This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer File: QoNpZxbbzDYLmmLvfYS00o-Vi90.cer (raw, json) Hash identifier: sBOkOmuvcUDyZtE4uExG3vzOh2jOtrxRZX0qXUFXF1M= Subject key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA627523C6CFB1C36E91E3DA45F6818 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29256 AS: 29386 AS: 201550 IP: 5.0.0.0/16 IP: 5.155.0.0/16 IP: 31.9.0.0/16 IP: 46.40.128.0/18 IP: 62.16.80.0/20 IP: 80.70.120.0/21 IP: 82.100.128.0/19 IP: 82.137.192.0/18 IP: 91.144.0.0/18 IP: 94.47.0.0/16 IP: 178.253.64.0/18 IP: 185.41.84.0/22 IP: 185.92.88.0/22 IP: 185.99.100.0/22 IP: 185.109.212.0/22 IP: 188.133.0.0/17 IP: 193.124.10.0 -- 193.124.13.255 IP: 193.124.26.0 -- 193.124.29.255 IP: 193.124.38.0/23 IP: 193.124.52.0/23 IP: 193.124.62.0/23 IP: 193.124.68.0/23 IP: 193.124.72.0/22 IP: 193.124.82.0/23 IP: 193.124.86.0/23 IP: 193.124.96.0/20 IP: 193.124.122.0/23 IP: 193.124.126.0/23 IP: 193.124.152.0 -- 193.124.157.255 IP: 193.124.160.0/20 IP: 193.124.192.0/21 IP: 193.124.208.0/20 IP: 193.124.228.0 -- 193.124.239.255 IP: 193.124.252.0/23 IP: 194.58.0.0 -- 194.58.23.255 IP: 194.58.48.0/21 IP: 194.58.128.0 -- 194.58.151.255 IP: 194.58.156.0/22 IP: 194.58.208.0/21 IP: 194.58.224.0/20 IP: 194.58.248.0/21 IP: 194.135.106.0/23 IP: 194.135.116.0/23 IP: 194.135.248.0/21 IP: 2a03:8b60::/32 IP: 2a04:8180::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:27:52:3c:6c:fb:1c:36:e9:1e:3d:a4:5f:68:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:5d:94:3f:31:ad:e2:7f:b2:c5:e5:8f:ab: 4c:f2:6c:20:6d:9f:11:79:e8:c3:78:ba:5d:f3:82: 6c:24:aa:96:62:6e:4f:45:61:20:bb:60:6e:d6:7d: 4e:89:43:0d:6a:28:9f:9b:6e:28:06:8d:ed:77:ee: 81:c2:ea:21:87:19:d7:e0:50:28:d9:62:a6:7e:74: 2e:5c:a6:b6:dc:6d:73:3d:2c:37:c3:94:47:10:86: b0:d5:c6:7f:b2:1a:96:e9:94:4a:d6:2e:ec:e5:ed: c9:21:e1:dc:28:98:49:37:f1:f9:d5:e8:fb:67:f4: bd:15:56:07:d1:26:63:b0:44:f4:67:81:86:b4:a7: 69:f8:ba:ed:44:bf:da:7e:a6:a4:d5:de:c8:44:5a: 51:de:52:76:03:38:95:76:f5:e3:5a:c5:33:9b:a1: 90:06:a9:37:68:32:61:21:73:5c:85:3d:5d:5f:3f: 3b:87:bf:a4:c5:65:da:1f:ab:c5:e2:ba:29:9f:b7: 6b:04:40:7c:8f:b0:ed:b2:10:f5:3e:db:28:41:de: 63:d3:0a:02:f0:11:ac:0d:e8:a2:0f:8a:47:d1:ef: 4c:85:95:55:b9:c8:1e:96:fe:26:12:9f:d6:b2:f5: 1d:2f:5b:74:3b:1b:49:76:7a:b8:b5:0c:d0:ba:31: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.0.0.0/16 5.155.0.0/16 31.9.0.0/16 46.40.128.0/18 62.16.80.0/20 80.70.120.0/21 82.100.128.0/19 82.137.192.0/18 91.144.0.0/18 94.47.0.0/16 178.253.64.0/18 185.41.84.0/22 185.92.88.0/22 185.99.100.0/22 185.109.212.0/22 188.133.0.0/17 193.124.10.0-193.124.13.255 193.124.26.0-193.124.29.255 193.124.38.0/23 193.124.52.0/23 193.124.62.0/23 193.124.68.0/23 193.124.72.0/22 193.124.82.0/23 193.124.86.0/23 193.124.96.0/20 193.124.122.0/23 193.124.126.0/23 193.124.152.0-193.124.157.255 193.124.160.0/20 193.124.192.0/21 193.124.208.0/20 193.124.228.0-193.124.239.255 193.124.252.0/23 194.58.0.0-194.58.23.255 194.58.48.0/21 194.58.128.0-194.58.151.255 194.58.156.0/22 