This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer File: 1BGrxMBGirKJHqrK26DcA3eTb9U.cer (raw, json) Hash identifier: QHxPU4o49pEAa/sgWLRs6B0sQmVHc5CF4BtSWmji/QM= Subject key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9EE36BBD850B7CF446228529AB56 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6866 AS: 41657 AS: 212875 IP: 31.153.0.0/16 IP: 37.149.0.0/16 IP: 46.198.0.0/17 IP: 46.199.0.0/16 IP: 62.228.0.0/16 IP: 81.4.128.0/18 IP: 83.168.0.0/18 IP: 87.228.128.0/17 IP: 93.109.0.0/16 IP: 128.0.107.0 -- 128.0.111.255 IP: 128.0.200.0 -- 128.0.255.255 IP: 176.92.200.0 -- 176.92.255.255 IP: 185.2.96.0/22 IP: 193.22.30.0/24 IP: 193.43.0.64/27 IP: 193.58.0.0 -- 193.58.0.47 IP: 193.58.0.64 -- 193.58.0.255 IP: 193.164.232.160/27 IP: 193.188.134.168 -- 193.188.134.199 IP: 193.192.12.128/25 IP: 193.201.147.160/27 IP: 193.201.148.0/26 IP: 193.201.149.192/26 IP: 193.201.150.64 -- 193.201.150.191 IP: 193.201.151.0/26 IP: 193.201.157.0/25 IP: 193.218.205.64 -- 193.218.205.223 IP: 193.218.207.80 -- 193.218.207.127 IP: 194.42.55.32 -- 194.42.55.159 IP: 194.117.52.0/25 IP: 194.153.156.64 -- 194.153.156.255 IP: 194.153.157.192/26 IP: 195.14.128.0/19 IP: 195.60.81.192 -- 195.60.82.63 IP: 195.60.83.64/27 IP: 195.60.83.160/27 IP: 195.60.84.0/25 IP: 195.60.87.128/25 IP: 195.60.93.0/26 IP: 195.60.93.192/26 IP: 195.60.95.0/25 IP: 212.31.96.0/19 IP: 213.7.0.0/16 IP: 213.149.160.0/19 IP: 2a00:1358::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:e3:6b:bd:85:0b:7c:f4:46:22:85:29:ab:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:8c:5d:f4:6c:7a:d0:c3:db:ee:e1:fd:a6: 33:27:49:0d:a8:97:0e:5f:21:4f:44:57:d3:49:8e: 85:93:a9:36:11:29:81:08:dc:90:d4:ac:7d:3b:5b: ec:e9:e0:29:85:36:a1:00:1c:ea:eb:59:5d:d0:d4: c0:07:95:f2:04:36:5a:a5:99:e5:07:9d:6b:40:a8: 3e:c2:3c:88:98:02:66:dd:e1:59:a9:ac:81:93:c9: 47:df:9a:45:93:b3:7a:6e:6d:51:1a:40:45:1b:33: db:21:82:50:d1:05:bb:ea:bb:cb:4f:a4:70:85:6f: 4a:1d:e4:04:d0:9b:97:b7:48:9e:7a:6f:b4:85:8c: d1:b6:52:26:d4:5d:d9:e0:0b:13:15:26:cb:89:29: e4:0f:b6:32:17:e5:5e:63:98:c2:a3:a7:21:b6:5e: 42:4c:3d:04:3e:69:73:4d:ba:46:a5:72:70:92:d7: a1:ed:a7:dc:b4:c2:f3:1a:da:bb:ed:3f:0c:29:5a: b8:11:bb:3f:8b:1e:1c:cb:ff:af:73:b3:7e:1a:cc: a8:16:06:98:50:a0:ee:db:0b:b3:b1:48:88:2d:e6: 8c:3e:38:a6:95:6f:a6:b9:13:5c:e6:ec:c6:27:3f: e9:4f:42:f4:d5:d1:cb:31:1a:ff:06:03:0c:cf:f5: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.153.0.0/16 37.149.0.0/16 46.198.0.0/17 46.199.0.0/16 62.228.0.0/16 81.4.128.0/18 83.168.0.0/18 87.228.128.0/17 93.109.0.0/16 128.0.107.0-128.0.111.255 128.0.200.0-128.0.255.255 176.92.200.0-176.92.255.255 185.2.96.0/22 193.22.30.0/24 193.43.0.64/27 193.58.0.0-193.58.0.47 193.58.0.64-193.58.0.255 193.164.232.160/27 193.188.134.168-193.188.134.199 193.192.12.128/25 193.201.147.160/27 193.201.148.0/26 193.201.149.192/26 193.201.150.64-193.201.150.191 193.201.151.0/26 193.201.157.0/25 193.218.205.64-193.218.205.223 193.218.207.80-193.218.207.127 194.42.55.32-194.42.55.159 194.117.52.0/25 194.153.156.64-194.153.156.255 194.153.157.192/26 195.14.128.0/19 195.60.81.192-195.60.82.63 195.60.83.64/27 