This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer (raw, json) Hash identifier: iaseZrVQtJ5qSvTPcE4H3w6HRxFlgWB85jKvf6guR3M= Subject key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC797C1805EFCC0B7BE547A67EC2AA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209820 IP: 80.208.254.0/24 IP: 80.209.254.0/24 IP: 185.40.140.0/24 IP: 2a09:c900::/32 IP: 2a0a:dac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:c1:80:5e:fc:c0:b7:be:54:7a:67:ec:2a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:fa:df:30:54:14:f9:4b:89:be:8f:4f:11: 11:a8:d8:0c:75:40:4f:02:02:ee:dd:a9:8c:d8:15: d0:21:b8:68:f5:6c:c3:2b:c8:36:07:48:63:5f:34: c0:66:45:b6:83:65:8c:1b:62:0b:17:aa:9a:ca:c0: 48:00:e1:f9:1d:b0:df:3c:87:2d:70:ec:b6:c8:45: 76:ea:6e:db:d0:e5:bf:05:f4:f3:69:f5:ea:c0:4e: 19:49:0b:5b:13:14:2d:3f:eb:04:a3:b4:00:1f:1e: 84:ce:a2:5e:e6:37:87:2e:e5:c1:08:66:f5:ec:fd: e2:a5:f0:5d:3f:f1:23:f6:95:b7:5f:ca:17:b8:c3: 38:05:3e:5e:38:cf:20:5f:1e:73:13:72:e5:f5:5b: 05:2a:8b:ce:2f:2c:15:62:e3:2d:b1:24:49:50:ad: 8a:a2:78:32:37:b7:95:a2:87:28:db:c5:ba:a5:51: 6d:00:f6:73:ca:13:f3:c4:4c:12:86:18:d5:d7:95: dc:f4:ec:e3:95:80:af:18:97:df:68:fd:6e:79:1a: 57:af:47:3e:6f:10:09:8f:ab:c3:57:cc:27:b8:26: c2:40:5c:ab:4d:83:fa:a5:87:ca:d9:c1:71:e2:6e: 72:f6:5a:e7:ce:fb:e5:c7:b1:e0:34:9c:71:7b:70: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.208.254.0/24 80.209.254.0/24 185.40.140.0/24 IPv6: 2a09:c900::/32 2a0a:dac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209820 Signature Algorithm: sha256WithRSAEncryption 2c:28:49:23:b7:c3:67:88:bc:57:a6:01:99:f9:52:1a:00:32: d2:d1:9c:c2:c1:d0:37:7d:55:f7:d0:54:57:57:62:f3:d5:e0: 45:ba:b1:d1:46:21:e4:2e:4d:23:7e:3b:30:7f:3c:2a:96:7c: 06:5b:0d:9a:db:1b:a9:fd:0d:ee:b7:ed:7a:66:57:03:2f:0f: 15:73:51:15:b9:a3:78:05:0d:60:db:03:ab:20:33:fd:34:90: 35:7b:bc:40:9f:68:5d:b8:d7:11:dd:64:f3:12:c5:63:22:94: bb:0c:3f:4b:98:c0:29:25:af:a7:60:dc:29:0b:2e:9f:43:4c: db:ed:9e:43:e2:c4:c3:78:0d:19:f2:44:41:19:ce:3b:d5:fc: 40:71:29:8c:a9:cc:8e:82:87:30:6b:7b:a2:f8:eb:0a:d9:bf: dc:41:50:50:6b:1f:3a:89:79:9c:7e:93:87:53:65:af:d1:93: 5d:1e:bc:20:db:2d:3c:e7:e1:1d:6c:7f:c7:b9:7c:3e:d7:8d: da:b6:d2:7e:14:5c:2d:dd:ee:5d:69:0d:7d:c9:06:29:b0:06: f6:8a:0c:67:6c:ba:97:46:56:16:b1:3f:14:20:f6:cb:8e:17: 8b:2e:d1:25:ca:84:16:b0:49:c7:88:1e:3d:00:ba:62:cf:8f: f1:ff:a2:4d -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt6x5fBgF78wLe+VHpn7CqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQzZTg0OGM1OGE2NDUxY2E4NzRjZGNmYzM3ZTliYzBmNWQ5YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8f63zBUFPlLib6PTxERqNgMdUBP AgLu3amM2BXQIbho9WzDK8g2B0hjXzTAZkW2g2WMG2ILF6qaysBIAOH5HbDfPIct cOy2yEV26m7b0OW/BfTzafXqwE4ZSQtbExQtP+sEo7QAHx6EzqJe5jeHLuXBCGb1 7P3ipfBdP/Ej9pW3X8oXuMM4BT5eOM8gXx5zE3Ll9VsFKovOLywVYuMtsSRJUK2K ongyN7eVooco28W6pVFtAPZzyhPzxEwShhjV15Xc9OzjlYCvGJffaP1ueRpXr0c+ bxAJj6vDV8wnuCbCQFyrTYP6pYfK2cFx4m5y9lrnzvvlx7HgNJxxe3DbyQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFFvT6EjFimRRyodM3Pw36bwPXZrHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzBiODdm NS1lNWQyLTQ1NmYtYWJlMC00ODRkNDU4NmVlN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMGI4N2Y1 LWU1ZDItNDU2Zi1hYmUwLTQ4NGQ0NTg2ZWU3Yi8xL1c5UG9TTVdLWkZIS2gwemNf RGZwdkE5ZG1zYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQAUND+AwQAUNH+AwQAuSiMMBQEAgACMA4DBQAq CckAAwUDKgrawDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDM5wwDQYJKoZIhvcN AQELBQADggEBACwoSSO3w2eIvFemAZn5UhoAMtLRnMLB0Dd9VffQVFdXYvPV4EW6 sdFGIeQuTSN+OzB/PCqWfAZbDZrbG6n9De637XpmVwMvDxVzURW5o3gFDWDbA6sg M/00kDV7vECfaF241xHdZPMSxWMilLsMP0uYwCklr6dg3CkLLp9DTNvtnkPixMN4 DRnyREEZzjvV/EBxKYypzI6ChzBre6L46wrZv9xBUFBrHzqJeZx+k4dTZa/Rk10e vCDbLTzn4R1sf8e5fD7Xjdq20n4UXC3d7l1pDX3JBimwBvaKDGdsupdGVhaxPxQg 9suOF4su0SXKhBawSceIHj0AumLPj/H/ok0= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:14 2026 by rpki-client