This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer File: 6qqKCl_f1pjhBL42oq7sgTrsoHE.cer (raw, json) Hash identifier: DXpNco1nzHqCwNO3FHTXDunRVJHSO5GKMBxsln32USw= Subject key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38143A34A268184D83D215775E010C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34665 AS: 44050 AS: 44068 AS: 216368 IP: 5.8.0.0 -- 5.8.23.255 IP: 5.8.44.0 -- 5.8.67.255 IP: 5.8.80.0 -- 5.8.91.255 IP: 5.101.0.0/21 IP: 5.101.32.0/22 IP: 5.101.44.0/22 IP: 5.101.64.0/22 IP: 5.101.80.0/20 IP: 5.101.208.0/21 IP: 5.188.8.0/22 IP: 5.188.44.0 -- 5.188.55.255 IP: 5.188.60.0/22 IP: 5.188.68.0/23 IP: 5.188.84.0 -- 5.188.91.255 IP: 5.188.164.0/22 IP: 5.188.192.0/22 IP: 5.188.200.0 -- 5.188.211.255 IP: 5.188.216.0/21 IP: 5.188.232.0 -- 5.188.237.255 IP: 5.189.216.0/22 IP: 5.189.248.0/21 IP: 31.44.176.0/20 IP: 31.184.192.0/21 IP: 31.184.228.0/22 IP: 31.184.236.0 -- 31.184.243.255 IP: 37.9.40.0 -- 37.9.51.255 IP: 37.139.36.0/22 IP: 37.139.44.0 -- 37.139.59.255 IP: 45.156.212.0/22 IP: 45.159.200.0/22 IP: 46.161.0.0 -- 46.161.35.255 IP: 46.161.40.0 -- 46.161.51.255 IP: 46.161.56.0/21 IP: 91.151.176.0/20 IP: 91.212.7.0/24 IP: 91.243.32.0/19 IP: 91.243.88.0/21 IP: 94.26.128.0/18 IP: 95.215.0.0/22 IP: 146.185.200.0/21 IP: 146.185.212.0/23 IP: 146.185.222.0 -- 146.185.235.255 IP: 146.185.238.0/23 IP: 146.185.244.0/22 IP: 146.185.252.0/22 IP: 185.232.28.0/22 IP: 188.143.128.0/17 IP: 193.93.192.0/22 IP: 194.110.80.0/22 IP: 195.2.240.0/23 IP: 2a00:1d78::/32 IP: 2a01:8380::/32 IP: 2a02:2510::/32 IP: 2a0c:8700::/29 IP: 2a0d:8fc0::/29 IP: 2a0f:3180::/29 IP: 2a0f:8580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:14:3a:34:a2:68:18:4d:83:d2:15:77:5e:01:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:f3:a3:6b:ef:bd:e4:18:4d:c5:01:ab:f0: 69:0e:35:c9:58:db:59:b9:3f:f2:af:d9:f3:c7:5a: 03:32:85:de:2a:57:ef:80:b0:86:65:26:c1:8a:eb: ee:44:35:8c:b1:56:ae:72:bd:54:81:e3:cc:56:15: 41:4a:ea:25:fc:d0:7e:b6:bd:e2:96:90:24:0a:ca: ba:37:00:0b:66:d6:e1:34:eb:bd:d4:d5:a1:c9:bb: d8:63:bc:9e:ed:4d:49:6d:d6:1f:a9:a8:5c:77:e0: f8:a7:5d:be:e1:a5:bc:b1:18:b0:34:3a:96:23:e5: 5d:81:84:19:18:1f:96:47:e0:9b:bf:a9:f3:03:7c: b0:83:fa:a5:01:f9:ea:d1:90:6a:a6:99:a3:46:23: 1d:8c:98:99:be:9f:6d:19:d9:30:8d:67:bf:7a:cc: 36:3b:59:04:7a:a6:5b:3c:05:b2:94:ce:d9:f5:45: 2f:7e:23:39:7f:57:e3:a7:38:36:52:c5:67:7e:7b: 5e:cd:0b:5c:1a:cf:4b:c3:1f:75:45:60:0e:7e:7b: 46:86:ae:7e:84:a3:6f:2c:81:e5:72:28:72:d0:ba: 39:41:ef:61:90:af:ee:53:2f:12:1c:4b:62:24:82: 43:4b:69:75:7d:1b:da:67:1f:81:09:1d:52:c0:99: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.0.0-5.8.23.255 5.8.44.0-5.8.67.255 5.8.80.0-5.8.91.255 5.101.0.0/21 5.101.32.0/22 5.101.44.0/22 5.101.64.0/22 5.101.80.0/20 5.101.208.0/21 5.188.8.0/22 5.188.44.0-5.188.55.255 5.188.60.0/22 5.188.68.0/23 5.188.84.0-5.188.91.255 5.188.164.0/22 5.188.192.0/22 5.188.200.0-5.188.211.255 5.188.216.0/21 5.188.232.0-5.188.237.255 5.189.216.0/22 5.189.248.0/21 31.44.176.0/20 31.184.192.0/21 31.184.228.0/22 31.184.236.0-31.184.243.255 37.9.40.0-37.9.51.255 37.139.36.0/22 37.139.44.0-37.139.59.255 45.156.212.0/22 45.159.200.0/22 46.161.0.0-46.161.35.255 46.161.40.0-46.161.51.255 46.161.56.0/21 91.151.176.0/20 91.212.7.0/24 91.243.32.0/19 91.243.88.0/21 94.26.128.0/18 95.215.0.0/22 146.185.200.0/21 146.185.212.0/23 146.185.222.0-146.185.235.255 146.185.238.0/23 146.185.244.0/22 146.185.252.0/22 185.232.28.0/22 188.143.128.0/17 193.93.192.0/22 194.110.80.0/22 195.2.240.0/23 IPv6: 2a00:1d78::/32 2a01:8380::/32 2a02:2510::/32 2a0c:8700::/29 2a0d:8fc0::/29 2a0f:3180::/29 2a0f:8580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34665 44050 44068 216368 Signature Algorithm: sha256WithRSAEncryption 76:de:ac:6c:02:e4:6b:0a:b9:ef:f7:e1:7b:80:ce:4a:a3:47: 09:2f:30:d8:91:28:22:5a:f8:62:1b:29:8e:30:66:df:8d:f0: 5f:c7:b7:4e:a7:33:31:18:e1:3d:9d:38:72:f5:81:00:82:51: ef:22:c3:63:9c:b3:ed:1b:15:8a:47:eb:7b:6f:42:ce:88:a6: 05:02:b5:94:8e:a7:e9:0e:57:cb:8c:fd:c3:b5:65:b2:8c:20: 81:4c:fc:38:97:49:54:bd:dd:76:38:de:73:bf:c4:59:ef:13: 26:09:90:72:cc:31:22:a5:7d:3f:1c:98:32:5b:7b:31:4c:aa: e3:d3:b5:26:69:dd:df:00:b0:4c:4f:76:ec:d7:ef:e8:83:4f: 7e:6f:e9:df:72:9e:07:05:3d:ae:48:b2:66:67:74:d6:b0:c7: f2:12:83:cd:39:29:09:84:34:54:34:a3:e9:fc:2b:3c:0a:aa: 98:33:48:24:55:f7:cc:69:37:84:d0:a5:b4:3a:e4:74:ff:57: 88:e2:20:ad:54:58:5e:15:4c:2a:48:a6:3d:ef:a4:32:cb:3b: d1:47:4e:52:75:11:6f:ad:b1:49:3b:4a:e2:7d:42:36:35:8d: b7:dd:73:36:e6:34:27:a2:9b:b4:50:6d:22:bb:28:56:72:88: 6e:f8:6e:b7 -----BEGIN CERTIFICATE----- MIIHcjCCBlqgAwIBAgISAZt+OBQ6NKJoGE2D0hV3XgEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mHzo2vvveQYTcUBq/BpDjXJWNtZ uT/yr9nzx1oDMoXeKlfvgLCGZSbBiuvuRDWMsVaucr1UgePMVhVBSuol/NB+tr3i lpAkCsq6NwALZtbhNOu91NWhybvYY7ye7U1JbdYfqahcd+D4p12+4aW8sRiwNDqW I+VdgYQZGB+WR+Cbv6nzA3ywg/qlAfnq0ZBqppmjRiMdjJiZvp9tGdkwjWe/esw2 O1kEeqZbPAWylM7Z9UUvfiM5f1fjpzg2UsVnfntezQtcGs9Lwx91RWAOfntGhq5+ hKNvLIHlcihy0Lo5Qe9hkK/uUy8SHEtiJIJDS2l1fRvaZx+BCR1SwJnKBwIDAQAB o4IEfjCCBHowHQYDVR0OBBYEFOqqigpf39aY4QS+NqKu7IE67KBxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzI5MzJk Zi1hNGJkLTRhZjUtYTRkNC04OWQwOTI0MGM0M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMjkzMmRm LWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBqaEJMNDJv cTdzZ1Ryc29IRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB7AYIKwYB BQUHAQcBAf8EggHbMIIB1zCCAZoEAgABMIIBkjALAwMDBQgDBAMFCBAwDAMEAgUI LAMEAgUIQDAMAwQEBQhQAwQCBQhYAwQDBWUAAwQCBWUgAwQCBWUsAwQCBWVAAwQE BWVQAwQDBWXQAwQCBbwIMAwDBAIFvCwDBAMFvDADBAIFvDwDBAEFvEQwDAMEAgW8 VAMEAgW8WAMEAgW8pAMEAgW8wDAMAwQDBbzIAwQCBbzQAwQDBbzYMAwDBAMFvOgD BAEFvOwDBAIFvdgDBAMFvfgDBAQfLLADBAMfuMADBAIfuOQwDAMEAh+47AMEAh+4 8DAMAwQDJQkoAwQCJQkwAwQCJYskMAwDBAIliywDBAIlizgDBAItnNQDBAItn8gw CwMDAC6hAwQCLqEgMAwDBAMuoSgDBAIuoTADBAMuoTgDBARbl7ADBABb1AcDBAVb 8yADBANb81gDBAZeGoADBAJf1wADBAOSucgDBAGSudQwDAMEAZK53gMEApK56AME AZK57gMEApK59AMEApK5/AMEArnoHAMEB7yPgAMEAsFdwAMEAsJuUAMEAcMC8DA3 BAIAAjAxAwUAKgAdeAMFACoBg4ADBQAqAiUQAwUDKgyHAAMFAyoNj8ADBQMqDzGA AwUDKg+FgDApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMAh2kCAwCsEgIDAKwkAgMD TTAwDQYJKoZIhvcNAQELBQADggEBAHberGwC5GsKue/34XuAzkqjRwkvMNiRKCJa +GIbKY4wZt+N8F/Ht06nMzEY4T2dOHL1gQCCUe8iw2Ocs+0bFYpH63tvQs6IpgUC tZSOp+kOV8uM/cO1ZbKMIIFM/DiXSVS93XY43nO/xFnvEyYJkHLMMSKlfT8cmDJb ezFMquPTtSZp3d8AsExPduzX7+iDT35v6d9yngcFPa5IsmZndNawx/ISg805KQmE NFQ0o+n8KzwKqpgzSCRV98xpN4TQpbQ65HT/V4jiIK1UWF4VTCpIpj3vpDLLO9FH TlJ1EW+tsUk7SuJ9QjY1jbfdczbmNCeim7RQbSK7KFZyiG74brc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:47 2026 by rpki-client