This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer (raw, json) Hash identifier: 4sVmqiY4yfUddYBb7BirNUWP7HOJWuujvngCu/DEOPA= Subject key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154B3896B001D97AE470DF607B93D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1729 AS: 3301 AS: 3309 AS: 8516 AS: 41340 IP: 2.248.0.0 -- 2.255.191.255 IP: 46.227.72.0/21 IP: 62.20.0.0/16 IP: 77.110.0.0/18 IP: 78.40.40.0/21 IP: 78.64.0.0/12 IP: 81.21.208.0/20 IP: 81.27.0.0/20 IP: 81.224.0.0/12 IP: 82.145.128.0/19 IP: 82.214.0.0/18 IP: 85.11.0.0/18 IP: 90.224.0.0/12 IP: 92.254.128.0/17 IP: 93.94.168.0/21 IP: 95.109.0.0/17 IP: 95.192.0.0/12 IP: 131.115.0.0 -- 131.116.255.255 IP: 185.53.212.0/22 IP: 185.103.208.0/22 IP: 188.126.224.0/19 IP: 192.16.152.0 -- 192.16.154.255 IP: 192.150.58.0 -- 192.150.69.255 IP: 192.150.78.0 -- 192.150.82.255 IP: 192.150.84.0/24 IP: 193.44.0.0/15 IP: 194.16.0.0 -- 194.18.255.255 IP: 194.22.0.0/15 IP: 194.218.0.0/16 IP: 194.236.0.0/15 IP: 195.67.0.0/16 IP: 195.198.0.0/16 IP: 195.252.32.0/19 IP: 212.28.192.0/19 IP: 212.181.0.0/16 IP: 213.64.0.0/14 IP: 217.208.0.0/13 IP: 2a00:f98::/32 IP: 2a02:190::/32 IP: 2a04:b400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4b:38:96:b0:01:d9:7a:e4:70:df:60:7b:93:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:e6:d7:cb:20:09:30:03:1b:8f:1b:f1:c0: b9:4f:7b:68:42:3f:d3:ed:00:5e:a0:fe:5e:2d:a5: 6a:18:4d:9c:b9:d5:77:46:01:df:1c:51:4f:f9:e8: ce:51:ee:e1:55:6b:67:92:62:10:d1:92:54:06:08: c7:5d:e8:a7:e5:34:de:0a:29:ae:a1:2e:59:f4:7f: a1:70:a1:90:7b:dc:79:05:c8:96:80:25:49:66:36: 36:a9:29:16:4c:f1:04:dd:ca:2d:24:a2:41:32:98: bb:d8:a4:4e:7f:7c:0b:b6:2b:ab:fe:88:e5:cf:84: 94:6d:96:22:64:d2:ca:7d:5f:de:5b:b6:e7:fd:15: b1:a9:91:9e:97:ab:d5:64:b7:17:2c:a6:ff:0b:63: 6b:52:7d:16:0f:e1:d7:dd:a4:3f:88:08:b0:08:50: 51:17:70:03:50:8f:44:40:87:90:3a:15:08:e2:38: 7a:bb:1e:e7:0c:41:0d:e8:bf:ed:2c:6d:d5:58:db: d4:65:6d:64:ed:cb:c8:08:73:3b:7b:09:6b:63:9d: 58:a5:9a:56:5e:61:31:1a:24:36:b3:92:7f:14:6d: cf:e1:7a:43:60:65:51:df:91:dd:1e:4f:49:84:ad: 42:89:4a:7a:e7:d4:80:84:8b:c0:d3:64:04:86:99: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.248.0.0-2.255.191.255 46.227.72.0/21 62.20.0.0/16 77.110.0.0/18 78.40.40.0/21 78.64.0.0/12 81.21.208.0/20 81.27.0.0/20 81.224.0.0/12 82.145.128.0/19 82.214.0.0/18 85.11.0.0/18 90.224.0.0/12 92.254.128.0/17 93.94.168.0/21 95.109.0.0/17 95.192.0.0/12 131.115.0.0-131.116.255.255 185.53.212.0/22 185.103.208.0/22 188.126.224.0/19 192.16.152.0-192.16.154.255 192.150.58.0-192.150.69.255 192.150.78.0-192.150.82.255 192.150.84.0/24 193.44.0.0/15 194.16.0.0-194.18.255.255 194.22.0.0/15 194.218.0.0/16 194.236.0.0/15 195.67.0.0/16 195.198.0.0/16 195.252.32.0/19 212.28.192.0/19 212.181.0.0/16 213.64.0.0/14 217.208.0.0/13 IPv6: 2a00:f98::/32 2a02:190::/32 