This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer (raw, json) Hash identifier: q88qHIWeaWGNbmEgN1Qt/cMRq3r0yCnhCMMfaUn2FQQ= Subject key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD4495E939CEFD7E65842F4AB5EA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15943 IP: 2.57.116.0/22 IP: 31.29.32.0/19 IP: 31.172.104.0/21 IP: 37.122.136.0/21 IP: 45.82.192.0/22 IP: 45.131.16.0/22 IP: 45.157.100.0/22 IP: 45.159.176.0/22 IP: 46.22.0.0/20 IP: 46.59.128.0/17 IP: 77.223.8.0 -- 77.223.31.255 IP: 80.245.104.0/22 IP: 81.25.160.0/20 IP: 84.46.0.0/17 IP: 84.242.16.0/20 IP: 94.72.128.0/21 IP: 94.72.168.0/21 IP: 94.72.184.0/21 IP: 95.81.0.0/19 IP: 95.129.0.0/21 IP: 95.163.160.0/20 IP: 109.230.96.0/20 IP: 134.101.128.0/17 IP: 149.224.0.0/16 IP: 149.233.128.0/17 IP: 149.249.16.0/20 IP: 149.249.248.0/22 IP: 176.109.192.0/19 IP: 185.23.224.0/22 IP: 185.29.240.0/22 IP: 185.82.16.0/22 IP: 185.207.4.0/22 IP: 185.215.236.0/22 IP: 185.220.216.0/22 IP: 185.232.32.0/22 IP: 188.136.224.0/19 IP: 192.119.48.0/20 IP: 192.196.192.0/20 IP: 193.178.56.0/22 IP: 193.218.16.0/20 IP: 195.123.96.0/20 IP: 195.250.0.0/20 IP: 212.127.32.0/19 IP: 212.146.136.0 -- 212.146.159.255 IP: 213.21.32.0/20 IP: 213.195.24.0/21 IP: 213.209.64.0/18 IP: 216.83.208.0/20 IP: 2a02:2028::/32 IP: 2a04:4540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d4:49:5e:93:9c:ef:d7:e6:58:42:f4:ab:5e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5503498ff185d0c607353f43f55e911f62a6802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:c3:e1:0a:80:73:76:c4:f0:3b:1c:00:f8: b7:66:f8:d7:70:61:a1:57:20:a8:63:8d:34:c9:56: 7f:2c:b6:d8:99:5f:24:9b:0c:c1:d6:97:62:f9:7a: af:ff:81:6c:51:e8:3b:32:3c:e0:f9:8d:c0:52:b3: c5:00:a9:f7:3f:f2:d4:db:fc:6c:c9:d1:e8:f5:32: 92:86:58:a9:c9:86:a0:62:91:e7:e7:c9:71:14:2f: 72:5d:f8:35:b3:ce:65:ac:66:89:3f:d6:b1:df:af: 9c:1d:43:a3:b6:a6:b4:9d:d9:5f:07:7d:64:49:40: 87:02:20:e8:21:86:e0:b2:d1:d0:c1:db:52:49:9b: f9:68:30:6c:90:f9:9a:b3:3f:7a:29:27:68:9c:04: 75:a0:0c:e3:f7:49:18:c3:14:81:6f:5c:19:ff:88: f2:d9:40:97:52:fa:c6:d5:bb:fd:9b:53:42:70:97: 22:6f:ca:66:18:9e:29:44:98:56:56:83:be:bb:73: a1:90:ab:54:01:28:28:c5:10:08:bb:9e:64:fa:f3: 32:f6:81:0e:34:2e:e3:06:9e:6e:34:5a:c4:84:00: ca:02:f3:85:c9:eb:d3:73:41:94:ee:43:bc:fe:7c: ce:2f:17:7e:df:41:f8:77:0c:90:64:68:0c:db:39: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.116.0/22 31.29.32.0/19 31.172.104.0/21 37.122.136.0/21 45.82.192.0/22 45.131.16.0/22 45.157.100.0/22 45.159.176.0/22 46.22.0.0/20 46.59.128.0/17 77.223.8.0-77.223.31.255 80.245.104.0/22 81.25.160.0/20 84.46.0.0/17 84.242.16.0/20 94.72.128.0/21 94.72.168.0/21 94.72.184.0/21 95.81.0.0/19 95.129.0.0/21 95.163.160.0/20 109.230.96.0/20 134.101.128.0/17 149.224.0.0/16 149.233.128.0/17 149.249.16.0/20 149.249.248.0/22 176.109.192.0/19 185.23.224.0/22 185.29.240.0/22 185.82.16.0/22 185.207.4.0/22 185.215.236.0/22 185.220.216.0/22 185.232.32.0/22 188.136.224.0/19 192.119.48.0/20 192.196.192.0/20 193.178.56.0/22 193.218.16.0/20 