This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer (raw, json) Hash identifier: omygwHpPaJ0YKnI7ayVwpfEoHyUnWP5SX91PsOHDddo= Subject key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F257EC0A0068572B77CD8111DCE29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8434 AS: 8642 AS: 8984 AS: 25169 AS: 33885 IP: 31.211.192.0/18 IP: 37.46.160.0/19 IP: 37.247.0.0/19 IP: 46.194.0.0/15 IP: 62.13.0.0/17 IP: 62.65.64.0/18 IP: 62.119.0.0/16 IP: 62.127.0.0/16 IP: 78.82.0.0/16 IP: 79.102.0.0/16 IP: 80.68.96.0/20 IP: 81.26.224.0/19 IP: 82.182.0.0/15 IP: 83.226.0.0/15 IP: 84.55.64.0/18 IP: 84.216.0.0/14 IP: 84.246.88.0/21 IP: 85.224.0.0/13 IP: 89.253.64.0/18 IP: 92.32.0.0/14 IP: 92.244.0.0/19 IP: 94.137.96.0/19 IP: 94.234.0.0/16 IP: 109.104.0.0/19 IP: 178.28.0.0/14 IP: 178.78.192.0/18 IP: 185.86.100.0/22 IP: 195.43.192.0/18 IP: 195.54.96.0/19 IP: 195.58.96.0/19 IP: 195.66.32.0/19 IP: 212.73.0.0/19 IP: 212.73.160.0/19 IP: 212.75.64.0/19 IP: 212.105.0.0/17 IP: 212.107.128.0/19 IP: 213.112.0.0/14 IP: 213.150.128.0/19 IP: 213.163.128.0/19 IP: 213.204.128.0/18 IP: 213.214.192.0/18 IP: 213.238.192.0/18 IP: 213.242.128.0/18 IP: 217.174.64.0/19 IP: 2a01:3b8::/32 IP: 2a02:1400::/26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:25:7e:c0:a0:06:85:72:b7:7c:d8:11:1d:ce:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2347aaab2206c08128f543730064a145a3effa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:15:45:00:ec:14:4a:9d:3c:f6:28:27:7f: 06:73:53:70:13:d4:ba:22:74:2c:39:9c:75:47:3e: 34:b8:23:73:52:96:4f:b7:84:a8:a0:63:7d:0f:b7: bc:b0:9b:89:1f:a1:d0:12:68:56:fb:56:2f:59:27: da:2c:62:fa:a0:e4:bf:c3:93:31:e4:e4:86:5b:35: 29:df:e7:af:13:95:6d:78:ed:c3:93:a9:71:30:d8: ff:ef:00:a4:cf:be:a9:1a:ea:94:d8:d5:1a:a5:19: 32:9f:de:f1:d8:d6:64:64:4a:d5:ff:66:44:f6:ed: e6:44:ce:16:4f:de:e2:d1:01:26:0e:11:26:8c:ba: 4b:2a:dc:19:0e:7d:25:92:8c:f5:18:53:9d:6f:7b: e1:74:d2:01:c0:91:35:23:c0:a6:1b:95:9f:26:55: dd:72:9d:66:cb:2d:a0:8e:01:f7:c9:ec:7b:bc:76: 75:05:45:59:fd:69:d7:32:18:b1:d6:d0:2e:76:6a: c8:81:bd:13:2c:73:0c:cd:58:a5:a7:93:8a:08:72: 44:8e:15:a8:c5:5f:a2:85:65:24:90:f3:d3:d8:c9: 5c:4e:fd:b0:fa:11:49:3c:5d:a8:9c:be:27:c9:15: 8e:c9:a2:dd:e5:f0:7f:7a:0f:3b:d4:80:76:e0:ba: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.211.192.0/18 37.46.160.0/19 37.247.0.0/19 46.194.0.0/15 62.13.0.0/17 62.65.64.0/18 62.119.0.0/16 62.127.0.0/16 78.82.0.0/16 79.102.0.0/16 80.68.96.0/20 81.26.224.0/19 82.182.0.0/15 83.226.0.0/15 84.55.64.0/18 84.216.0.0/14 84.246.88.0/21 85.224.0.0/13 89.253.64.0/18 92.32.0.0/14 92.244.0.0/19 94.137.96.0/19 94.234.0.0/16 109.104.0.0/19 178.28.0.0/14 178.78.192.0/18 185.86.100.0/22 195.43.192.0/18 195.54.96.0/19 195.58.96.0/19 195.66.32.0/19 212.73.0.0/19 212.73.160.0/19 212.75.64.0/19 212.105.0.0/17 212.107.128.0/19 213.112.0.0/14 213.150.128.0/19 213.163.128.0/19 213.204.128.0/18 