This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer File: myANDnrTzvciOLUWTEss3eI6ah4.cer (raw, json) Hash identifier: fDICfCftk5PHE+PqzsOypqVrlymUKQlGogJMuQf0SCc= Subject key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2527E9981FD63D9F573D7FB969E70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31638 AS: 205139 IP: 5.144.184.0/21 IP: 37.156.96.0/22 IP: 37.156.148.0/22 IP: 37.156.168.0/22 IP: 37.156.208.0/22 IP: 46.255.80.0/21 IP: 86.104.6.0/24 IP: 86.104.229.0/24 IP: 86.105.8.0/24 IP: 86.105.179.0/24 IP: 89.33.232.0/24 IP: 89.34.6.0/24 IP: 89.36.155.0/24 IP: 89.39.92.0/24 IP: 89.39.224.0/20 IP: 89.42.230.0/24 IP: 89.44.189.0/24 IP: 89.44.206.0/24 IP: 89.45.24.0/21 IP: 89.45.95.0/24 IP: 89.45.216.0/22 IP: 89.45.229.0/24 IP: 89.47.32.0/23 IP: 93.113.46.0/24 IP: 93.113.89.0/24 IP: 93.115.154.0/24 IP: 93.115.170.0/23 IP: 93.118.37.0/24 IP: 93.119.194.0/24 IP: 94.176.131.0/24 IP: 94.176.151.0/24 IP: 94.177.18.0/23 IP: 94.177.151.0/24 IP: 176.223.164.0/24 IP: 185.82.168.0/22 IP: 188.209.80.0/20 IP: 188.210.239.0/24 IP: 188.212.153.0/24 IP: 188.214.29.0/24 IP: 188.215.44.0/22 IP: 188.215.65.0/24 IP: 188.215.247.0 -- 188.215.248.255 IP: 188.241.4.0/23 IP: 188.241.190.0/23 IP: 195.62.160.0/19 IP: 2a02:20d8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:52:7e:99:81:fd:63:d9:f5:73:d7:fb:96:9e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:3a:e4:98:3b:08:6c:29:12:c6:a1:d3:69: ea:cf:6b:fb:bc:8e:ef:9a:42:8d:45:0e:64:e4:35: 87:5d:2a:70:50:a5:d6:4b:8c:ae:08:c7:39:89:15: 2c:60:3a:ea:9b:3f:9f:bd:08:2f:58:e9:0e:a2:6b: d6:d5:af:b3:b0:65:48:e4:7e:0c:de:da:9a:b7:b9: c6:73:bc:12:ab:34:54:29:c3:2f:d3:fb:13:37:d9: 92:03:c9:c1:89:a5:75:80:a6:83:16:23:3c:b9:d0: fe:dd:b8:e5:3d:06:05:b3:0f:ab:cc:39:c5:9b:51: 94:c2:b4:c4:bb:2e:1a:d7:61:ec:3c:be:e0:48:e2: ea:a1:20:1c:50:e3:99:95:ce:89:24:d4:5d:59:66: 1b:a2:31:1e:e3:cc:fc:e9:40:e5:e1:3d:b7:4a:b4: 57:02:74:2d:a3:cd:d5:cf:37:9f:13:39:4b:be:fc: e7:ab:12:aa:4e:1c:4b:d9:68:7b:1e:2a:c1:67:3c: 74:9a:aa:4b:1e:e7:34:73:73:75:9b:02:90:2b:dd: 5a:e7:82:d6:d4:3d:ea:60:a2:63:e0:1e:da:59:f4: 82:26:da:54:f8:ec:37:d0:11:34:39:9b:e3:2a:af: a3:fa:a9:f8:25:ca:20:1c:7f:72:89:3e:d4:3f:17: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.184.0/21 37.156.96.0/22 37.156.148.0/22 37.156.168.0/22 37.156.208.0/22 46.255.80.0/21 86.104.6.0/24 86.104.229.0/24 86.105.8.0/24 86.105.179.0/24 89.33.232.0/24 89.34.6.0/24 89.36.155.0/24 89.39.92.0/24 89.39.224.0/20 89.42.230.0/24 89.44.189.0/24 89.44.206.0/24 89.45.24.0/21 89.45.95.0/24 89.45.216.0/22 89.45.229.0/24 89.47.32.0/23 93.113.46.0/24 93.113.89.0/24 93.115.154.0/24 93.115.170.0/23 93.118.37.0/24 93.119.194.0/24 94.176.131.0/24 94.176.151.0/24 94.177.18.0/23 94.177.151.0/24 176.223.164.0/24 185.82.168.0/22 188.209.80.0/20 188.210.239.0/24 188.212.153.0/24 188.214.29.0/24 188.215.44.0/22 188.215.65.0/24 