This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer (raw, json) Hash identifier: g16KrNRBDWIe8ihNMgKHlWly8ctxI4WMUnY0taKc4Pk= Subject key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A2F2118C07F8ACE34C963BABE31B89456 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 29 Oct 2025 08:41:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42007 AS: 44676 AS: 48430 AS: 51298 AS: 52107 IP: 2.57.0.0/24 IP: 2.59.160.0/22 IP: 2.59.216.0/22 IP: 5.1.41.0/24 IP: 5.182.36.0/22 IP: 45.8.144.0/22 IP: 45.10.216.0/22 IP: 45.66.12.0/22 IP: 45.67.32.0/22 IP: 45.84.0.0/22 IP: 45.87.152.0/22 IP: 45.89.52.0/22 IP: 45.93.8.0/22 IP: 45.130.168.0/22 IP: 45.148.244.0/22 IP: 45.159.248.0/22 IP: 46.16.34.0/24 IP: 62.133.60.0/22 IP: 78.40.116.0/22 IP: 80.71.156.0/24 IP: 81.177.212.0/22 IP: 91.132.188.0/22 IP: 91.197.0.0/22 IP: 91.231.180.0/24 IP: 92.118.88.0/22 IP: 92.119.200.0/22 IP: 93.185.164.0/22 IP: 94.231.221.0 -- 94.231.223.255 IP: 94.247.137.0/24 IP: 141.98.168.0/22 IP: 146.19.209.0/24 IP: 171.22.180.0/22 IP: 176.116.0.0/24 IP: 176.125.240.0/22 IP: 185.103.164.0/22 IP: 185.139.212.0/22 IP: 185.144.114.0/24 IP: 185.212.117.0/24 IP: 185.231.204.0/22 IP: 188.119.120.0/21 IP: 193.35.227.0/24 IP: 193.43.146.0/23 IP: 193.46.56.0/23 IP: 193.57.136.0/22 IP: 194.4.48.0/22 IP: 194.26.209.0/24 IP: 194.48.94.0/24 IP: 194.55.164.0/22 IP: 194.116.172.0/23 IP: 194.116.190.0/23 IP: 194.156.100.0/22 IP: 213.109.203.0/24 IP: 2a00:9680::/29 IP: 2a03:f500::/29 IP: 2a07:400::/29 IP: 2a07:640::/29 IP: 2a07:c80::/29 IP: 2a07:1840::/29 IP: 2a07:6c00::/29 IP: 2a09:280::/29 IP: 2a0b:44c0::/29 IP: 2a0b:5c00::/29 IP: 2a0b:6600::/29 IP: 2a0b:7840::/29 IP: 2a0b:9a00::/29 IP: 2a0c:7b00::/29 IP: 2a0c:7d00::/29 IP: 2a0e:5ec0::/29 IP: 2a0e:cfc0::/29 IP: 2a10:4280::/29 IP: 2a10:4380::/29 IP: 2a10:4b80::/29 IP: 2a10:4f80::/29 IP: 2a10:5080::/29 IP: 2a10:5180::/29 IP: 2a10:6d80::/29 IP: 2a10:6e80::/29 IP: 2a10:6f80::/29 IP: 2a10:7380::/29 IP: 2a10:7480::/29 IP: 2a10:7580::/29 IP: 2a10:7e80::/29 IP: 2a10:9940::/29 IP: 2a10:99c0::/29 IP: 2a10:9bc0::/29 IP: 2a10:9c40::/29 IP: 2a10:9cc0::/29 IP: 2a10:ad00::/29 IP: 2a10:af00::/29 IP: 2a10:b100::/29 IP: 2a11:1a40::/29 IP: 2a11:1c00::/29 IP: 2a11:2400::/29 IP: 2a11:2700::/29 IP: 2a11:3ec0::/29 IP: 2a11:7140::/29 IP: 2a11:8100::/29 IP: 2a11:f680::/29 IP: 2a11:f800::/29 IP: 2a12:4800::/29 IP: 2a14:1280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2f:21:18:c0:7f:8a:ce:34:c9:63:ba:be:31:b8:94:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 29 08:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:26:a3:bd:e0:23:6e:57:5a:1b:80:53:a2: 88:e5:33:48:db:32:da:a0:84:2d:0c:4a:3c:65:56: a3:09:16:fb:c2:99:50:d6:8d:bc:6d:48:4f:ab:99: dc:f5:9b:aa:47:84:41:4b:37:c6:41:06:e9:26:35: 44:87:5a:db:7a:a0:56:42:23:c4:60:f0:67:b4:33: 