This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer File: 7xxmWwOGkrk7310djzzqPphpegM.cer (raw, json) Hash identifier: WcUo8Kz+riQAzjTOg2/HNr32HoTYq+VjYBjj7yjQ9qg= Subject key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A9DB3E2AFDCFFD66A2C70D7A4CC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3315 -- 3316 AS: 5568 AS: 8631 AS: 8985 AS: 15835 AS: 31649 AS: 41740 AS: 42139 AS: 42385 AS: 42403 AS: 42728 AS: 43213 AS: 43690 AS: 43832 AS: 43921 AS: 44522 AS: 44597 AS: 45018 AS: 45029 AS: 47445 AS: 47882 AS: 48216 AS: 48531 AS: 50706 AS: 57056 AS: 62135 AS: 62261 AS: 205022 IP: 62.76.62.0/23 IP: 62.76.76.0/23 IP: 62.76.151.0/24 IP: 62.76.248.0/21 IP: 86.62.48.0/22 IP: 193.232.64.0/24 IP: 193.232.66.0/23 IP: 193.232.72.0 -- 193.232.74.255 IP: 193.232.76.0/24 IP: 193.232.78.0/24 IP: 193.232.80.0 -- 193.232.85.255 IP: 193.232.87.0/24 IP: 193.232.93.0/24 IP: 193.232.124.0 -- 193.232.129.255 IP: 193.232.131.0 -- 193.232.137.255 IP: 193.232.139.0 -- 193.232.143.255 IP: 193.232.156.0/23 IP: 193.232.175.0/24 IP: 193.232.188.0/23 IP: 193.232.226.0/23 IP: 193.232.230.0 -- 193.232.233.255 IP: 193.232.237.0/24 IP: 193.232.243.0 -- 193.232.244.255 IP: 194.85.0.0/24 IP: 194.85.3.0/24 IP: 194.85.16.0/24 IP: 194.85.25.0/24 IP: 194.85.28.0/23 IP: 194.85.31.0/24 IP: 194.85.76.0/22 IP: 194.85.84.0/23 IP: 194.85.104.0 -- 194.85.109.255 IP: 194.85.117.0 -- 194.85.119.255 IP: 194.85.177.0/24 IP: 194.85.186.0/23 IP: 194.85.252.0/23 IP: 194.190.119.0 -- 194.190.129.255 IP: 194.190.132.0 -- 194.190.136.255 IP: 194.190.138.0/24 IP: 194.190.141.0 -- 194.190.142.255 IP: 194.190.145.0 -- 194.190.146.255 IP: 194.190.148.0/24 IP: 194.190.156.0/24 IP: 194.190.168.0/24 IP: 194.226.16.0 -- 194.226.18.255 IP: 194.226.24.0/23 IP: 194.226.28.0/23 IP: 194.226.36.0/24 IP: 194.226.38.0/23 IP: 194.226.41.0/24 IP: 194.226.44.0/24 IP: 194.226.46.0 -- 194.226.48.255 IP: 194.226.56.0/22 IP: 194.226.64.0/20 IP: 194.226.100.0/22 IP: 194.226.134.0/23 IP: 195.19.8.0/24 IP: 195.19.14.0/23 IP: 195.19.26.0/24 IP: 195.208.22.0 -- 195.208.31.255 IP: 195.208.208.0/21 IP: 195.208.222.0/23 IP: 195.209.0.0/19 IP: 195.209.146.0 -- 195.209.148.255 IP: 212.192.230.0 -- 212.192.237.255 IP: 212.193.104.0 -- 212.193.127.255 IP: 212.193.144.0/20 IP: 212.193.192.0/19 IP: 2001:67c:1008::/47 IP: 2001:67c:1210::/46 IP: 2001:67c:1440::/45 IP: 2001:6d0::/32 IP: 2001:7f8:20::/48 IP: 2a09:bd00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a9:db:3e:2a:fd:cf:fd:66:a2:c7:0d:7a:4c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:63:c2:5d:e0:ce:ff:18:25:a4:03:9d:ae: d0:42:f7:d1:73:8b:af:40:d0:55:df:90:65:ca:aa: 20:34:21:30:a7:46:6c:d6:42:a7:ba:63:dc:d0:19: aa:2b:26:87:c4:43:9a:60:0e:1c:3c:e3:ba:5d:22: 9d:96:c7:7d:d0:8d:ff:e5:15:05:86:d2:c9:c3:55: ab:09:6b:47:88:e2:a8:51:d2:a1:82:bf:be:0f:be: 