188.215.247.0-188.215.248.255 188.241.4.0/23 188.241.190.0/23 195.62.160.0/19 IPv6: 2a02:20d8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31638 205139 Signature Algorithm: sha256WithRSAEncryption 05:f4:52:03:07:00:aa:0b:ef:a5:9a:43:bb:2c:28:15:8d:45: 56:a7:0a:8a:0e:3c:e5:92:57:b7:4b:cc:fb:32:10:c0:da:d1: c8:bc:99:db:2f:45:92:31:8b:53:17:1e:b6:1b:dc:ed:05:32: 1c:8b:cc:67:00:be:c6:c1:60:5f:9c:ea:c0:61:77:db:87:03: e8:06:d4:d2:91:36:ec:7f:c2:91:44:a1:0f:a7:8e:0e:05:12: f7:5b:0c:87:8d:21:16:58:9c:bc:28:70:04:9f:af:8f:8a:13: 47:95:d3:ad:91:03:5b:f2:bd:51:4b:27:98:aa:94:d0:e7:a2: 24:7f:67:30:ff:ae:64:c1:21:df:df:00:2b:b6:f6:3d:09:5c: 02:8c:c8:6e:3d:db:ec:be:bf:25:e7:9b:fd:9a:5b:27:8f:97: d4:b8:77:d6:5c:e4:f5:7a:65:c3:d0:25:bd:fc:f3:78:5b:a9: 6f:9f:29:56:ee:dd:98:bb:d1:54:78:09:47:b7:21:c0:ee:ea: 05:c6:c7:ef:b7:50:66:b5:4a:5c:9d:c5:b2:61:ac:a1:4a:14: b3:57:54:14:00:02:53:64:c7:05:8d:c4:a4:50:30:f1:6c:49: 37:55:c0:8a:e2:02:e5:6a:ce:93:6f:5d:db:18:24:66:d8:a7: 56:5a:bd:95 -----BEGIN CERTIFICATE----- MIIGwTCCBamgAwIBAgISAZt4olJ+mYH9Y9n1c9f7lp5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjIwMGQwZTdhZDNjZWY3MjIzOGI1MTY0YzRiMmNkZGUyM2E2YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/o65Jg7CGwpEsah02nqz2v7vI7v mkKNRQ5k5DWHXSpwUKXWS4yuCMc5iRUsYDrqmz+fvQgvWOkOomvW1a+zsGVI5H4M 3tqat7nGc7wSqzRUKcMv0/sTN9mSA8nBiaV1gKaDFiM8udD+3bjlPQYFsw+rzDnF m1GUwrTEuy4a12HsPL7gSOLqoSAcUOOZlc6JJNRdWWYbojEe48z86UDl4T23SrRX AnQto83VzzefEzlLvvznqxKqThxL2Wh7HirBZzx0mqpLHuc0c3N1mwKQK91a54LW 1D3qYKJj4B7aWfSCJtpU+Ow30BE0OZvjKq+j+qn4JcogHH9yiT7UPxdYkwIDAQAB o4IDzTCCA8kwHQYDVR0OBBYEFJsgDQ560873Iji1FkxLLN3iOmoeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2ZjYmNj Ni03MzliLTRmNWMtYWUzYy1hNGYwOGRiYjg1YTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZmNiY2M2 LTczOWItNGY1Yy1hZTNjLWE0ZjA4ZGJiODVhNS8xL215QU5EbnJUenZjaU9MVVdU RXNzM2VJNmFoNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBRgYIKwYB BQUHAQcBAf8EggE1MIIBMTCCAR4EAgABMIIBFgMEAwWQuAMEAiWcYAMEAiWclAME AiWcqAMEAiWc0AMEAy7/UAMEAFZoBgMEAFZo5QMEAFZpCAMEAFZpswMEAFkh6AME AFkiBgMEAFkkmwMEAFknXAMEBFkn4AMEAFkq5gMEAFksvQMEAFkszgMEA1ktGAME AFktXwMEAlkt2AMEAFkt5QMEAVkvIAMEAF1xLgMEAF1xWQMEAF1zmgMEAV1zqgME AF12JQMEAF13wgMEAF6wgwMEAF6wlwMEAV6xEgMEAF6xlwMEALDfpAMEArlSqAME BLzRUAMEALzS7wMEALzUmQMEALzWHQMEArzXLAMEALzXQTAMAwQAvNf3AwQAvNf4 AwQBvPEEAwQBvPG+AwQFwz6gMA0EAgACMAcDBQMqAiDYMB4GCCsGAQUFBwEIAQH/ BA8wDaALMAkCAnuWAgMDIVMwDQYJKoZIhvcNAQELBQADggEBAAX0UgMHAKoL76Wa Q7ssKBWNRVanCooOPOWSV7dLzPsyEMDa0ci8mdsvRZIxi1MXHrYb3O0FMhyLzGcA vsbBYF+c6sBhd9uHA+gG1NKRNux/wpFEoQ+njg4FEvdbDIeNIRZYnLwocASfr4+K E0eV062RA1vyvVFLJ5iqlNDnoiR/ZzD/rmTBId/fACu29j0JXAKMyG492+y+vyXn m/2aWyePl9S4d9Zc5PV6ZcPQJb3883hbqW+fKVbu3Zi70VR4CUe3IcDu6gXGx++3 UGa1SlydxbJhrKFKFLNXVBQAAlNkxwWNxKRQMPFsSTdVwIriAuVqzpNvXdsYJGbY p1ZavZU= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:28 2026 by rpki-client