This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer File: Ff04BOALngaoLO2fB7NP4_2AOU4.cer (raw, json) Hash identifier: RziZES2wQkrULdcwD7cDzs6tXAv7SSEyrAfyh+AtTz4= Subject key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B471DDD6D561F820DA7CB281A822 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61173 AS: 209227 IP: 5.182.44.0/22 IP: 45.159.112.0/22 IP: 62.3.42.0/24 IP: 85.208.252.0/22 IP: 91.247.174.0/24 IP: 185.4.28.0/22 IP: 185.50.37.0 -- 185.50.39.255 IP: 185.116.160.0/22 IP: 185.213.164.0/22 IP: 185.255.88.0/22 IP: 193.141.64.0/23 IP: 193.141.126.0/23 IP: 2a05:ab80::/29 IP: 2a09:9040::/29 IP: 2a09:90c0::/29 IP: 2a0b:8ac0::/29 IP: 2a0e:4400::/29 IP: 2a11:d4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b4:71:dd:d6:d5:61:f8:20:da:7c:b2:81:a8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:05:e7:33:e1:de:d9:38:34:27:07:74:ba: b8:ef:0e:f8:27:b4:ea:94:d5:b0:02:29:e9:30:b3: 38:ff:42:4f:36:02:7c:de:9f:6d:2d:9f:20:50:80: 4d:43:53:45:a5:37:d7:65:ec:11:41:f6:47:5b:04: 74:49:6c:9e:b0:76:93:f9:c4:de:60:3d:d0:fc:3e: 71:52:53:b0:4b:8a:e0:e7:dc:17:30:a2:cd:10:a1: dc:60:bb:46:3b:1d:80:ca:99:6e:c9:68:e8:48:99: 40:e8:50:a8:12:eb:c1:71:05:68:af:58:33:6d:b0: cb:e4:66:ea:9f:d4:a0:e6:7c:85:f1:b7:74:77:67: 3a:b5:49:80:89:5b:ae:92:b7:66:7d:79:00:7c:fa: 74:a7:e6:a5:97:3c:c5:d6:53:f5:4d:f6:ee:99:5c: 79:ce:c3:a7:9a:6c:a5:d1:23:ce:d8:2b:24:59:ca: c7:19:b7:60:e2:27:40:ad:d1:85:65:32:4c:88:ab: cb:86:07:0e:33:79:34:5c:19:f0:2f:06:0b:46:18: 8a:76:c5:bd:67:56:2e:e4:7a:0a:29:fc:9a:34:b1: f8:f0:0d:6a:d7:07:43:1e:05:f8:d2:3d:93:31:10: 78:3d:30:71:ef:f9:55:b0:a8:7b:f9:8d:3c:f2:03: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.44.0/22 45.159.112.0/22 62.3.42.0/24 85.208.252.0/22 91.247.174.0/24 185.4.28.0/22 185.50.37.0-185.50.39.255 185.116.160.0/22 185.213.164.0/22 185.255.88.0/22 193.141.64.0/23 193.141.126.0/23 IPv6: 2a05:ab80::/29 2a09:9040::/29 2a09:90c0::/29 2a0b:8ac0::/29 2a0e:4400::/29 2a11:d4c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61173 209227 Signature Algorithm: sha256WithRSAEncryption 42:77:30:77:fc:09:07:9f:5f:f0:5d:9d:19:3a:4b:7c:61:30: 2c:01:ac:24:8d:b5:b4:c7:48:b1:a9:a1:8b:e4:6e:78:ec:57: 2a:2b:60:a0:5c:c7:5f:0a:3b:ab:96:a3:de:f0:0a:68:5f:ad: c8:af:8c:7b:78:41:c1:ab:02:82:f5:45:62:24:29:4f:6d:37: a8:a1:09:b4:a5:51:8b:be:d8:6b:3a:43:e1:91:4f:2e:e5:6e: cd:fe:45:14:2c:bc:38:4a:cc:ee:e6:43:0b:9c:b8:58:68:5f: bf:cf:79:f5:d3:31:2c:9b:e2:46:92:35:4c:f0:9c:c6:c9:d3: e5:f6:9f:49:06:70:30:af:08:1e:61:0b:4a:16:64:78:12:72: 8e:23:10:f1:bb:de:07:08:e6:92:27:29:1c:04:39:fc:21:17: 12:4a:18:76:4b:21:3a:4f:46:9e:20:91:77:d3:67:4a:5b:a9: a4:fd:2d:11:6b:91:96:f3:91:e2:9e:be:a5:8a:19:54:43:0b: 24:bd:d6:58:7b:c2:68:00:8c:6f:c0:42:8d:a0:71:08:09:35: 4b:dc:5c:88:21:49:20:2b:ad:7d:eb:63:04:2d:50:c2:b9:24: a2:45:4e:e8:16:6a:7a:37:15:52:11:be:69:b9:0e:6e:23:84: ed:74:05:e6 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZt5ELRx3dbVYfgg2nyygagiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWZkMzgwNGUwMGI5ZTA2YTgyY2VkOWYwN2IzNGZlM2ZkODAzOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRMF5zPh3tk4NCcHdLq47w74J7Tq lNWwAinpMLM4/0JPNgJ83p9tLZ8gUIBNQ1NFpTfXZewRQfZHWwR0SWyesHaT+cTe YD3Q/D5xUlOwS4rg59wXMKLNEKHcYLtGOx2AypluyWjoSJlA6FCoEuvBcQVor1gz bbDL5Gbqn9Sg5nyF8bd0d2c6tUmAiVuukrdmfXkAfPp0p+allzzF1lP1TfbumVx5 zsOnmmyl0SPO2CskWcrHGbdg4idArdGFZTJMiKvLhgcOM3k0XBnwLwYLRhiKdsW9 Z1Yu5HoKKfyaNLH48A1q1wdDHgX40j2TMRB4PTBx7/lVsKh7+Y088gMCNwIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFBX9OATgC54GqCztnwezT+P9gDlOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2JlM2M0 MC0xMjEwLTQyNzItYTVlYS03ODM1ZDMyMDgzOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYmUzYzQw LTEyMTAtNDI3Mi1hNWVhLTc4MzVkMzIwODM5Ni8xL0ZmMDRCT0FMbmdhb0xPMmZC N05QNF8yQU9VNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGdBggrBgEF BQcBBwEB/wSBjTCBijBWBAIAATBQAwQCBbYsAwQCLZ9wAwQAPgMqAwQCVdD8AwQA W/euAwQCuQQcMAwDBAC5MiUDBAO5MiADBAK5dKADBAK51aQDBAK5/1gDBAHBjUAD BAHBjX4wMAQCAAIwKgMFAyoFq4ADBQMqCZBAAwUDKgmQwAMFAyoLisADBQMqDkQA AwUDKhHUwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA7vUCAwMxSzANBgkqhkiG 9w0BAQsFAAOCAQEAQncwd/wJB59f8F2dGTpLfGEwLAGsJI21tMdIsamhi+RueOxX KitgoFzHXwo7q5aj3vAKaF+tyK+Me3hBwasCgvVFYiQpT203qKEJtKVRi77YazpD 4ZFPLuVuzf5FFCy8OErM7uZDC5y4WGhfv8959dMxLJviRpI1TPCcxsnT5fafSQZw MK8IHmELShZkeBJyjiMQ8bveBwjmkicpHAQ5/CEXEkoYdkshOk9GniCRd9NnSlup pP0tEWuRlvOR4p6+pYoZVEMLJL3WWHvCaACMb8BCjaBxCAk1S9xciCFJICutfetj BC1QwrkkokVO6BZqejcVUhG+abkObiOE7XQF5g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:43 2026 by rpki-client