This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer (raw, json) Hash identifier: N3Hadh0ykqFc+lFUKrJk27SEMCLS6ypNRyUbWKJU9a8= Subject key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED494CC641ADFEC79D01669FDBCFFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205836 AS: 207579 AS: 209909 -- 209910 IP: 5.252.92.0/22 IP: 5.253.156.0/22 IP: 45.65.64.0/22 IP: 45.92.184.0/22 IP: 46.149.106.0/24 IP: 62.122.228.0/22 IP: 81.172.68.0/22 IP: 91.210.126.0/24 IP: 185.85.254.0/24 IP: 185.146.67.0/24 IP: 185.157.128.0/22 IP: 185.200.76.0/22 IP: 185.204.202.0/24 IP: 185.210.192.0/22 IP: 185.218.160.0/22 IP: 185.236.248.0/22 IP: 193.84.48.0/23 IP: 193.84.92.0/23 IP: 2a07:a4c0::/29 IP: 2a0b:d940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:49:4c:c6:41:ad:fe:c7:9d:01:66:9f:db:cf:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:fc:e0:24:fc:e4:f7:f1:cc:73:e7:00:96: 62:49:8a:41:80:d2:43:22:15:4a:5a:45:14:a3:34: ef:48:bb:47:89:4e:d7:3a:0c:e9:82:a2:cb:e1:47: de:87:d8:73:de:c2:42:c6:ef:ba:a1:92:58:ca:a0: 0f:7a:8f:2c:57:82:44:6c:7e:9b:89:03:eb:af:01: 89:12:a1:04:76:94:d8:8d:e5:45:77:4c:68:8d:93: 83:ac:8d:1b:93:ba:c2:f2:bc:ab:c6:c1:cb:7f:a1: 75:f3:f2:96:ce:86:3d:6c:91:80:9a:36:91:c7:fa: 2d:ab:0e:45:00:36:f0:fc:bb:4c:7a:7d:52:fe:2d: 16:9c:61:a4:f1:74:e7:c4:9d:87:70:a4:7f:c2:df: fc:8b:8a:d0:92:da:c7:1f:a0:d5:ff:d7:54:37:ae: 46:4b:3a:a7:f7:b8:07:d6:85:ff:cc:c8:3a:4e:30: 15:6d:6e:02:20:e3:1c:b9:87:f1:a4:16:d7:68:aa: 82:f9:40:a7:e1:c4:77:b4:69:cd:57:c6:03:7c:c8: 35:07:38:ec:3e:df:fb:ac:4a:38:f0:ce:6c:e4:48: 65:03:e8:5b:98:32:ac:54:6d:f1:ef:56:eb:c5:b3: 15:c3:e0:20:6e:4a:7b:05:79:95:42:42:d6:12:8d: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.92.0/22 5.253.156.0/22 45.65.64.0/22 45.92.184.0/22 46.149.106.0/24 62.122.228.0/22 81.172.68.0/22 91.210.126.0/24 185.85.254.0/24 185.146.67.0/24 185.157.128.0/22 185.200.76.0/22 185.204.202.0/24 185.210.192.0/22 185.218.160.0/22 185.236.248.0/22 193.84.48.0/23 193.84.92.0/23 IPv6: 2a07:a4c0::/29 2a0b:d940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205836 207579 209909-209910 Signature Algorithm: sha256WithRSAEncryption 11:90:a5:97:50:ad:19:5a:46:56:19:0c:f6:41:70:93:c6:c0: 1c:15:d1:76:0e:89:b2:9d:9e:47:b3:d1:4b:a9:74:d4:92:45: e3:a5:e9:e6:ff:a2:b6:a7:2c:45:85:39:0b:eb:54:fd:e1:3b: 