This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer File: KXxQjSOzgxW79FtybSIFCkYSe4w.cer (raw, json) Hash identifier: wzS0nug4nhyqxGPGcsL0DMuvwgM3bZ+Vca9nINHkmQA= Subject key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EED50BC11C7C4E2D85B578835EED9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8310 AS: 12629 AS: 16211 AS: 20926 AS: 34177 AS: 35152 AS: 39473 AS: 44494 AS: 49449 AS: 51335 AS: 56844 AS: 57633 AS: 200411 AS: 202727 IP: 5.133.68.0/22 IP: 37.25.72.0/21 IP: 45.9.244.0/22 IP: 46.182.208.0/21 IP: 62.193.32.0/19 IP: 62.244.84.0 -- 62.244.89.255 IP: 62.244.96.0/22 IP: 62.244.112.0/22 IP: 62.244.117.0/24 IP: 62.244.119.0/24 IP: 77.240.192.0/20 IP: 78.31.40.0/21 IP: 78.109.240.0/20 IP: 79.98.16.0/21 IP: 80.74.64.0/20 IP: 80.245.16.0/20 IP: 82.210.0.0/18 IP: 83.118.192.0/19 IP: 83.142.144.0/21 IP: 84.239.64.0/18 IP: 91.90.96.0/21 IP: 94.228.176.0/20 IP: 95.141.96.0/20 IP: 141.101.56.0/21 IP: 159.180.224.0/19 IP: 176.57.32.0/21 IP: 178.16.160.0/20 IP: 185.4.44.0/22 IP: 185.5.108.0/22 IP: 185.10.176.0/22 IP: 185.18.96.0/22 IP: 185.18.208.0/22 IP: 185.19.48.0/22 IP: 185.41.4.0/22 IP: 185.47.240.0/22 IP: 185.79.220.0/22 IP: 185.81.52.0/22 IP: 185.132.116.0/22 IP: 185.137.254.0/23 IP: 185.156.80.0/22 IP: 185.163.28.0/22 IP: 185.171.156.0/22 IP: 185.180.244.0/22 IP: 185.191.92.0/22 IP: 185.211.24.0/22 IP: 185.213.160.0/22 IP: 185.218.248.0/22 IP: 185.249.28.0/22 IP: 188.123.64.0/19 IP: 194.213.124.0/23 IP: 195.15.128.0/18 IP: 195.49.132.0/22 IP: 195.200.160.0/19 IP: 212.106.96.0/19 IP: 2001:67c:10f0::/48 IP: 2001:ab8::/29 IP: 2a00:1ab0::/32 IP: 2a00:6900::/29 IP: 2a00:8880::/32 IP: 2a00:9020::/29 IP: 2a01:4e00::/32 IP: 2a02:68c0::/32 IP: 2a02:d640::/29 IP: 2a03:5d40::/32 IP: 2a04:e40::/29 IP: 2a06:e1c0::/29 IP: 2a07:9c00::/29 IP: 2a0a:7800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ed:50:bc:11:c7:c4:e2:d8:5b:57:88:35:ee:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=297c508d23b38315bbf45b726d22050a46127b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:32:3f:8f:35:d9:a5:95:6a:eb:56:2e:d5: 39:66:cb:ad:8c:15:b0:ec:a7:e5:85:79:cc:84:e4: 1b:38:39:1b:09:ed:98:d9:af:a6:ca:25:43:96:4f: 02:8a:71:a3:14:e8:37:6b:02:89:5b:76:bb:95:c8: 58:b2:73:49:f0:74:fa:0a:58:92:6d:16:18:f0:ea: 61:75:39:ab:b1:ad:ba:b2:a5:4d:13:b2:2e:31:f8: e0:46:54:0b:9b:72:47:21:2c:bf:f4:41:88:c7:6f: aa:d6:47:88:ec:7d:d3:5a:bf:63:33:4c:e7:41:3e: 35:f7:5f:92:4c:a9:44:cf:66:4b:56:d2:19:1c:ef: 25:6b:30:66:89:82:07:7c:86:a8:a2:72:fe:31:2b: 49:b9:1d:58:55:68:a8:0a:14:76:99:27:0e:b0:a6: e5:48:13:56:b2:75:07:4c:f7:85:08:76:8c:a8:82: f8:42:44:f8:3c:33:20:cc:7a:f6:54:ef:fb:d5:7e: 80:9a:d9:d4:df:f3:97:6d:ad:c8:7a:8d:63:0d:c3: 82:fc:a1:9e:91:44:2f:e1:fb:74:35:e9:f9:a1:15: 07:b2:3b:1b:9f:c5:06:fb:72:e5:c2:1b:24:f7:3c: e5:c3:81:19:b5:74:47:22:63:c6:0e:19:2a:97:ff: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.68.0/22 37.25.72.0/21 45.9.244.0/22 46.182.208.0/21 62.193.32.0/19 62.244.84.0-62.244.89.255 62.244.96.0/22 62.244.112.0/22 62.244.117.0/24 62.244.119.0/24 77.240.192.0/20 78.31.40.0/21 78.109.240.0/20 79.98.16.0/21 80.74.64.0/20 80.245.16.0/20 82.210.0.0/18 83.118.192.0/19 83.142.144.0/21 84.239.64.0/18 91.90.96.0/21 94.228.176.0/20 95.141.96.0/20 141.101.56.0/21 159.180.224.0/19 176.57.32.0/21 178.16.160.0/20 185.4.44.0/22 185.5.108.0/22 185.10.176.0/22 185.18.96.0/22 185.18.208.0/22 185.19.48.0/22 185.41.4.0/22 185.47.240.0/22 185.79.220.0/22 185.81.52.0/22 185.132.116.0/22 185.137.254.0/23 185.156.80.0/22 185.163.28.0/22 185.171.156.0/22 185.180.244.0/22 185.191.92.0/22 185.211.24.0/22 185.213.160.0/22 185.218.248.0/22 185.249.28.0/22 188.123.64.0/19 194.213.124.0/23 195.15.128.0/18 195.49.132.0/22 195.200.160.0/19 212.106.96.0/19 IPv6: 2001:67c:10f0::/48 2001:ab8::/29 2a00:1ab0::/32 2a00:6900::/29 2a00:8880::/32 2a00:9020::/29 2a01:4e00::/32 2a02:68c0::/32 2a02:d640::/29 2a03:5d40::/32 2a04:e40::/29 2a06:e1c0::/29 2a07:9c00::/29 2a0a:7800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8310 12629 16211 20926 34177 35152 39473 44494 49449 51335 56844 57633 200411 202727 Signature Algorithm: sha256WithRSAEncryption 01:b9:0d:30:8d:b2:5a:52:1b:07:98:39:a1:ee:ec:39:39:ca: 8c:ae:9f:92:86:49:c9:49:5b:b5:7d:dc:bd:94:13:32:35:a4: e6:ca:7f:1d:46:0c:47:f0:01:c6:73:21:45:2b:98:bc:75:d8: a8:c8:ce:4b:ed:93:91:55:64:b5:6e:ba:aa:19:ec:1f:13:10: 7d:9b:5e:cc:4b:51:84:ff:14:c9:09:cb:62:99:6c:14:f2:73: 56:ae:0a:aa:05:24:2a:a1:22:38:56:7e:9e:79:d9:cb:08:29: fb:fb:58:3f:ca:80:91:e7:be:9b:33:62:b4:fc:a1:02:98:af: 79:7c:59:32:b7:d9:b8:ef:05:ea:25:86:d8:bc:f0:fe:7f:9c: 7a:fc:17:e5:12:63:ae:5b:d8:1c:15:b1:4a:60:d0:81:af:03: c3:d3:12:9f:8b:bd:53:ca:5c:07:df:77:38:de:a0:2b:8f:12: d6:c5:5f:30:b2:5b:c1:3d:de:65:d4:24:a0:1d:8a:0a:ed:d3: