This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer File: ayM9dVCLToXMz0Q0mny3AxmNHSY.cer (raw, json) Hash identifier: HnVnpxjxu5Ew9bzn71VvDQIxgCp8YUJB4kn0I5+Er90= Subject key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8078B7D2B55E720F3C28334FDEDE36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49687 AS: 197476 IP: 5.154.252.0/22 IP: 5.157.128.0/17 IP: 37.35.32.0/19 IP: 62.216.64.0/19 IP: 91.225.12.0/22 IP: 91.235.122.0/23 IP: 146.66.208.0/20 IP: 178.157.64.0/20 IP: 178.157.92.0 -- 178.157.94.255 IP: 178.157.100.0 -- 178.157.127.255 IP: 185.76.60.0/22 IP: 188.74.128.0/17 IP: 188.119.128.0 -- 188.119.147.255 IP: 188.119.156.0 -- 188.119.191.255 IP: 2a03:8800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:78:b7:d2:b5:5e:72:0f:3c:28:33:4f:de:de:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:2e:b9:cd:40:16:d5:5b:04:65:50:f1:b5: 26:2e:48:40:cf:33:ef:cd:fa:f2:e7:e7:f2:15:b1: b9:70:cc:3e:1d:b9:de:c8:af:12:22:30:8e:b4:4c: 5d:5d:2a:56:71:b8:d5:57:a7:e9:f9:f7:55:9a:f6: 6a:69:f2:ba:24:cc:95:c6:3c:ac:db:e8:bd:70:d6: 06:ac:0b:5e:e8:01:76:f3:7e:8d:7c:c6:bd:d4:4f: 0c:5e:07:f6:cb:b3:e8:a0:b2:42:8c:a6:0a:71:0a: 3a:49:91:e8:17:41:3c:65:63:58:8d:3c:3b:e5:2a: 32:f9:5c:63:f8:dc:e4:c2:05:7f:a4:83:51:37:74: 29:3d:74:ef:1b:49:c9:e4:22:28:ac:3a:c4:6d:8d: 8a:07:18:74:d9:b9:4e:3b:f3:34:98:be:fd:3f:da: 16:b2:63:02:4f:15:b5:4d:52:7a:36:b9:fe:7b:79: a8:c7:50:2a:75:6f:5b:08:73:18:9c:ec:2c:61:b6: d8:8e:84:77:2d:38:5e:95:98:30:16:fe:6b:80:a4: 28:07:ab:76:90:29:fc:07:d8:fd:44:ef:c6:5c:a4: 78:68:36:b8:98:c1:e9:dd:47:30:b0:ac:2f:0a:97: ee:3f:04:98:3a:37:90:f5:b8:5f:8d:37:dc:6e:2c: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.252.0/22 5.157.128.0/17 37.35.32.0/19 62.216.64.0/19 91.225.12.0/22 91.235.122.0/23 146.66.208.0/20 178.157.64.0/20 178.157.92.0-178.157.94.255 178.157.100.0-178.157.127.255 185.76.60.0/22 188.74.128.0/17 188.119.128.0-188.119.147.255 188.119.156.0-188.119.191.255 IPv6: 2a03:8800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49687 197476 Signature Algorithm: sha256WithRSAEncryption 5f:f5:9c:13:c0:71:2e:46:2e:70:41:03:c2:2a:cc:61:8c:03: dc:3c:34:6a:33:7c:12:8e:ad:7a:4b:fb:96:36:f2:8d:1c:40: 6b:db:b1:ae:14:56:13:be:c6:9a:a7:fc:3e:cc:ff:b1:4b:a1: 