This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer File: H4EMw_0igzjZuWlyXZW7M8TmWkg.cer (raw, json) Hash identifier: wb565eB/8hnfpAwLvQJqOFTCceJIC3z8o19sRDg7yew= Subject key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB31B7829FEC7B93E6E5AAAA15DF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16324 AS: 29034 AS: 56429 AS: 58332 AS: 196808 IP: 37.221.128.0/19 IP: 45.148.228.0/22 IP: 45.151.236.0/22 IP: 45.152.72.0/22 IP: 45.154.128.0/22 IP: 45.158.244.0/22 IP: 46.174.120.0/21 IP: 77.87.152.0/21 IP: 86.62.44.0/22 IP: 91.195.68.0/23 IP: 91.200.4.0/22 IP: 91.211.132.0/22 IP: 91.214.208.0/22 IP: 91.231.40.0/22 IP: 176.120.96.0/20 IP: 185.46.220.0/22 IP: 185.95.20.0/22 IP: 185.96.188.0/22 IP: 185.101.216.0/22 IP: 185.145.180.0/22 IP: 185.172.184.0/22 IP: 185.191.172.0/22 IP: 185.197.76.0/22 IP: 185.200.112.0/22 IP: 185.204.68.0/22 IP: 185.219.76.0/22 IP: 185.228.76.0/22 IP: 188.191.32.0/20 IP: 193.41.184.0/22 IP: 193.138.132.0/22 IP: 195.69.244.0/22 IP: 2a00:1db0::/32 IP: 2a01:89a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b3:1b:78:29:fe:c7:b9:3e:6e:5a:aa:a1:5d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:ed:32:74:6d:e9:fc:81:fb:e9:b2:65:7c: 76:00:9d:85:12:db:bc:e0:13:67:1f:42:c0:a0:92: 21:c1:2d:e4:af:52:b2:82:13:95:92:c5:d8:f2:5d: 65:dd:33:88:36:2f:5f:1a:b5:5c:3b:5c:17:00:94: 49:73:72:53:ec:e7:7c:14:82:a5:12:6c:04:12:ee: 50:21:09:cc:3e:19:f3:a1:30:e0:f1:28:a1:74:bc: 43:7a:89:fe:08:8d:79:b0:89:40:9e:04:ac:74:2a: 97:9d:49:fa:9a:92:8d:55:1b:09:88:7c:34:25:e0: 4a:6a:1a:a3:44:1a:0f:26:1c:bf:63:6d:fd:d4:01: 9f:c1:ba:c0:2a:37:d5:3f:0b:91:7a:60:0e:c1:6c: 90:37:99:06:fd:0a:ba:59:fb:2f:65:65:15:0c:73: b2:59:f5:78:b2:27:31:31:ac:2b:2f:95:61:a7:de: 79:80:40:1a:2d:35:a5:ed:28:4c:df:79:6a:15:a9: fb:8e:a4:83:37:5f:97:8c:82:88:c8:a7:90:63:d7: 3f:15:00:e0:ba:34:f4:55:1f:da:77:97:bd:a3:dd: d8:42:c4:05:63:4d:3e:fa:02:3c:cc:30:ff:5e:0e: 6c:7a:d7:92:39:e2:5d:21:3c:7e:3c:2c:fd:c0:7e: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.128.0/19 45.148.228.0/22 45.151.236.0/22 45.152.72.0/22 45.154.128.0/22 45.158.244.0/22 46.174.120.0/21 77.87.152.0/21 86.62.44.0/22 91.195.68.0/23 91.200.4.0/22 91.211.132.0/22 91.214.208.0/22 91.231.40.0/22 176.120.96.0/20 185.46.220.0/22 185.95.20.0/22 185.96.188.0/22 185.101.216.0/22 185.145.180.0/22 185.172.184.0/22 185.191.172.0/22 185.197.76.0/22 185.200.112.0/22 185.204.68.0/22 185.219.76.0/22 185.228.76.0/22 188.191.32.0/20 193.41.184.0/22 193.138.132.0/22 195.69.244.0/22 IPv6: 2a00:1db0::/32 2a01:89a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16324 29034 56429 58332 196808 Signature