This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer File: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer (raw, json) Hash identifier: GPAoIxbwohfeuL9LE0wPoGMQuCkbhLhjKhIeqWw7oOQ= Subject key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B2FD39FEAB8048407A4A44A06FC6E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15685 IP: 77.78.76.0/22 IP: 77.78.94.0 -- 77.78.119.255 IP: 77.78.123.0 -- 77.78.127.255 IP: 81.0.192.0/22 IP: 81.0.199.0/24 IP: 81.0.206.0 -- 81.0.209.255 IP: 81.0.212.0 -- 81.0.214.255 IP: 81.0.217.0/24 IP: 81.0.225.0 -- 81.0.226.255 IP: 81.0.228.0/24 IP: 81.0.230.0 -- 81.0.243.255 IP: 81.0.250.0/24 IP: 81.0.254.0/23 IP: 82.208.4.0 -- 82.208.12.255 IP: 82.208.14.0/24 IP: 82.208.16.0 -- 82.208.18.255 IP: 82.208.26.0 -- 82.208.29.255 IP: 82.208.32.0/22 IP: 82.208.39.0 -- 82.208.41.255 IP: 82.208.44.0/24 IP: 82.208.46.0 -- 82.208.50.255 IP: 82.208.56.0/24 IP: 82.208.58.0/24 IP: 82.208.60.0/22 IP: 85.239.227.0/24 IP: 85.239.252.0/23 IP: 109.123.192.0/21 IP: 109.123.202.0/23 IP: 109.123.205.0 -- 109.123.211.255 IP: 109.123.214.0 -- 109.123.223.255 IP: 217.11.224.0/23 IP: 217.11.227.0 -- 217.11.230.255 IP: 217.11.232.0/23 IP: 217.11.235.0 -- 217.11.236.255 IP: 217.11.242.0/23 IP: 217.11.245.0 -- 217.11.249.255 IP: 217.11.251.0/24 IP: 217.11.254.0/24 IP: 2001:1528::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2f:d3:9f:ea:b8:04:84:07:a4:a4:4a:06:fc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:67:8e:2e:03:9c:6e:da:43:aa:a1:52:2d: f0:32:60:a9:ad:5d:86:f4:eb:00:02:2d:6d:6e:77: 13:a7:fc:e4:7c:16:ad:e1:97:6e:05:f3:79:6d:08: 91:07:d1:d9:39:fb:63:c7:e4:39:7a:5e:9c:bd:32: 69:a7:a7:76:82:ef:ea:2a:2d:e3:a2:fc:06:86:e6: 6c:95:2e:d3:f8:2c:4c:28:4f:7b:a4:49:d7:d6:2a: b0:71:0b:2b:6d:0b:48:0f:c7:03:4f:1c:e0:d3:e1: 89:1b:75:e9:50:b5:74:0f:84:fa:ed:5a:da:db:54: 64:25:b5:27:bd:0c:35:6a:ba:2c:94:04:79:b7:9a: cb:ff:51:b6:a1:d5:72:a9:59:71:eb:68:c7:c9:18: 3c:7d:4f:fd:25:2f:51:d4:ec:03:e5:43:42:33:c3: 35:37:ab:a2:31:e6:4a:f5:7d:ab:cb:a5:85:b6:f2: 47:92:9e:99:da:e7:58:b4:c8:24:a7:c8:0f:58:83: a5:82:ff:c0:f7:81:b0:74:02:de:d7:54:90:8b:36: 0d:3a:4a:93:54:63:38:df:4e:6a:0a:a9:fd:8f:de: 62:88:38:13:6d:0b:3d:b4:de:61:3c:b9:6d:3c:15: e5:1e:d6:31:39:0a:60:e9:c1:27:e5:95:36:b8:a1: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.76.0/22 77.78.94.0-77.78.119.255 77.78.123.0-77.78.127.255 81.0.192.0/22 81.0.199.0/24 81.0.206.0-81.0.209.255 81.0.212.0-81.0.214.255 81.0.217.0/24 81.0.225.0-81.0.226.255 81.0.228.0/24 81.0.230.0-81.0.243.255 81.0.250.0/24 81.0.254.0/23 82.208.4.0-82.208.12.255 82.208.14.0/24 82.208.16.0-82.208.18.255 82.208.26.0-82.208.29.255 82.208.32.0/22 82.208.39.0-82.208.41.255 82.208.44.0/24 82.208.46.0-82.208.50.255 82.208.56.0/24 82.208.58.0/24 82.208.60.0/22 85.239.227.0/24 85.239.252.0/23 109.123.192.0/21 109.123.202.0/23 109.123.205.0-109.123.211.255 109.123.214.0-109.123.223.255 217.11.224.0/23 217.11.227.0-217.11.230.255 217.11.232.0/23 217.11.235.0-217.11.236.255 