This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer File: HdxT0d56LvfrK5DICRVUQUAEJIg.cer (raw, json) Hash identifier: 0+0qjb1msUjnWeoNGOW1u0dqbnvbaG5I8lxCSC2rDQc= Subject key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6E214D2EC5D10FBDC13D83EC072D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49063 AS: 205954 IP: 5.180.101.0/24 IP: 31.40.200.0/24 IP: 45.93.81.0/24 IP: 45.144.1.0/24 IP: 45.148.167.0/24 IP: 46.149.175.0/24 IP: 77.83.0.0/24 IP: 84.23.56.0/21 IP: 85.193.72.0/22 IP: 87.251.90.0/23 IP: 91.107.64.0/21 IP: 92.242.32.0/21 IP: 92.242.41.0 -- 92.242.43.255 IP: 92.242.46.0/23 IP: 94.126.203.0/24 IP: 95.131.24.0/21 IP: 95.181.192.0 -- 95.181.197.255 IP: 95.181.199.0 -- 95.181.207.255 IP: 130.193.64.0/21 IP: 176.53.132.0/24 IP: 176.107.160.0/21 IP: 178.20.232.0/21 IP: 178.57.72.0/21 IP: 185.3.140.0/22 IP: 185.71.52.0/22 IP: 185.74.104.0/22 IP: 185.98.80.0 -- 185.98.85.255 IP: 185.99.8.0/21 IP: 185.99.140.0/23 IP: 185.127.148.0/22 IP: 185.148.80.0/22 IP: 185.195.169.0/24 IP: 185.232.104.0/22 IP: 185.242.120.0/22 IP: 185.247.186.0/24 IP: 193.23.144.0/22 IP: 193.58.179.0/24 IP: 193.148.62.0/24 IP: 193.243.174.0/23 IP: 195.14.100.0/23 IP: 2a01:ba80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e2:14:d2:ec:5d:10:fb:dc:13:d8:3e:c0:72:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:54:4a:f9:68:49:03:68:a0:42:e0:14:82: a5:63:0e:a5:95:6c:58:05:ef:41:a0:1f:d3:03:f7: 92:62:54:47:35:36:cb:ae:89:a6:e5:51:fa:ff:2f: d3:33:60:f7:70:22:72:ba:e8:99:86:00:e1:14:ac: 74:a3:e2:1a:a1:36:67:16:c0:2c:09:e1:22:42:45: fb:bd:09:ca:be:d1:16:b6:04:26:67:d0:30:8b:39: 8b:1b:15:36:98:73:ad:a7:55:c0:2d:22:9d:36:44: 8c:51:ca:00:58:a4:b0:ac:f0:13:ed:a8:c8:3a:de: 5d:4a:01:fe:d1:6a:cd:e0:77:6a:6a:a6:7c:28:4f: aa:10:18:46:6d:fc:3d:23:95:d8:58:26:51:d5:f5: 1e:c5:67:4f:89:9a:2a:9e:98:eb:94:aa:4f:6e:bb: 99:32:74:50:88:cd:f3:fb:fd:0a:2d:cd:bb:6f:88: 37:6a:50:d6:36:64:84:93:74:b9:cd:95:96:e7:34: 43:03:7d:e5:2e:fd:ed:8a:5d:25:6e:c0:3f:26:fb: c7:de:7e:58:b3:69:de:a7:53:53:4c:6f:c4:81:d3: ed:e7:88:e6:1c:0b:39:9a:58:7f:53:ba:b9:76:e1: 19:ad:11:4d:c1:58:43:47:ba:a8:d0:68:84:f5:0b: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.101.0/24 31.40.200.0/24 45.93.81.0/24 45.144.1.0/24 45.148.167.0/24 46.149.175.0/24 77.83.0.0/24 84.23.56.0/21 85.193.72.0/22 87.251.90.0/23 91.107.64.0/21 92.242.32.0/21 92.242.41.0-92.242.43.255 92.242.46.0/23 94.126.203.0/24 95.131.24.0/21 95.181.192.0-95.181.197.255 95.181.199.0-95.181.207.255 130.193.64.0/21 176.53.132.0/24 176.107.160.0/21 178.20.232.0/21 178.57.72.0/21 185.3.140.0/22 185.71.52.0/22 185.74.104.0/22 185.98.80.0-185.98.85.255 185.99.8.0/21 185.99.140.0/23 185.127.148.0/22 185.148.80.0/22 185.195.169.0/24 185.232.104.0/22 185.242.120.0/22 185.247.186.0/24 193.23.144.0/22 193.58.179.0/24 193.148.62.0/24 193.243.174.0/23 