This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer File: P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer (raw, json) Hash identifier: JvGese3V13iAg/WRDBFCc2/dUqnDkNFpdTNtu3yFEng= Subject key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A861B918D3C78FEE08782846FEEC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8851 AS: 31270 AS: 34940 AS: 39179 AS: 41393 AS: 43198 AS: 60648 AS: 61341 AS: 196875 AS: 199291 IP: 37.98.144.0/21 IP: 37.252.24.0/21 IP: 77.93.128.0/19 IP: 77.107.64.0/18 IP: 79.99.72.0/21 IP: 79.99.144.0/21 IP: 80.240.80.0/20 IP: 81.5.128.0/18 IP: 81.168.0.0/17 IP: 82.152.0.0/15 IP: 82.163.0.0/19 IP: 85.159.128.0/21 IP: 89.28.232.0/21 IP: 89.31.232.0/21 IP: 89.213.0.0/21 IP: 89.213.40.0 -- 89.213.255.255 IP: 95.130.96.0/21 IP: 109.176.0.0/16 IP: 158.255.8.0/21 IP: 185.20.32.0/22 IP: 185.24.84.0/24 IP: 185.24.86.0/23 IP: 185.49.124.0/22 IP: 185.101.44.0/22 IP: 193.27.212.0/23 IP: 193.189.140.0/24 IP: 194.105.64.0/19 IP: 195.128.138.0/24 IP: 212.38.64.0/19 IP: 213.130.128.0/19 IP: 213.152.32.0/19 IP: 213.210.0.0/18 IP: 213.218.208.0 -- 213.218.255.255 IP: 217.144.144.0/20 IP: 217.145.64.0/20 IP: 2001:1a90::/32 IP: 2a00:c60::/32 IP: 2a00:1c40::/29 IP: 2a02:21f8::/32 IP: 2a02:6f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:86:1b:91:8d:3c:78:fe:e0:87:82:84:6f:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:c4:33:c1:cb:64:46:09:6b:ff:d6:2e:92: 30:e6:08:0e:3e:52:f9:ec:68:28:48:7c:99:fb:e7: e0:4c:fd:bb:1c:69:d0:18:0d:5b:bf:60:81:c0:e5: 87:76:7f:9f:2b:67:f9:6f:47:ab:61:f4:e9:8d:72: 63:35:1d:6b:90:87:f9:92:4f:d1:49:7a:50:27:c3: 88:69:b3:4b:13:5a:31:b3:51:a7:c0:71:0c:d9:a7: 6f:ed:5f:4c:84:e3:fe:b5:de:0b:a6:c3:81:6c:64: d6:0b:6c:cc:4c:10:26:dc:ec:45:1c:e9:b1:23:e2: 54:ca:8a:23:fc:74:fb:81:ac:4a:c8:c1:ea:98:09: 41:3a:86:11:1f:14:ea:b9:07:03:09:7f:c2:ee:3e: bf:58:a6:00:e4:72:99:6d:56:21:c8:b9:b2:c8:3a: 75:2a:38:26:68:da:1e:41:81:7b:67:ad:a2:13:50: 64:71:0b:a4:d1:36:a2:1d:24:9f:f7:44:a9:ed:15: d6:31:2f:12:80:d9:4c:e3:41:d7:0c:04:95:3c:0d: 02:b4:8d:26:3f:3a:b1:37:5e:68:3e:33:b1:c2:a9: 33:03:66:ef:e8:3c:ac:8e:cf:2b:17:e7:49:58:55: 59:f7:5d:9c:04:20:ec:6b:93:5d:b5:02:74:28:a4: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.144.0/21 37.252.24.0/21 77.93.128.0/19 77.107.64.0/18 79.99.72.0/21 79.99.144.0/21 80.240.80.0/20 81.5.128.0/18 81.168.0.0/17 82.152.0.0/15 82.163.0.0/19 85.159.128.0/21 89.28.232.0/21 89.31.232.0/21 89.213.0.0/21 89.213.40.0-89.213.255.255 95.130.96.0/21 109.176.0.0/16 158.255.8.0/21 185.20.32.0/22 185.24.84.0/24 185.24.86.0/23 185.49.124.0/22 185.101.44.0/22 193.27.212.0/23 193.189.140.0/24 194.105.64.0/19 195.128.138.0/24 212.38.64.0/19 213.130.128.0/19 213.152.32.0/19 213.210.0.0/18 213.218.208.0-213.218.255.255 217.144.144.0/20 217.145.64.0/20 IPv6: 2001:1a90::/32 2a00:c60::/32 2a00:1c40::/29 2a02:21f8::/32 