This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer File: 5dbG6LztQL0DLRdxjBseOa6EGug.cer (raw, json) Hash identifier: nReXirCuTQUZ50kxTb5ok+UvWKp+zrLIjplOUbtGx3Y= Subject key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39008A83B12EB4FC60EA3FF8E39225 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5610 AS: 12570 AS: 16246 AS: 20884 AS: 25036 AS: 29321 AS: 31246 AS: 35214 AS: 41046 AS: 41824 AS: 42908 AS: 44070 AS: 47681 AS: 49767 AS: 61169 AS: 202522 IP: 5.102.48.0/20 IP: 31.10.56.0/21 IP: 37.188.128.0/17 IP: 45.159.116.0/22 IP: 46.39.160.0/19 IP: 46.183.56.0/21 IP: 46.231.72.0/21 IP: 77.87.232.0/21 IP: 77.95.192.0/21 IP: 77.242.80.0/20 IP: 78.41.8.0/21 IP: 78.108.144.0/20 IP: 78.136.128.0/18 IP: 80.78.136.0/22 IP: 80.78.144.0/20 IP: 80.79.0.0/22 IP: 80.87.176.0/20 IP: 80.90.128.0/20 IP: 80.188.0.0/16 IP: 80.243.96.0/20 IP: 80.243.236.0/22 IP: 80.251.240.0/20 IP: 81.90.160.0/20 IP: 81.200.48.0/20 IP: 82.114.192.0/19 IP: 82.150.160.0/19 IP: 83.69.32.0/19 IP: 83.208.0.0/16 IP: 83.240.0.0/17 IP: 85.70.0.0/15 IP: 85.160.0.0/15 IP: 85.193.0.0/18 IP: 86.63.192.0/19 IP: 88.81.64.0/19 IP: 88.83.160.0/19 IP: 88.83.224.0/19 IP: 88.100.0.0/14 IP: 89.31.8.0/21 IP: 89.190.40.0 -- 89.190.63.255 IP: 90.176.32.0 -- 90.183.255.255 IP: 91.187.32.0/19 IP: 91.197.116.0/22 IP: 92.61.80.0/20 IP: 92.240.160.0/19 IP: 92.243.192.0/19 IP: 93.92.48.0/21 IP: 93.93.32.0/21 IP: 94.74.192.0/18 IP: 94.143.168.0/21 IP: 94.241.64.0/18 IP: 95.82.128.0/18 IP: 95.143.128.0/20 IP: 109.72.0.0/20 IP: 109.80.0.0/15 IP: 109.105.32.0/19 IP: 109.108.96.0/19 IP: 109.239.64.0/20 IP: 160.218.0.0/16 IP: 176.98.96.0/20 IP: 176.102.128.0/19 IP: 178.17.80.0 -- 178.17.111.255 IP: 178.72.192.0/18 IP: 185.8.188.0/22 IP: 185.15.252.0/22 IP: 185.51.240.0/22 IP: 185.61.228.0/22 IP: 185.78.12.0/22 IP: 185.82.236.0/22 IP: 185.108.60.0/22 IP: 185.152.152.0/22 IP: 185.157.240.0/22 IP: 185.191.184.0/22 IP: 188.119.96.0/22 IP: 188.175.0.0/16 IP: 193.42.128.0/22 IP: 193.107.252.0/22 IP: 194.31.216.0/22 IP: 194.59.240.0/22 IP: 194.228.0.0/16 IP: 212.4.128.0/19 IP: 212.96.160.0/19 IP: 213.19.0.0/17 IP: 213.155.32.0/19 IP: 213.155.224.0/19 IP: 213.180.32.0/19 IP: 213.211.32.0/19 IP: 213.250.192.0/18 IP: 217.117.208.0/20 IP: 217.170.96.0/20 IP: 