This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer (raw, json) Hash identifier: zg2pQyXLOJuDzC9gujxetKT5puwfGkZkmqRkR7RmyHA= Subject key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7815714067763C8CE2ED4EF4E3E59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.102.152.0/24 IP: 46.102.252.0/23 IP: 85.204.74.0/24 IP: 86.104.15.0/24 IP: 86.104.28.0/23 IP: 86.105.1.0/24 IP: 86.105.5.0/24 IP: 86.105.18.0/24 IP: 86.105.227.0/24 IP: 86.105.235.0/24 IP: 86.106.93.0/24 IP: 86.106.102.0/24 IP: 86.106.131.0/24 IP: 86.107.42.0/24 IP: 86.107.170.0/23 IP: 89.32.40.0/24 IP: 89.33.64.0/24 IP: 89.34.111.0/24 IP: 89.35.32.0/24 IP: 89.35.56.0/24 IP: 89.35.178.0/24 IP: 89.37.226.0/24 IP: 89.42.212.0/24 IP: 89.43.60.0/24 IP: 89.43.202.0/23 IP: 89.44.103.0/24 IP: 89.45.67.0/24 IP: 92.114.35.0/24 IP: 92.114.92.0/24 IP: 93.113.45.0/24 IP: 93.113.131.0/24 IP: 93.115.38.0/24 IP: 93.115.201.0/24 IP: 93.117.137.0/24 IP: 93.119.123.0/24 IP: 94.177.12.0/24 IP: 94.177.112.0/24 IP: 94.177.123.0/24 IP: 176.223.111.0 -- 176.223.113.255 IP: 176.223.165.0/24 IP: 185.77.128.0/22 IP: 188.211.168.0/24 IP: 188.213.204.0/24 IP: 188.215.1.0/24 IP: 188.215.92.0/24 IP: 188.240.234.0/24 IP: 188.241.39.0/24 IP: 188.241.68.0/24 IP: 2a05:6200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:81:57:14:06:77:63:c8:ce:2e:d4:ef:4e:3e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:12:8c:62:ee:3e:c2:23:34:14:58:0f:b7: 8b:74:e5:50:47:65:4b:0f:e6:5d:30:0b:2f:ed:f5: 59:b8:17:d4:da:30:61:50:b5:43:10:11:a4:1d:26: 65:79:2c:fe:a9:7b:cb:12:13:a7:58:9a:43:6f:e8: 43:64:54:8b:6c:a7:94:12:85:37:32:33:d2:f4:82: 1a:d6:8e:c8:0b:d6:bb:22:4b:6f:bc:ce:a2:0f:b6: a0:11:74:01:f7:14:06:59:40:d2:f5:de:43:be:b9: 2e:b8:ae:60:5e:3c:67:48:0f:45:9f:e6:9b:e9:52: 68:75:fd:50:c7:57:1c:70:38:cd:98:b1:6f:c8:17: f4:8a:b7:55:5b:ef:ed:a3:ec:7d:50:a4:1e:02:5f: 5d:83:ff:98:87:00:b0:4c:ae:c4:01:d4:46:26:ce: 0a:2c:69:a4:fc:a0:6e:ca:fb:cf:39:13:45:4d:ac: 21:9a:2b:1f:a9:cc:1d:0c:57:74:bc:cf:4c:c1:9e: 29:5f:6a:be:16:22:98:d1:89:e8:93:60:05:f9:05: 07:60:46:d3:6b:47:43:69:e0:be:04:82:ed:73:36: 34:81:73:a4:a9:65:fb:d2:08:01:d4:87:a6:10:3f: 1f:e4:02:f9:88:73:14:b8:06:2f:21:32:62:c8:0f: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.152.0/24 46.102.252.0/23 85.204.74.0/24 86.104.15.0/24 86.104.28.0/23 86.105.1.0/24 86.105.5.0/24 86.105.18.0/24 86.105.227.0/24 86.105.235.0/24 86.106.93.0/24 86.106.102.0/24 86.106.131.0/24 86.107.42.0/24 86.107.170.0/23 89.32.40.0/24 89.33.64.0/24 89.34.111.0/24 89.35.32.0/24 89.35.56.0/24 89.35.178.0/24 89.37.226.0/24 89.42.212.0/24 89.43.60.0/24 89.43.202.0/23 89.44.103.0/24 89.45.67.0/24 92.114.35.0/24 92.114.92.0/24 93.113.45.0/24 93.113.131.0/24 93.115.38.0/24 93.115.201.0/24 93.117.137.0/24 93.119.123.0/24 94.177.12.0/24 94.177.112.0/24 94.177.123.0/24 176.223.111.0-176.223.113.255 176.223.165.0/24 