This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer File: B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer (raw, json) Hash identifier: rNqF841NgR0q8EF+ngdxPkhwUUsF1x5LG8UrKGWFIkg= Subject key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355421315628731EF0DD7912969294 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50941 AS: 206192 IP: 31.169.91.0/24 IP: 178.18.192.0/20 IP: 185.21.4.0/24 IP: 185.21.6.0/23 IP: 185.33.61.0/24 IP: 185.88.132.0/24 IP: 185.93.249.0 -- 185.93.251.255 IP: 185.193.4.0/22 IP: 2a00:54a0::/32 IP: 2a05:c9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:21:31:56:28:73:1e:f0:dd:79:12:96:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=079d9053717a16a76c10ae838f5625055be0481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:ed:32:d8:68:28:6c:f5:b9:e8:8f:ef:d8: c2:0b:53:af:9e:49:09:b0:59:28:63:82:d0:0f:ae: 73:78:9b:67:d2:1a:42:d2:9e:73:48:5f:00:de:67: 40:21:7d:06:fd:d1:9e:55:ef:5f:d3:b5:3c:db:a1: 26:87:7b:5f:4e:7f:a8:bd:ba:94:e9:15:1d:65:ca: 75:1a:05:cd:be:78:4e:50:6d:a9:6f:c1:7b:2c:60: 98:eb:e1:f2:25:c0:5a:58:f8:2e:d6:34:f1:07:73: 2d:47:ee:43:1d:ae:9a:d6:48:d4:2b:01:2b:90:ed: db:65:ed:c7:2a:93:56:0c:1e:9c:b1:39:54:4b:27: 63:e7:b0:d6:4e:08:98:f4:89:7b:4e:f4:ff:0d:e1: 1e:00:c9:4b:67:09:83:97:18:44:b5:84:38:d3:c0: 5b:a8:ff:13:5c:6b:65:bf:3e:7e:46:28:b8:ef:65: 5a:2e:2c:6d:f7:f1:07:03:64:ef:43:02:62:6d:75: d5:71:8e:90:d0:82:70:42:93:b1:94:0f:7e:4c:24: 29:b4:a1:87:62:d0:1c:3b:be:16:ec:63:06:ae:56: 12:28:a2:f4:0c:be:42:2d:c1:02:43:4a:c9:96:57: 72:ef:cf:f1:52:9d:58:60:b5:0f:2c:b6:a1:d7:2e: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.91.0/24 178.18.192.0/20 185.21.4.0/24 185.21.6.0/23 185.33.61.0/24 185.88.132.0/24 185.93.249.0-185.93.251.255 185.193.4.0/22 IPv6: 2a00:54a0::/32 2a05:c9c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50941 206192 Signature Algorithm: sha256WithRSAEncryption 87:23:12:00:d3:26:8b:07:6b:c4:d7:b1:50:14:84:6b:b9:28: 56:91:4f:d2:84:3d:19:55:c9:67:1f:7a:79:21:e2:96:80:df: 79:25:b8:74:c5:e7:01:6b:04:b0:4b:f9:84:58:04:cb:56:d4: 24:14:25:f7:a6:b1:4c:79:d0:6e:06:40:e8:c3:49:9f:24:72: c1:90:f0:2e:53:39:a7:af:da:a9:c2:d8:29:e3:e7:37:a0:ce: 64:82:5c:b4:5d:ec:aa:94:89:a9:a7:05:de:91:2c:c8:5f:7d: a8:bd:8c:d4:c5:f8:5e:86:a9:db:17:17:37:3d:61:7c:f8:06: eb:15:c1:35:1c:bc:33:95:b3:73:ee:e9:ae:be:38:c0:01:f9: 17:eb:53:57:73:5c:0b:a4:35:6a:ea:5b:03:b1:86:5d:4a:92: ef:5a:37:43:7d:05:1b:b4:fe:56:e1:ea:33:5f:87:8e:69:21: 59:1a:77:31:32:05:ba:54:d3:32:fe:de:19:b4:96:85:ed:e0: 24:77:29:4c:fe:94:e3:31:f7:8a:2a:ae:22:94:8b:7e:7a:d0: ce:55:33:14:c4:c8:1e:a5:b2:35:88:26:41:c0:f2:8f:a6:bf: e7:cb:4d:91:3d:8f:98:2a:1b:cd:b0:19:ea:2b:e3:62:3c:77: 72:08:3f:3c -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISAZt4NVQhMVYocx7w3XkSlpKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzlkOTA1MzcxN2ExNmE3NmMxMGFlODM4ZjU2MjUwNTViZTA0ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAXtMthoKGz1ueiP79jCC1OvnkkJ sFkoY4LQD65zeJtn0hpC0p5zSF8A3mdAIX0G/dGeVe9f07U826Emh3tfTn+ovbqU 6RUdZcp1GgXNvnhOUG2pb8F7LGCY6+HyJcBaWPgu1jTxB3MtR+5DHa6a1kjUKwEr kO3bZe3HKpNWDB6csTlUSydj57DWTgiY9Il7TvT/DeEeAMlLZwmDlxhEtYQ408Bb qP8TXGtlvz5+Rii472VaLixt9/EHA2TvQwJibXXVcY6Q0IJwQpOxlA9+TCQptKGH YtAcO74W7GMGrlYSKKL0DL5CLcECQ0rJlldy78/xUp1YYLUPLLah1y4EfQIDAQAB o4IC7TCCAukwHQYDVR0OBBYEFAedkFNxehanbBCug49WJQVb4EgfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzY4ZDE2 YS04MmU1LTRmNGEtODczMC0yN2QwM2UzOTNmYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNjhkMTZh LTgyZTUtNGY0YS04NzMwLTI3ZDAzZTM5M2ZiNy8xL0I1MlFVM0Y2RnFkc0VLNkRq MVlsQlZ2Z1NCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF BwEHAQH/BFgwVjA+BAIAATA4AwQAH6lbAwQEshLAAwQAuRUEAwQBuRUGAwQAuSE9 AwQAuViEMAwDBAC5XfkDBAK5XfgDBAK5wQQwFAQCAAIwDgMFACoAVKADBQMqBcnA MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDG/QIDAyVwMA0GCSqGSIb3DQEBCwUA A4IBAQCHIxIA0yaLB2vE17FQFIRruShWkU/ShD0ZVclnH3p5IeKWgN95Jbh0xecB awSwS/mEWATLVtQkFCX3prFMedBuBkDow0mfJHLBkPAuUzmnr9qpwtgp4+c3oM5k gly0XeyqlImppwXekSzIX32ovYzUxfhehqnbFxc3PWF8+AbrFcE1HLwzlbNz7umu vjjAAfkX61NXc1wLpDVq6lsDsYZdSpLvWjdDfQUbtP5W4eozX4eOaSFZGncxMgW6 VNMy/t4ZtJaF7eAkdylM/pTjMfeKKq4ilIt+etDOVTMUxMgepbI1iCZBwPKPpr/n y02RPY+YKhvNsBnqK+NiPHdyCD88 -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:55 2026 by rpki-client