a9:05:18:96:fe:59:e1:63:88:b4:e7:5e:16:03:48:9d:58:21: 14:62:89:59:7c:87:df:7f:94:42:df:fa:45:2c:c2:76:2f:0d: f4:9c:d8:da:db:cd:6b:72:e8:70:51:e2:6d:26:26:2f:59:aa: df:21:31:67 -----BEGIN CERTIFICATE----- MIIHjTCCBnWgAwIBAgISAZt5fu1QvBHHxOLYW1eINe7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTdjNTA4ZDIzYjM4MzE1YmJmNDViNzI2ZDIyMDUwYTQ2MTI3YjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR0yP4812aWVautWLtU5ZsutjBWw 7KflhXnMhOQbODkbCe2Y2a+myiVDlk8CinGjFOg3awKJW3a7lchYsnNJ8HT6CliS bRYY8OphdTmrsa26sqVNE7IuMfjgRlQLm3JHISy/9EGIx2+q1keI7H3TWr9jM0zn QT4191+STKlEz2ZLVtIZHO8lazBmiYIHfIaoonL+MStJuR1YVWioChR2mScOsKbl SBNWsnUHTPeFCHaMqIL4QkT4PDMgzHr2VO/71X6AmtnU3/OXba3Ieo1jDcOC/KGe kUQv4ft0Nen5oRUHsjsbn8UG+3Llwhsk9zzlw4EZtXRHImPGDhkql/+suQIDAQAB o4IEmTCCBJUwHQYDVR0OBBYEFCl8UI0js4MVu/Rbcm0iBQpGEnuMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzhhYmVl ZC1mNTNiLTQ3NzYtYThlMi0zNmU5YTc5YmQ5NTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvOGFiZWVk LWY1M2ItNDc3Ni1hOGUyLTM2ZTlhNzliZDk1MC8xL0tYeFFqU096Z3hXNzlGdHli U0lGQ2tZU2U0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB2QYIKwYB BQUHAQcBAf8EggHIMIIBxDCCAVQEAgABMIIBTAMEAgWFRAMEAyUZSAMEAi0J9AME Ay620AMEBT7BIDAMAwQCPvRUAwQBPvRYAwQCPvRgAwQCPvRwAwQAPvR1AwQAPvR3 AwQETfDAAwQDTh8oAwQETm3wAwQDT2IQAwQEUEpAAwQEUPUQAwQGUtIAAwQFU3bA AwQDU46QAwQGVO9AAwQDW1pgAwQEXuSwAwQEX41gAwQDjWU4AwQFn7TgAwQDsDkg AwQEshCgAwQCuQQsAwQCuQVsAwQCuQqwAwQCuRJgAwQCuRLQAwQCuRMwAwQCuSkE AwQCuS/wAwQCuU/cAwQCuVE0AwQCuYR0AwQBuYn+AwQCuZxQAwQCuaMcAwQCuauc AwQCubT0AwQCub9cAwQCudMYAwQCudWgAwQCudr4AwQCufkcAwQFvHtAAwQBwtV8 AwQGww+AAwQCwzGEAwQFw8igAwQF1GpgMGoEAgACMGQDBwAgAQZ8EPADBQMgAQq4 AwUAKgAasAMFAyoAaQADBQAqAIiAAwUDKgCQIAMFACoBTgADBQAqAmjAAwUDKgLW QAMFACoDXUADBQMqBA5AAwUDKgbhwAMFAyoHnAADBQMqCngAMFcGCCsGAQUFBwEI AQH/BEgwRqBEMEICAiB2AgIxVQICP1MCAlG+AgMAhYECAwCJUAIDAJoxAgMArc4C AwDBKQIDAMiHAgMA3gwCAwDhIQIDAw7bAgMDF+cwDQYJKoZIhvcNAQELBQADggEB AAG5DTCNslpSGweYOaHu7Dk5yoyun5KGSclJW7V93L2UEzI1pObKfx1GDEfwAcZz IUUrmLx12KjIzkvtk5FVZLVuuqoZ7B8TEH2bXsxLUYT/FMkJy2KZbBTyc1auCqoF JCqhIjhWfp552csIKfv7WD/KgJHnvpszYrT8oQKYr3l8WTK32bjvBeolhti88P5/ nHr8F+USY65b2BwVsUpg0IGvA8PTEp+LvVPKXAffdzjeoCuPEtbFXzCyW8E93mXU JKAdigrt06kFGJb+WeFjiLTnXhYDSJ1YIRRiiVl8h99/lELf+kUswnYvDfSc2Nrb zWty6HBR4m0mJi9Zqt8hMWc= -----END CERTIFICATE-----Generated at Mon Jan 26 13:39:26 2026 by rpki-client