This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer File: Jg8Qh8zQbmtHZDxOvni8z1885dI.cer (raw, json) Hash identifier: D1wjL7EXNNlUaD7ujRm+AvYAv0nm2+ZToP1MukglXj8= Subject key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36CD705BA1F7BD0CDF4842484ED2A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199930 AS: 201735 AS: 210121 IP: 37.152.80.0/21 IP: 77.220.200.0/22 IP: 79.108.240.0/20 IP: 85.204.146.0/24 IP: 86.106.88.0/24 IP: 89.33.160.0/23 IP: 89.35.24.0/24 IP: 89.35.134.0/24 IP: 89.35.205.0/24 IP: 109.232.64.0/21 IP: 146.66.136.0/21 IP: 185.15.148.0/22 IP: 185.65.64.0/22 IP: 185.160.230.0/24 IP: 185.192.182.0/24 IP: 185.201.72.0/22 IP: 185.230.146.0/23 IP: 185.247.180.0/22 IP: 185.249.60.0/22 IP: 185.249.84.0/22 IP: 188.214.56.0/24 IP: 194.36.28.0/22 IP: 2a00:9440::/32 IP: 2a03:19e0::/32 IP: 2a0c:edc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cd:70:5b:a1:f7:bd:0c:df:48:42:48:4e:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:ce:b4:76:8c:6b:90:28:57:13:ba:83:c1: 8a:3c:60:79:d4:4c:40:7c:9f:37:ce:7e:6e:e9:79: 0c:67:80:9b:4b:bd:45:16:98:b6:63:f2:e2:e7:45: 0f:b2:b6:58:ad:14:83:65:ae:7a:2c:68:c6:e1:8a: f5:8d:ea:73:86:a8:36:31:57:9a:20:09:90:cf:7b: 09:b5:70:b8:b6:1e:bb:14:1d:76:17:be:1f:09:8f: 3f:92:e0:81:b6:dc:cb:dc:6c:f7:61:23:85:cb:03: 10:c7:ff:02:1c:97:a0:d4:b7:30:5a:f2:9f:dd:e1: 03:7d:6f:78:4d:1d:f5:8f:62:76:34:86:84:0e:d5: 36:77:11:a8:67:3c:7b:04:66:95:6c:41:cf:94:93: 29:b4:fc:24:3e:40:43:0f:e9:fd:47:c2:81:f8:ba: 8a:af:9b:c1:02:99:a7:18:2c:1d:26:a9:a1:12:f5: ed:41:04:30:01:90:d5:f4:ca:fc:43:39:28:33:92: 14:89:91:23:82:70:28:94:af:97:68:64:55:cc:cb: 9f:3e:bf:9c:e7:f2:c4:dd:f7:e0:f4:24:d2:dc:3d: da:a9:ab:96:d5:37:98:87:e7:e2:6f:96:31:ed:f1: b8:bd:38:1a:38:21:ca:94:c6:da:de:8d:f1:0e:5e: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.152.80.0/21 77.220.200.0/22 79.108.240.0/20 85.204.146.0/24 86.106.88.0/24 89.33.160.0/23 89.35.24.0/24 89.35.134.0/24 89.35.205.0/24 109.232.64.0/21 146.66.136.0/21 185.15.148.0/22 185.65.64.0/22 185.160.230.0/24 185.192.182.0/24 185.201.72.0/22 185.230.146.0/23 185.247.180.0/22 185.249.60.0/22 185.249.84.0/22 188.214.56.0/24 194.36.28.0/22 IPv6: 2a00:9440::/32 2a03:19e0::/32 2a0c:edc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199930 201735 210121 Signature Algorithm: sha256WithRSAEncryption 39:3e:5b:7d:d5:ce:6a:d9:8c:9a:b2:2b:e4:e1:3a:56:d4:a1: 