79:eb:7e:43:2c:28:82:d7:61:fc:84:05:fe:7d:69: 00:1a:36:f5:ce:b9:c9:13:a2:d3:de:4d:97:be:77: e7:df:0f:d6:a3:90:77:7e:63:c5:3b:be:92:66:e1: 0b:c0:24:40:3f:c9:a3:b5:00:ef:ed:0f:ed:d0:b4: d3:6c:71:4c:47:42:40:96:37:05:56:e6:90:12:90: a7:2a:e1:74:4d:a0:ef:d2:6d:97:2a:f5:e6:2f:07: 1c:4f:5f:6b:03:7b:ee:e7:96:f7:48:1c:ab:03:40: 8c:a3:d8:d6:0c:2c:40:ee:59:19:72:81:ed:d6:f3: fe:b4:a0:81:46:3c:9a:96:1f:54:62:c1:26:d8:02: b1:23:7e:3b:e5:97:b3:4e:d0:66:52:37:f8:ed:ce: f2:88:c2:b8:43:cd:56:63:cf:fe:e5:ae:48:46:64: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.62.0/23 62.76.76.0/23 62.76.151.0/24 62.76.248.0/21 86.62.48.0/22 193.232.64.0/24 193.232.66.0/23 193.232.72.0-193.232.74.255 193.232.76.0/24 193.232.78.0/24 193.232.80.0-193.232.85.255 193.232.87.0/24 193.232.93.0/24 193.232.124.0-193.232.129.255 193.232.131.0-193.232.137.255 193.232.139.0-193.232.143.255 193.232.156.0/23 193.232.175.0/24 193.232.188.0/23 193.232.226.0/23 193.232.230.0-193.232.233.255 193.232.237.0/24 193.232.243.0-193.232.244.255 194.85.0.0/24 194.85.3.0/24 194.85.16.0/24 194.85.25.0/24 194.85.28.0/23 194.85.31.0/24 194.85.76.0/22 194.85.84.0/23 194.85.104.0-194.85.109.255 194.85.117.0-194.85.119.255 194.85.177.0/24 194.85.186.0/23 194.85.252.0/23 194.190.119.0-194.190.129.255 194.190.132.0-194.190.136.255 194.190.138.0/24 194.190.141.0-194.190.142.255 194.190.145.0-194.190.146.255 194.190.148.0/24 194.190.156.0/24 194.190.168.0/24 194.226.16.0-194.226.18.255 194.226.24.0/23 194.226.28.0/23 194.226.36.0/24 194.226.38.0/23 194.226.41.0/24 194.226.44.0/24 194.226.46.0-194.226.48.255 194.226.56.0/22 194.226.64.0/20 194.226.100.0/22 194.226.134.0/23 195.19.8.0/24 195.19.14.0/23 195.19.26.0/24 195.208.22.0-195.208.31.255 195.208.208.0/21 195.208.222.0/23 195.209.0.0/19 195.209.146.0-195.209.148.255 212.192.230.0-212.192.237.255 212.193.104.0-212.193.127.255 212.193.144.0/20 212.193.192.0/19 IPv6: 2001:67c:1008::/47 2001:67c:1210::/46 2001:67c:1440::/45 2001:6d0::/32 2001:7f8:20::/48 2a09:bd00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3315-3316 5568 8631 8985 15835 31649 41740 42139 42385 42403 42728 43213 43690 43832 43921 44522 44597 45018 45029 47445 47882 48216 48531 50706 57056 62135 62261 205022 Signature Algorithm: sha256WithRSAEncryption 9a:99:a5:e7:ee:65:46:98:ae:4a:d7:c6:7e:de:e9:a8:ca:ad: 31:55:ad:97:02:41:d0:0e:7c:e4:25:df:33:ae:11:1f:ee:8a: eb:64:97:28:77:aa:60:64:dd:c2:d2:76:3a:3a:ce:5e:3b:ee: cf:74:90:a7:9c:24:45:b0:df:fb:25:13:1a:1c:0c:37:82:3e: c0:33:27:1f:86:ee:85:db:29:9b:b7:20:c1:cb:43:da:8b:ec: ef:d3:03:f2:c9:c9:c2:2f:fd:87:da:6a:47:d6:2b:9b:88:4b: 1c:27:1d:da:e3:65:2e:d3:8d:f9:54:8e:07:81:18:40:33:ba: 58:4e:c7:7b:b6:ad:10:12:07:1c:38:1a:de:35:4a:d2:f9:96: d2:0a:9f:08:d6:c5:41:22:d2:cd:72:51:7e:31:f7:a2:0a:2c: a7:87:a2:a2:ae:3f:ae:66:82:33:4d:09:e6:c8:26:6b:8e:4e: cb:47:78:89:21:25:14:c5:1b:ab:28:63:2c:68:e9:fc:ac:ed: 48:e1:c1:cc:4f:8a:31:fd:de:9c:a8:3f:89:3d:80:b3:38:ce: c4:e6:fb:a7:94:a2:80:72:b9:93:44:b5:7f:9f:e9:54:87:ec: 8a:ae:5c:69:9d:d1:c3:a8:9a:f0:84:11:01:13:1b:a2:da:77: 13:0e:b2:ab -----BEGIN CERTIFICATE----- MIIIjjCCB3agAwIBAgISAZt7NqnbPir9z/1moscNekzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjFjNjY1YjAzODY5MmI5M2JkZjVkMWQ4ZjNjZWEzZTk4Njk3YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hJjwl3gzv8YJaQDna7QQvfRc4uv QNBV35BlyqogNCEwp0Zs1kKnumPc0BmqKyaHxEOaYA4cPOO6XSKdlsd90I3/5RUF htLJw1WrCWtHiOKoUdKhgr++D755635DLCiC12H8hAX+fWkAGjb1zrnJE6LT3k2X vnfn3w/Wo5B3fmPFO76SZuELwCRAP8mjtQDv7Q/t0LTTbHFMR0JAljcFVuaQEpCn KuF0TaDv0m2XKvXmLwccT19rA3vu55b3SByrA0CMo9jWDCxA7lkZcoHt1vP+tKCB Rjyalh9UYsEm2AKxI3475ZezTtBmUjf47c7yiMK4Q81WY8/+5a5IRmQXhwIDAQAB o4IFmjCCBZYwHQYDVR0OBBYEFO8cZlsDhpK5O99dHY886j6YaXoDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzI5MjVh My04NzFiLTQ2NzYtYWUxMC02ODhkMzMzZWQ5ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvMjkyNWEz LTg3MWItNDY3Ni1hZTEwLTY4OGQzMzNlZDlkNS8xLzd4eG1Xd09Ha3JrNzMxMGRq enpxUHBocGVnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICiwYIKwYB BQUHAQcBAf8EggJ6MIICdjCCAjgEAgABMIICMAMEAT5MPgMEAT5MTAMEAD5MlwME Az5M+AMEAlY+MAMEAMHoQAMEAcHoQjAMAwQDwehIAwQAwehKAwQAwehMAwQAwehO MAwDBATB6FADBAHB6FQDBADB6FcDBADB6F0wDAMEAsHofAMEAcHogDAMAwQAweiD AwQBweiIMAwDBADB6IsDBATB6IADBAHB6JwDBADB6K8DBAHB6LwDBAHB6OIwDAME AcHo5gMEAcHo6AMEAMHo7TAMAwQAwejzAwQAwej0AwQAwlUAAwQAwlUDAwQAwlUQ AwQAwlUZAwQBwlUcAwQAwlUfAwQCwlVMAwQBwlVUMAwDBAPCVWgDBAHCVWwwDAME AMJVdQMEA8JVcAMEAMJVsQMEAcJVugMEAcJV/DAMAwQAwr53AwQBwr6AMAwDBALC voQDBADCvogDBADCvoowDAMEAMK+jQMEAMK+jjAMAwQAwr6RAwQAwr6SAwQAwr6U AwQAwr6cAwQAwr6oMAwDBATC4hADBADC4hIDBAHC4hgDBAHC4hwDBADC4iQDBAHC 4iYDBADC4ikDBADC4iwwDAMEAcLiLgMEAMLiMAMEAsLiOAMEBMLiQAMEAsLiZAME AcLihgMEAMMTCAMEAcMTDgMEAMMTGjAMAwQBw9AWAwQFw9AAAwQDw9DQAwQBw9De AwQFw9EAMAwDBAHD0ZIDBADD0ZQwDAMEAdTA5gMEAdTA7DAMAwQD1MFoAwQH1MEA AwQE1MGQAwQF1MHAMDgEAgACMDIDBwEgAQZ8EAgDBwIgAQZ8EhADBwMgAQZ8FEAD BQAgAQbQAwcAIAEH+AAgAwUAKgm9ADCBpQYIKwYBBQUHAQgBAf8EgZUwgZKggY8w gYwwCAICDPMCAgz0AgIVwAICIbcCAiMZAgI92wICe6ECAwCjDAIDAKSbAgMApZEC AwClowIDAKboAgMAqM0CAwCqqgIDAKs4AgMAq5ECAwCt6gIDAK41AgMAr9oCAwCv 5QIDALlVAgMAuwoCAwC8WAIDAL2TAgMAxhICAwDe4AIDAPK3AgMA8zUCAwMg3jAN BgkqhkiG9w0BAQsFAAOCAQEAmpml5+5lRpiuStfGft7pqMqtMVWtlwJB0A585CXf M64RH+6K62SXKHeqYGTdwtJ2OjrOXjvuz3SQp5wkRbDf+yUTGhwMN4I+wDMnH4bu hdspm7cgwctD2ovs79MD8snJwi/9h9pqR9Yrm4hLHCcd2uNlLtON+VSOB4EYQDO6 WE7He7atEBIHHDga3jVK0vmW0gqfCNbFQSLSzXJRfjH3ogosp4eioq4/rmaCM00J 5sgma45Oy0d4iSElFMUbqyhjLGjp/KztSOHBzE+KMf3enKg/iT2AszjOxOb7p5Si gHK5k0S1f5/pVIfsiq5caZ3Rw6ia8IQRARMbotp3Ew6yqw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:50 2026 by rpki-client