213.214.192.0/18 213.238.192.0/18 213.242.128.0/18 217.174.64.0/19 IPv6: 2a01:3b8::/32 2a02:1400::/26 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8434 8642 8984 25169 33885 Signature Algorithm: sha256WithRSAEncryption 06:02:2e:f4:a0:1a:59:66:04:73:d4:c3:73:ef:d6:be:da:f9: 03:6f:e3:47:09:4b:1c:a6:74:30:ad:9e:30:ca:ad:94:5f:de: 9f:82:52:2c:2f:89:6c:4a:2e:60:3e:4d:c1:33:46:59:96:eb: 16:63:fb:92:9d:9e:c2:ab:4c:f1:5b:26:a4:b9:4b:96:0a:ed: 3d:9a:a8:17:6c:8c:eb:0e:2e:b2:99:b9:93:18:4a:29:e8:d9: 51:7e:53:16:15:96:58:17:7b:1a:71:b0:6d:d3:21:27:63:42: c8:0f:c2:fd:b2:6e:7a:59:c2:c7:44:94:ed:99:b9:e8:2a:bc: f0:d6:6e:fb:8c:f1:ab:69:89:6b:ce:12:f3:11:ab:2a:97:ba: ef:d0:7e:4d:78:13:b7:b7:60:ad:dc:0d:6d:0f:4d:ef:70:c9: a4:5c:ba:db:34:1c:89:56:78:ff:45:86:51:c5:58:89:19:50: 65:8a:20:3e:6d:b1:46:5b:10:f7:25:ac:28:d2:34:bc:67:42: ee:2d:ff:9e:26:6e:a8:bc:6a:72:22:7f:6f:54:84:d8:13:88: 0f:11:28:5d:fc:93:be:c7:2c:53:08:b7:6e:4e:80:b1:65:e5: b9:a2:36:17:e3:5f:a6:48:c4:e1:24:a9:f7:79:9c:9f:eb:c4: b5:31:78:94 -----BEGIN CERTIFICATE----- MIIGuDCCBaCgAwIBAgISAZt8fyV+wKAGhXK3fNgRHc4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzQ3YWFhYjIyMDZjMDgxMjhmNTQzNzMwMDY0YTE0NWEzZWZmYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiUVRQDsFEqdPPYoJ38Gc1NwE9S6 InQsOZx1Rz40uCNzUpZPt4SooGN9D7e8sJuJH6HQEmhW+1YvWSfaLGL6oOS/w5Mx 5OSGWzUp3+evE5VteO3Dk6lxMNj/7wCkz76pGuqU2NUapRkyn97x2NZkZErV/2ZE 9u3mRM4WT97i0QEmDhEmjLpLKtwZDn0lkoz1GFOdb3vhdNIBwJE1I8CmG5WfJlXd cp1myy2gjgH3yex7vHZ1BUVZ/WnXMhix1tAudmrIgb0TLHMMzVilp5OKCHJEjhWo xV+ihWUkkPPT2MlcTv2w+hFJPF2onL4nyRWOyaLd5fB/eg871IB24LpzlQIDAQAB o4IDxDCCA8AwHQYDVR0OBBYEFCNHqqsiBsCBKPVDcwBkoUWj7/oUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2VmOWYw ZC1kODQwLTQzNzEtYWRjNC03NTg0MDY2MWVhZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZWY5ZjBk LWQ4NDAtNDM3MS1hZGM0LTc1ODQwNjYxZWFmNS8xL0kwZXFxeUlHd0lFbzlVTnpB R1NoUmFQdi1oUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBMQYIKwYB BQUHAQcBAf8EggEgMIIBHDCCAQIEAgABMIH7AwQGH9PAAwQFJS6gAwQFJfcAAwMB LsIDBAc+DQADBAY+QUADAwA+dwMDAD5/AwMATlIDAwBPZgMEBFBEYAMEBVEa4AMD AVK2AwMBU+IDBAZUN0ADAwJU2AMEA1T2WAMDA1XgAwQGWf1AAwMCXCADBAVc9AAD BAVeiWADAwBe6gMEBW1oAAMDArIcAwQGsk7AAwQCuVZkAwQGwyvAAwQFwzZgAwQF wzpgAwQFw0IgAwQF1EkAAwQF1EmgAwQF1EtAAwQH1GkAAwQF1GuAAwMC1XADBAXV loADBAXVo4ADBAbVzIADBAbV1sADBAbV7sADBAbV8oADBAXZrkAwFAQCAAIwDgMF ACoBA7gDBQYqAhQAMCoGCCsGAQUFBwEIAQH/BBswGaAXMBUCAiDyAgIhwgICIxgC AmJRAgMAhF0wDQYJKoZIhvcNAQELBQADggEBAAYCLvSgGllmBHPUw3Pv1r7a+QNv 40cJSxymdDCtnjDKrZRf3p+CUiwviWxKLmA+TcEzRlmW6xZj+5KdnsKrTPFbJqS5 S5YK7T2aqBdsjOsOLrKZuZMYSino2VF+UxYVllgXexpxsG3TISdjQsgPwv2ybnpZ wsdElO2ZuegqvPDWbvuM8atpiWvOEvMRqyqXuu/Qfk14E7e3YK3cDW0PTe9wyaRc uts0HIlWeP9FhlHFWIkZUGWKID5tsUZbEPclrCjSNLxnQu4t/54mbqi8anIif29U hNgTiA8RKF38k77HLFMIt25OgLFl5bmiNhfjX6ZIxOEkqfd5nJ/rxLUxeJQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:20 2026 by rpki-client