This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer File: k2d9fLknHONhJW6YM8x7FP0CPr4.cer (raw, json) Hash identifier: tdKb+z64UMK0ZvOaDy9znVLZGZEm1/n0mR3MaSbWf+A= Subject key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BC2A5878AD423AF9577DFC477067 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200017 AS: 214208 IP: 2.56.0.0/22 IP: 2.58.232.0/22 IP: 5.1.40.0/24 IP: 37.44.212.0/24 IP: 45.9.152.0/22 IP: 45.67.200.0/22 IP: 45.87.44.0/22 IP: 62.3.0.0/24 IP: 78.40.208.0/22 IP: 88.151.10.0/24 IP: 88.214.52.0/22 IP: 91.227.184.0/24 IP: 91.234.192.0/24 IP: 146.19.28.0/24 IP: 146.19.154.0/24 IP: 146.19.205.0/24 IP: 147.78.196.0/22 IP: 171.22.220.0/22 IP: 176.126.106.0/24 IP: 178.239.28.0/22 IP: 178.255.221.0/24 IP: 185.161.76.0/24 IP: 185.182.65.0/24 IP: 185.232.167.0/24 IP: 185.238.142.0/24 IP: 188.95.67.0/24 IP: 193.37.196.0/22 IP: 193.84.109.0/24 IP: 193.189.137.0/24 IP: 194.41.112.0/22 IP: 195.170.163.0/24 IP: 213.109.155.0/24 IP: 217.147.12.0/22 IP: 2a06:fe40::/29 IP: 2a09:1d80::/29 IP: 2a09:57c0::/29 IP: 2a09:59c0::/29 IP: 2a09:5bc0::/29 IP: 2a0e:b00::/29 IP: 2a0e:2800::/29 IP: 2a0e:2c00::/29 IP: 2a0e:6c00::/29 IP: 2a0e:8400::/29 IP: 2a0e:f180::/29 IP: 2a10:eac0::/29 IP: 2a11:400::/29 IP: 2a11:1440::/29 IP: 2a11:2500::/29 IP: 2a11:4200::/29 IP: 2a11:5280::/29 IP: 2a11:8240::/29 IP: 2a11:e800::/29 IP: 2a11:e940::/29 IP: 2a11:ed80::/29 IP: 2a12:f80::/29 IP: 2a12:2f00::/29 IP: 2a12:3a80::/29 IP: 2a12:d500::/29 IP: 2a12:de00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bc:2a:58:78:ad:42:3a:f9:57:7d:fc:47:70:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:37:fb:d7:ce:3c:03:3f:fd:bf:76:82:98: be:d1:b1:b1:e6:d3:a6:a6:79:e9:8d:d1:d6:0e:f5: 05:62:58:7c:1c:d1:d9:2c:d8:90:75:02:2c:9a:90: ad:7f:42:33:8e:eb:6c:e7:9b:e8:44:5b:6c:05:96: 26:57:72:36:27:f6:56:de:84:3a:2b:f9:cf:c4:7e: 5c:3d:61:99:67:98:d0:5d:ca:94:f2:94:b0:0c:d4: bd:50:71:02:4f:bc:2f:e6:84:44:8a:2b:7d:e0:19: aa:d5:b2:0a:a1:4a:ba:04:2d:3f:b4:9c:4d:98:28: 2d:6d:b1:cc:cf:ee:53:72:35:d7:b3:60:e7:37:1e: 54:8c:a2:5c:f9:c4:15:7d:2f:e0:ec:bc:65:19:3c: e1:ab:ea:e8:6d:0f:44:d8:69:34:92:33:21:f6:f6: fa:e3:4d:64:2d:b7:3f:b5:9c:15:a2:3b:b0:83:e2: dc:02:b1:04:6d:7d:4e:2a:b1:d1:20:01:99:bf:ef: 15:f2:f7:c1:90:fc:dc:43:dd:5d:f9:fc:97:65:57: 49:58:68:a2:7b:3c:2f:9b:ff:2d:d1:a8:be:e1:d1: b2:5d:93:6c:38:77:54:c2:05:bc:57:4f:a8:ec:19: e2:2a:8a:6d:7b:44:fb:6c:2c:11:73:7e:6d:8a:56: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.0.0/22 2.58.232.0/22 5.1.40.0/24 37.44.212.0/24 45.9.152.0/22 45.67.200.0/22 45.87.44.0/22 62.3.0.0/24 78.40.208.0/22 88.151.10.0/24 88.214.52.0/22 91.227.184.0/24 91.234.192.0/24 146.19.28.0/24 146.19.154.0/24 146.19.205.0/24 147.78.196.0/22 171.22.220.0/22 176.126.106.0/24 178.239.28.0/22 178.255.221.0/24 185.161.76.0/24 185.182.65.0/24 185.232.167.0/24 185.238.142.0/24 188.95.67.0/24 193.37.196.0/22 193.84.109.0/24 193.189.137.0/24 194.41.112.0/22 195.170.163.0/24 213.109.155.0/24 217.147.12.0/22 IPv6: 2a06:fe40::/29 2a09:1d80::/29 2a09:57c0::/29 2a09:59c0::/29 2a09:5bc0::/29 2a0e:b00::/29 2a0e:2800::/29 2a0e:2c00::/29 2a0e:6c00::/29 2a0e:8400::/29 2a0e:f180::/29 