This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer (raw, json) Hash identifier: Gkd+iW1ncxq13824Xo9mx9CMkkXrpOpAmtPHh5V9Z5E= Subject key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C121259F3306AFF6000EA6D991F860A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29522 AS: 34360 AS: 41079 AS: 43758 AS: 47383 AS: 48760 AS: 198414 IP: 2.57.136.0/22 IP: 91.198.146.0/24 IP: 91.199.22.0/24 IP: 91.213.206.0/24 IP: 91.224.38.0/23 IP: 91.225.28.0/22 IP: 91.228.196.0/22 IP: 91.234.146.0/24 IP: 91.237.52.0/24 IP: 91.239.66.0/23 IP: 93.157.96.0/21 IP: 94.152.0.0/16 IP: 178.250.40.0/21 IP: 185.5.96.0/22 IP: 185.11.100.0/22 IP: 185.25.148.0/22 IP: 185.84.136.0/22 IP: 185.123.160.0/22 IP: 185.140.120.0/22 IP: 185.142.204.0/22 IP: 185.180.204.0 -- 185.180.211.255 IP: 185.193.112.0/22 IP: 185.201.112.0/22 IP: 185.204.216.0/22 IP: 185.208.164.0/22 IP: 185.212.132.0/22 IP: 185.243.52.0/22 IP: 193.17.184.0/24 IP: 193.218.152.0/22 IP: 194.60.251.0/24 IP: 194.169.227.0/24 IP: 195.2.254.0/23 IP: 195.62.12.0/23 IP: 195.78.66.0/23 IP: 195.114.0.0/23 IP: 195.149.224.0/21 IP: 195.242.116.0/23 IP: 213.108.56.0/21 IP: 2001:67c:2e0::/48 IP: 2a00:76a0::/32 IP: 2a00:e940::/32 IP: 2a01:4660::/32 IP: 2a02:1778::/32 IP: 2a02:7240::/32 IP: 2a07:1cc0::/29 IP: 2a0a:b180::/29 IP: 2a0a:c2c0::/29 IP: 2a0a:fe40::/29 IP: 2a0b:3ac0::/29 IP: 2a0b:77c0::/29 IP: 2a0d:680::/29 IP: 2a14:4bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:12:59:f3:30:6a:ff:60:00:ea:6d:99:1f:86:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:7a:b3:8f:d4:eb:59:69:01:cf:33:3f:8f: 10:5e:2c:69:d5:8c:d8:97:0d:93:77:f8:4b:c9:59: 11:5c:63:66:52:48:90:8c:ae:f2:b2:26:81:8c:90: 02:59:da:d6:ed:2f:88:26:d7:c8:01:2b:c0:19:b4: 7b:e4:1d:76:ee:66:b0:ae:7c:fc:24:6b:0c:ba:ae: 71:b9:90:5a:cb:eb:d9:fe:f7:60:de:18:d0:33:72: 65:19:29:8c:87:2b:a4:9c:66:fa:ff:56:2d:90:fc: 83:58:ba:5d:4e:48:ef:27:e4:d8:02:df:08:96:04: af:54:23:9e:54:a2:be:d1:24:fe:56:e2:14:47:9b: a8:8b:ca:0a:e3:e5:a7:58:ce:7a:07:1a:d2:f1:ed: c4:08:92:7e:a0:93:21:16:06:46:4c:39:ef:e1:d2: ce:77:ff:ad:1f:f4:b0:ef:9e:9d:c2:83:a9:d6:08: ad:ae:b9:da:ca:5f:b0:33:24:d2:9c:a0:a9:d9:33: 50:b5:c0:1b:40:d3:0f:d6:59:98:16:bf:ec:8b:75: 62:45:cb:62:c4:1f:f0:80:c5:bb:e7:61:af:68:f3: 29:05:12:87:98:8a:a0:1a:21:e2:0b:cd:fe:69:70: 49:e1:3a:fe:a3:d2:b0:2b:bb:3c:10:08:56:4f:d0: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.136.0/22 91.198.146.0/24 91.199.22.0/24 91.213.206.0/24 91.224.38.0/23 91.225.28.0/22 91.228.196.0/22 91.234.146.0/24 91.237.52.0/24 91.239.66.0/23 93.157.96.0/21 94.152.0.0/16 178.250.40.0/21 185.5.96.0/22 185.11.100.0/22 185.25.148.0/22 185.84.136.0/22 185.123.160.0/22 185.140.120.0/22 185.142.204.0/22 185.180.204.0-185.180.211.255 185.193.112.0/22 185.201.112.0/22 185.204.216.0/22 185.208.164.0/22 185.212.132.0/22 185.243.52.0/22 193.17.184.0/24 193.218.152.0/22 194.60.251.0/24 194.169.227.0/24 195.2.254.0/23 195.62.12.0/23 195.78.66.0/23 195.114.0.0/23 195.149.224.0/21 195.242.116.0/23 213.108.56.0/21 IPv6: 2001:67c:2e0::/48 2a00:76a0::/32 2a00:e940::/32 2a01:4660::/32 