185.77.128.0/22 188.211.168.0/24 188.213.204.0/24 188.215.1.0/24 188.215.92.0/24 188.240.234.0/24 188.241.39.0/24 188.241.68.0/24 IPv6: 2a05:6200::/29 Signature Algorithm: sha256WithRSAEncryption 26:33:8d:be:9b:7e:0e:d0:f2:5a:c1:07:39:a8:7c:8b:78:90: 40:f4:86:cc:7e:e9:58:20:3b:e6:24:ac:c6:45:46:00:85:c6: 4f:67:08:a4:ce:e3:80:53:f6:28:35:e8:28:63:5b:ed:2b:35: b5:60:90:13:a3:23:07:51:07:14:3f:fa:af:d8:10:a5:79:f1: a0:97:8c:dd:90:d7:31:ae:f9:f7:ba:a6:22:23:64:1d:74:db: e3:2d:72:d0:e4:e3:5f:10:1c:33:84:22:24:47:bd:df:ef:b8: 73:e8:fa:4a:c8:18:6c:db:8c:7e:05:91:8e:f1:e8:08:75:8a: 40:4a:a1:f4:3a:b0:5d:c5:84:10:f7:be:7a:5f:ec:bf:2b:8b: 3e:1f:c4:ea:10:27:63:33:dc:c2:95:f4:d0:3b:72:7b:a7:f4: 8d:ca:e5:8d:2c:a1:58:9f:28:02:7b:04:a2:ef:9e:5c:ca:bd: 6a:46:da:f6:29:44:82:69:9d:03:8f:f2:7a:dc:21:68:a5:13: 64:36:31:e6:0f:e8:71:34:83:41:5a:a7:51:e9:2a:6f:1c:45: c5:ed:e0:7b:14:26:9e:61:ea:cd:96:d7:68:f6:b5:32:6a:1d: 25:f8:7a:b1:8d:60:73:81:40:b5:13:7e:b7:cb:56:50:d3:89: 66:31:a7:e6 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgISAZt6x4FXFAZ3Y8jOLtTvTj5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWRlNDNjZDFmOGFmNDVjNjg5ODY3ZDlmNWE4ODFhMmFlYzM0YjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQSjGLuPsIjNBRYD7eLdOVQR2VL D+ZdMAsv7fVZuBfU2jBhULVDEBGkHSZleSz+qXvLEhOnWJpDb+hDZFSLbKeUEoU3 MjPS9IIa1o7IC9a7IktvvM6iD7agEXQB9xQGWUDS9d5DvrkuuK5gXjxnSA9Fn+ab 6VJodf1Qx1cccDjNmLFvyBf0irdVW+/to+x9UKQeAl9dg/+YhwCwTK7EAdRGJs4K LGmk/KBuyvvPORNFTawhmisfqcwdDFd0vM9MwZ4pX2q+FiKY0Ynok2AF+QUHYEbT a0dDaeC+BILtczY0gXOkqWX70ggB1IemED8f5AL5iHMUuAYvITJiyA/V/wIDAQAB o4IDvzCCA7swHQYDVR0OBBYEFNXeQ80fivRcaJhn2fWogaKuw0sxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzE2MDhi MC1lN2NhLTRiM2ItOTAyZi00ZDBhN2VjMDc3ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvMTYwOGIw LWU3Y2EtNGIzYi05MDJmLTRkMGE3ZWMwNzc4Ni8xLzFkNUR6Ui1LOUZ4b21HZlo5 YWlCb3E3RFN6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBWAYIKwYB BQUHAQcBAf8EggFHMIIBQzCCATAEAgABMIIBKAMEAC5mmAMEAS5m/AMEAFXMSgME AFZoDwMEAVZoHAMEAFZpAQMEAFZpBQMEAFZpEgMEAFZp4wMEAFZp6wMEAFZqXQME AFZqZgMEAFZqgwMEAFZrKgMEAVZrqgMEAFkgKAMEAFkhQAMEAFkibwMEAFkjIAME AFkjOAMEAFkjsgMEAFkl4gMEAFkq1AMEAFkrPAMEAVkrygMEAFksZwMEAFktQwME AFxyIwMEAFxyXAMEAF1xLQMEAF1xgwMEAF1zJgMEAF1zyQMEAF11iQMEAF13ewME AF6xDAMEAF6xcAMEAF6xezAMAwQAsN9vAwQBsN9wAwQAsN+lAwQCuU2AAwQAvNOo AwQAvNXMAwQAvNcBAwQAvNdcAwQAvPDqAwQAvPEnAwQAvPFEMA0EAgACMAcDBQMq BWIAMA0GCSqGSIb3DQEBCwUAA4IBAQAmM42+m34O0PJawQc5qHyLeJBA9IbMfulY IDvmJKzGRUYAhcZPZwikzuOAU/YoNegoY1vtKzW1YJAToyMHUQcUP/qv2BClefGg l4zdkNcxrvn3uqYiI2QddNvjLXLQ5ONfEBwzhCIkR73f77hz6PpKyBhs24x+BZGO 8egIdYpASqH0OrBdxYQQ9756X+y/K4s+H8TqECdjM9zClfTQO3J7p/SNyuWNLKFY nygCewSi755cyr1qRtr2KUSCaZ0Dj/J63CFopRNkNjHmD+hxNINBWqdR6SpvHEXF 7eB7FCaeYerNltdo9rUyah0l+HqxjWBzgUC1E363y1ZQ04lmMafm -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:20 2026 by rpki-client