This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer File: adRwF7UV7iFLKEIO2-2zAVwW7ik.cer (raw, json) Hash identifier: 6Om/3Mov/YImmaWhqUTHPKIekS0pvOKAmhob8yfCuAU= Subject key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B369222EE20F8E333AC1A80EDD6553B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33970 IP: 77.243.176.0/20 IP: 83.143.240.0/21 IP: 84.39.112.0/21 IP: 89.238.128.0/18 IP: 89.249.64.0/20 IP: 91.102.64.0/21 IP: 91.207.56.0/23 IP: 91.232.150.0/23 IP: 176.10.80.0/21 IP: 185.9.16.0/22 IP: 185.93.180.0/22 IP: 185.94.188.0 -- 185.94.195.255 IP: 185.104.184.0/22 IP: 193.27.64.0/23 IP: 193.189.74.0/23 IP: 194.79.28.0/23 IP: 194.79.31.0/24 IP: 194.187.248.0/22 IP: 195.8.196.0/23 IP: 195.12.48.0/22 IP: 195.242.212.0/22 IP: 217.64.112.0/20 IP: 217.151.96.0/20 IP: 2001:ac8::/32 IP: 2a01:300::/29 IP: 2a02:40::/32 IP: 2a03:34c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:92:22:ee:20:f8:e3:33:ac:1a:80:ed:d6:55:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d47017b515ee214b28420edbedb3015c16ee29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:fa:5e:1d:3f:ac:e7:2d:32:42:5b:bb:38: 2e:f6:24:ca:64:bf:cb:fe:c3:c5:cc:e3:23:4c:3c: f5:bc:5e:cd:20:df:d6:b0:1f:15:2b:90:fa:14:bc: 2e:ef:50:4d:16:87:ca:a9:e7:ba:d1:00:60:2f:09: 9a:25:82:4f:33:65:1b:99:9d:21:53:c7:f2:11:81: 4f:fc:b4:a8:2e:5b:f0:e9:ad:5c:51:00:f7:0a:c1: 1f:1b:b8:07:cf:92:c2:8f:e9:12:89:8d:ad:2c:3b: 8b:ce:14:a3:24:6b:57:00:5f:fc:13:fe:9d:dd:da: 87:99:f1:cf:cb:7d:7e:5e:dc:72:93:07:73:bb:d4: f4:e7:61:38:b1:af:3e:1b:86:a9:84:69:13:7b:41: 08:0f:ce:56:62:ce:37:ae:63:eb:f6:dd:03:9a:a5: 11:58:6e:cf:24:39:5a:8a:50:f6:9d:da:99:ce:07: bb:7c:0e:d8:b6:92:e3:d5:b8:d0:1d:e3:65:be:b2: ae:a2:b2:29:92:31:88:dd:d4:e8:a5:d5:92:c3:5a: f3:a7:34:c4:e6:ea:c5:20:de:1b:ed:3a:b6:a7:a2: 61:f2:c3:c5:9f:cc:92:33:77:ca:4a:b0:3b:f4:56: 86:15:75:11:1c:3f:11:46:77:e8:0f:d8:12:e9:4a: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.243.176.0/20 83.143.240.0/21 84.39.112.0/21 89.238.128.0/18 89.249.64.0/20 91.102.64.0/21 91.207.56.0/23 91.232.150.0/23 176.10.80.0/21 185.9.16.0/22 185.93.180.0/22 185.94.188.0-185.94.195.255 185.104.184.0/22 193.27.64.0/23 193.189.74.0/23 194.79.28.0/23 194.79.31.0/24 194.187.248.0/22 195.8.196.0/23 195.12.48.0/22 195.242.212.0/22 217.64.112.0/20 217.151.96.0/20 IPv6: 2001:ac8::/32 2a01:300::/29 2a02:40::/32 2a03:34c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33970 Signature Algorithm: sha256WithRSAEncryption 