195.60.83.160/27 195.60.84.0/25 195.60.87.128/25 195.60.93.0/26 195.60.93.192/26 195.60.95.0/25 212.31.96.0/19 213.7.0.0/16 213.149.160.0/19 IPv6: 2a00:1358::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6866 41657 212875 Signature Algorithm: sha256WithRSAEncryption 27:5f:4b:15:83:c8:5b:ac:79:ba:24:4d:3b:83:34:2b:55:97: 54:bb:6d:80:0b:9a:f3:77:4e:f9:70:c6:b1:ac:be:67:73:61: b4:69:aa:12:f6:8d:bd:22:c1:73:38:d1:78:6b:1b:f0:b5:48: 52:5c:98:3f:bb:75:a0:b2:49:eb:12:7a:bb:48:0f:6b:9b:24: 0a:0d:71:0a:3e:15:47:88:d5:7c:c0:46:b6:e8:08:24:fa:2e: 97:8b:ec:a0:dd:f7:08:43:63:9b:09:42:f6:08:c3:96:c3:5d: ec:bd:9e:b5:d7:fc:b0:63:2c:46:7d:d3:ed:64:af:23:35:02: bf:f3:2c:14:8e:30:be:ba:f5:9d:e7:30:39:21:aa:d0:02:c6: 0f:cb:77:2c:cd:96:91:79:ac:69:33:a7:36:64:0a:33:bc:63: 95:58:59:0c:57:78:bb:b8:a0:44:20:28:29:06:95:a2:65:69: dd:fd:94:3a:ef:4f:17:9e:a1:02:49:88:f6:9a:b0:2d:bd:7d: 15:7c:76:43:95:34:3d:b7:89:80:3b:5e:b2:d9:84:f6:b6:be: 9d:50:55:1b:a3:8b:0a:f6:6c:71:da:ee:f4:af:bb:6a:a6:b2: eb:48:35:72:de:09:6b:98:db:f7:d0:d5:20:36:65:d6:5a:7c: 9d:76:d7:86 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgISAZt2657ja72FC3z0RiKFKatWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDExYWJjNGMwNDY4YWIyODkxZWFhY2FkYmEwZGMwMzc3OTM2ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhqMXfRsetDD2+7h/aYzJ0kNqJcO XyFPRFfTSY6Fk6k2ESmBCNyQ1Kx9O1vs6eAphTahABzq61ld0NTAB5XyBDZapZnl B51rQKg+wjyImAJm3eFZqayBk8lH35pFk7N6bm1RGkBFGzPbIYJQ0QW76rvLT6Rw hW9KHeQE0JuXt0ieem+0hYzRtlIm1F3Z4AsTFSbLiSnkD7YyF+VeY5jCo6chtl5C TD0EPmlzTbpGpXJwkteh7afctMLzGtq77T8MKVq4Ebs/ix4cy/+vc7N+GsyoFgaY UKDu2wuzsUiILeaMPjimlW+muRNc5uzGJz/pT0L01dHLMRr/BgMMz/VdXwIDAQAB o4IEOzCCBDcwHQYDVR0OBBYEFNQRq8TARoqyiR6qytug3AN3k2/VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzYxOGU1 My1hZmM0LTQwZGYtODYxMi1iMGY0YjljMzdlNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNjE4ZTUz LWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8xLzFCR3J4TUJHaXJLSkhxcksy NkRjQTNlVGI5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBrwYIKwYB BQUHAQcBAf8EggGeMIIBmjCCAYcEAgABMIIBfwMDAB+ZAwMAJZUDBAcuxgADAwAu xwMDAD7kAwQGUQSAAwQGU6gAAwQHV+SAAwMAXW0wDAMEAIAAawMEBIAAYDALAwQD gADIAwMAgAAwCwMEA7BcyAMDALBcAwQCuQJgAwQAwRYeAwUFwSsAQDAMAwMBwToD BQTBOgAgMA0DBQbBOgBAAwQAwToAAwUFwaTooDAOAwUDwbyGqAMFA8G8hsADBQfB wAyAAwUFwcmToAMFBsHJlAADBQbByZXAMA4DBQbByZZAAwUGwcmWgAMFBsHJlwAD BQfByZ0AMA4DBQbB2s1AAwUFwdrNwDAOAwUEwdrPUAMFB8HazwAwDgMFBcIqNyAD BQXCKjeAAwUHwnU0ADANAwUGwpmcQAMEAMKZnAMFBsKZncADBAXDDoAwDgMFBsM8 UcADBQbDPFIAAwUFwzxTQAMFBcM8U6ADBQfDPFQAAwUHwzxXgAMFBsM8XQADBQbD PF3AAwUHwzxfAAMEBdQfYAMDANUHAwQF1ZWgMA0EAgACMAcDBQMqABNYMCMGCCsG AQUFBwEIAQH/BBQwEqAQMA4CAhrSAgMAorkCAwM/izANBgkqhkiG9w0BAQsFAAOC AQEAJ19LFYPIW6x5uiRNO4M0K1WXVLttgAua83dO+XDGsay+Z3NhtGmqEvaNvSLB czjReGsb8LVIUlyYP7t1oLJJ6xJ6u0gPa5skCg1xCj4VR4jVfMBGtugIJPoul4vs oN33CENjmwlC9gjDlsNd7L2etdf8sGMsRn3T7WSvIzUCv/MsFI4wvrr1necwOSGq 0ALGD8t3LM2WkXmsaTOnNmQKM7xjlVhZDFd4u7igRCAoKQaVomVp3f2UOu9PF56h AkmI9pqwLb19FXx2Q5U0PbeJgDtestmE9ra+nVBVG6OLCvZscdru9K+7aqay60g1 ct4Ja5jb99DVIDZl1lp8nXbXhg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:01 2026 by rpki-client