2a04:b400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1729 3301 3309 8516 41340 Signature Algorithm: sha256WithRSAEncryption aa:90:b3:11:54:c7:ac:cb:71:3f:bd:5b:2f:2c:21:95:b6:de: 3c:20:5b:0b:82:b7:6d:14:00:0b:7c:38:63:36:39:9d:d9:c6: 0b:97:c4:22:a1:36:6f:37:b4:60:41:da:60:58:35:6f:d9:87: 08:7e:05:bf:a9:70:85:73:3a:31:f3:f4:63:af:6e:e5:d2:aa: 09:3a:47:7a:2a:3f:89:7e:1c:17:37:5c:5d:c5:e8:b0:c8:1c: f4:75:94:aa:e5:f1:f4:37:c5:04:f8:90:6b:54:06:96:20:99: 87:5f:41:95:5e:54:11:a0:90:49:2a:11:94:ca:e6:56:ce:7d: e9:bc:72:48:84:fc:8d:69:ac:3a:f3:05:7d:4f:7c:32:bb:58: b0:fb:64:a5:2b:aa:da:95:1c:25:a3:89:52:84:9d:2a:61:6f: e5:10:35:b4:de:8b:b2:db:64:10:a3:3d:47:8b:d3:ff:b4:f3: 55:1c:14:2f:92:ec:08:26:0e:8e:05:d5:80:7e:fc:88:4d:a1: 80:c7:bb:f9:4a:e7:55:03:38:7d:27:dd:02:7c:48:de:34:ca: 72:d4:8b:00:6f:e7:2e:76:34:74:3f:55:d5:39:b3:82:64:25: f5:66:ce:be:c3:34:33:9f:79:99:64:c8:50:70:c1:51:b6:c8: 9f:af:80:7a -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgISAZt/FUs4lrAB2XrkcN9ge5PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjY4MTM4ZDRlYzJlYTUxY2FjZWYwOWZmMTA1OGEzNzBhNWJlMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BXm18sgCTADG48b8cC5T3toQj/T 7QBeoP5eLaVqGE2cudV3RgHfHFFP+ejOUe7hVWtnkmIQ0ZJUBgjHXein5TTeCimu oS5Z9H+hcKGQe9x5BciWgCVJZjY2qSkWTPEE3cotJKJBMpi72KROf3wLtiur/ojl z4SUbZYiZNLKfV/eW7bn/RWxqZGel6vVZLcXLKb/C2NrUn0WD+HX3aQ/iAiwCFBR F3ADUI9EQIeQOhUI4jh6ux7nDEEN6L/tLG3VWNvUZW1k7cvICHM7ewlrY51YpZpW XmExGiQ2s5J/FG3P4XpDYGVR35HdHk9JhK1CiUp659SAhIvA02QEhplfOQIDAQAB o4IDyzCCA8cwHQYDVR0OBBYEFB9oE41OwupRys7wn/EFijcKW+GQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2I5YWRm NC1mOTEwLTQzNTUtYmZjOC02MDg1NjQ4MzlmZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvYjlhZGY0 LWY5MTAtNDM1NS1iZmM4LTYwODU2NDgzOWZkMC8xL0gyZ1RqVTdDNmxIS3p2Q2Y4 UVdLTndwYjRaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBOAYIKwYB BQUHAQcBAf8EggEnMIIBIzCCAQIEAgABMIH7MAsDAwMC+AMEBgL/gAMEAy7jSAMD AD4UAwQGTW4AAwQDTigoAwMETkADBARRFdADBARRGwADAwRR4AMEBVKRgAMEBlLW AAMEBlULAAMDBFrgAwQHXP6AAwQDXV6oAwQHX20AAwMEX8AwCgMDAINzAwMAg3QD BAK5NdQDBAK5Z9ADBAW8fuAwDAMEA8AQmAMEAMAQmjAMAwQBwJY6AwQBwJZEMAwD BAHAlk4DBADAllIDBADAllQDAwHBLDAKAwMEwhADAwDCEgMDAcIWAwMAwtoDAwHC 7AMDAMNDAwMAw8YDBAXD/CADBAXUHMADAwDUtQMDAtVAAwMD2dAwGwQCAAIwFQMF ACoAD5gDBQAqAgGQAwUDKgS0ADAqBggrBgEFBQcBCAEB/wQbMBmgFzAVAgIGwQIC DOUCAgztAgIhRAIDAKF8MA0GCSqGSIb3DQEBCwUAA4IBAQCqkLMRVMesy3E/vVsv LCGVtt48IFsLgrdtFAALfDhjNjmd2cYLl8QioTZvN7RgQdpgWDVv2YcIfgW/qXCF czox8/Rjr27l0qoJOkd6Kj+JfhwXN1xdxeiwyBz0dZSq5fH0N8UE+JBrVAaWIJmH X0GVXlQRoJBJKhGUyuZWzn3pvHJIhPyNaaw68wV9T3wyu1iw+2SlK6ralRwlo4lS hJ0qYW/lEDW03ouy22QQoz1Hi9P/tPNVHBQvkuwIJg6OBdWAfvyITaGAx7v5SudV Azh9J90CfEjeNMpy1IsAb+cudjR0P1XVObOCZCX1Zs6+wzQzn3mZZMhQcMFRtsif r4B6 -----END CERTIFICATE-----Generated at Sun Jan 25 08:02:50 2026 by rpki-client