This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer File: SIxl3DWbWMprpdPa64dPBYaE6MY.cer (raw, json) Hash identifier: ZrykkPDT4dvfT4FJOUpOI1INv8Tbk8cWA8hjehvmPiw= Subject key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80D0BE16217E6BA4DEFDE8468648CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29290 AS: 35744 AS: 48635 AS: 200549 AS: 200746 AS: 200837 AS: 202861 AS: 205631 IP: 2.57.56.0/22 IP: 5.157.80.0/21 IP: 31.25.96.0/21 IP: 31.186.168.0/21 IP: 46.17.0.0/21 IP: 62.84.240.0/21 IP: 62.221.248.0/21 IP: 77.94.248.0/21 IP: 79.99.128.0/21 IP: 91.198.106.0/24 IP: 91.203.76.0/22 IP: 91.238.176.0/23 IP: 92.63.168.0/21 IP: 93.180.64.0/21 IP: 93.187.220.0/22 IP: 109.70.0.0/21 IP: 109.72.80.0/20 IP: 109.106.160.0/19 IP: 128.140.216.0/21 IP: 145.131.0.0 -- 145.131.47.255 IP: 176.117.58.0/23 IP: 185.27.140.0/22 IP: 185.27.172.0/22 IP: 185.28.56.0/22 IP: 185.37.68.0/22 IP: 185.56.144.0/22 IP: 185.66.248.0/22 IP: 185.87.184.0/22 IP: 185.89.4.0/22 IP: 185.94.228.0/22 IP: 185.95.28.0/22 IP: 185.103.156.0/22 IP: 185.103.240.0/22 IP: 185.107.212.0/22 IP: 185.107.224.0/22 IP: 185.109.216.0 -- 185.109.227.255 IP: 185.159.240.0/22 IP: 185.175.200.0/22 IP: 185.182.56.0/22 IP: 185.187.12.0/22 IP: 185.223.32.0/22 IP: 185.224.88.0/22 IP: 185.231.200.0/22 IP: 185.232.248.0/22 IP: 185.233.28.0/22 IP: 193.23.143.0/24 IP: 193.164.192.0/23 IP: 194.247.30.0/23 IP: 195.8.208.0/23 IP: 195.20.8.0/22 IP: 195.39.204.0/23 IP: 195.39.214.0/23 IP: 195.238.74.0/23 IP: 2001:678:76c::/48 IP: 2001:67c:28fc::/48 IP: 2a00:f10::/29 IP: 2a00:f60::/32 IP: 2a00:9b60::/32 IP: 2a01:b940::/29 IP: 2a02:2968::/29 IP: 2a02:40c0::/29 IP: 2a03:3060::/29 IP: 2a04:6bc0::/29 IP: 2a04:76c0::/29 IP: 2a05:1500::/29 IP: 2a06:4040::/29 IP: 2a0b:7280::/29 IP: 2a0b:8f80::/29 IP: 2a0c:84c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d0:be:16:21:7e:6b:a4:de:fd:e8:46:86:48:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:db:e3:ad:49:4e:e1:01:b7:a3:75:51:50: 61:18:ac:ff:8e:00:09:07:de:f4:b2:27:99:0e:f9: 96:3d:c0:e9:5c:c9:9a:c9:c6:86:2c:67:f3:28:09: 44:3f:1c:b7:f7:13:4e:87:72:34:4c:56:75:9a:c2: 14:23:d1:cf:f9:4f:6c:90:fb:37:0e:00:42:dd:53: 7d:ea:e4:c6:1e:27:02:05:da:7b:17:7a:80:7a:11: 78:29:04:5e:26:40:b5:1c:fa:8d:4f:14:5c:ac:a1: aa:fc:4c:58:22:49:3b:61:ef:16:94:c0:4d:36:6a: 