This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer File: KsPaobFIUPLmHFkrIZGRWl5lpHg.cer (raw, json) Hash identifier: QiLZMEh6CsxH1Qw8QNWbtI//BW28aiLg7JDZylUABnA= Subject key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A26028A349A97FD3931E0D5BB04EFA47A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 27 Oct 2025 14:11:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 24718 AS: 24947 AS: 31732 AS: 58232 AS: 60808 IP: 5.34.208.0/20 IP: 5.226.48.0/21 IP: 31.25.88.0/23 IP: 37.123.192.0/21 IP: 43.225.88.0/22 IP: 45.86.87.0/24 IP: 45.137.180.0/22 IP: 45.139.4.0/22 IP: 45.146.240.0/22 IP: 46.249.96.0 -- 46.249.119.255 IP: 82.97.240.0/20 IP: 82.115.0.0 -- 82.115.13.255 IP: 82.115.16.0/20 IP: 87.236.166.0/24 IP: 89.251.8.0/22 IP: 91.246.49.0/24 IP: 91.247.177.0/24 IP: 95.82.0.0/18 IP: 103.20.36.0/22 IP: 103.25.84.0/22 IP: 103.75.196.0/22 IP: 146.19.135.0/24 IP: 155.254.96.0/19 IP: 159.255.32.0/21 IP: 178.173.224.0/19 IP: 178.236.36.0/22 IP: 185.36.192.0/22 IP: 185.80.196.0/23 IP: 185.148.12.0/22 IP: 185.212.60.0/22 IP: 185.215.244.0/22 IP: 185.217.108.0/22 IP: 185.218.4.0/22 IP: 185.220.236.0/22 IP: 185.231.172.0/22 IP: 185.248.184.0/22 IP: 188.209.155.0 -- 188.209.159.255 IP: 188.253.0.0/19 IP: 188.253.96.0/19 IP: 193.36.73.0/24 IP: 193.36.84.0/23 IP: 195.96.135.0/24 IP: 202.133.88.0/22 IP: 212.87.192.0/22 IP: 212.90.100.0/22 IP: 212.107.28.0/22 IP: 2001:16c0::/29 IP: 2a05:ec80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:26:02:8a:34:9a:97:fd:39:31:e0:d5:bb:04:ef:a4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 27 14:11:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:a2:79:6b:ab:10:14:0b:71:80:98:e8:40: 28:75:3c:9a:a9:b4:10:ae:1d:d2:09:99:0f:70:43: 96:5a:ac:fc:ab:13:4f:2d:f4:81:e7:c1:dc:24:67: 83:5d:b0:c8:84:d5:e9:a2:2e:91:8a:a6:df:76:84: 8c:5f:17:4b:3c:04:8a:14:67:6c:9a:5e:49:c1:a3: 04:6e:14:6f:09:78:39:19:b8:00:e6:ce:cc:2d:10: 01:98:4b:02:eb:74:20:4f:54:7c:cb:bc:06:54:98: 15:be:86:ee:d9:58:c7:34:ba:ff:65:ff:d7:4a:d5: 94:89:25:61:c2:48:16:8f:bd:74:4f:43:79:55:03: 62:b6:a3:16:68:ba:66:3c:76:50:d0:7f:2b:2d:2e: 67:f4:24:a2:cd:b2:26:a4:95:0b:8f:f2:71:f6:fe: 56:43:10:74:44:2b:77:a8:a9:06:c2:b8:be:63:c9: e7:80:06:80:5e:f0:64:d7:00:b6:4f:cf:ad:2c:81: 62:dd:66:d2:49:08:5b:fc:82:36:f9:43:3b:4b:bd: 0a:17:b4:50:25:9b:ce:66:08:12:0b:81:ac:f7:e0: 94:ea:14:5d:e9:00:7b:68:da:1f:cf:1c:9e:59:51: 6f:7e:28:44:79:a9:99:7c:38:1a:34:7a:5f:16:94: 6b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.208.0/20 5.226.48.0/21 31.25.88.0/23 37.123.192.0/21 43.225.88.0/22 45.86.87.0/24 45.137.180.0/22 45.139.4.0/22 45.146.240.0/22 46.249.96.0-46.249.119.255 82.97.240.0/20 82.115.0.0-82.115.13.255 82.115.16.0/20 87.236.166.0/24 89.251.8.0/22 91.246.49.0/24 91.247.177.0/24 95.82.0.0/18 103.20.36.0/22 103.25.84.0/22 103.75.196.0/22 146.19.135.0/24 155.254.96.0/19 159.255.32.0/21 178.173.224.0/19 178.236.36.0/22 185.36.192.0/22 185.80.196.0/23 185.148.12.0/22 185.212.60.0/22 185.215.244.0/22 185.217.108.0/22 185.218.4.0/22 185.220.236.0/22 185.231.172.0/22 