217.194.160.0/20 IP: 217.195.160.0/20 IP: 217.196.112.0/20 IP: 217.197.144.0/20 IP: 2001:41d8::/32 IP: 2001:4ba8::/29 IP: 2001:4cc8::/31 IP: 2a00:1028::/29 IP: 2a00:e4c0::/32 IP: 2a01:9f40::/29 IP: 2a02:350::/29 IP: 2a02:9b8::/31 IP: 2a02:b20::/32 IP: 2a02:2428::/32 IP: 2a02:2588::/29 IP: 2a02:2930::/32 IP: 2a03:1600::/32 IP: 2a03:7a00::/32 IP: 2a03:a820::/32 IP: 2a03:b4c0::/32 IP: 2a07:b5c0::/29 IP: 2a07:cc80::/29 IP: 2a0a:cac0::/29 IP: 2a0c:8b40::/29 IP: 2a10:c540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:00:8a:83:b1:2e:b4:fc:60:ea:3f:f8:e3:92:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:a0:b1:27:42:08:fe:3f:1f:51:e3:42:fd: c7:a1:dd:01:73:7d:5a:83:ae:f9:e9:06:58:fa:f2: df:53:18:e0:f6:a9:db:c9:92:ec:69:b2:6e:d0:f3: 3a:d7:74:8e:66:9d:54:60:0e:32:64:02:44:94:71: 47:9c:e8:73:5e:38:97:10:4c:f7:e5:d4:b4:21:af: d0:84:32:26:be:94:8d:34:70:c6:14:c0:bf:4f:ae: 49:33:e5:fd:35:bd:44:a4:d2:11:72:04:30:69:b1: 67:46:f4:dd:1a:bf:d6:b7:6f:95:ac:8a:44:e0:e3: a5:8b:ab:b6:dd:47:cc:07:ad:9e:a1:99:62:45:f0: bf:5e:51:ea:6b:01:ff:79:e9:16:06:df:51:d2:8b: 0b:70:0d:bb:ad:94:f2:99:62:38:04:2e:65:23:bd: 60:f8:de:c1:9a:f4:b8:c7:a8:52:99:17:d3:c8:36: 5e:db:0c:8e:89:fc:1c:89:6e:50:3a:f6:3a:d3:f6: a8:10:c5:23:15:ca:02:65:de:ff:74:63:ab:4d:2c: e2:5a:2c:80:d9:51:8e:3f:ef:91:9a:e6:d0:72:69: fa:0c:f1:9f:80:2e:84:72:3a:b9:76:b2:a0:bc:c4: 7a:b9:43:11:1a:2b:0b:d5:b7:58:36:15:88:00:b7: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.48.0/20 31.10.56.0/21 37.188.128.0/17 45.159.116.0/22 46.39.160.0/19 46.183.56.0/21 46.231.72.0/21 77.87.232.0/21 77.95.192.0/21 77.242.80.0/20 78.41.8.0/21 78.108.144.0/20 78.136.128.0/18 80.78.136.0/22 80.78.144.0/20 80.79.0.0/22 80.87.176.0/20 80.90.128.0/20 80.188.0.0/16 80.243.96.0/20 80.243.236.0/22 80.251.240.0/20 81.90.160.0/20 81.200.48.0/20 82.114.192.0/19 82.150.160.0/19 83.69.32.0/19 83.208.0.0/16 83.240.0.0/17 85.70.0.0/15 85.160.0.0/15 85.193.0.0/18 86.63.192.0/19 88.81.64.0/19 88.83.160.0/19 88.83.224.0/19 88.100.0.0/14 89.31.8.0/21 89.190.40.0-89.190.63.255 90.176.32.0-90.183.255.255 91.187.32.0/19 91.197.116.0/22 92.61.80.0/20 92.240.160.0/19 92.243.192.0/19 93.92.48.0/21 93.93.32.0/21 94.74.192.0/18 94.143.168.0/21 94.241.64.0/18 95.82.128.0/18 95.143.128.0/20 109.72.0.0/20 