This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer (raw, json) Hash identifier: c7G45WpIrZTcyuDmuB8f/vOCOiOPMFvfiZQbvFfPxNo= Subject key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15FB9016FCF0E7DC145834EAE61A74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20616 AS: 25116 AS: 34358 AS: 44043 AS: 59629 AS: 59854 IP: 31.14.12.0/22 IP: 31.14.22.0/23 IP: 37.251.128.0 -- 37.251.175.255 IP: 37.251.248.0/21 IP: 46.102.144.0/22 IP: 46.102.249.0/24 IP: 77.81.164.0/23 IP: 86.105.192.0/24 IP: 89.32.44.0/22 IP: 89.33.236.0/23 IP: 89.35.173.0/24 IP: 89.36.128.0/21 IP: 89.38.248.0/21 IP: 89.42.11.0/24 IP: 89.44.47.0/24 IP: 89.44.120.0/24 IP: 89.44.138.0/23 IP: 89.45.168.0/21 IP: 89.45.192.0/21 IP: 89.46.6.0/23 IP: 91.195.28.0/23 IP: 91.200.120.0/22 IP: 91.208.142.0/24 IP: 92.114.94.0/23 IP: 93.115.112.0/21 IP: 93.119.152.0/23 IP: 93.119.227.0/24 IP: 94.24.29.0/24 IP: 94.24.48.0/21 IP: 94.24.72.0 -- 94.24.78.255 IP: 94.176.104.0/23 IP: 109.95.8.0/21 IP: 128.0.46.0/23 IP: 176.126.200.0/22 IP: 176.223.120.0/21 IP: 185.92.192.0/22 IP: 185.171.184.0/22 IP: 188.212.156.0/24 IP: 188.213.20.0/23 IP: 188.214.142.0/24 IP: 188.215.48.0/21 IP: 188.215.244.0/23 IP: 188.215.250.0/23 IP: 188.240.2.0/23 IP: 188.240.235.0/24 IP: 188.241.183.0/24 IP: 193.239.130.0/23 IP: 193.242.120.0/24 IP: 195.246.242.0/23 IP: 2a02:a88::/32 IP: 2a05:f2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fb:90:16:fc:f0:e7:dc:14:58:34:ea:e6:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:7f:e2:17:50:80:6b:d0:13:bd:17:66:74: e0:6d:23:c2:b0:20:df:63:e0:99:cf:9f:51:14:08: 9c:ac:a1:b0:f2:36:34:33:52:ff:79:87:3f:0a:83: 5f:7a:1c:9b:c1:8d:fa:7a:7e:b2:7e:94:4e:66:3b: 0d:d8:ea:09:91:29:db:5f:e1:11:5c:bb:95:2e:47: 0d:f5:30:94:36:96:56:3f:12:ac:91:d6:df:f4:f8: d2:af:5a:68:d9:dc:f7:dd:e7:c5:93:e4:0a:72:d9: cc:15:51:5f:10:a3:9e:31:2c:3e:af:23:e3:34:c5: 61:b6:f7:a3:a9:f6:32:34:dd:d3:5a:de:cf:2f:59: 83:c7:ab:22:ab:5d:a9:10:d1:c9:76:aa:f5:57:bc: 77:f5:87:bc:70:f0:26:58:30:74:7c:41:47:2e:75: ce:03:65:bf:de:62:bf:81:47:74:58:e3:70:6d:01: 75:db:e5:6d:85:55:e3:7c:af:ed:0d:a8:e3:1c:13: 8c:ee:ed:b4:f0:9d:fd:b8:c0:52:4a:7b:dd:17:48: f8:b6:fd:84:b8:a2:f9:80:1e:8f:1b:30:59:2b:b1: aa:c2:f0:6b:c0:7d:73:64:18:88:c6:e8:53:62:f0: 44:aa:96:a6:33:ec:79:20:54:37:7d:ef:b2:04:da: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.12.0/22 31.14.22.0/23 37.251.128.0-37.251.175.255 37.251.248.0/21 46.102.144.0/22 46.102.249.0/24 77.81.164.0/23 86.105.192.0/24 89.32.44.0/22 89.33.236.0/23 89.35.173.0/24 89.36.128.0/21 89.38.248.0/21 89.42.11.0/24 89.44.47.0/24 89.44.120.0/24 89.44.138.0/23 89.45.168.0/21 89.45.192.0/21 89.46.6.0/23 91.195.28.0/23 91.200.120.0/22 91.208.142.0/24 92.114.94.0/23 93.115.112.0/21 93.119.152.0/23 93.119.227.0/24 94.24.29.0/24 94.24.48.0/21 94.24.72.0-94.24.78.255 94.176.104.0/23 109.95.8.0/21 128.0.46.0/23 176.126.200.0/22 176.223.120.0/21 185.92.192.0/22 185.171.184.0/22 188.212.156.0/24 188.213.20.0/23 188.214.142.0/24 188.215.48.0/21 188.215.244.0/23 188.215.250.0/23 