6b:cd:36:3c:d9:19:1a:83:c7:bd:6c:2e:58:83:1b:ec:a0:b6: 86:43:ae:1d:5d:ab:8e:7c:51:0e:4d:ce:38:fc:04:b1:c6:dc: 22:f2:1e:21:86:c6:33:84:a4:ef:8d:52:d2:b7:fd:7f:2b:46: 12:89:1c:78:e9:4a:61:3d:f0:c3:f9:2a:88:00:30:cd:04:29: 0e:be:f3:3e:c6:54:41:38:09:97:0c:de:35:eb:c4:64:4c:43: 53:b1:59:7b:bd:92:b7:c1:9a:9c:fe:31:99:1d:a8:b5:de:17: ec:0c:d3:95:3d:41:e5:43:00:60:65:7e:fb:83:65:ee:82:ba: 66:84:70:a6:ce:af:b4:ab:09:3a:dc:1e:9c:0d:da:09:df:78: 91:2d:e2:94:d2:1f:00:cf:6e:78:3e:83:a4:a9:be:69:ea:d6: fb:47:de:75:b8:48:e1:87:30:c5:13:42:f9:72:25:8e:28:95: 75:c8:2e:34:95:d2:22:c2:1f:f9:3f:79:d3:39:c3:da:01:f8: f1:b7:9b:28 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZt87UlMxkGt/sedAWaf28/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzcwMjFkY2RmNDRiNmFmZGQzODEwNTQ3YzU1YTc5YmQxYTlmYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K384CT85PfxzHPnAJZiSYpBgNJD IhVKWkUUozTvSLtHiU7XOgzpgqLL4Ufeh9hz3sJCxu+6oZJYyqAPeo8sV4JEbH6b iQPrrwGJEqEEdpTYjeVFd0xojZODrI0bk7rC8ryrxsHLf6F18/KWzoY9bJGAmjaR x/otqw5FADbw/LtMen1S/i0WnGGk8XTnxJ2HcKR/wt/8i4rQktrHH6DV/9dUN65G Szqn97gH1oX/zMg6TjAVbW4CIOMcuYfxpBbXaKqC+UCn4cR3tGnNV8YDfMg1Bzjs Pt/7rEo48M5s5EhlA+hbmDKsVG3x71brxbMVw+Agbkp7BXmVQkLWEo3F4wIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFFdwIdzfRLav3TgQVHxVp5vRqfo7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzBhYzI3 YS0yMTU5LTQ4ZDctOGJmZC1jOTA3YWUxYzIxMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMGFjMjdh LTIxNTktNDhkNy04YmZkLWM5MDdhZTFjMjExZS8xL1YzQWgzTjlFdHFfZE9CQlVm RldubTlHcC1qcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGdBggrBgEF BQcBBwEB/wSBjTCBijByBAIAATBsAwQCBfxcAwQCBf2cAwQCLUFAAwQCLVy4AwQA LpVqAwQCPnrkAwQCUaxEAwQAW9J+AwQAuVX+AwQAuZJDAwQCuZ2AAwQCuchMAwQA uczKAwQCudLAAwQCudqgAwQCuez4AwQBwVQwAwQBwVRcMBQEAgACMA4DBQMqB6TA AwUDKgvZQDArBggrBgEFBQcBCAEB/wQcMBqgGDAWAgMDJAwCAwMq2zAKAgMDM/UC AwMz9jANBgkqhkiG9w0BAQsFAAOCAQEAEZCll1CtGVpGVhkM9kFwk8bAHBXRdg6J sp2eR7PRS6l01JJF46Xp5v+itqcsRYU5C+tU/eE7a802PNkZGoPHvWwuWIMb7KC2 hkOuHV2rjnxRDk3OOPwEscbcIvIeIYbGM4Sk741S0rf9fytGEokceOlKYT3ww/kq iAAwzQQpDr7zPsZUQTgJlwzeNevEZExDU7FZe72St8GanP4xmR2otd4X7AzTlT1B 5UMAYGV++4Nl7oK6ZoRwps6vtKsJOtwenA3aCd94kS3ilNIfAM9ueD6DpKm+aerW +0fedbhI4YcwxRNC+XIljiiVdcguNJXSIsIf+T950znD2gH48bebKA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:37 2026 by rpki-client