109.80.0.0/15 109.105.32.0/19 109.108.96.0/19 109.239.64.0/20 160.218.0.0/16 176.98.96.0/20 176.102.128.0/19 178.17.80.0-178.17.111.255 178.72.192.0/18 185.8.188.0/22 185.15.252.0/22 185.51.240.0/22 185.61.228.0/22 185.78.12.0/22 185.82.236.0/22 185.108.60.0/22 185.152.152.0/22 185.157.240.0/22 185.191.184.0/22 188.119.96.0/22 188.175.0.0/16 193.42.128.0/22 193.107.252.0/22 194.31.216.0/22 194.59.240.0/22 194.228.0.0/16 212.4.128.0/19 212.96.160.0/19 213.19.0.0/17 213.155.32.0/19 213.155.224.0/19 213.180.32.0/19 213.211.32.0/19 213.250.192.0/18 217.117.208.0/20 217.170.96.0/20 217.194.160.0/20 217.195.160.0/20 217.196.112.0/20 217.197.144.0/20 IPv6: 2001:41d8::/32 2001:4ba8::/29 2001:4cc8::/31 2a00:1028::/29 2a00:e4c0::/32 2a01:9f40::/29 2a02:350::/29 2a02:9b8::/31 2a02:b20::/32 2a02:2428::/32 2a02:2588::/29 2a02:2930::/32 2a03:1600::/32 2a03:7a00::/32 2a03:a820::/32 2a03:b4c0::/32 2a07:b5c0::/29 2a07:cc80::/29 2a0a:cac0::/29 2a0c:8b40::/29 2a10:c540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5610 12570 16246 20884 25036 29321 31246 35214 41046 41824 42908 44070 47681 49767 61169 202522 Signature Algorithm: sha256WithRSAEncryption 11:f3:03:44:2c:66:57:8e:37:4a:e2:ac:a6:f3:60:77:1f:d7: 57:14:77:84:7f:e5:c4:97:0b:75:4b:2f:41:29:8a:e8:99:b4: b2:2b:a5:e8:24:d6:b9:9a:b9:5e:78:77:ca:d6:16:b1:9d:42: d2:eb:84:e9:e1:2e:64:84:23:67:f5:11:4e:a6:96:44:f9:54: 7d:29:4c:3b:58:8f:17:8d:79:ec:77:94:de:cb:6a:92:ac:2f: 2d:f1:cf:3e:51:bd:96:5c:9b:4c:e6:85:da:ff:74:4c:d3:0f: 00:8e:a6:39:b6:a5:81:53:09:ab:8a:13:0a:c9:a9:18:a6:44: 97:2f:08:ac:30:0d:6d:5a:7d:c3:c1:6a:32:68:b6:89:a6:40: c0:44:45:5c:00:30:c5:ae:bd:c4:9f:c0:c5:c4:3e:47:c9:dc: 77:a2:9d:e5:b5:30:46:2e:5f:b4:10:97:6a:a7:1f:9b:e2:34: 84:c8:d8:2b:95:74:61:c2:c4:98:23:32:9e:0e:fe:a5:78:bb: ad:23:9b:71:13:0e:3f:8a:95:5c:de:2b:5f:4c:35:f6:7d:e4: c7:3d:92:5b:8b:af:ad:d1:38:6d:5e:67:03:6b:7c:a9:f1:da: 45:f1:d9:ca:b2:eb:c0:96:72:06:cc:69:ce:fe:7c:5c:ba:01: 73:4b:9e:0b -----BEGIN CERTIFICATE----- MIIItTCCB52gAwIBAgISAZt+OQCKg7EutPxg6j/445IlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWQ2YzZlOGJjZWQ0MGJkMDMyZDE3NzE4YzFiMWUzOWFlODQxYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj+gsSdCCP4/H1HjQv3Hod0Bc31a g6756QZY+vLfUxjg9qnbyZLsabJu0PM613SOZp1UYA4yZAJElHFHnOhzXjiXEEz3 