2a10:eac0::/29 2a11:400::/29 2a11:1440::/29 2a11:2500::/29 2a11:4200::/29 2a11:5280::/29 2a11:8240::/29 2a11:e800::/29 2a11:e940::/29 2a11:ed80::/29 2a12:f80::/29 2a12:2f00::/29 2a12:3a80::/29 2a12:d500::/29 2a12:de00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200017 214208 Signature Algorithm: sha256WithRSAEncryption 6f:c1:44:19:7a:ed:d0:86:56:06:d6:85:a0:ad:03:50:7a:c3: 36:f3:ca:26:5b:fa:54:d8:f6:5f:89:01:59:25:d8:0c:08:68: 5f:7a:44:81:68:5f:b4:d2:b0:4c:f6:d4:8e:1f:1a:82:a3:6d: 5a:a1:75:4a:7a:81:fb:29:6a:d6:19:6f:5d:80:62:80:9c:ef: 54:4e:08:bf:0f:cf:cc:15:00:39:63:c2:89:65:fc:fe:8d:8c: 44:ce:6b:3b:4a:12:7b:bf:2c:ac:5b:52:aa:e7:6c:d8:b5:38: 45:c9:86:19:ac:9b:27:bd:3b:59:b3:67:12:27:44:07:64:2f: 1a:74:7c:d6:32:7b:d4:c7:c5:f9:48:68:78:40:97:f7:4d:50: ec:46:d5:f4:48:5f:1b:51:4f:84:0a:b8:67:c0:b6:ce:61:65: 99:f7:ec:e8:3e:e6:09:72:55:64:60:20:b3:a0:7e:0d:dd:ab: c7:aa:4d:69:c7:87:19:e9:7d:b6:58:08:be:ba:2e:66:4b:8c: ca:dc:69:c2:34:4c:67:7e:3b:8f:3b:2c:1c:c4:d4:e5:50:ea: 02:24:88:23:24:17:c4:26:01:f5:40:3d:50:5e:0a:b3:6e:00: 1b:c9:a6:03:1e:b7:4f:79:fb:3f:fe:ae:28:4c:83:33:78:4d: 36:ab:97:8d -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgISAZt/FbwqWHitQjr5V338R3BnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzY3N2Q3Y2I5MjcxY2UzNjEyNTZlOTgzM2NjN2IxNGZkMDIzZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMU3+9fOPAM//b92gpi+0bGx5tOm pnnpjdHWDvUFYlh8HNHZLNiQdQIsmpCtf0Izjuts55voRFtsBZYmV3I2J/ZW3oQ6 K/nPxH5cPWGZZ5jQXcqU8pSwDNS9UHECT7wv5oREiit94Bmq1bIKoUq6BC0/tJxN mCgtbbHMz+5TcjXXs2DnNx5UjKJc+cQVfS/g7LxlGTzhq+robQ9E2Gk0kjMh9vb6 401kLbc/tZwVojuwg+LcArEEbX1OKrHRIAGZv+8V8vfBkPzcQ91d+fyXZVdJWGii ezwvm/8t0ai+4dGyXZNsOHdUwgW8V0+o7BniKopte0T7bCwRc35tilaxaQIDAQAB o4IELTCCBCkwHQYDVR0OBBYEFJNnfXy5JxzjYSVumDPMexT9Aj6+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2E5YzZk YS04ZWEwLTQ2YjctYTFhNi05OWFjYjk5Y2U3NTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYTljNmRh LThlYTAtNDZiNy1hMWE2LTk5YWNiOTljZTc1NC8xL2syZDlmTGtuSE9OaEpXNllN OHg3RlAwQ1ByNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBpQYIKwYB BQUHAQcBAf8EggGUMIIBkDCBzQQCAAEwgcYDBAICOAADBAICOugDBAAFASgDBAAl LNQDBAItCZgDBAItQ8gDBAItVywDBAA+AwADBAJOKNADBABYlwoDBAJY1jQDBABb 47gDBABb6sADBACSExwDBACSE5oDBACSE80DBAKTTsQDBAKrFtwDBACwfmoDBAKy 7xwDBACy/90DBAC5oUwDBAC5tkEDBAC56KcDBAC57o4DBAC8X0MDBALBJcQDBADB VG0DBADBvYkDBALCKXADBADDqqMDBADVbZsDBALZkwwwgb0EAgACMIG2AwUDKgb+ QAMFAyoJHYADBQMqCVfAAwUDKglZwAMFAyoJW8ADBQMqDgsAAwUDKg4oAAMFAyoO LAADBQMqDmwAAwUDKg6EAAMFAyoO8YADBQMqEOrAAwUDKhEEAAMFAyoRFEADBQMq ESUAAwUDKhFCAAMFAyoRUoADBQMqEYJAAwUDKhHoAAMFAyoR6UADBQMqEe2AAwUD KhIPgAMFAyoSLwADBQMqEjqAAwUDKhLVAAMFAyoS3gAwHwYIKwYBBQUHAQgBAf8E EDAOoAwwCgIDAw1RAgMDRMAwDQYJKoZIhvcNAQELBQADggEBAG/BRBl67dCGVgbW haCtA1B6wzbzyiZb+lTY9l+JAVkl2AwIaF96RIFoX7TSsEz21I4fGoKjbVqhdUp6 gfspatYZb12AYoCc71ROCL8Pz8wVADljwoll/P6NjETOaztKEnu/LKxbUqrnbNi1 OEXJhhmsmye9O1mzZxInRAdkLxp0fNYye9THxflIaHhAl/dNUOxG1fRIXxtRT4QK uGfAts5hZZn37Og+5glyVWRgILOgfg3dq8eqTWnHhxnpfbZYCL66LmZLjMrcacI0 TGd+O487LBzE1OVQ6gIkiCMkF8QmAfVAPVBeCrNuABvJpgMet095+z/+rihMgzN4 TTarl40= -----END CERTIFICATE-----Generated at Mon Jan 19 20:18:49 2026 by rpki-client