79:d7:f9:a1:1a:e0:e4:95:f5:8d:42:89:0b:49:ea: fb:3c:8c:c2:86:7c:78:07:9a:09:7d:4e:b0:86:0c: c4:be:8e:a4:50:0f:1f:aa:8e:f7:a5:71:34:0b:f6: 5e:34:08:b9:c5:18:e0:29:97:9b:73:e4:1c:5e:c2: 15:10:d8:15:d3:e4:e2:63:42:3f:b7:26:9e:4f:fc: 69:ad:d5:54:e6:72:c2:15:bf:31:2e:83:c2:d9:af: 15:25:99:5c:14:e2:b7:39:48:25:45:36:cb:38:33: 00:b6:8d:ee:f3:b9:e6:d6:d9:53:8c:6d:a4:97:d1: 4f:25:df:47:0c:63:5c:aa:f7:c5:e9:d9:d7:8c:f2: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.56.0/22 5.157.80.0/21 31.25.96.0/21 31.186.168.0/21 46.17.0.0/21 62.84.240.0/21 62.221.248.0/21 77.94.248.0/21 79.99.128.0/21 91.198.106.0/24 91.203.76.0/22 91.238.176.0/23 92.63.168.0/21 93.180.64.0/21 93.187.220.0/22 109.70.0.0/21 109.72.80.0/20 109.106.160.0/19 128.140.216.0/21 145.131.0.0-145.131.47.255 176.117.58.0/23 185.27.140.0/22 185.27.172.0/22 185.28.56.0/22 185.37.68.0/22 185.56.144.0/22 185.66.248.0/22 185.87.184.0/22 185.89.4.0/22 185.94.228.0/22 185.95.28.0/22 185.103.156.0/22 185.103.240.0/22 185.107.212.0/22 185.107.224.0/22 185.109.216.0-185.109.227.255 185.159.240.0/22 185.175.200.0/22 185.182.56.0/22 185.187.12.0/22 185.223.32.0/22 185.224.88.0/22 185.231.200.0/22 185.232.248.0/22 185.233.28.0/22 193.23.143.0/24 193.164.192.0/23 194.247.30.0/23 195.8.208.0/23 195.20.8.0/22 195.39.204.0/23 195.39.214.0/23 195.238.74.0/23 IPv6: 2001:678:76c::/48 2001:67c:28fc::/48 2a00:f10::/29 2a00:f60::/32 2a00:9b60::/32 2a01:b940::/29 2a02:2968::/29 2a02:40c0::/29 2a03:3060::/29 2a04:6bc0::/29 2a04:76c0::/29 2a05:1500::/29 2a06:4040::/29 2a0b:7280::/29 2a0b:8f80::/29 2a0c:84c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29290 35744 48635 200549 200746 200837 202861 205631 Signature Algorithm: sha256WithRSAEncryption 23:3b:f9:c8:68:80:81:a3:5a:b2:9c:43:52:5e:b2:ad:58:58: 6e:a0:4f:25:67:2b:d8:51:f8:d9:ab:fa:39:2f:ca:78:02:92: fe:29:ee:0f:1a:7d:c0:04:a7:c7:1b:be:61:f7:73:41:c6:c2: a8:39:15:57:85:73:a2:9f:4f:96:48:5b:fd:bf:0b:46:a8:fa: 0f:d9:2b:c8:2e:71:01:4e:12:8c:f9:f5:6a:c5:da:62:43:9f: c9:bb:78:9f:53:d2:32:81:a0:88:ff:24:c7:f9:28:ca:27:fb: a8:15:da:0e:0c:47:40:0c:e9:a7:9d:44:60:3d:ce:da:67:fd: bd:4b:f0:b8:2d:d6:2b:2e:d7:67:e2:56:32:a6:bd:bb:76:58: f5:f5:bf:f4:76:0b:30:0b:da:e0:23:1f:a9:7d:ef:46:7a:21: 3e:71:0b:7c:06:39:2a:5f:d1:2a:78:40:45:1c:3b:ae:63:6a: 21:1f:80:71:71:26:f1:13:5b:71:a5:35:08:3e:55:10:2b:c5: 