5dS0Ia/QhDImvpSNNHDGFMC/T65JM+X9Nb1EpNIRcgQwabFnRvTdGr/Wt2+VrIpE 4OOli6u23UfMB62eoZliRfC/XlHqawH/eekWBt9R0osLcA27rZTymWI4BC5lI71g +N7BmvS4x6hSmRfTyDZe2wyOifwciW5QOvY60/aoEMUjFcoCZd7/dGOrTSziWiyA 2VGOP++RmubQcmn6DPGfgC6Ecjq5drKgvMR6uUMRGisL1bdYNhWIALdlhQIDAQAB o4IFwTCCBb0wHQYDVR0OBBYEFOXWxui87UC9Ay0XcYwbHjmuhBroMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzA4OTRm Ny1lMjRkLTQ3MjgtOGNhZC1iZDI0OWI2MjU3OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMDg5NGY3 LWUyNGQtNDcyOC04Y2FkLWJkMjQ5YjYyNTc5Ny8xLzVkYkc2THp0UUwwRExSZHhq QnNlT2E2RUd1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIC+gYIKwYB BQUHAQcBAf8EggLpMIIC5TCCAkQEAgABMIICPAMEBAVmMAMEAx8KOAMEByW8gAME Ai2fdAMEBS4noAMEAy63OAMEAy7nSAMEA01X6AMEA01fwAMEBE3yUAMEA04pCAME BE5skAMEBk6IgAMEAlBOiAMEBFBOkAMEAlBPAAMEBFBXsAMEBFBagAMDAFC8AwQE UPNgAwQCUPPsAwQEUPvwAwQEUVqgAwQEUcgwAwQFUnLAAwQFUpagAwQFU0UgAwMA U9ADBAdT8AADAwFVRgMDAVWgAwQGVcEAAwQFVj/AAwQFWFFAAwQFWFOgAwQFWFPg AwMCWGQDBANZHwgwDAMEA1m+KAMEBlm+ADALAwQFWrAgAwMDWrADBAVbuyADBAJb xXQDBARcPVADBAVc8KADBAVc88ADBANdXDADBANdXSADBAZeSsADBANej6gDBAZe 8UADBAZfUoADBARfj4ADBARtSAADAwFtUAMEBW1pIAMEBW1sYAMEBG3vQAMDAKDa AwQEsGJgAwQFsGaAMAwDBASyEVADBASyEWADBAaySMADBAK5CLwDBAK5D/wDBAK5 M/ADBAK5PeQDBAK5TgwDBAK5UuwDBAK5bDwDBAK5mJgDBAK5nfADBAK5v7gDBAK8 d2ADAwC8rwMEAsEqgAMEAsFr/AMEAsIf2AMEAsI78AMDAMLkAwQF1ASAAwQF1GCg AwQH1RMAAwQF1ZsgAwQF1ZvgAwQF1bQgAwQF1dMgAwQG1frAAwQE2XXQAwQE2apg AwQE2cKgAwQE2cOgAwQE2cRwAwQE2cWQMIGaBAIAAjCBkwMFACABQdgDBQMgAUuo AwUBIAFMyAMFAyoAECgDBQAqAOTAAwUDKgGfQAMFAyoCA1ADBQEqAgm4AwUAKgIL IAMFACoCJCgDBQMqAiWIAwUAKgIpMAMFACoDFgADBQAqA3oAAwUAKgOoIAMFACoD tMADBQMqB7XAAwUDKgfMgAMFAyoKysADBQMqDItAAwUDKhDFQDBeBggrBgEFBQcB CAEB/wRPME2gSzBJAgIV6gICMRoCAj92AgJRlAICYcwCAnKJAgJ6DgIDAImOAgMA oFYCAwCjYAIDAKecAgMArCYCAwC6QQIDAMJnAgMA7vECAwMXGjANBgkqhkiG9w0B AQsFAAOCAQEAEfMDRCxmV443SuKspvNgdx/XVxR3hH/lxJcLdUsvQSmK6Jm0siul 6CTWuZq5Xnh3ytYWsZ1C0uuE6eEuZIQjZ/URTqaWRPlUfSlMO1iPF4157HeU3stq kqwvLfHPPlG9llybTOaF2v90TNMPAI6mObalgVMJq4oTCsmpGKZEly8IrDANbVp9 w8FqMmi2iaZAwERFXAAwxa69xJ/AxcQ+R8ncd6Kd5bUwRi5ftBCXaqcfm+I0hMjY K5V0YcLEmCMyng7+pXi7rSObcRMOP4qVXN4rX0w19n3kxz2SW4uvrdE4bV5nA2t8 qfHaRfHZyrLrwJZyBsxpzv58XLoBc0ueCw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:25 2026 by rpki-client