlVah3hkSFC+TYz6eiiQGdwREFX1X9/OLxWFcg 3ST7wwFqy6htwSIEyV4EfG5StCeBHM8n96C/T0PSDmd+4OQxCsDH68xcTwIDAQAB o4IDdjCCA3IwHQYDVR0OBBYEFAGZaax1q81ZaPGJ4NRdu9qymCvaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzZjYjE0 NS1mZTZhLTQ1YjctODg1Zi02MWQxZjdmYjEwNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvNmNiMTQ1 LWZlNmEtNDViNy04ODVmLTYxZDFmN2ZiMTA0NC8xL0FabHBySFdyelZsbzhZbmcx RjI3MnJLWUs5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH1BggrBgEF BQcBBwEB/wSB5TCB4jCBygQCAAEwgcMDBAY+kcADBAdQcAADBAdQcgAwDAMEBlBy wAMEBlBzgAMDAlJIAwQGUmXAAwQFUpegAwMAUtkDAwNTUAMDA1QYAwMCVGgDAwBV kwMEB1ncgAMDA17QAwQCuYKoAwQF1DYgAwQG1HhAAwQH1H+AAwQG1MyAAwQF1SJg AwMA1TMDBAfVSYAwCwMDAdk+AwQG2T8AAwQG2T/AAwMA2WUwDAMEB9lmgAMEBdlm wAMEB9loADAMAwQG2WlAAwQG2WmAAwMC2XgwEwQCAAIwDQMFAyABC4gDBAEgARww GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICI7cwDQYJKoZIhvcNAQELBQADggEBAJLn 39po4DoU4gRvpXZJEVHMBGCLUusQJBlR670qsrB8u8rhUjtUt4XHEeD/KN6Cd3Ro L0+86h9Xyut4pQGQ1osQnmPUCkFiVm/ZsBB9HDu/LS4Cn5oTMneYhgSPxyAL919e H0Y6Mb/FCddecRJ4ONgy7/RjMyLUZqneM+N/dvos4qDNJxDxI/01K+v3GSuZ9ogZ IV9zmKlUWeN1NJV+kGSa54bHizfeKa4ZRW2a2mNhCbxTPi+u0YVtS7awhxexFHU0 8emQdD4ZPpRrX6csjH6rtkjuk3UVJF1oNa06LzIfUoRjLYxBSuKczxGgNCsa9oEo kz0lOhEkkvZv/s7vZio= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:59 2026 by rpki-client