52:32:76:91:e8:7a:1a:3a:30:f2:0e:b7:04:10:b5:2d:17:98: ad:84:7e:91:f2:68:a4:a1:7b:54:06:5f:9d:6f:20:73:8e:18: e6:55:13:bc:f6:da:7b:f2:39:6c:8a:43:63:d4:f4:95:91:ce: c7:e9:03:5b:f5:5b:b5:ab:a0:65:8d:7d:c2:8d:bc:c6:c5:d5: b6:ca:60:11:9d:bb:35:66:51:73:e3:3d:2b:4a:2a:13:a6:fe: fb:21:db:c8:35:64:0c:83:b2:a3:ec:20:88:89:c1:9d:78:07: 80:1d:3d:60:75:6b:81:c2:ae:12:0d:11:2e:f4:4d:cf:04:9b: 4a:9f:f5:ea:0b:f9:da:c0:26:c8:4d:7b:98:90:a0:d3:7c:ba: 20:7b:1a:f6:4f:b0:9e:f5:92:e1:a8:ab:ed:c7:81:2d:e5:80: f4:0f:b2:be:b0:b8:e7:d6:c8:a9:b9:52:c1:c0:4b:a8:47:4f: 47:b8:1f:f0:ac:b6:80:02:4a:36:ee:4c:6f:5e:ea:89:65:a7: ed:f4:79:a7 -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISAZt8gHi30rVecg88KDNP3t42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIzM2Q3NTUwOGI0ZTg1Y2NjZjQ0MzQ5YTdjYjcwMzE5OGQxZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt4uuc1AFtVbBGVQ8bUmLkhAzzPv zfry5+fyFbG5cMw+HbneyK8SIjCOtExdXSpWcbjVV6fp+fdVmvZqafK6JMyVxjys 2+i9cNYGrAte6AF2836NfMa91E8MXgf2y7PooLJCjKYKcQo6SZHoF0E8ZWNYjTw7 5Soy+Vxj+NzkwgV/pINRN3QpPXTvG0nJ5CIorDrEbY2KBxh02blOO/M0mL79P9oW smMCTxW1TVJ6Nrn+e3mox1AqdW9bCHMYnOwsYbbYjoR3LThelZgwFv5rgKQoB6t2 kCn8B9j9RO/GXKR4aDa4mMHp3UcwsKwvCpfuPwSYOjeQ9bhfjTfcbizyRwIDAQAB o4IDJTCCAyEwHQYDVR0OBBYEFGsjPXVQi06FzM9ENJp8twMZjR0mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzlkOTE5 Mi0yNzNjLTRjYTktYjJiYS1mYTljYjUxY2QwZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvOWQ5MTky LTI3M2MtNGNhOS1iMmJhLWZhOWNiNTFjZDBmMS8xL2F5TTlkVkNMVG9YTXowUTBt bnkzQXhtTkhTWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEF BQcBBwEB/wSBjjCBizB6BAIAATB0AwQCBZr8AwQHBZ2AAwQFJSMgAwQFPthAAwQC W+EMAwQBW+t6AwQEkkLQAwQEsp1AMAwDBAKynVwDBACynV4wDAMEArKdZAMEB7Kd AAMEArlMPAMEB7xKgDAMAwQHvHeAAwQCvHeQMAwDBAK8d5wDBAa8d4AwDQQCAAIw BwMFACoDiAAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMIXAgMDA2QwDQYJKoZI hvcNAQELBQADggEBAF/1nBPAcS5GLnBBA8IqzGGMA9w8NGozfBKOrXpL+5Y28o0c QGvbsa4UVhO+xpqn/D7M/7FLoVIydpHoeho6MPIOtwQQtS0XmK2EfpHyaKShe1QG X51vIHOOGOZVE7z22nvyOWyKQ2PU9JWRzsfpA1v1W7WroGWNfcKNvMbF1bbKYBGd uzVmUXPjPStKKhOm/vsh28g1ZAyDsqPsIIiJwZ14B4AdPWB1a4HCrhINES70Tc8E m0qf9eoL+drAJshNe5iQoNN8uiB7GvZPsJ71kuGoq+3HgS3lgPQPsr6wuOfWyKm5 UsHAS6hHT0e4H/CstoACSjbuTG9e6ollp+30eac= -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:46 2026 by rpki-client