195.14.100.0/23 IPv6: 2a01:ba80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49063 205954 Signature Algorithm: sha256WithRSAEncryption 7b:cb:a2:21:86:56:06:27:bd:51:d2:82:34:b2:a2:97:4d:07: 5c:a3:98:17:cf:9f:a4:47:a6:bf:83:03:54:c5:b3:5b:dc:fd: 9c:47:7a:9d:4e:7a:82:39:1c:c3:ea:32:cb:98:9b:89:48:4b: 8b:1f:ca:04:5e:4d:35:ab:d9:c1:60:7e:23:6b:05:45:50:e8: 9b:65:d7:4d:48:db:ed:10:59:5c:bf:74:8f:4a:ea:1d:5c:3e: 60:ac:bd:36:56:54:27:ce:07:ae:e1:08:9c:5d:df:ac:2c:e5: 8c:1b:d1:d3:23:b2:b4:75:01:3e:da:d3:f6:20:88:68:d4:6d: f8:91:03:cd:8d:78:ef:89:a2:45:8a:2b:e9:af:48:43:7d:e5: 4d:54:87:43:4d:c2:8c:8c:c9:c1:01:17:f3:56:ee:4e:49:71: 57:b6:90:1b:8a:6a:bb:c6:44:69:ff:c9:b9:86:33:fb:51:c4: b7:b6:7d:e8:ea:64:af:ef:c2:3d:e8:d3:20:6c:e0:17:7c:cf: 15:90:c0:db:db:57:dd:03:64:34:3b:7a:bb:4e:50:e5:10:65: 5a:f1:b6:6e:a0:6d:22:3b:b2:69:30:7e:ad:1c:83:07:16:39: 43:be:38:cf:58:12:12:b0:ac:fb:97:cd:c9:18:55:75:05:fc: 50:51:82:81 -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgISAZt+puIU0uxdEPvcE9g+wHLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRjNTNkMWRlN2EyZWY3ZWIyYjkwYzgwOTE1NTQ0MTQwMDQyNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W5USvloSQNooELgFIKlYw6llWxY Be9BoB/TA/eSYlRHNTbLromm5VH6/y/TM2D3cCJyuuiZhgDhFKx0o+IaoTZnFsAs CeEiQkX7vQnKvtEWtgQmZ9AwizmLGxU2mHOtp1XALSKdNkSMUcoAWKSwrPAT7ajI Ot5dSgH+0WrN4HdqaqZ8KE+qEBhGbfw9I5XYWCZR1fUexWdPiZoqnpjrlKpPbruZ MnRQiM3z+/0KLc27b4g3alDWNmSEk3S5zZWW5zRDA33lLv3til0lbsA/JvvH3n5Y s2nep1NTTG/EgdPt54jmHAs5mlh/U7q5duEZrRFNwVhDR7qo0GiE9QslGQIDAQAB o4IDyDCCA8QwHQYDVR0OBBYEFB3cU9Heei736yuQyAkVVEFABCSIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzU1NzQx NC1kOTkzLTRjYmYtODE4MS00ODY3MWZiN2QzODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvNTU3NDE0 LWQ5OTMtNGNiZi04MTgxLTQ4NjcxZmI3ZDM4MC8xL0hkeFQwZDU2THZmcks1RElD UlZVUVVBRUpJZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBQAYIKwYB BQUHAQcBAf8EggEvMIIBKzCCARgEAgABMIIBEAMEAAW0ZQMEAB8oyAMEAC1dUQME AC2QAQMEAC2UpwMEAC6VrwMEAE1TAAMEA1QXOAMEAlXBSAMEAVf7WgMEA1trQAME A1zyIDAMAwQAXPIpAwQCXPIoAwQBXPIuAwQAXn7LAwQDX4MYMAwDBAZftcADBAFf tcQwDAMEAF+1xwMEBF+1wAMEA4LBQAMEALA1hAMEA7BroAMEA7IU6AMEA7I5SAME ArkDjAMEArlHNAMEArlKaDAMAwQEuWJQAwQBuWJUAwQDuWMIAwQBuWOMAwQCuX+U AwQCuZRQAwQAucOpAwQCuehoAwQCufJ4AwQAufe6AwQCwReQAwQAwTqzAwQAwZQ+ AwQBwfOuAwQBww5kMA0EAgACMAcDBQAqAbqAMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwC/pwIDAySCMA0GCSqGSIb3DQEBCwUAA4IBAQB7y6IhhlYGJ71R0oI0sqKX TQdco5gXz5+kR6a/gwNUxbNb3P2cR3qdTnqCORzD6jLLmJuJSEuLH8oEXk01q9nB YH4jawVFUOibZddNSNvtEFlcv3SPSuodXD5grL02VlQnzgeu4QicXd+sLOWMG9HT I7K0dQE+2tP2IIho1G34kQPNjXjviaJFiivpr0hDfeVNVIdDTcKMjMnBARfzVu5O SXFXtpAbimq7xkRp/8m5hjP7UcS3tn3o6mSv78I96NMgbOAXfM8VkMDb21fdA2Q0 O3q7TlDlEGVa8bZuoG0iO7JpMH6tHIMHFjlDvjjPWBISsKz7l83JGFV1BfxQUYKB -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:09 2026 by rpki-client