195.123.96.0/20 195.250.0.0/20 212.127.32.0/19 212.146.136.0-212.146.159.255 213.21.32.0/20 213.195.24.0/21 213.209.64.0/18 216.83.208.0/20 IPv6: 2a02:2028::/32 2a04:4540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15943 Signature Algorithm: sha256WithRSAEncryption a9:e5:92:e5:31:4a:89:05:5a:30:45:c0:61:d4:3e:28:c3:87: b0:c8:72:33:86:af:f9:4a:87:7c:04:c0:4e:d1:63:08:86:80: 08:7b:39:04:15:82:5e:cb:2a:7b:66:8a:a2:16:71:55:36:d7: af:1d:13:7b:e7:18:e1:82:ae:b9:35:2a:1d:ca:b6:b5:9e:b2: d2:89:a6:78:0c:7a:86:7e:47:2a:d2:17:ea:d6:27:e8:71:72: 88:46:59:68:96:91:fa:31:7b:be:26:98:6d:fb:70:a4:23:f1: 12:96:79:32:2b:61:81:7f:77:3a:fd:07:03:85:ac:6b:b3:1f: f1:37:38:90:1a:ef:b0:db:52:3b:53:d4:df:92:4c:ef:a9:2d: a4:bd:f8:8b:a8:b2:17:9d:fa:e5:60:45:f5:2f:25:e7:e7:d4: ec:ba:c4:36:c4:fe:73:ec:cf:02:33:ec:b0:ad:df:94:9f:f0: da:12:0d:24:c2:ce:62:b5:f7:b2:7e:e6:f4:56:e1:3a:af:25: 54:83:52:32:b8:e3:e0:83:8d:ef:27:25:71:56:5f:0a:3b:d0: 9b:2b:e4:64:64:13:09:ac:50:26:f9:af:eb:d9:0e:bc:de:ee: 93:62:84:e7:72:6c:9d:a6:ec:e4:72:97:85:ed:53:5a:d4:16: cd:a6:58:3a -----BEGIN CERTIFICATE----- MIIG3DCCBcSgAwIBAgISAZt87dRJXpOc79fmWEL0q16jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTUwMzQ5OGZmMTg1ZDBjNjA3MzUzZjQzZjU1ZTkxMWY2MmE2ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmrD4QqAc3bE8DscAPi3ZvjXcGGh VyCoY400yVZ/LLbYmV8kmwzB1pdi+Xqv/4FsUeg7Mjzg+Y3AUrPFAKn3P/LU2/xs ydHo9TKShlipyYagYpHn58lxFC9yXfg1s85lrGaJP9ax36+cHUOjtqa0ndlfB31k SUCHAiDoIYbgstHQwdtSSZv5aDBskPmasz96KSdonAR1oAzj90kYwxSBb1wZ/4jy 2UCXUvrG1bv9m1NCcJcib8pmGJ4pRJhWVoO+u3OhkKtUASgoxRAIu55k+vMy9oEO NC7jBp5uNFrEhADKAvOFyevTc0GU7kO8/nzOLxd+30H4dwyQZGgM2zlggwIDAQAB o4ID6DCCA+QwHQYDVR0OBBYEFOVQNJj/GF0MYHNT9D9V6RH2KmgCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzk3YjBi Yy1mNGY4LTRmOTAtODU1NC0xZTI3OWY3YjYwMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvOTdiMGJj LWY0ZjgtNGY5MC04NTU0LTFlMjc5ZjdiNjAyMy8xLzVWQTBtUDhZWFF4Z2MxUDBQ MVhwRWZZcWFBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBZgYIKwYB BQUHAQcBAf8EggFVMIIBUTCCATcEAgABMIIBLwMEAgI5dAMEBR8dIAMEAx+saAME AyV6iAMEAi1SwAMEAi2DEAMEAi2dZAMEAi2fsAMEBC4WAAMEBy47gDAMAwQDTd8I AwQFTd8AAwQCUPVoAwQEURmgAwQHVC4AAwQEVPIQAwQDXkiAAwQDXkioAwQDXki4 AwQFX1EAAwQDX4EAAwQEX6OgAwQEbeZgAwQHhmWAAwMAleADBAeV6YADBASV+RAD BAKV+fgDBAWwbcADBAK5F+ADBAK5HfADBAK5UhADBAK5zwQDBAK51+wDBAK53NgD BAK56CADBAW8iOADBATAdzADBATAxMADBALBsjgDBATB2hADBATDe2ADBATD+gAD BAXUfyAwDAMEA9SSiAMEBdSSgAMEBNUVIAMEA9XDGAMEBtXRQAMEBNhT0DAUBAIA AjAOAwUAKgIgKAMFAyoERUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPkcwDQYJ KoZIhvcNAQELBQADggEBAKnlkuUxSokFWjBFwGHUPijDh7DIcjOGr/lKh3wEwE7R YwiGgAh7OQQVgl7LKntmiqIWcVU2168dE3vnGOGCrrk1Kh3KtrWestKJpngMeoZ+ RyrSF+rWJ+hxcohGWWiWkfoxe74mmG37cKQj8RKWeTIrYYF/dzr9BwOFrGuzH/E3 OJAa77DbUjtT1N+STO+pLaS9+Iuoshed+uVgRfUvJefn1Oy6xDbE/nPszwIz7LCt 35Sf8NoSDSTCzmK197J+5vRW4TqvJVSDUjK44+CDje8nJXFWXwo70Jsr5GRkEwms UCb5r+vZDrze7pNihOdybJ2m7ORyl4XtU1rUFs2mWDo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:15 2026 by rpki-client