188.240.2.0/23 188.240.235.0/24 188.241.183.0/24 193.239.130.0/23 193.242.120.0/24 195.246.242.0/23 IPv6: 2a02:a88::/32 2a05:f2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20616 25116 34358 44043 59629 59854 Signature Algorithm: sha256WithRSAEncryption 9b:a5:74:ec:3f:49:25:a5:b3:83:03:41:bb:6d:1a:51:ef:56: 76:1b:65:62:cb:19:14:17:7c:65:1d:36:fa:54:b2:ec:48:3b: ca:2e:a0:77:73:1b:3d:cf:70:14:01:b9:1b:99:7a:3f:35:23: cb:09:a7:0c:54:ce:78:3f:28:73:33:fb:c1:a2:76:4c:7f:33: 7d:e3:18:32:24:b3:dc:29:68:fa:18:ff:61:4f:d3:ac:1e:df: 23:3b:fb:d9:e9:27:8b:df:69:a5:dd:24:df:32:f7:2d:d2:31: 89:f8:ec:d7:f2:c3:65:f9:52:af:86:df:0b:ae:61:43:87:b2: 88:46:cf:f6:07:46:0f:6e:44:34:34:a5:94:7f:c6:6b:08:06: 63:55:73:78:5a:78:e6:b1:52:bf:7f:a5:d6:32:80:9a:7b:98: 8d:6d:51:b4:d7:29:4e:0d:53:05:65:64:39:75:4f:3e:53:ed: e2:23:de:c0:85:26:3a:a8:2d:2b:30:34:8f:ba:dd:72:6e:bf: 0c:09:ce:2e:4b:85:32:c9:32:be:a0:75:cd:a0:4e:51:99:39: f2:0b:b5:b5:fa:62:9e:a2:03:ba:48:5c:23:fe:b2:c1:2d:7c: d7:95:13:64:d3:bf:d3:51:7d:8e:da:81:a9:01:a5:af:62:8a: 3a:46:0d:fe -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgISAZt/FfuQFvzw59wUWDTq5hp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDhhZjQ4NWI0ZmQwZjAzNzE3Y2Q0YTcwOWVmMTFjNjFkM2VmNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxp/4hdQgGvQE70XZnTgbSPCsCDf Y+CZz59RFAicrKGw8jY0M1L/eYc/CoNfehybwY36en6yfpROZjsN2OoJkSnbX+ER XLuVLkcN9TCUNpZWPxKskdbf9PjSr1po2dz33efFk+QKctnMFVFfEKOeMSw+ryPj NMVhtvejqfYyNN3TWt7PL1mDx6siq12pENHJdqr1V7x39Ye8cPAmWDB0fEFHLnXO A2W/3mK/gUd0WONwbQF12+VthVXjfK/tDajjHBOM7u208J39uMBSSnvdF0j4tv2E uKL5gB6PGzBZK7GqwvBrwH1zZBiIxuhTYvBEqpamM+x5IFQ3fe+yBNr0wQIDAQAB o4IEBzCCBAMwHQYDVR0OBBYEFECK9IW0/Q8DcXzUpwnvEcYdPvRuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2UxMTcx Yy01MjcwLTQ5Y2QtOTM3OS1iOTViMDhhMjNhZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZTExNzFj LTUyNzAtNDljZC05Mzc5LWI5NWIwOGEyM2FlMS8xL1FJcjBoYlQ5RHdOeGZOU25D ZThSeGgwLTlHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBbQYIKwYB BQUHAQcBAf8EggFcMIIBWDCCAT4EAgABMIIBNgMEAh8ODAMEAR8OFjAMAwQHJfuA AwQEJfugAwQDJfv4AwQCLmaQAwQALmb5AwQBTVGkAwQAVmnAAwQCWSAsAwQBWSHs AwQAWSOtAwQDWSSAAwQDWSb4AwQAWSoLAwQAWSwvAwQAWSx4AwQBWSyKAwQDWS2o AwQDWS3AAwQBWS4GAwQBW8McAwQCW8h4AwQAW9COAwQBXHJeAwQDXXNwAwQBXXeY AwQAXXfjAwQAXhgdAwQDXhgwMAwDBANeGEgDBABeGE4DBAFesGgDBANtXwgDBAGA AC4DBAKwfsgDBAOw33gDBAK5XMADBAK5q7gDBAC81JwDBAG81RQDBAC81o4DBAO8 1zADBAG81/QDBAG81/oDBAG88AIDBAC88OsDBAC88bcDBAHB74IDBADB8ngDBAHD 9vIwFAQCAAIwDgMFACoCCogDBQMqBfLAMDEGCCsGAQUFBwEIAQH/BCIwIKAeMBwC AlCIAgJiHAIDAIY2AgMArAsCAwDo7QIDAOnOMA0GCSqGSIb3DQEBCwUAA4IBAQCb pXTsP0klpbODA0G7bRpR71Z2G2ViyxkUF3xlHTb6VLLsSDvKLqB3cxs9z3AUAbkb mXo/NSPLCacMVM54PyhzM/vBonZMfzN94xgyJLPcKWj6GP9hT9OsHt8jO/vZ6SeL 32ml3STfMvct0jGJ+OzX8sNl+VKvht8LrmFDh7KIRs/2B0YPbkQ0NKWUf8ZrCAZj VXN4WnjmsVK/f6XWMoCae5iNbVG01ylODVMFZWQ5dU8+U+3iI97AhSY6qC0rMDSP ut1ybr8MCc4uS4UyyTK+oHXNoE5RmTnyC7W1+mKeogO6SFwj/rLBLXzXlRNk07/T UX2O2oGpAaWvYoo6Rg3+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:25 2026 by rpki-client