This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer File: SeFL929C2k8qwAOmxp1hwjIOLNg.cer (raw, json) Hash identifier: HBwFWXkbJl18xHuU3B4FnJcxsUhJ7MBEpLePtlxfmE8= Subject key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E383867F52DBBB3AE26BC64FFEAA21A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213817 IP: 5.172.180.0/24 IP: 37.72.135.0/24 IP: 46.226.125.0/24 IP: 62.68.92.0/24 IP: 62.233.36.0/24 IP: 91.246.59.0/24 IP: 94.154.116.0/24 IP: 130.255.168.0/24 IP: 146.19.67.0/24 IP: 146.19.189.0/24 IP: 176.118.34.0/24 IP: 178.211.150.0/24 IP: 185.21.131.0/24 IP: 185.25.104.0/24 IP: 185.83.231.0/24 IP: 185.149.148.0/24 IP: 185.235.227.0/24 IP: 185.248.135.0/24 IP: 193.3.169.0/24 IP: 193.108.131.0/24 IP: 194.62.104.0/24 IP: 194.104.135.0/24 IP: 195.225.98.0/24 IP: 212.23.195.0/24 IP: 212.52.29.0/24 IP: 217.114.39.0/24 IP: 2a04:ca80::/29 IP: 2a07:dd80::/29 IP: 2a09:8140::/29 IP: 2a0a:ca40::/29 IP: 2a0c:b140::/29 IP: 2a0c:b500::/29 IP: 2a11:2dc0::/29 IP: 2a11:4840::/29 IP: 2a11:4d00::/29 IP: 2a11:5a00::/29 IP: 2a11:5c00::/29 IP: 2a11:5e40::/29 IP: 2a11:76c0::/29 IP: 2a11:9f80::/29 IP: 2a11:a4c0::/29 IP: 2a11:a900::/29 IP: 2a11:bf40::/29 IP: 2a11:cf80::/29 IP: 2a11:fa00::/29 IP: 2a12:200::/29 IP: 2a12:3000::/29 IP: 2a12:4480::/29 IP: 2a12:7500::/29 IP: 2a12:a680::/29 IP: 2a12:e600::/29 IP: 2a12:f700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:38:67:f5:2d:bb:b3:ae:26:bc:64:ff:ea:a2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:ad:f7:1f:9d:50:7a:98:d3:25:ae:5e:17: fc:67:b1:c3:85:e0:2e:04:99:74:17:07:c6:11:28: 3c:1c:7a:48:c4:f6:88:10:0a:24:6e:7c:d8:e4:d8: cd:9e:95:13:97:86:56:7c:8f:c8:65:89:8c:da:77: ea:76:4f:52:7d:0f:a1:b0:b7:c8:1e:bb:5b:0c:72: 66:fc:51:cc:d2:14:77:1b:74:98:d6:26:71:1f:25: 4d:03:12:83:22:cd:81:cb:4e:ca:b0:89:e5:79:6e: b9:d0:8f:d2:53:9c:35:10:a6:5d:df:f6:35:31:9b: ab:91:df:cb:7d:6d:73:e7:5b:3a:e4:10:87:ea:9d: 00:7e:08:d6:64:a4:7c:ca:64:ad:16:df:71:de:7f: 64:da:7c:c2:84:b0:c2:9f:6a:45:32:f3:88:0c:d9: 9e:ab:00:d1:b7:06:d5:99:6f:1d:f1:7b:8f:63:90: 72:87:98:17:2e:9a:7a:aa:e3:24:6d:be:dd:1d:b7: 18:95:e1:a3:3d:e1:f7:22:f9:d6:07:e6:94:87:fc: d9:47:7d:90:a9:14:5d:9c:b3:6f:1c:fe:d4:13:c5: 22:65:61:9f:c3:b0:1b:3b:41:37:a7:28:1b:65:6b: 84:1e:e3:39:4f:9f:ec:ce:c5:a8:03:42:12:28:f6: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.180.0/24 37.72.135.0/24 46.226.125.0/24 62.68.92.0/24 62.233.36.0/24 91.246.59.0/24 94.154.116.0/24 130.255.168.0/24 146.19.67.0/24 146.19.189.0/24 176.118.34.0/24 178.211.150.0/24 185.21.131.0/24 185.25.104.0/24 185.83.231.0/24 185.149.148.0/24 185.235.227.0/24 185.248.135.0/24 193.3.169.0/24 193.108.131.0/24 194.62.104.0/24 194.104.135.0/24 195.225.98.0/24 212.23.195.0/24 212.52.29.0/24 217.114.39.0/24 IPv6: 2a04:ca80::/29 2a07:dd80::/29 2a09:8140::/29 2a0a:ca40::/29 2a0c:b140::/29 2a0c:b500::/29 2a11:2dc0::/29 2a11:4840::/29 2a11:4d00::/29 2a11:5a00::/29 2a11:5c00::/29 2a11:5e40::/29 2a11:76c0::/29 2a11:9f80::/29 2a11:a4c0::/29 2a11:a900::/29 2a11:bf40::/29 