This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer (raw, json) Hash identifier: AJZ0thk22FrndQE1N0OvSkdT3H31t4KgYG1m/dPqDIE= Subject key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E062BEB5AC46B226A386B14F14AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207786 IP: 195.85.218.0/24 IP: 195.85.223.0/24 IP: 195.85.226.0/24 IP: 195.85.244.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e0:62:be:b5:ac:46:b2:26:a3:86:b1:4f:14:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53d9c969675a27d515d8fab2c63cde0ed056491e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:58:e6:5f:54:7c:93:ca:da:4c:c6:39:c5: 53:03:c4:cf:f5:16:d6:c6:69:8f:c6:fa:01:7b:1f: ae:c3:43:f0:e0:82:cf:6e:d4:61:7c:17:2e:2d:1f: 07:22:94:c9:66:2c:0a:59:ab:6d:c7:d5:f1:93:f6: 96:b7:10:6e:f8:e6:aa:88:96:cf:80:4e:cf:18:aa: 7f:b1:db:a4:22:d6:9b:23:0e:bd:66:1e:fd:92:3e: 20:db:27:db:c0:6f:b3:8d:ac:34:4b:d9:71:16:4b: 24:59:c2:95:aa:84:3b:4b:ad:ad:a4:43:25:ff:b1: 34:f2:0b:aa:3d:30:b1:80:8d:2e:b8:8b:a8:2d:95: 12:1c:e3:77:f7:78:9e:67:3d:ef:c6:8a:91:ea:04: 9c:a3:2e:b0:08:3e:0c:fd:70:6f:4e:da:ef:04:ee: e5:e0:5e:b3:85:66:5f:ec:d4:94:b2:63:41:24:fc: 6a:76:05:75:de:31:ca:88:f7:35:7b:16:78:0b:4a: a0:aa:5c:da:73:32:60:b6:a5:20:aa:8f:58:ab:f5: dd:d0:bc:37:de:2e:38:d2:20:1a:5e:6f:49:71:0a: cb:13:70:86:b2:a5:0f:fa:66:51:de:c3:7d:9c:69: ad:17:e3:ed:f0:6f:1e:9a:6d:f2:b3:9e:ac:d2:dd: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.218.0/24 195.85.223.0/24 195.85.226.0/24 195.85.244.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207786 Signature Algorithm: sha256WithRSAEncryption 72:26:26:74:1b:96:1c:d9:99:70:21:d7:63:7c:c8:b4:d3:d7: 45:4e:db:6d:45:d8:ee:bb:2e:99:62:2e:c8:35:eb:d9:fb:1a: f2:29:9a:71:80:b2:c8:01:d8:e2:d9:ee:05:73:77:4d:f8:35: b4:26:14:83:c6:e0:11:c5:0b:ce:c7:d0:d0:be:bf:24:85:8e: d4:c3:0e:43:2c:3d:23:ef:a4:63:e7:a4:5c:e6:cf:09:e7:63: 37:a2:86:23:4f:2e:c1:5f:f3:bc:b5:85:82:09:9f:da:2d:0b: 66:ed:47:05:f9:90:d6:44:df:06:8e:06:97:6e:5f:cd:c9:4d: c0:2a:f4:95:27:cd:0b:4c:c8:c9:0d:f5:d2:eb:63:2b:89:b0: bf:7f:09:3d:82:3a:97:6b:40:68:47:20:12:ee:3b:e7:aa:30: 63:1f:05:af:43:e0:eb:99:21:a7:5a:7f:c7:34:4e:a6:19:f0: d8:cb:e9:c0:d9:7f:b6:47:c2:ef:55:d5:20:f3:43:74:10:ec: 62:74:ee:df:fc:9a:10:46:49:33:68:30:05:00:97:4b:23:da: 5a:84:b1:e6:b0:83:4a:65:92:68:fd:b5:aa:62:13:bb:d1:b7: 7e:dd:79:06:47:33:bd:9a:0d:83:ac:10:f9:38:fd:3c:fc:88: 7c:f9:91:8a -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt7NeBivrWsRrImo4axTxSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2Q5Yzk2OTY3NWEyN2Q1MTVkOGZhYjJjNjNjZGUwZWQwNTY0OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3NY5l9UfJPK2kzGOcVTA8TP9RbW xmmPxvoBex+uw0Pw4ILPbtRhfBcuLR8HIpTJZiwKWattx9Xxk/aWtxBu+OaqiJbP gE7PGKp/sdukItabIw69Zh79kj4g2yfbwG+zjaw0S9lxFkskWcKVqoQ7S62tpEMl /7E08guqPTCxgI0uuIuoLZUSHON393ieZz3vxoqR6gScoy6wCD4M/XBvTtrvBO7l 4F6zhWZf7NSUsmNBJPxqdgV13jHKiPc1exZ4C0qgqlzaczJgtqUgqo9Yq/Xd0Lw3 3i440iAaXm9JcQrLE3CGsqUP+mZR3sN9nGmtF+Pt8G8emm3ys56s0t132QIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFFPZyWlnWifVFdj6ssY83g7QVkkeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4Lzk5MTA3 YS0zYjFiLTRiNWUtYWUxNS1mOTVjNjBiNDY2YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvOTkxMDdh LTNiMWItNGI1ZS1hZTE1LWY5NWM2MGI0NjZhMC8xL1U5bkphV2RhSjlVVjJQcXl4 anplRHRCV1NSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAw1XaAwQAw1XfAwQAw1XiAwQAw1X0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMrqjANBgkqhkiG9w0BAQsFAAOCAQEAciYmdBuW HNmZcCHXY3zItNPXRU7bbUXY7rsumWIuyDXr2fsa8imacYCyyAHY4tnuBXN3Tfg1 tCYUg8bgEcULzsfQ0L6/JIWO1MMOQyw9I++kY+ekXObPCedjN6KGI08uwV/zvLWF ggmf2i0LZu1HBfmQ1kTfBo4Gl25fzclNwCr0lSfNC0zIyQ310utjK4mwv38JPYI6 l2tAaEcgEu4756owYx8Fr0Pg65khp1p/xzROphnw2MvpwNl/tkfC71XVIPNDdBDs YnTu3/yaEEZJM2gwBQCXSyPaWoSx5rCDSmWSaP21qmITu9G3ft15BkczvZoNg6wQ +Tj9PPyIfPmRig== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:27 2026 by rpki-client