2a02:1778::/32 2a02:7240::/32 2a07:1cc0::/29 2a0a:b180::/29 2a0a:c2c0::/29 2a0a:fe40::/29 2a0b:3ac0::/29 2a0b:77c0::/29 2a0d:680::/29 2a14:4bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29522 34360 41079 43758 47383 48760 198414 Signature Algorithm: sha256WithRSAEncryption 73:e6:58:1b:a5:77:69:b0:77:88:73:84:8c:a0:e5:6d:7b:56: c2:55:87:47:d7:15:2f:e9:79:c0:db:c8:bf:91:66:17:6c:e0: 48:a2:84:c6:79:a4:a5:8c:80:80:a5:94:9d:ad:df:dc:f1:cc: da:fd:2c:50:6e:d5:6e:d6:51:4b:9e:cd:fa:13:cb:c4:a4:66: b5:15:b8:91:47:7f:67:7b:9e:71:bc:bd:73:d6:7e:a7:22:60: 29:99:35:01:7a:87:81:6b:0d:f0:19:5f:29:12:fe:29:e7:66: 47:68:7b:88:c1:8d:35:7e:d2:c5:5f:2f:1c:58:20:c6:02:c4: 99:68:d7:11:79:d2:5d:3e:32:99:a2:0d:e6:a0:1c:2e:72:e8: 9a:95:7e:07:b9:75:5b:23:54:d2:4b:08:a2:33:b9:01:07:8d: 42:59:cb:27:17:f8:6b:30:a3:53:f5:89:b1:74:1a:0e:57:f0: 61:be:85:88:5c:12:89:fd:98:3f:be:d1:72:e0:4c:cf:af:65: a0:e4:19:e1:03:dc:b0:85:44:98:0e:ad:b9:d5:60:a7:c7:a9: 15:3e:d4:80:b6:f7:41:5a:07:9b:7d:42:e1:1a:72:c1:46:42: 3b:8b:d3:28:25:a2:94:20:75:74:94:c4:85:04:56:6f:78:83: a9:68:e4:b9 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgISAZt8EhJZ8zBq/2AA6m2ZH4YKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmE1YWE5MThjYmZlYjNlMTI5OTdmMzM4OTBmZWIyNTg5MDdiMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF96s4/U61lpAc8zP48QXixp1YzY lw2Td/hLyVkRXGNmUkiQjK7ysiaBjJACWdrW7S+IJtfIASvAGbR75B127mawrnz8 JGsMuq5xuZBay+vZ/vdg3hjQM3JlGSmMhyuknGb6/1YtkPyDWLpdTkjvJ+TYAt8I lgSvVCOeVKK+0ST+VuIUR5uoi8oK4+WnWM56BxrS8e3ECJJ+oJMhFgZGTDnv4dLO d/+tH/Sw756dwoOp1gitrrnayl+wMyTSnKCp2TNQtcAbQNMP1lmYFr/si3ViRcti xB/wgMW752GvaPMpBRKHmIqgGiHiC83+aXBJ4Tr+o9KwK7s8EAhWT9BGpwIDAQAB o4IEFjCCBBIwHQYDVR0OBBYEFCalqpGMv+s+Epl/M4kP6yWJB7NDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzE0MzNl YS0xMDgwLTQ2ZTUtYjYxMi0yOTdlMjgyZDY2YTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvMTQzM2Vh LTEwODAtNDZlNS1iNjEyLTI5N2UyODJkNjZhOC8xL0pxV3FrWXlfNno0U21YOHpp UV9ySllrSHMwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBdgYIKwYB BQUHAQcBAf8EggFlMIIBYTCB8gQCAAEwgesDBAICOYgDBABbxpIDBABbxxYDBABb 1c4DBAFb4CYDBAJb4RwDBAJb5MQDBABb6pIDBABb7TQDBAFb70IDBANdnWADAwBe mAMEA7L6KAMEArkFYAMEArkLZAMEArkZlAMEArlUiAMEArl7oAMEArmMeAMEArmO zDAMAwQCubTMAwQCubTQAwQCucFwAwQCuclwAwQCuczYAwQCudCkAwQCudSEAwQC ufM0AwQAwRG4AwQCwdqYAwQAwjz7AwQAwqnjAwQBwwL+AwQBwz4MAwQBw05CAwQB w3IAAwQDw5XgAwQBw/J0AwQD1Ww4MGoEAgACMGQDBwAgAQZ8AuADBQAqAHagAwUA KgDpQAMFACoBRmADBQAqAhd4AwUAKgJyQAMFAyoHHMADBQMqCrGAAwUDKgrCwAMF AyoK/kADBQMqCzrAAwUDKgt3wAMFAyoNBoADBQMqFEvAMDcGCCsGAQUFBwEIAQH/ BCgwJqAkMCICAnNSAgMAhjgCAwCgdwIDAKruAgMAuRcCAwC+eAIDAwcOMA0GCSqG SIb3DQEBCwUAA4IBAQBz5lgbpXdpsHeIc4SMoOVte1bCVYdH1xUv6XnA28i/kWYX bOBIooTGeaSljICApZSdrd/c8cza/SxQbtVu1lFLns36E8vEpGa1FbiRR39ne55x vL1z1n6nImApmTUBeoeBaw3wGV8pEv4p52ZHaHuIwY01ftLFXy8cWCDGAsSZaNcR edJdPjKZog3moBwucuialX4HuXVbI1TSSwiiM7kBB41CWcsnF/hrMKNT9YmxdBoO V/BhvoWIXBKJ/Zg/vtFy4EzPr2Wg5BnhA9ywhUSYDq251WCnx6kVPtSAtvdBWgeb fULhGnLBRkI7i9MoJaKUIHV0lMSFBFZveIOpaOS5 -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:51 2026 by rpki-client