This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer File: d9LZKEIxBOXDSA4htKPtFJiyon4.cer (raw, json) Hash identifier: d5xmVY3pFGOTQJn2w6NQVnHszwp9h9qeOBSgT0o5qms= Subject key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C418EEEE485E5EA3DB19E20AA891A795C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 09 Feb 2026 08:40:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62392 IP: 185.175.216.0/22 IP: 2001:67c:1808::/47 IP: 2001:67c:1810::/48 IP: 2a13:8300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:8e:ee:e4:85:e5:ea:3d:b1:9e:20:aa:89:1a:79:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 9 08:40:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:19:20:e8:58:21:d0:7f:51:ee:88:b4:46: 45:d2:e6:ff:d7:28:92:ca:31:3d:94:97:17:30:b8: b6:b6:c5:49:9b:0a:15:e9:9f:ed:3f:07:38:da:1a: cc:e1:13:4d:5b:68:08:c0:3f:39:c4:a6:0d:ee:15: 34:df:29:d8:e5:bc:d5:24:a3:aa:b8:ca:d1:6c:04: 6b:a2:c6:80:1f:94:5a:6c:ed:0b:55:45:24:bd:e2: 48:54:f9:8a:d0:ea:b8:39:f8:82:ed:45:6a:56:62: 7d:5f:a9:1d:f8:9a:89:97:e9:ba:a8:b7:08:f2:87: 3c:e9:0c:df:e8:fa:c7:e5:44:50:3a:9b:b5:78:f7: 8d:af:74:56:67:0d:06:4c:cd:27:a7:33:a7:05:21: f4:cf:60:5e:05:6d:b1:8c:99:0a:b2:2d:31:76:b6: f1:af:64:21:65:e2:f3:d1:1a:8a:c8:bc:1e:b2:53: 17:5d:58:14:9a:18:15:5a:91:a0:d4:66:30:fe:d2: 97:b6:7b:91:2d:5c:9a:de:25:95:0a:af:3b:60:e9: ff:5e:e2:14:a3:44:61:22:44:82:83:72:73:4f:6a: 22:91:b8:c6:eb:d5:db:0a:b6:4c:1b:63:71:02:d4: 08:1c:d2:2c:3c:2a:ad:ca:42:63:89:f9:46:fa:d2: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.216.0/22 IPv6: 2001:67c:1808::/47 2001:67c:1810::/48 2a13:8300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62392 Signature Algorithm: sha256WithRSAEncryption 07:a6:ba:fc:55:4a:44:3d:7e:ee:e5:89:46:bf:5a:69:4b:a0: 71:27:4a:08:c1:78:2c:44:4d:bd:89:04:68:29:ec:02:56:90: b9:da:e2:ac:22:2e:0f:c0:00:32:e3:07:64:2d:57:72:34:da: ee:c1:fc:39:a7:da:ec:05:23:59:e5:df:95:fc:bc:97:55:49: 62:58:9a:d3:d6:d1:46:5c:65:8d:9a:e4:da:53:84:e8:4c:81: 6b:55:12:66:71:f9:c2:b3:7f:45:75:22:79:43:fd:ad:f0:35: 76:33:52:40:b1:c5:7f:25:e2:a9:f3:e5:70:91:e1:98:c1:7c: c1:55:a2:4f:3a:ff:01:cf:8d:72:d8:6d:34:11:84:3a:b5:7d: 4a:3a:6d:2f:2e:db:e0:b0:57:36:e3:c9:e5:79:3f:c9:f1:fa: ff:45:92:fa:c3:20:62:f7:bf:5d:72:c4:c0:e8:a3:4a:b0:bc: 3c:d0:a1:6e:fd:09:28:69:e4:34:04:96:fb:b9:c8:66:1b:43: 11:da:61:46:e4:f1:2c:f9:01:67:88:92:c8:9d:ea:80:3b:5c: e0:91:96:b7:5a:75:09:fb:3c:1b:c6:22:6c:bc:24:07:f2:63: 14:89:a8:53:4d:21:39:f0:f1:bd:31:68:d7:9b:50:19:f0:99: 4d:b0:9d:71 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZxBju7kheXqPbGeIKqJGnlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA5MDg0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2QyZDkyODQyMzEwNGU1YzM0ODBlMjFiNGEzZWQxNDk4YjJhMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnwZIOhYIdB/Ue6ItEZF0ub/1yiS yjE9lJcXMLi2tsVJmwoV6Z/tPwc42hrM4RNNW2gIwD85xKYN7hU03ynY5bzVJKOq uMrRbARrosaAH5RabO0LVUUkveJIVPmK0Oq4OfiC7UVqVmJ9X6kd+JqJl+m6qLcI 8oc86Qzf6PrH5URQOpu1ePeNr3RWZw0GTM0npzOnBSH0z2BeBW2xjJkKsi0xdrbx r2QhZeLz0RqKyLweslMXXVgUmhgVWpGg1GYw/tKXtnuRLVya3iWVCq87YOn/XuIU o0RhIkSCg3JzT2oikbjG69XbCrZMG2NxAtQIHNIsPCqtykJjiflG+tJ5wwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzJiOWUy OS1kNTY4LTRkNTMtYjEyOC00ODg3OTIzODhlNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMmI5ZTI5 LWQ1NjgtNGQ1My1iMTI4LTQ4ODc5MjM4OGU1Yi8xL2Q5TFpLRUl4Qk9YRFNBNGh0 S1B0RkppeW9uNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAMBAIAATAGAwQCua/YMB8EAgACMBkDBwEgAQZ8GAgDBwAgAQZ8 GBADBQMqE4MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzuDANBgkqhkiG9w0B AQsFAAOCAQEAB6a6/FVKRD1+7uWJRr9aaUugcSdKCMF4LERNvYkEaCnsAlaQudri rCIuD8AAMuMHZC1XcjTa7sH8Oafa7AUjWeXflfy8l1VJYlia09bRRlxljZrk2lOE 6EyBa1USZnH5wrN/RXUieUP9rfA1djNSQLHFfyXiqfPlcJHhmMF8wVWiTzr/Ac+N cthtNBGEOrV9SjptLy7b4LBXNuPJ5Xk/yfH6/0WS+sMgYve/XXLEwOijSrC8PNCh bv0JKGnkNASW+7nIZhtDEdphRuTxLPkBZ4iSyJ3qgDtc4JGWt1p1Cfs8G8YibLwk B/JjFImoU00hOfDxvTFo15tQGfCZTbCdcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:48 2026 by rpki-client