0f:1a:ae:7c:bd:f6:5c:64:04:d7:b1:3f:6a:47:c4: 30:e0:da:44:43:bf:0d:0b:9b:60:fd:aa:2b:71:4a: 35:86:a5:d9:8a:59:6e:b2:37:79:56:05:19:f3:80: 23:3b:a1:76:e7:c2:3e:58:39:81:08:0a:cf:1b:f4: a1:fe:d4:e4:57:7f:17:91:96:34:14:85:50:ff:f9: a3:82:18:36:34:aa:b4:78:eb:06:09:85:66:bc:4a: 85:63:10:31:7b:74:dc:b7:3c:cd:cc:b8:ba:37:87: ee:41:0e:df:2a:3a:e9:6c:56:38:13:01:31:e8:16: 3a:e5:ea:5e:de:5b:52:c9:66:9c:5a:20:6d:a8:f0: 4a:45:66:74:35:4e:8d:5c:86:93:9a:26:8e:24:ff: fc:10:15:87:21:10:6c:ef:9f:00:10:8f:82:b6:75: 64:3b:fa:57:db:ca:5e:3d:22:86:3c:4c:11:26:58: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.0.0/24 2.59.160.0/22 2.59.216.0/22 5.1.41.0/24 5.182.36.0/22 45.8.144.0/22 45.10.216.0/22 45.66.12.0/22 45.67.32.0/22 45.84.0.0/22 45.87.152.0/22 45.89.52.0/22 45.93.8.0/22 45.130.168.0/22 45.148.244.0/22 45.159.248.0/22 46.16.34.0/24 62.133.60.0/22 78.40.116.0/22 80.71.156.0/24 81.177.212.0/22 91.132.188.0/22 91.197.0.0/22 91.231.180.0/24 92.118.88.0/22 92.119.200.0/22 93.185.164.0/22 94.231.221.0-94.231.223.255 94.247.137.0/24 141.98.168.0/22 146.19.209.0/24 171.22.180.0/22 176.116.0.0/24 176.125.240.0/22 185.103.164.0/22 185.139.212.0/22 185.144.114.0/24 185.212.117.0/24 185.231.204.0/22 188.119.120.0/21 193.35.227.0/24 193.43.146.0/23 193.46.56.0/23 193.57.136.0/22 194.4.48.0/22 194.26.209.0/24 194.48.94.0/24 194.55.164.0/22 194.116.172.0/23 194.116.190.0/23 194.156.100.0/22 213.109.203.0/24 IPv6: 2a00:9680::/29 2a03:f500::/29 2a07:400::/29 2a07:640::/29 2a07:c80::/29 2a07:1840::/29 2a07:6c00::/29 2a09:280::/29 2a0b:44c0::/29 2a0b:5c00::/29 2a0b:6600::/29 2a0b:7840::/29 2a0b:9a00::/29 2a0c:7b00::/29 2a0c:7d00::/29 2a0e:5ec0::/29 2a0e:cfc0::/29 2a10:4280::/29 2a10:4380::/29 2a10:4b80::/29 2a10:4f80::/29 2a10:5080::/29 2a10:5180::/29 2a10:6d80::/29 2a10:6e80::/29 2a10:6f80::/29 2a10:7380::/29 2a10:7480::/29 2a10:7580::/29 2a10:7e80::/29 2a10:9940::/29 2a10:99c0::/29 2a10:9bc0::/29 2a10:9c40::/29 2a10:9cc0::/29 2a10:ad00::/29 2a10:af00::/29 2a10:b100::/29 2a11:1a40::/29 2a11:1c00::/29 2a11:2400::/29 2a11:2700::/29 2a11:3ec0::/29 2a11:7140::/29 2a11:8100::/29 2a11:f680::/29 2a11:f800::/29 2a12:4800::/29 2a14:1280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42007 44676 48430 51298 52107 Signature Algorithm: sha256WithRSAEncryption 6d:3c:d3:2b:59:95:5c:d3:4b:99:f5:f9:a0:80:08:c9:0e:cf: 65:67:df:81:8c:80:ba:5c:cc:4b:1c:cc:45:8d:56:a7:a1:84: 1c:87:c1:a2:be:d1:e4:1f:e3:12:9d:89:59:71:ce:82:85:92: 44:eb:cd:81:41:e2:73:64:66:b3:d9:60:a5:7c:07:10:b5:91: 64:0a:17:24:b6:1f:ed:0d:45:22:68:02:3c:e9:c9:2d:36:43: 12:03:9d:ee:42:e4:83:09:9f:13:82:2a:dd:03:c5:e8:19:1f: a1:19:d9:97:9e:a4:c6:d2:6e:79:70:b3:80:f3:ab:7b:6c:03: ad:78:25:db:e1:f3:b6:b8:92:9d:69:ae:89:a8:7f:55:6d:c7: e7:9a:ba:36:9a:ed:d1:1f:28:fa:6f:ba:33:43:93:82:2d:ad: 