99:1b:cd:33:c2:56:d4:4b:e4:76:02:e8:3f:77:68:40:c5:c0: 68:c5:44:12:19:8b:34:e5:a8:10:b5:c3:c0:ea:65:c9:af:11: 85:83:d3:65:37:6a:d0:40:73:0b:12:04:2c:8c:06:a0:7e:85: e7:50:51:c3:9b:60:50:6b:7e:02:7c:84:f4:a7:2f:8b:42:45: dd:f1:d7:c7:4b:8d:03:c8:57:00:ad:91:31:99:0d:8f:b9:37: e9:d9:c0:95:5d:dc:2a:53:66:58:b3:a6:17:71:d4:40:7e:9f: cb:4a:b2:b1:1d:1b:5d:0e:a8:a2:0b:5d:19:87:8d:9c:a1:f0: b5:7d:82:43:28:12:2f:df:33:9e:47:0b:54:bd:34:1b:f8:fe: 7f:5f:79:f2:86:70:08:41:91:3c:e6:1e:f0:da:9d:b3:59:a9: 87:b4:78:0d:61:81:81:a4:61:1d:ba:6c:06:bc:1b:c6:60:b7: f9:07:a7:f5:e0:8a:f8:b7:69:95:42:c0:f3:29:89:2d:07:fc: 7a:64:bb:c8:27:1c:1a:3e:6c:a0:9b:3b:b5:86:78:b8:d1:e6: 93:5a:6e:8e:97:c4:8b:dc:cc:ce:87:70:73:2b:96:a7:86:83: bc:0a:fe:78 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISAZt7Ns1wW6H3vQzfSEJITtKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjBmMTA4N2NjZDA2ZTZiNDc2NDNjNGViZTc4YmNjZjVmM2NlNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz7OtHaMa5AoVxO6g8GKPGB51ExA fJ83zn5u6XkMZ4CbS71FFpi2Y/Li50UPsrZYrRSDZa56LGjG4Yr1jepzhqg2MVea IAmQz3sJtXC4th67FB12F74fCY8/kuCBttzL3Gz3YSOFywMQx/8CHJeg1LcwWvKf 3eEDfW94TR31j2J2NIaEDtU2dxGoZzx7BGaVbEHPlJMptPwkPkBDD+n9R8KB+LqK r5vBApmnGCwdJqmhEvXtQQQwAZDV9Mr8QzkoM5IUiZEjgnAolK+XaGRVzMufPr+c 5/LE3ffg9CTS3D3aqauW1TeYh+fib5Yx7fG4vTgaOCHKlMba3o3xDl5/WwIDAQAB o4IDSjCCA0YwHQYDVR0OBBYEFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3Lzg1MzY4 Mi0zMDM1LTQ0ZmItYjdhZS0xOWIxMmE5NTUwNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvODUzNjgy LTMwMzUtNDRmYi1iN2FlLTE5YjEyYTk1NTA2NS8xL0pnOFFoOHpRYm10SFpEeE92 bmk4ejE4ODVkSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG+BggrBgEF BQcBBwEB/wSBrjCBqzCBiwQCAAEwgYQDBAMlmFADBAJN3MgDBARPbPADBABVzJID BABWalgDBAFZIaADBABZIxgDBABZI4YDBABZI80DBANt6EADBAOSQogDBAK5D5QD BAK5QUADBAC5oOYDBAC5wLYDBAK5yUgDBAG55pIDBAK597QDBAK5+TwDBAK5+VQD BAC81jgDBALCJBwwGwQCAAIwFQMFACoAlEADBQAqAxngAwUDKgztwDAkBggrBgEF BQcBCAEB/wQVMBOgETAPAgMDDPoCAwMUBwIDAzTJMA0GCSqGSIb3DQEBCwUAA4IB AQA5Plt91c5q2Yyasivk4TpW1KGZG80zwlbUS+R2Aug/d2hAxcBoxUQSGYs05agQ tcPA6mXJrxGFg9NlN2rQQHMLEgQsjAagfoXnUFHDm2BQa34CfIT0py+LQkXd8dfH S40DyFcArZExmQ2PuTfp2cCVXdwqU2ZYs6YXcdRAfp/LSrKxHRtdDqiiC10Zh42c ofC1fYJDKBIv3zOeRwtUvTQb+P5/X3nyhnAIQZE85h7w2p2zWamHtHgNYYGBpGEd umwGvBvGYLf5B6f14Ir4t2mVQsDzKYktB/x6ZLvIJxwaPmygmzu1hni40eaTWm6O l8SL3MzOh3BzK5anhoO8Cv54 -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:53 2026 by rpki-client