217.11.242.0/23 217.11.245.0-217.11.249.255 217.11.251.0/24 217.11.254.0/24 IPv6: 2001:1528::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15685 Signature Algorithm: sha256WithRSAEncryption 3c:30:d6:5e:f0:b2:3f:b8:80:a8:a2:92:9f:7a:09:80:e0:51: 8a:08:09:f3:01:4b:ce:a1:c7:b3:b5:e9:52:69:82:a9:0f:38: 3b:87:34:73:20:0e:21:77:70:9c:65:25:84:65:5e:b7:1d:35: bf:d1:0e:f0:1f:90:73:46:a8:b3:58:6f:8f:d7:f4:6d:aa:8b: 23:cb:58:a6:77:2c:1f:a4:c3:16:3b:30:69:34:bb:aa:48:5f: 3c:d9:b9:e9:d2:9e:00:83:91:46:2c:d8:b4:70:b1:74:d1:31: bb:f2:59:3c:15:40:70:12:c6:ee:9b:ba:06:6d:8c:f9:e8:11: e5:b1:f5:10:71:24:13:4e:ed:49:4c:bd:4f:42:2b:ef:9d:52: 9b:65:c3:56:c3:ff:f2:b8:a2:c5:9e:04:b7:43:bb:8a:3e:46: 67:fb:ae:19:05:da:85:c1:51:05:04:e0:d7:2d:23:16:87:4c: 21:e0:a6:ae:dd:d6:73:00:ce:dc:7b:8c:3f:0a:cb:a7:de:d7: 68:c1:6e:f5:48:da:84:86:67:42:6e:8b:8d:f5:59:80:6a:00: 5a:be:e6:f5:a6:15:3e:c2:eb:68:b0:bb:81:de:de:1f:58:ca: c2:eb:c1:aa:f7:ff:bc:4a:bf:20:f8:c6:62:78:38:a7:1e:be: 64:cd:32:ec -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgISAZt9Wy/Tn+q4BIQHpKRKBvxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQ4NDdmODY2N2Q1MmZhMmNmOWNmOWFmY2M0M2EwNzkxNTU3NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdFnji4DnG7aQ6qhUi3wMmCprV2G 9OsAAi1tbncTp/zkfBat4ZduBfN5bQiRB9HZOftjx+Q5el6cvTJpp6d2gu/qKi3j ovwGhuZslS7T+CxMKE97pEnX1iqwcQsrbQtID8cDTxzg0+GJG3XpULV0D4T67Vra 21RkJbUnvQw1aroslAR5t5rL/1G2odVyqVlx62jHyRg8fU/9JS9R1OwD5UNCM8M1 N6uiMeZK9X2ry6WFtvJHkp6Z2udYtMgkp8gPWIOlgv/A94GwdALe11SQizYNOkqT VGM4305qCqn9j95iiDgTbQs9tN5hPLltPBXlHtYxOQpg6cEn5ZU2uKHLqQIDAQAB o4IEFjCCBBIwHQYDVR0OBBYEFBdIR/hmfVL6LPnPmvzEOgeRVXXKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzcyY2M0 YS0yZDljLTQ4MDgtODIzZS0xNDU0ZmZlNjE4MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNzJjYzRh LTJkOWMtNDgwOC04MjNlLTE0NTRmZmU2MTgyYy8xL0YwaEgtR1o5VXZvcy1jLWFf TVE2QjVGVmRjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBlAYIKwYB BQUHAQcBAf8EggGDMIIBfzCCAWwEAgABMIIBZAMEAk1OTDAMAwQBTU5eAwQDTU5w MAwDBABNTnsDBAdNTgADBAJRAMADBABRAMcwDAMEAVEAzgMEAVEA0DAMAwQCUQDU AwQAUQDWAwQAUQDZMAwDBABRAOEDBABRAOIDBABRAOQwDAMEAVEA5gMEAlEA8AME AFEA+gMEAVEA/jAMAwQCUtAEAwQAUtAMAwQAUtAOMAwDBARS0BADBABS0BIwDAME AVLQGgMEAVLQHAMEAlLQIDAMAwQAUtAnAwQBUtAoAwQAUtAsMAwDBAFS0C4DBABS 0DIDBABS0DgDBABS0DoDBAJS0DwDBABV7+MDBAFV7/wDBANte8ADBAFte8owDAME AG17zQMEAm170DAMAwQBbXvWAwQFbXvAAwQB2QvgMAwDBADZC+MDBADZC+YDBAHZ C+gwDAMEANkL6wMEANkL7AMEAdkL8jAMAwQA2Qv1AwQB2Qv4AwQA2Qv7AwQA2Qv+ MA0EAgACMAcDBQAgARUoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj1FMA0GCSqG SIb3DQEBCwUAA4IBAQA8MNZe8LI/uICoopKfegmA4FGKCAnzAUvOoceztelSaYKp Dzg7hzRzIA4hd3CcZSWEZV63HTW/0Q7wH5BzRqizWG+P1/Rtqosjy1imdywfpMMW OzBpNLuqSF882bnp0p4Ag5FGLNi0cLF00TG78lk8FUBwEsbum7oGbYz56BHlsfUQ cSQTTu1JTL1PQivvnVKbZcNWw//yuKLFngS3Q7uKPkZn+64ZBdqFwVEFBODXLSMW h0wh4Kau3dZzAM7ce4w/Csun3tdowW71SNqEhmdCbouN9VmAagBavub1phU+wuto sLuB3t4fWMrC68Gq9/+8Sr8g+MZieDinHr5kzTLs -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:43 2026 by rpki-client