This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer (raw, json) Hash identifier: HBFAM2hREOySY+OrWPB8MK7N4GMxAEaB2JJXBoLg7hg= Subject key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED257E38D167113BE3ECD7B24DECD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206197 IP: 185.192.52.0/22 IP: 2a0c:1c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:25:7e:38:d1:67:11:3b:e3:ec:d7:b2:4d:ec:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:de:2e:20:d3:9c:79:88:1b:ea:f7:95:4a: 95:46:59:ac:25:ea:41:61:06:59:7e:15:e0:19:0a: 8c:16:5f:1b:db:97:86:78:1e:ea:87:26:c6:94:1f: c8:1f:c9:ef:e5:23:24:62:cc:d3:6f:dd:0e:0f:e9: 0f:16:d2:04:5a:15:dc:9e:cf:ee:d1:31:0d:1c:ec: 18:ce:34:1b:63:2b:d2:a7:03:9a:01:8c:7b:d7:08: ea:d3:d3:41:da:ce:0a:2a:8c:fb:92:d8:7e:67:fd: 20:ce:8d:4f:8b:5c:b5:7a:63:24:57:52:21:90:1b: 4c:f5:8f:53:0b:d2:0a:28:20:80:4f:89:40:5d:b1: 22:f7:b7:e9:1c:12:92:2f:be:b5:bb:71:79:05:a0: 99:fa:4c:29:ef:24:b4:54:ab:b0:27:70:e9:c0:0d: 48:31:9d:ad:6f:0f:10:20:a7:5d:42:d5:10:37:70: 92:b0:3a:0a:09:a4:27:94:e2:d3:4e:0d:4e:3c:29: 74:83:f3:d5:6e:c7:b5:3e:81:02:a4:e5:8e:80:47: 05:65:1d:f8:84:b7:82:2a:7a:a2:d7:61:08:a8:f0: 59:3f:94:3c:af:f2:06:d1:59:c1:67:30:de:fc:5a: df:b0:81:f9:fc:35:86:b9:bb:3b:c3:f2:59:60:98: 22:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.52.0/22 IPv6: 2a0c:1c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206197 Signature Algorithm: sha256WithRSAEncryption 79:88:fe:2b:05:43:85:dd:db:1c:bb:16:6f:74:12:bb:71:2f: 08:9c:b5:59:b1:f1:a2:5b:34:39:2b:7e:5c:d6:75:ff:c3:2f: 80:02:0c:6f:da:96:ae:34:c4:71:12:ea:25:dc:13:13:85:d5: 50:3e:67:08:73:c1:02:f3:18:c6:1e:84:0f:60:b8:79:a4:ff: 42:22:f0:e5:e1:e8:8e:fe:c9:85:36:d6:d2:5d:b6:2b:0d:bd: 60:b1:25:70:76:48:b6:48:2d:6a:88:f1:4d:42:89:9a:fb:44: 5e:67:be:57:49:96:9f:ce:4d:b5:86:59:c6:5a:84:53:d4:9a: 4b:04:f0:c0:2a:d0:bc:4b:93:0c:26:aa:45:22:0a:81:16:74: 2c:99:ae:f3:32:f5:95:0c:d7:2c:2c:54:53:f1:94:ec:a4:d8: 9f:6c:5f:b6:c9:1f:6b:d6:17:17:ff:52:5a:03:8b:58:66:77: 18:89:9e:c2:3c:d7:49:d2:83:e4:cb:c6:a4:e1:a9:c8:b7:cf: 84:15:c7:65:3a:f9:05:a9:c1:d3:41:0e:98:97:03:f8:92:2f: 6a:00:58:f7:9b:04:46:3f:b9:26:6b:ae:cc:25:f9:dc:45:92: 81:06:1b:92:d2:32:42:78:a7:9d:f1:5d:62:94:1e:c1:6c:78: fd:50:b8:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87SV+ONFnETvj7NeyTezQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2QxOGIwZjY1MzVmY2JiYjQ5MmY2MDZjYjg4MGJlN2EyNmVmY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wPeLiDTnHmIG+r3lUqVRlmsJepB YQZZfhXgGQqMFl8b25eGeB7qhybGlB/IH8nv5SMkYszTb90OD+kPFtIEWhXcns/u 0TENHOwYzjQbYyvSpwOaAYx71wjq09NB2s4KKoz7kth+Z/0gzo1Pi1y1emMkV1Ih kBtM9Y9TC9IKKCCAT4lAXbEi97fpHBKSL761u3F5BaCZ+kwp7yS0VKuwJ3DpwA1I MZ2tbw8QIKddQtUQN3CSsDoKCaQnlOLTTg1OPCl0g/PVbse1PoECpOWOgEcFZR34 hLeCKnqi12EIqPBZP5Q8r/IG0VnBZzDe/FrfsIH5/DWGubs7w/JZYJgiiQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHfRiw9lNfy7tJL2BsuIC+eibvzCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2I3ODcz ZS0yNDc1LTQ3MWQtYjAzOS0xOGVjZDA0YTdiNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYjc4NzNl LTI0NzUtNDcxZC1iMDM5LTE4ZWNkMDRhN2I1ZS8xL2Q5R0xEMlUxX0x1MGt2WUd5 NGdMNTZKdV9NSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucA0MA0EAgACMAcDBQMqDBxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMldTANBgkqhkiG9w0BAQsFAAOCAQEAeYj+KwVDhd3b HLsWb3QSu3EvCJy1WbHxols0OSt+XNZ1/8MvgAIMb9qWrjTEcRLqJdwTE4XVUD5n CHPBAvMYxh6ED2C4eaT/QiLw5eHojv7JhTbW0l22Kw29YLElcHZItkgtaojxTUKJ mvtEXme+V0mWn85NtYZZxlqEU9SaSwTwwCrQvEuTDCaqRSIKgRZ0LJmu8zL1lQzX LCxUU/GU7KTYn2xftskfa9YXF/9SWgOLWGZ3GImewjzXSdKD5MvGpOGpyLfPhBXH ZTr5BanB00EOmJcD+JIvagBY95sERj+5JmuuzCX53EWSgQYbktIyQninnfFdYpQe wWx4/VC4Rw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:52 2026 by rpki-client