88:0f:8d:03:d9:31:c1:ef:54:00:d6:3c:45:6c:81:9e:1b:fd: 91:7c:38:ce:2c:5d:e0:e3:8e:1f:e8:2c:33:0d:3c:6b:46:45: b4:b4:5f:48:c9:bb:05:b9:da:62:ff:e6:16:ab:d7:a2:31:5d: ba:52:e2:33:7b:32:95:78:4e:50:a3:b3:97:04:ed:3e:fe:11: 1e:ad:67:0a:90:95:da:83:65:05:b5:4a:ed:83:9f:87:1f:0d: 61:ae:17:66:d4:ab:e2:48:d3:2f:a5:1c:24:4e:7d:ba:56:e0: 15:a9:1a:c8:dd:a5:46:fa:fe:3c:56:1b:3d:cf:44:08:49:71: 21:3e:e0:a4:35:31:25:f3:2d:56:68:85:36:ee:70:3b:1e:45: b5:21:91:88:85:59:de:bf:e8:c8:c2:7b:b1:59:1b:91:23:2c: cf:e4:03:d8:bd:5f:f2:67:57:e6:3b:7f:0f:da:dc:dd:08:d8: fb:88:39:d0:f1:5e:2f:74:e5:1e:6c:fc:71:54:72:77:e5:a5: f4:9c:4f:21:37:0b:b1:df:ed:43:33:5d:01:7e:26:97:56:3b: 87:08:e7:20:07:08:c0:af:ac:0c:c6:e1:7e:77:a2:06:6c:f7: cf:af:f6:74:87:f5:f1:cb:35:a4:f6:93:5b:78:2f:ac:b0:c9: a3:89:9e:87 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAZt7NpIi7iD44zOsGoDt1lU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWQ0NzAxN2I1MTVlZTIxNGIyODQyMGVkYmVkYjMwMTVjMTZlZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpH6Xh0/rOctMkJbuzgu9iTKZL/L /sPFzOMjTDz1vF7NIN/WsB8VK5D6FLwu71BNFofKqee60QBgLwmaJYJPM2UbmZ0h U8fyEYFP/LSoLlvw6a1cUQD3CsEfG7gHz5LCj+kSiY2tLDuLzhSjJGtXAF/8E/6d 3dqHmfHPy31+Xtxykwdzu9T052E4sa8+G4aphGkTe0EID85WYs43rmPr9t0DmqUR WG7PJDlailD2ndqZzge7fA7YtpLj1bjQHeNlvrKuorIpkjGI3dTopdWSw1rzpzTE 5urFIN4b7Tq2p6Jh8sPFn8ySM3fKSrA79FaGFXURHD8RRnfoD9gS6UrpbwIDAQAB o4IDVTCCA1EwHQYDVR0OBBYEFGnUcBe1Fe4hSyhCDtvtswFcFu4pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzUzN2Nm Yy0zNzBjLTRiN2ItOThkNC0yM2I0YzkzMzU2ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNTM3Y2Zj LTM3MGMtNGI3Yi05OGQ0LTIzYjRjOTMzNTZmOC8xL2FkUndGN1VWN2lGTEtFSU8y LTJ6QVZ3Vzdpay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHTBggrBgEF BQcBBwEB/wSBwzCBwDCBmQQCAAEwgZIDBARN87ADBANTj/ADBANUJ3ADBAZZ7oAD BARZ+UADBANbZkADBAFbzzgDBAFb6JYDBAOwClADBAK5CRADBAK5XbQwDAMEArle vAMEArlewAMEArlouAMEAcEbQAMEAcG9SgMEAcJPHAMEAMJPHwMEAsK7+AMEAcMI xAMEAsMMMAMEAsPy1AMEBNlAcAMEBNmXYDAiBAIAAjAcAwUAIAEKyAMFAyoBAwAD BQAqAgBAAwUAKgM0wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAhLIwDQYJKoZI hvcNAQELBQADggEBAIgPjQPZMcHvVADWPEVsgZ4b/ZF8OM4sXeDjjh/oLDMNPGtG RbS0X0jJuwW52mL/5har16IxXbpS4jN7MpV4TlCjs5cE7T7+ER6tZwqQldqDZQW1 Su2Dn4cfDWGuF2bUq+JI0y+lHCROfbpW4BWpGsjdpUb6/jxWGz3PRAhJcSE+4KQ1 MSXzLVZohTbucDseRbUhkYiFWd6/6MjCe7FZG5EjLM/kA9i9X/JnV+Y7fw/a3N0I 2PuIOdDxXi905R5s/HFUcnflpfScTyE3C7Hf7UMzXQF+JpdWO4cI5yAHCMCvrAzG 4X53ogZs98+v9nSH9fHLNaT2k1t4L6ywyaOJnoc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:56 2026 by rpki-client