This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer File: 8EpYBH83u8BXlEu_jK2HQoeVkto.cer (raw, json) Hash identifier: 1/2euVPVX3EhMTqHCACJTqOapslYU4tH1pWss4WI4+w= Subject key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37A10DE0A2EEAB0987EA7998048316 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.180.84.0/22 IP: 14.102.16.0/22 IP: 14.102.52.0/22 IP: 14.102.60.0/22 IP: 14.102.84.0/22 IP: 31.222.216.0/22 IP: 45.89.44.0/22 IP: 45.116.104.0/22 IP: 45.144.196.0/22 IP: 45.150.116.0/22 IP: 45.150.180.0/22 IP: 46.244.18.0/23 IP: 46.244.96.0/22 IP: 46.244.108.0/22 IP: 46.244.114.0 -- 46.244.119.255 IP: 62.169.128.0/21 IP: 62.169.140.0/22 IP: 66.56.80.0/20 IP: 77.246.245.0/24 IP: 81.95.48.0/22 IP: 81.95.56.0/21 IP: 84.51.232.0/22 IP: 92.51.232.0/21 IP: 92.51.248.0/21 IP: 92.240.144.0/21 IP: 103.61.196.0/22 IP: 103.125.76.0/22 IP: 103.138.78.0/23 IP: 103.198.28.0/22 IP: 103.210.196.0/22 IP: 103.213.212.0/22 IP: 103.255.76.0/23 IP: 107.150.166.0 -- 107.150.169.255 IP: 107.150.172.0/23 IP: 110.172.180.0/22 IP: 114.69.236.0/22 IP: 118.91.180.0/22 IP: 124.198.128.0/19 IP: 147.90.0.0/16 IP: 155.2.176.0 -- 155.2.223.255 IP: 158.173.128.0/17 IP: 162.218.176.0/22 IP: 163.47.104.0/22 IP: 167.160.0.0/22 IP: 167.160.12.0/23 IP: 167.160.16.0/23 IP: 167.160.28.0/23 IP: 170.62.88.0 -- 170.62.119.255 IP: 170.62.160.0/23 IP: 170.62.176.0 -- 170.62.187.255 IP: 170.62.194.0/23 IP: 170.62.202.0/23 IP: 170.62.206.0/23 IP: 170.62.224.0 -- 170.62.247.255 IP: 185.19.40.0/24 IP: 185.34.108.0/22 IP: 185.51.48.0/22 IP: 185.51.54.0/23 IP: 185.70.112.0/22 IP: 185.102.168.0/21 IP: 185.145.80.0/22 IP: 185.161.110.0/23 IP: 185.192.212.0/22 IP: 185.203.148.0/22 IP: 185.212.172.0/22 IP: 185.238.128.0/22 IP: 185.243.140.0/22 IP: 190.106.64.0/20 IP: 192.140.220.0/22 IP: 192.253.208.0/22 IP: 193.142.58.0/23 IP: 198.55.28.0/22 IP: 202.49.92.0/22 IP: 202.49.244.0/22 IP: 202.50.124.0/22 IP: 203.188.160.0/19 IP: 212.32.48.0/22 IP: 212.32.68.0 -- 212.32.79.255 IP: 212.56.48.0/21 IP: 212.56.60.0/22 IP: 212.78.244.0 -- 212.78.251.255 IP: 212.104.144.0/22 IP: 213.254.160.0/22 IP: 213.254.172.0/22 IP: 213.254.188.0/22 IP: 2a04:30c0::/29 IP: 2a06:25c0::/29 IP: 2a14:4d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a1:0d:e0:a2:ee:ab:09:87:ea:79:98:04:83:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f04a58047f37bbc057944bbf8cad8742879592da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:da:b4:5e:6b:91:29:a3:eb:99:5d:51:b3: f5:38:fc:b9:dd:99:28:00:ab:0f:41:ab:e3:a2:15: a7:f4:26:55:af:7e:67:a7:a0:ad:c1:ae:d3:a8:44: e0:73:0d:61:31:f1:e8:6d:0f:67:5c:d4:9c:58:6c: 