86:48:ec:03:ef:94:a4:93:ab:99:7e:69:a4:8d:8a:94:51:e5: e6:9b:45:ab:1f:d1:a4:ff:79:24:ef:ac:a0:da:3f:0b:5f:76: 5a:a3:12:7c:e3:b1:22:e7:5b:6d:44:64:75:fe:97:dd:b5:15: 85:59:19:8e -----BEGIN CERTIFICATE----- MIIHgzCCBmugAwIBAgISAZt/gNC+FiF+a6Te/ehGhkjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODhjNjVkYzM1OWI1OGNhNmJhNWQzZGFlYjg3NGYwNTg2ODRlOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvzb461JTuEBt6N1UVBhGKz/jgAJ B970sieZDvmWPcDpXMmaycaGLGfzKAlEPxy39xNOh3I0TFZ1msIUI9HP+U9skPs3 DgBC3VN96uTGHicCBdp7F3qAehF4KQReJkC1HPqNTxRcrKGq/ExYIkk7Ye8WlMBN Nmp51/mhGuDklfWNQokLSer7PIzChnx4B5oJfU6whgzEvo6kUA8fqo73pXE0C/Ze NAi5xRjgKZebc+QcXsIVENgV0+TiY0I/tyaeT/xprdVU5nLCFb8xLoPC2a8VJZlc FOK3OUglRTbLODMAto3u87nm1tlTjG2kl9FPJd9HDGNcqvfF6dnXjPKvZwIDAQAB o4IEjzCCBIswHQYDVR0OBBYEFEiMZdw1m1jKa6XT2uuHTwWGhOjGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2M0ODI3 MS1kZWU1LTQ4NDEtYTdkZC1iMGQ3MmU5MTBlZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvYzQ4Mjcx LWRlZTUtNDg0MS1hN2RkLWIwZDcyZTkxMGVmZS8xL1NJeGwzRFdiV01wcnBkUGE2 NGRQQllhRTZNWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB6gYIKwYB BQUHAQcBAf8EggHZMIIB1TCCAVUEAgABMIIBTQMEAgI5OAMEAwWdUAMEAx8ZYAME Ax+6qAMEAy4RAAMEAz5U8AMEAz7d+AMEA01e+AMEA09jgAMEAFvGagMEAlvLTAME AVvusAMEA1w/qAMEA120QAMEAl273AMEA21GAAMEBG1IUAMEBW1qoAMEA4CM2DAL AwMAkYMDBASRgyADBAGwdToDBAK5G4wDBAK5G6wDBAK5HDgDBAK5JUQDBAK5OJAD BAK5QvgDBAK5V7gDBAK5WQQDBAK5XuQDBAK5XxwDBAK5Z5wDBAK5Z/ADBAK5a9QD BAK5a+AwDAMEA7lt2AMEArlt4AMEArmf8AMEArmvyAMEArm2OAMEArm7DAMEArnf IAMEArngWAMEArnnyAMEArno+AMEArnpHAMEAMEXjwMEAcGkwAMEAcL3HgMEAcMI 0AMEAsMUCAMEAcMnzAMEAcMn1gMEAcPuSjB6BAIAAjB0AwcAIAEGeAdsAwcAIAEG fCj8AwUDKgAPEAMFACoAD2ADBQAqAJtgAwUDKgG5QAMFAyoCKWgDBQMqAkDAAwUD KgMwYAMFAyoEa8ADBQMqBHbAAwUDKgUVAAMFAyoGQEADBQMqC3KAAwUDKguPgAMF AyoMhMAwPAYIKwYBBQUHAQgBAf8ELTAroCkwJwICcmoCAwCLoAIDAL37AgMDD2UC AwMQKgIDAxCFAgMDGG0CAwMjPzANBgkqhkiG9w0BAQsFAAOCAQEAIzv5yGiAgaNa spxDUl6yrVhYbqBPJWcr2FH42av6OS/KeAKS/inuDxp9wASnxxu+YfdzQcbCqDkV V4Vzop9Plkhb/b8LRqj6D9kryC5xAU4SjPn1asXaYkOfybt4n1PSMoGgiP8kx/ko yif7qBXaDgxHQAzpp51EYD3O2mf9vUvwuC3WKy7XZ+JWMqa9u3ZY9fW/9HYLMAva 4CMfqX3vRnohPnELfAY5Kl/RKnhARRw7rmNqIR+AcXEm8RNbcaU1CD5VECvFhkjs A++UpJOrmX5ppI2KlFHl5ptFqx/RpP95JO+soNo/C192WqMSfOOxIudbbURkdf6X 3bUVhVkZjg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:38 2026 by rpki-client