This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer File: s9XsFRbubcGdHlw5mMt-emRvcVo.cer (raw, json) Hash identifier: MR1f1QydxqthDs/yFTcuze46I8wSf+f6l8bGPlZsuWQ= Subject key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E7F8680CD2B34874E263158C05D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197033 AS: 197653 AS: 201808 AS: 202755 AS: 205933 AS: 206120 IP: 46.18.224.0/21 IP: 91.216.43.0/24 IP: 93.177.81.0/24 IP: 94.185.64.0/21 IP: 185.24.152.0/22 IP: 185.33.88.0/22 IP: 185.50.128.0/22 IP: 185.118.16.0/22 IP: 185.147.64.0/22 IP: 185.155.172.0/22 IP: 185.195.248.0/22 IP: 185.240.156.0/22 IP: 194.147.172.0/24 IP: 194.147.227.0 -- 194.147.228.255 IP: 194.147.230.0/24 IP: 2a00:aa60::/32 IP: 2a01:a5e0::/32 IP: 2a02:2848::/32 IP: 2a03:fe80::/32 IP: 2a07:5600::/29 IP: 2a0a:da80::/29 IP: 2a0c:8c80::/32 IP: 2a0d:7e80::/29 IP: 2a0f:b0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e7:f8:68:0c:d2:b3:48:74:e2:63:15:8c:05:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:65:ae:67:0e:64:bd:5a:3f:91:74:a4:01: 53:08:68:5e:ef:65:75:b1:ae:cd:cb:6d:49:32:f2: 2d:18:78:4d:ad:82:79:f6:3c:a4:65:ad:42:7f:e0: c4:01:08:4b:d6:16:d3:d1:d7:45:c0:20:2f:3f:83: 1e:d5:99:a6:80:7e:fc:9b:a1:3c:27:c0:52:97:80: 1d:56:6e:02:87:db:9d:6c:75:36:c4:28:03:6a:97: 76:6d:13:5a:d3:42:76:fb:89:a3:01:8a:07:cd:31: 43:f2:be:a6:41:2d:5c:fb:ba:fe:2c:4b:12:6d:5d: be:54:26:46:f0:36:c9:f3:81:30:a4:d9:eb:90:bf: 6d:3d:0f:8d:47:e7:40:28:f1:31:98:67:f6:55:39: 59:5a:71:4c:ed:58:a3:ef:7e:2d:6d:be:c6:31:86: 26:7f:27:73:14:32:cf:0b:c9:13:ea:81:38:5f:76: 79:44:31:bf:14:ca:9f:f4:47:53:7d:ca:9d:93:54: f0:f9:35:27:59:8c:58:99:c5:98:eb:81:20:c9:cc: 26:90:85:1c:12:c8:3e:92:83:21:06:c2:50:24:9e: 6d:1d:9a:cb:d4:70:b3:8c:76:5d:d9:b8:b3:6e:f2: 51:87:78:e1:27:3e:f6:b2:34:f4:f1:db:32:b8:a7: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.224.0/21 91.216.43.0/24 93.177.81.0/24 94.185.64.0/21 185.24.152.0/22 185.33.88.0/22 185.50.128.0/22 185.118.16.0/22 185.147.64.0/22 185.155.172.0/22 185.195.248.0/22 185.240.156.0/22 194.147.172.0/24 194.147.227.0-194.147.228.255 194.147.230.0/24 IPv6: 2a00:aa60::/32 2a01:a5e0::/32 2a02:2848::/32 2a03:fe80::/32 2a07:5600::/29 2a0a:da80::/29 2a0c:8c80::/32 2a0d:7e80::/29 2a0f:b0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197033 197653 201808 202755 205933 206120 Signature Algorithm: sha256WithRSAEncryption ad:53:5d:a4:54:9c:4f:48:97:48:0a:fe:6b:e4:5c:3a:e6:7b: 