2a02:6f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8851 31270 34940 39179 41393 43198 60648 61341 196875 199291 Signature Algorithm: sha256WithRSAEncryption 71:91:c3:ab:64:82:2a:a3:77:c6:5e:ef:b9:ad:f4:2a:8d:2a: ad:f3:b0:f5:c3:3c:be:f9:75:70:ff:d7:92:d7:08:cc:e5:8c: 82:bd:84:97:1b:f3:48:a3:7f:61:3c:64:ed:57:65:2e:20:4f: de:4f:46:e7:ed:f0:f2:d4:bf:9a:86:64:38:5c:ff:3b:0a:eb: ac:98:ee:24:7c:66:1b:ea:97:8d:dd:7d:cd:bf:eb:55:80:c2: bb:76:44:a7:04:b0:10:2a:fa:fb:db:bf:67:d5:36:08:b1:5f: ca:df:d4:13:3f:09:c3:08:9e:a4:4b:60:96:a5:13:91:dd:4e: 61:f7:65:86:e2:c2:ca:de:f5:a6:73:20:a2:d6:ab:11:46:c3: 76:77:02:64:d7:c6:39:2f:95:29:db:c1:f6:6e:c0:cf:e7:a5: 0b:ea:57:b2:ee:16:44:25:26:09:04:97:29:f5:47:30:62:1e: 63:be:fd:58:ec:95:56:54:4d:e2:e6:11:ad:32:7c:00:dc:5e: 69:ff:9d:9b:f7:4f:31:ff:0f:93:75:13:5a:d2:6a:0f:de:64: 4a:83:38:96:17:38:f5:0c:fc:d2:7e:b4:85:bb:63:ca:99:63: 11:3d:a0:96:3b:c4:bb:26:8e:c7:ab:3d:56:c2:19:df:12:a3: a0:74:ba:24 -----BEGIN CERTIFICATE----- MIIGyjCCBbKgAwIBAgISAZt6WoYbkY08eP7gh4KEb+7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmQzMGQ4YTdlMTJmYzdiZjYyZTBjMTIxZTdjYzIyNmRlYTUzYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhXEM8HLZEYJa//WLpIw5ggOPlL5 7GgoSHyZ++fgTP27HGnQGA1bv2CBwOWHdn+fK2f5b0erYfTpjXJjNR1rkIf5kk/R SXpQJ8OIabNLE1oxs1GnwHEM2adv7V9MhOP+td4LpsOBbGTWC2zMTBAm3OxFHOmx I+JUyooj/HT7gaxKyMHqmAlBOoYRHxTquQcDCX/C7j6/WKYA5HKZbVYhyLmyyDp1 KjgmaNoeQYF7Z62iE1BkcQuk0TaiHSSf90Sp7RXWMS8SgNlM40HXDASVPA0CtI0m PzqxN15oPjOxwqkzA2bv6Dysjs8rF+dJWFVZ912cBCDsa5NdtQJ0KKTyeQIDAQAB o4ID1jCCA9IwHQYDVR0OBBYEFD/TDYp+Evx79i4MEh58wibepTubMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzQ5ZGMw MC05N2UyLTQ2MjgtYWUzOS00MTIyOGUzOWZmN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNDlkYzAw LTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3Yy8xL1A5TU5pbjRTX0h2Mkxnd1NI bnpDSnQ2bE81cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBKAYIKwYB BQUHAQcBAf8EggEXMIIBEzCB5QQCAAEwgd4DBAMlYpADBAMl/BgDBAVNXYADBAZN a0ADBANPY0gDBANPY5ADBARQ8FADBAZRBYADBAdRqAADAwFSmAMEBVKjAAMEA1Wf gAMEA1kc6AMEA1kf6AMEA1nVADALAwQDWdUoAwMBWdQDBANfgmADAwBtsAMEA57/ CAMEArkUIAMEALkYVAMEAbkYVgMEArkxfAMEArllLAMEAcEb1AMEAMG9jAMEBcJp QAMEAMOAigMEBdQmQAMEBdWCgAMEBdWYIAMEBtXSADALAwQE1drQAwMA1doDBATZ kJADBATZkUAwKQQCAAIwIwMFACABGpADBQAqAAxgAwUDKgAcQAMFACoCIfgDBQMq Am+AMEUGCCsGAQUFBwEIAQH/BDYwNKAyMDACAiKTAgJ6JgIDAIh8AgMAmQsCAwCh sQIDAKi+AgMA7OgCAwDvnQIDAwELAgMDCnswDQYJKoZIhvcNAQELBQADggEBAHGR w6tkgiqjd8Ze77mt9CqNKq3zsPXDPL75dXD/15LXCMzljIK9hJcb80ijf2E8ZO1X ZS4gT95PRuft8PLUv5qGZDhc/zsK66yY7iR8Zhvql43dfc2/61WAwrt2RKcEsBAq +vvbv2fVNgixX8rf1BM/CcMInqRLYJalE5HdTmH3ZYbiwsre9aZzIKLWqxFGw3Z3 AmTXxjkvlSnbwfZuwM/npQvqV7LuFkQlJgkElyn1RzBiHmO+/VjslVZUTeLmEa0y fADcXmn/nZv3TzH/D5N1E1rSag/eZEqDOJYXOPUM/NJ+tIW7Y8qZYxE9oJY7xLsm jserPVbCGd8So6B0uiQ= -----END CERTIFICATE-----Generated at Sat Jan 17 08:00:22 2026 by rpki-client