Algorithm: sha256WithRSAEncryption 42:5b:af:dd:75:43:8d:55:72:19:d8:60:21:29:04:a4:26:a1: 47:6f:5a:8c:3b:23:1f:74:6b:ba:d6:d9:b7:15:f2:4b:87:e7: 59:1f:68:04:f5:f7:20:7e:18:82:b2:80:f7:5c:f2:80:9f:27: 64:94:80:e4:99:72:f4:fd:b0:a7:dd:0a:18:e2:c6:db:d7:ed: cb:5d:e1:06:de:d9:5a:ee:bf:a7:aa:a5:9f:30:5d:dc:27:86: e5:a6:73:19:f9:37:59:fd:3c:75:2c:dc:11:31:1a:e7:df:c2: 40:77:c4:40:64:3c:b7:dd:80:8b:fd:18:88:0d:47:ee:c7:9e: 98:6e:1a:b5:60:6e:5f:80:cc:ae:16:9b:78:ea:0b:0f:f3:67: ce:2b:e5:c1:28:af:ce:bd:e0:0d:94:d4:e4:b1:7b:e2:9f:96: a3:fd:da:e4:f2:4c:63:0e:a2:07:80:7c:8c:68:0a:49:ed:c6: 7b:65:6e:27:31:c7:0d:c6:9a:ee:12:c9:6e:a4:34:8a:4e:20: 08:c7:aa:a5:45:0b:9d:4f:b3:21:a1:77:07:0e:52:43:34:79: 53:27:25:da:9c:b5:15:66:25:aa:a5:de:b4:5d:28:24:e8:b6: 02:b4:ed:83:82:85:94:23:9b:39:a9:a4:30:2d:93:74:b0:f5: ce:5d:e5:73 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISAZt26rMbeCn+x7k+blqqoV33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjgxMGNjM2ZkMjI4MzM4ZDliOTY5NzI1ZDk1YmIzM2M0ZTY1YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1njtMnRt6fyB++myZXx2AJ2FEtu8 4BNnH0LAoJIhwS3kr1KyghOVksXY8l1l3TOINi9fGrVcO1wXAJRJc3JT7Od8FIKl EmwEEu5QIQnMPhnzoTDg8SihdLxDeon+CI15sIlAngSsdCqXnUn6mpKNVRsJiHw0 JeBKahqjRBoPJhy/Y2391AGfwbrAKjfVPwuRemAOwWyQN5kG/Qq6WfsvZWUVDHOy WfV4sicxMawrL5Vhp955gEAaLTWl7ShM33lqFan7jqSDN1+XjIKIyKeQY9c/FQDg ujT0VR/ad5e9o93YQsQFY00++gI8zDD/Xg5seteSOeJdITx+PCz9wH7QpQIDAQAB o4IDgTCCA30wHQYDVR0OBBYEFB+BDMP9IoM42blpcl2VuzPE5lpIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzBmMDky Ny1jMjliLTQ2OTgtODU5ZS1mOWMxODBiYTQ4MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMGYwOTI3 LWMyOWItNDY5OC04NTllLWY5YzE4MGJhNDgwMS8xL0g0RU13XzBpZ3pqWnVXbHlY Wlc3TThUbVdrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHtBggrBgEF BQcBBwEB/wSB3TCB2jCBwQQCAAEwgboDBAUl3YADBAItlOQDBAItl+wDBAItmEgD BAItmoADBAItnvQDBAMurngDBANNV5gDBAJWPiwDBAFbw0QDBAJbyAQDBAJb04QD BAJb1tADBAJb5ygDBASweGADBAK5LtwDBAK5XxQDBAK5YLwDBAK5ZdgDBAK5kbQD BAK5rLgDBAK5v6wDBAK5xUwDBAK5yHADBAK5zEQDBAK520wDBAK55EwDBAS8vyAD BALBKbgDBALBioQDBALDRfQwFAQCAAIwDgMFACoAHbADBQAqAYmgMCwGCCsGAQUF BwEIAQH/BB0wG6AZMBcCAj/EAgJxagIDANxtAgMA49wCAwMAyDANBgkqhkiG9w0B AQsFAAOCAQEAQluv3XVDjVVyGdhgISkEpCahR29ajDsjH3RrutbZtxXyS4fnWR9o BPX3IH4YgrKA91zygJ8nZJSA5Jly9P2wp90KGOLG29fty13hBt7ZWu6/p6qlnzBd 3CeG5aZzGfk3Wf08dSzcETEa59/CQHfEQGQ8t92Ai/0YiA1H7seemG4atWBuX4DM rhabeOoLD/NnzivlwSivzr3gDZTU5LF74p+Wo/3a5PJMYw6iB4B8jGgKSe3Ge2Vu JzHHDcaa7hLJbqQ0ik4gCMeqpUULnU+zIaF3Bw5SQzR5Uycl2py1FWYlqqXetF0o JOi2ArTtg4KFlCObOamkMC2TdLD1zl3lcw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:18 2026 by rpki-client