60:03:60:b6:23:fc:b7:8e:53:d1:b5:58:ab:4d:4b: c5:81:ba:df:72:8e:fb:f8:86:f8:6a:56:94:32:f3: 35:9b:96:de:bf:75:6f:9e:4b:eb:6c:a7:65:2f:45: 04:df:ba:6c:85:fe:81:4a:aa:64:f6:20:01:4a:02: 3c:24:bb:22:45:77:82:ef:37:9c:41:28:15:f8:e0: cb:e8:5a:3c:e6:00:6e:91:f1:0e:1e:cd:ad:b2:0a: 56:5f:25:01:30:1f:61:77:e4:f5:f0:8d:62:16:33: 2d:05:4c:c2:a5:85:f8:cf:0b:d6:9e:2f:ad:9c:df: ac:16:41:f3:bc:ea:96:ba:4c:de:e4:16:c8:39:0e: ac:f1:19:3d:9a:83:8a:a6:96:4c:0b:e8:d4:ff:9e: 34:7e:1e:2d:3c:9c:a0:cc:ca:2a:e1:5e:ef:82:60: ea:2a:d3:6a:94:cb:9a:cb:55:6d:6f:93:64:5e:e6: 18:53:4b:fd:df:3f:cd:34:00:5c:26:50:d5:cc:d8: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.84.0/22 14.102.16.0/22 14.102.52.0/22 14.102.60.0/22 14.102.84.0/22 31.222.216.0/22 45.89.44.0/22 45.116.104.0/22 45.144.196.0/22 45.150.116.0/22 45.150.180.0/22 46.244.18.0/23 46.244.96.0/22 46.244.108.0/22 46.244.114.0-46.244.119.255 62.169.128.0/21 62.169.140.0/22 66.56.80.0/20 77.246.245.0/24 81.95.48.0/22 81.95.56.0/21 84.51.232.0/22 92.51.232.0/21 92.51.248.0/21 92.240.144.0/21 103.61.196.0/22 103.125.76.0/22 103.138.78.0/23 103.198.28.0/22 103.210.196.0/22 103.213.212.0/22 103.255.76.0/23 107.150.166.0-107.150.169.255 107.150.172.0/23 110.172.180.0/22 114.69.236.0/22 118.91.180.0/22 124.198.128.0/19 147.90.0.0/16 155.2.176.0-155.2.223.255 158.173.128.0/17 162.218.176.0/22 163.47.104.0/22 167.160.0.0/22 167.160.12.0/23 167.160.16.0/23 167.160.28.0/23 170.62.88.0-170.62.119.255 170.62.160.0/23 170.62.176.0-170.62.187.255 170.62.194.0/23 170.62.202.0/23 170.62.206.0/23 170.62.224.0-170.62.247.255 185.19.40.0/24 185.34.108.0/22 185.51.48.0/22 185.51.54.0/23 185.70.112.0/22 185.102.168.0/21 185.145.80.0/22 185.161.110.0/23 185.192.212.0/22 185.203.148.0/22 185.212.172.0/22 185.238.128.0/22 185.243.140.0/22 190.106.64.0/20 192.140.220.0/22 192.253.208.0/22 193.142.58.0/23 198.55.28.0/22 202.49.92.0/22 202.49.244.0/22 202.50.124.0/22 203.188.160.0/19 212.32.48.0/22 212.32.68.0-212.32.79.255 212.56.48.0/21 212.56.60.0/22 212.78.244.0-212.78.251.255 212.104.144.0/22 213.254.160.0/22 213.254.172.0/22 213.254.188.0/22 IPv6: 2a04:30c0::/29 2a06:25c0::/29 2a14:4d40::/29 Signature Algorithm: sha256WithRSAEncryption 71:cc:be:61:57:b4:52:5a:6e:a6:16:64:44:fa:67:d3:be:a4: 86:91:a8:f0:27:38:df:cd:3a:31:99:ef:23:9a:40:e5:e7:de: 33:7c:15:82:8d:7e:7f:a8:d0:5c:36:aa:54:98:22:99:4f:0b: df:39:fd:69:7c:ca:7d:eb:58:71:9f:2e:8f:34:44:54:6a:6a: b4:35:af:7f:bc:af:d3:0d:89:cd:b2:97:51:d6:05:1a:47:59: 42:1f:c2:5f:ca:1f:d7:7d:e1:49:f3:92:3c:ad:e8:29:62:34: 4b:d0:cb:0c:2b:71:da:1a:7a:aa:b4:9d:11:e2:83:61:f0:fb: 0d:b3:d6:63:09:a6:48:9b:62:a8:e2:0c:db:45:f0:6e:5f:b9: 