185.248.184.0/22 188.209.155.0-188.209.159.255 188.253.0.0/19 188.253.96.0/19 193.36.73.0/24 193.36.84.0/23 195.96.135.0/24 202.133.88.0/22 212.87.192.0/22 212.90.100.0/22 212.107.28.0/22 IPv6: 2001:16c0::/29 2a05:ec80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24718 24947 31732 58232 60808 Signature Algorithm: sha256WithRSAEncryption 92:a5:93:49:eb:0b:52:a7:1f:0d:9f:99:e8:c5:83:22:cd:7d: 27:f9:14:55:84:95:83:4b:21:ca:7c:63:35:09:35:c2:57:2f: 80:a4:d2:b2:2e:fd:ff:8e:fb:12:5b:67:23:41:c4:5e:d6:2d: 5c:86:c5:75:3d:39:0e:a9:ca:39:de:66:18:e2:25:a0:7f:c2: e5:ff:b8:72:60:f3:53:08:c8:09:fe:ef:75:6e:45:80:31:10: 27:c3:0e:6a:91:03:72:51:45:81:6e:b4:fe:aa:d7:06:0c:2b: c0:ca:be:1d:90:7f:17:be:b3:77:9f:22:cc:fb:d3:8c:3a:22: f8:cc:48:44:7c:4f:e1:c9:bd:1c:36:a3:62:30:11:00:c2:44: 5d:ab:41:25:76:64:8a:ef:d6:93:1e:04:16:a4:84:f0:7d:0e: 40:53:e7:85:f6:27:f3:e4:36:20:74:7f:18:6b:db:49:69:c5: 6b:9f:99:f8:0a:1d:12:d3:25:99:2a:5e:01:0d:50:89:2c:ec: f0:81:86:01:57:2f:9c:78:c7:81:c5:3a:c3:85:22:3f:05:3b: 6b:82:64:38:e4:79:cb:16:a2:48:8b:29:7d:f1:7f:94:b1:66: f1:8f:ff:0e:a1:10:80:00:c3:67:1a:fc:e8:3e:c8:c3:fb:7c: 02:f5:23:b8 -----BEGIN CERTIFICATE----- MIIG6jCCBdKgAwIBAgISAZomAoo0mpf9OTHg1bsE76R6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDI3MTQxMTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DaieWurEBQLcYCY6EAodTyaqbQQ rh3SCZkPcEOWWqz8qxNPLfSB58HcJGeDXbDIhNXpoi6RiqbfdoSMXxdLPASKFGds ml5JwaMEbhRvCXg5GbgA5s7MLRABmEsC63QgT1R8y7wGVJgVvobu2VjHNLr/Zf/X StWUiSVhwkgWj710T0N5VQNitqMWaLpmPHZQ0H8rLS5n9CSizbImpJULj/Jx9v5W QxB0RCt3qKkGwri+Y8nngAaAXvBk1wC2T8+tLIFi3WbSSQhb/II2+UM7S70KF7RQ JZvOZggSC4Gs9+CU6hRd6QB7aNofzxyeWVFvfihEeamZfDgaNHpfFpRrBQIDAQAB o4ID9jCCA/IwHQYDVR0OBBYEFCrD2qGxSFDy5hxZKyGRkVpeZaR4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzQwNWJi ZC01OTEzLTRlOTUtOGU3NS1mZTA2NTkxNzZhNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvNDA1YmJk LTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBMbUhGa3JJ WkdSV2w1bHBIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBYgYIKwYB BQUHAQcBAf8EggFRMIIBTTCCATMEAgABMIIBKwMEBAUi0AMEAwXiMAMEAR8ZWAME AyV7wAMEAivhWAMEAC1WVwMEAi2JtAMEAi2LBAMEAi2S8DAMAwQFLvlgAwQDLvlw AwQEUmHwMAsDAwBScwMEAVJzDAMEBFJzEAMEAFfspgMEAln7CAMEAFv2MQMEAFv3 sQMEBl9SAAMEAmcUJAMEAmcZVAMEAmdLxAMEAJIThwMEBZv+YAMEA5//IAMEBbKt 4AMEArLsJAMEArkkwAMEAblQxAMEArmUDAMEArnUPAMEArnX9AMEArnZbAMEArna BAMEArnc7AMEArnnrAMEArn4uDAMAwQAvNGbAwQFvNGAAwQFvP0AAwQFvP1gAwQA wSRJAwQBwSRUAwQAw2CHAwQCyoVYAwQC1FfAAwQC1FpkAwQC1GscMBQEAgACMA4D BQMgARbAAwUDKgXsgDArBggrBgEFBQcBCAEB/wQcMBqgGDAWAgJgjgICYXMCAnv0 AgMA43gCAwDtiDANBgkqhkiG9w0BAQsFAAOCAQEAkqWTSesLUqcfDZ+Z6MWDIs19 J/kUVYSVg0shynxjNQk1wlcvgKTSsi79/477EltnI0HEXtYtXIbFdT05DqnKOd5m GOIloH/C5f+4cmDzUwjICf7vdW5FgDEQJ8MOapEDclFFgW60/qrXBgwrwMq+HZB/ F76zd58izPvTjDoi+MxIRHxP4cm9HDajYjARAMJEXatBJXZkiu/Wkx4EFqSE8H0O QFPnhfYn8+Q2IHR/GGvbSWnFa5+Z+AodEtMlmSpeAQ1QiSzs8IGGAVcvnHjHgcU6 w4UiPwU7a4JkOOR5yxaiSIspffF/lLFm8Y//DqEQgADDZxr86D7Iw/t8AvUjuA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:53 2025 by rpki-client