2f:21:4f:43:1c:8b:b4:04:53:e7:ee:f2:12:33:52:1f:70:6e: c6:e8:da:f8:d3:c4:f2:22:25:57:ff:60:7b:e7:7e:00:37:9b: c5:5f:b0:a6:96:b2:4f:d8:b6:f4:a9:e9:26:1d:5d:64:a4:0a: 8b:f5:b4:b2:34:22:ac:99:b3:21:16:80:03:1d:a9:31:c1:5a: d6:86:92:e8:14:94:78:17:32:a5:61:56:76:65:d4:8c:2c:0e: 4f:7a:b2:4c -----BEGIN CERTIFICATE----- MIIITzCCBzegAwIBAgISAZovIRjAf4rONMljur4xuJRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDI5MDg0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWEwMTBmODdhMDQ5YjZlMjFhYmVkOWI0MDk4M2IwNGYzZjFjN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w4mo73gI25XWhuAU6KI5TNI2zLa oIQtDEo8ZVajCRb7wplQ1o28bUhPq5nc9ZuqR4RBSzfGQQbpJjVEh1rbeqBWQiPE YPBntDMPGq58vfZcZATXsT9qR8Qw4NpEQ78NC5tg/aorcUo1hqXZillusjd5VgUZ 84AjO6F258I+WDmBCArPG/Sh/tTkV38XkZY0FIVQ//mjghg2NKq0eOsGCYVmvEqF YxAxe3TctzzNzLi6N4fuQQ7fKjrpbFY4EwEx6BY65epe3ltSyWacWiBtqPBKRWZ0 NU6NXIaTmiaOJP/8EBWHIRBs758AEI+CtnVkO/pX28pePSKGPEwRJli/UQIDAQAB o4IFWzCCBVcwHQYDVR0OBBYEFBGgEPh6BJtuIavtm0CYOwTz8cfoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2YyNWQ3 Yy02Njc3LTRmZGItODk4ZS1lZTc0NjU3NTRmZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZjI1ZDdj LTY2NzctNGZkYi04OThlLWVlNzQ2NTc1NGZmNi8xL0VhQVEtSG9FbTI0aHEtMmJR Smc3QlBQeHgtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICxAYIKwYB BQUHAQcBAf8EggKzMIICrzCCAUgEAgABMIIBQAMEAAI5AAMEAgI7oAMEAgI72AME AAUBKQMEAgW2JAMEAi0IkAMEAi0K2AMEAi1CDAMEAi1DIAMEAi1UAAMEAi1XmAME Ai1ZNAMEAi1dCAMEAi2CqAMEAi2U9AMEAi2f+AMEAC4QIgMEAj6FPAMEAk4odAME AFBHnAMEAlGx1AMEAluEvAMEAlvFAAMEAFvntAMEAlx2WAMEAlx3yAMEAl25pDAM AwQAXufdAwQFXufAAwQAXveJAwQCjWKoAwQAkhPRAwQCqxa0AwQAsHQAAwQCsH3w AwQCuWekAwQCuYvUAwQAuZByAwQAudR1AwQCuefMAwQDvHd4AwQAwSPjAwQBwSuS AwQBwS44AwQCwTmIAwQCwgQwAwQAwhrRAwQAwjBeAwQCwjekAwQBwnSsAwQBwnS+ AwQCwpxkAwQA1W3LMIIBXwQCAAIwggFXAwUDKgCWgAMFAyoD9QADBQMqBwQAAwUD KgcGQAMFAyoHDIADBQMqBxhAAwUDKgdsAAMFAyoJAoADBQMqC0TAAwUDKgtcAAMF AyoLZgADBQMqC3hAAwUDKguaAAMFAyoMewADBQMqDH0AAwUDKg5ewAMFAyoOz8AD BQMqEEKAAwUDKhBDgAMFAyoQS4ADBQMqEE+AAwUDKhBQgAMFAyoQUYADBQMqEG2A AwUDKhBugAMFAyoQb4ADBQMqEHOAAwUDKhB0gAMFAyoQdYADBQMqEH6AAwUDKhCZ QAMFAyoQmcADBQMqEJvAAwUDKhCcQAMFAyoQnMADBQMqEK0AAwUDKhCvAAMFAyoQ sQADBQMqERpAAwUDKhEcAAMFAyoRJAADBQMqEScAAwUDKhE+wAMFAyoRcUADBQMq EYEAAwUDKhH2gAMFAyoR+AADBQMqEkgAAwUDKhQSgDAuBggrBgEFBQcBCAEB/wQf MB2gGzAZAgMApBcCAwCuhAIDAL0uAgMAyGICAwDLizANBgkqhkiG9w0BAQsFAAOC AQEAbTzTK1mVXNNLmfX5oIAIyQ7PZWffgYyAulzMSxzMRY1Wp6GEHIfBor7R5B/j Ep2JWXHOgoWSROvNgUHic2Rms9lgpXwHELWRZAoXJLYf7Q1FImgCPOnJLTZDEgOd 7kLkgwmfE4Iq3QPF6BkfoRnZl56kxtJueXCzgPOre2wDrXgl2+HztriSnWmuiah/ VW3H55q6Nprt0R8o+m+6M0OTgi2tLyFPQxyLtART5+7yEjNSH3Buxuja+NPE8iIl V/9ge+d+ADebxV+wppayT9i29KnpJh1dZKQKi/W0sjQirJmzIRaAAx2pMcFa1oaS 6BSUeBcypWFWdmXUjCwOT3qyTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:22 2025 by rpki-client