93:4f:ff:26:ab:53:45:73:5c:48:2f:ca:b4:f5:bc:9e:f7:65: 6f:2d:a6:23:d5:bb:2a:88:22:c9:76:2a:e7:8c:24:87:53:7a: f9:b5:d3:9c:df:ff:4d:5b:9f:8b:63:e5:8e:70:92:fc:eb:5d: 5e:d0:33:10:a7:32:17:d2:35:cc:80:66:47:84:92:11:54:d2: f5:08:15:27:c5:64:71:69:b2:71:96:89:53:39:c7:7d:fa:d0: df:66:1e:2c:21:f4:e0:f3:43:ed:04:d1:2d:ec:c1:32:50:97: 79:d3:71:c9 -----BEGIN CERTIFICATE----- MIIH1jCCBr6gAwIBAgISAZt+N6EN4KLuqwmH6nmYBIMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDRhNTgwNDdmMzdiYmMwNTc5NDRiYmY4Y2FkODc0Mjg3OTU5MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A/atF5rkSmj65ldUbP1OPy53Zko AKsPQavjohWn9CZVr35np6Ctwa7TqETgcw1hMfHobQ9nXNScWGxgA2C2I/y3jlPR tVirTUvFgbrfco77+Ib4alaUMvM1m5bev3VvnkvrbKdlL0UE37pshf6BSqpk9iAB SgI8JLsiRXeC7zecQSgV+ODL6Fo85gBukfEOHs2tsgpWXyUBMB9hd+T18I1iFjMt BUzCpYX4zwvWni+tnN+sFkHzvOqWukze5BbIOQ6s8Rk9moOKppZMC+jU/540fh4t PJygzMoq4V7vgmDqKtNqlMuay1Vtb5NkXuYYU0v93z/NNABcJlDVzNhl0QIDAQAB o4IE4jCCBN4wHQYDVR0OBBYEFPBKWAR/N7vAV5RLv4yth0KHlZLaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzJiYTk3 ZS01OThiLTQ4ZGQtOGQ1Ni1mNWZiNzFiOWE1MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMmJhOTdl LTU5OGItNDhkZC04ZDU2LWY1ZmI3MWI5YTUxZi8xLzhFcFlCSDgzdThCWGxFdV9q SzJIUW9lVmt0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICewYIKwYB BQUHAQcBAf8EggJqMIICZjCCAkUEAgABMIICPQMEAgW0VAMEAg5mEAMEAg5mNAME Ag5mPAMEAg5mVAMEAh/e2AMEAi1ZLAMEAi10aAMEAi2QxAMEAi2WdAMEAi2WtAME AS70EgMEAi70YAMEAi70bDAMAwQBLvRyAwQDLvRwAwQDPqmAAwQCPqmMAwQEQjhQ AwQATfb1AwQCUV8wAwQDUV84AwQCVDPoAwQDXDPoAwQDXDP4AwQDXPCQAwQCZz3E AwQCZ31MAwQBZ4pOAwQCZ8YcAwQCZ9LEAwQCZ9XUAwQBZ/9MMAwDBAFrlqYDBAFr lqgDBAFrlqwDBAJurLQDBAJyRewDBAJ2W7QDBAV8xoADAwCTWjAMAwQEmwKwAwQF mwLAAwQHnq2AAwQCotqwAwQCoy9oAwQCp6AAAwQBp6AMAwQBp6AQAwQBp6AcMAwD BAOqPlgDBAOqPnADBAGqPqAwDAMEBKo+sAMEAqo+uAMEAao+wgMEAao+ygMEAao+ zjAMAwQFqj7gAwQDqj7wAwQAuRMoAwQCuSJsAwQCuTMwAwQBuTM2AwQCuUZwAwQD uWaoAwQCuZFQAwQBuaFuAwQCucDUAwQCucuUAwQCudSsAwQCue6AAwQCufOMAwQE vmpAAwQCwIzcAwQCwP3QAwQBwY46AwQCxjccAwQCyjFcAwQCyjH0AwQCyjJ8AwQF y7ygAwQC1CAwMAwDBALUIEQDBATUIEADBAPUODADBALUODwwDAMEAtRO9AMEAtRO +AMEAtRokAMEAtX+oAMEAtX+rAMEAtX+vDAbBAIAAjAVAwUDKgQwwAMFAyoGJcAD BQMqFE1AMA0GCSqGSIb3DQEBCwUAA4IBAQBxzL5hV7RSWm6mFmRE+mfTvqSGkajw JzjfzToxme8jmkDl594zfBWCjX5/qNBcNqpUmCKZTwvfOf1pfMp961hxny6PNERU amq0Na9/vK/TDYnNspdR1gUaR1lCH8Jfyh/XfeFJ85I8regpYjRL0MsMK3HaGnqq tJ0R4oNh8PsNs9ZjCaZIm2Ko4gzbRfBuX7mTT/8mq1NFc1xIL8q09bye92VvLaYj 1bsqiCLJdirnjCSHU3r5tdOc3/9NW5+LY+WOcJL8611e0DMQpzIX0jXMgGZHhJIR VNL1CBUnxWRxabJxlolTOcd9+tDfZh4sIfTg80PtBNEt7MEyUJd503HJ -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:38 2026 by rpki-client