2a11:cf80::/29 2a11:fa00::/29 2a12:200::/29 2a12:3000::/29 2a12:4480::/29 2a12:7500::/29 2a12:a680::/29 2a12:e600::/29 2a12:f700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213817 Signature Algorithm: sha256WithRSAEncryption 14:c1:fb:51:c3:a5:7f:98:8c:33:76:4d:13:58:2b:64:7d:12: 7e:25:ec:98:05:ab:67:1c:80:c6:f4:0e:6f:4d:c0:e2:84:d4: 4e:60:cd:3c:7a:b0:41:e4:4e:f0:92:94:c1:03:96:b5:af:e0: 55:3f:2a:ca:1e:bb:6c:7e:d5:09:a8:bf:a8:5e:34:1d:23:5a: d3:48:ad:58:4e:16:be:4f:d7:ae:46:7f:5a:5d:6e:49:57:3f: 9a:75:84:a2:df:39:c1:2f:88:c5:fe:89:02:46:f4:3a:f4:f8: 9f:52:f1:7b:66:96:35:70:71:ae:a2:03:bd:62:5b:0f:3b:1c: 49:9a:81:57:72:75:49:ff:01:2d:a7:9f:f6:0a:96:10:54:69: d0:a5:7d:ee:2f:67:c9:77:b5:40:da:2f:a7:70:54:18:fe:38: fd:f2:18:f7:b0:5b:c4:7c:d8:1b:13:43:80:d6:7e:00:93:37: 80:a0:a4:d1:90:67:64:4a:f0:7a:f5:a7:be:c1:5d:5f:56:d5: 61:bc:25:e6:ee:18:06:50:25:e8:0c:8e:39:c0:01:17:21:b2: c0:74:dd:b6:2a:e4:59:c6:74:02:78:da:68:21:0e:30:14:ca: a7:59:68:5e:81:08:1f:c8:37:7c:19:4e:17:35:1c:80:39:76: 99:b8:37:50 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgISAZt+ODhn9S27s64mvGT/6qIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWUxNGJmNzZmNDJkYTRmMmFjMDAzYTZjNjlkNjFjMjMyMGUyY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplet9x+dUHqY0yWuXhf8Z7HDheAu BJl0FwfGESg8HHpIxPaIEAokbnzY5NjNnpUTl4ZWfI/IZYmM2nfqdk9SfQ+hsLfI HrtbDHJm/FHM0hR3G3SY1iZxHyVNAxKDIs2By07KsInleW650I/SU5w1EKZd3/Y1 MZurkd/LfW1z51s65BCH6p0AfgjWZKR8ymStFt9x3n9k2nzChLDCn2pFMvOIDNme qwDRtwbVmW8d8XuPY5Byh5gXLpp6quMkbb7dHbcYleGjPeH3IvnWB+aUh/zZR32Q qRRdnLNvHP7UE8UiZWGfw7AbO0E3pygbZWuEHuM5T5/szsWoA0ISKPY8JQIDAQAB o4ID/jCCA/owHQYDVR0OBBYEFEnhS/dvQtpPKsADpsadYcIyDizYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzU2MTY3 Zi01MzI3LTRjODgtYjRlYS0zYmVjY2FhZTMzNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNTYxNjdm LTUzMjctNGM4OC1iNGVhLTNiZWNjYWFlMzM2ZC8xL1NlRkw5MjlDMms4cXdBT214 cDFod2pJT0xOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBewYIKwYB BQUHAQcBAf8EggFqMIIBZjCBowQCAAEwgZwDBAAFrLQDBAAlSIcDBAAu4n0DBAA+ RFwDBAA+6SQDBABb9jsDBABemnQDBACC/6gDBACSE0MDBACSE70DBACwdiIDBACy 05YDBAC5FYMDBAC5GWgDBAC5U+cDBAC5lZQDBAC56+MDBAC5+IcDBADBA6kDBADB bIMDBADCPmgDBADCaIcDBADD4WIDBADUF8MDBADUNB0DBADZcicwgb0EAgACMIG2 AwUDKgTKgAMFAyoH3YADBQMqCYFAAwUDKgrKQAMFAyoMsUADBQMqDLUAAwUDKhEt wAMFAyoRSEADBQMqEU0AAwUDKhFaAAMFAyoRXAADBQMqEV5AAwUDKhF2wAMFAyoR n4ADBQMqEaTAAwUDKhGpAAMFAyoRv0ADBQMqEc+AAwUDKhH6AAMFAyoSAgADBQMq EjAAAwUDKhJEgAMFAyoSdQADBQMqEqaAAwUDKhLmAAMFAyoS9wAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDA0M5MA0GCSqGSIb3DQEBCwUAA4IBAQAUwftRw6V/mIwz dk0TWCtkfRJ+JeyYBatnHIDG9A5vTcDihNROYM08erBB5E7wkpTBA5a1r+BVPyrK HrtsftUJqL+oXjQdI1rTSK1YTha+T9euRn9aXW5JVz+adYSi3znBL4jF/okCRvQ6 9PifUvF7ZpY1cHGuogO9YlsPOxxJmoFXcnVJ/wEtp5/2CpYQVGnQpX3uL2fJd7VA 2i+ncFQY/jj98hj3sFvEfNgbE0OA1n4AkzeAoKTRkGdkSvB69ae+wV1fVtVhvCXm 7hgGUCXoDI45wAEXIbLAdN22KuRZxnQCeNpoIQ4wFMqnWWhegQgfyDd8GU4XNRyA OXaZuDdQ -----END CERTIFICATE-----Generated at Sun Jan 25 21:00:10 2026 by rpki-client