194.58.208.0/21 194.58.224.0/20 194.58.248.0/21 194.135.106.0/23 194.135.116.0/23 194.135.248.0/21 IPv6: 2a03:8b60::/32 2a04:8180::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29256 29386 201550 Signature Algorithm: sha256WithRSAEncryption 94:24:90:2c:d3:d7:51:0a:66:33:3b:cc:94:9c:b2:bf:86:14: 0b:5f:f3:91:0b:a5:96:e8:77:63:08:59:c6:1a:80:99:cf:f0: 91:f2:20:1d:b7:b1:76:49:1c:fc:87:c7:3c:5c:ed:87:e8:4c: f3:18:47:de:a9:b8:d5:eb:7d:3e:30:ac:d1:a2:f2:8b:a8:ac: 22:69:2f:d6:6f:c9:5e:00:dd:3d:2e:18:e1:6d:ca:62:61:27: 70:4a:91:c9:5c:2b:07:1a:e3:11:5f:f6:c1:42:eb:5b:f8:89: ee:37:1d:46:0f:68:e2:c8:eb:1b:de:14:74:b1:d1:23:4a:05: 8e:1c:04:16:54:77:ba:5e:c8:b2:ee:79:49:d4:a7:15:28:a4: f9:76:c0:ca:4a:4c:a1:cf:b0:87:5b:60:1f:bd:54:97:c2:14: fe:65:07:1b:fa:9a:7e:c9:f9:c8:42:c8:52:f7:65:c8:82:f6: 60:65:79:46:76:de:61:22:14:8e:56:6d:80:f7:b4:61:5f:89: fb:06:93:4b:a0:86:ee:dd:c2:61:9e:34:30:c8:d0:8c:b8:c5: 10:64:08:60:fb:09:99:54:14:b9:2a:ed:96:61:92:fd:d0:25: 79:fe:34:6c:3a:fa:42:ce:d1:44:22:89:f1:43:3f:d5:37:c9: 71:cc:93:f5 -----BEGIN CERTIFICATE----- MIIG6TCCBdGgAwIBAgISAZt+pidSPGz7HDbpHj2kX2gYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjgzNjk2NzE2ZGJjYzM2MGI5YTYyZWY3ZDg0YjRkMjhmOTU4YmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZdlD8xreJ/ssXlj6tM8mwgbZ8R eejDeLpd84JsJKqWYm5PRWEgu2Bu1n1OiUMNaiifm24oBo3td+6BwuohhxnX4FAo 2WKmfnQuXKa23G1zPSw3w5RHEIaw1cZ/shqW6ZRK1i7s5e3JIeHcKJhJN/H51ej7 Z/S9FVYH0SZjsET0Z4GGtKdp+LrtRL/afqak1d7IRFpR3lJ2AziVdvXjWsUzm6GQ Bqk3aDJhIXNchT1dXz87h7+kxWXaH6vF4ropn7drBEB8j7DtshD1PtsoQd5j0woC 8BGsDeiiD4pH0e9MhZVVucgelv4mEp/WsvUdL1t0OxtJdnq4tQzQujFkGQIDAQAB o4ID9TCCA/EwHQYDVR0OBBYEFEKDaWcW28w2C5pi732EtNKPlYvdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzU0NDJj ZS00OGJjLTQxNjQtOTM1MC05MjQwZDlmNzVhZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNTQ0MmNl LTQ4YmMtNDE2NC05MzUwLTkyNDBkOWY3NWFlNi8xL1FvTnBaeGJiekRZTG1tTHZm WVMwMG8tVmk5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBagYIKwYB BQUHAQcBAf8EggFZMIIBVTCCATsEAgABMIIBMwMDAAUAAwMABZsDAwAfCQMEBi4o gAMEBD4QUAMEA1BGeAMEBVJkgAMEBlKJwAMEBluQAAMDAF4vAwQGsv1AAwQCuSlU AwQCuVxYAwQCuWNkAwQCuW3UAwQHvIUAMAwDBAHBfAoDBAHBfAwwDAMEAcF8GgME AcF8HAMEAcF8JgMEAcF8NAMEAcF8PgMEAcF8RAMEAsF8SAMEAcF8UgMEAcF8VgME BMF8YAMEAcF8egMEAcF8fjAMAwQDwXyYAwQBwXycAwQEwXygAwQDwXzAAwQEwXzQ MAwDBALBfOQDBATBfOADBAHBfPwwCwMDAcI6AwQDwjoQAwQDwjowMAwDBAfCOoAD BAPCOpADBALCOpwDBAPCOtADBATCOuADBAPCOvgDBAHCh2oDBAHCh3QDBAPCh/gw FAQCAAIwDgMFACoDi2ADBQEqBIGAMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAnJI AgJyygIDAxNOMA0GCSqGSIb3DQEBCwUAA4IBAQCUJJAs09dRCmYzO8yUnLK/hhQL X/ORC6WW6HdjCFnGGoCZz/CR8iAdt7F2SRz8h8c8XO2H6EzzGEfeqbjV630+MKzR ovKLqKwiaS/Wb8leAN09LhjhbcpiYSdwSpHJXCsHGuMRX/bBQutb+InuNx1GD2ji yOsb3hR0sdEjSgWOHAQWVHe6Xsiy7nlJ1KcVKKT5dsDKSkyhz7CHW2AfvVSXwhT+ ZQcb+pp+yfnIQshS92XIgvZgZXlGdt5hIhSOVm2A97RhX4n7BpNLoIbu3cJhnjQw yNCMuMUQZAhg+wmZVBS5Ku2WYZL90CV5/jRsOvpCztFEIonxQz/VN8lxzJP1 -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:46 2026 by rpki-client