6a:f6:a4:ef:b0:f0:05:0d:b8:d4:d5:36:02:95:e0:b5:13:6b: 74:f2:e6:a3:64:c5:58:37:c2:75:ff:f6:de:89:de:55:b5:aa: c6:d6:9d:69:d1:d3:f9:23:51:6a:ed:fa:a1:ab:8c:0b:d8:dd: 10:82:5b:3a:22:4e:40:90:14:7f:b9:0c:cc:0a:5e:89:70:20: a5:8e:f2:f4:98:5f:4c:ad:91:35:3b:85:0d:1d:67:64:e3:93: 36:1b:40:d6:c8:8e:9b:ac:1c:54:0e:32:82:f8:56:68:ba:33: 42:6b:fb:38:7e:96:9f:a9:76:37:aa:f0:36:d7:2b:60:1a:3e: 77:80:f7:d4:7b:cf:c9:38:7c:b1:f3:c0:2d:a9:64:7a:a5:1b: 10:fe:cb:b8:68:1c:7c:74:f8:2a:eb:4f:ac:4c:5b:24:b2:27: 0b:ee:fd:9d:50:39:f3:09:e2:64:50:a0:a8:ce:c7:6d:4d:90: 4e:db:9c:05:44:e0:0a:ad:7d:a5:1e:61:db:ba:17:9e:2b:50: f8:20:8c:53:7f:99:21:13:b7:3e:c9:bc:57:a5:d9:d7:56:a0: 0b:16:aa:fb:c0:a7:35:c7:5c:e3:de:90:08:4f:6b:a5:82:23: 68:48:27:42 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISAZt3WOf4aAzSs0h04mMVjAXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Q1ZWMxNTE2ZWU2ZGMxOWQxZTVjMzk5OGNiN2U3YTY0NmY3MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dhlrmcOZL1aP5F0pAFTCGhe72V1 sa7Ny21JMvItGHhNrYJ59jykZa1Cf+DEAQhL1hbT0ddFwCAvP4Me1ZmmgH78m6E8 J8BSl4AdVm4Ch9udbHU2xCgDapd2bRNa00J2+4mjAYoHzTFD8r6mQS1c+7r+LEsS bV2+VCZG8DbJ84EwpNnrkL9tPQ+NR+dAKPExmGf2VTlZWnFM7Vij734tbb7GMYYm fydzFDLPC8kT6oE4X3Z5RDG/FMqf9EdTfcqdk1Tw+TUnWYxYmcWY64EgycwmkIUc Esg+koMhBsJQJJ5tHZrL1HCzjHZd2bizbvJRh3jhJz72sjT08dsyuKdUZwIDAQAB o4IDXzCCA1swHQYDVR0OBBYEFLPV7BUW7m3BnR5cOZjLfnpkb3FaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzNhZDdj Yy0zYzA4LTRiNzItODcwYS02YzMwNWE2ZGJhYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvM2FkN2Nj LTNjMDgtNGI3Mi04NzBhLTZjMzA1YTZkYmFiOS8xL3M5WHNGUmJ1YmNHZEhsdzVt TXQtZW1SdmNWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHEBggrBgEF BQcBBwEB/wSBtDCBsTBoBAIAATBiAwQDLhLgAwQAW9grAwQAXbFRAwQDXrlAAwQC uRiYAwQCuSFYAwQCuTKAAwQCuXYQAwQCuZNAAwQCuZusAwQCucP4AwQCufCcAwQA wpOsMAwDBADCk+MDBADCk+QDBADCk+YwRQQCAAIwPwMFACoAqmADBQAqAaXgAwUA KgIoSAMFACoD/oADBQMqB1YAAwUDKgragAMFACoMjIADBQMqDX6AAwUDKg+wwDAz BggrBgEFBQcBCAEB/wQkMCKgIDAeAgMDAakCAwMEFQIDAxRQAgMDGAMCAwMkbQID AyUoMA0GCSqGSIb3DQEBCwUAA4IBAQCtU12kVJxPSJdICv5r5Fw65ntq9qTvsPAF DbjU1TYCleC1E2t08uajZMVYN8J1//beid5VtarG1p1p0dP5I1Fq7fqhq4wL2N0Q gls6Ik5AkBR/uQzMCl6JcCCljvL0mF9MrZE1O4UNHWdk45M2G0DWyI6brBxUDjKC +FZoujNCa/s4fpafqXY3qvA21ytgGj53gPfUe8/JOHyx88AtqWR6pRsQ/su4aBx8 dPgq60+sTFsksicL7v2dUDnzCeJkUKCozsdtTZBO25wFROAKrX2lHmHbuheeK1D4 IIxTf5khE7c+ybxXpdnXVqALFqr7wKc1x1zj3pAIT2ulgiNoSCdC -----END CERTIFICATE-----Generated at Fri Feb 6 22:31:15 2026 by rpki-client