This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer (raw, json) Hash identifier: BkutLDuVDkDS4TtTTYasMaA7A7eHB7TbLaoSqsqr6iM= Subject key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA397FA05F2465847C74EFB1C5ADF62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24631 AS: 43343 AS: 203558 AS: 206065 IP: 5.200.64.0/19 IP: 31.24.200.0/21 IP: 31.25.104.0/21 IP: 31.217.208.0/21 IP: 37.19.80.0/20 IP: 37.114.192.0/18 IP: 37.191.64.0/19 IP: 37.221.0.0/18 IP: 37.235.16.0/20 IP: 45.128.140.0/22 IP: 45.144.124.0/22 IP: 46.32.0.0/19 IP: 46.34.164.0 -- 46.34.191.255 IP: 78.111.8.0/21 IP: 78.154.32.0/19 IP: 78.158.160.0/19 IP: 79.132.200.0 -- 79.132.223.255 IP: 79.174.160.0/21 IP: 80.71.112.0/20 IP: 80.253.128.0/19 IP: 81.29.240.0/20 IP: 81.91.144.0/20 IP: 86.109.32.0/19 IP: 87.247.179.0 -- 87.247.183.255 IP: 89.235.68.0 -- 89.235.79.255 IP: 91.184.64.0/20 IP: 92.61.184.0/21 IP: 92.119.68.0/22 IP: 94.139.160.0/20 IP: 109.201.0.0/19 IP: 109.230.64.0/19 IP: 176.221.64.0/21 IP: 178.248.40.0/21 IP: 185.4.16.0/22 IP: 185.12.60.0/22 IP: 185.21.68.0/22 IP: 185.21.76.0/22 IP: 185.30.76.0/22 IP: 185.40.240.0/22 IP: 185.45.188.0/22 IP: 185.70.60.0/22 IP: 185.82.164.0/22 IP: 185.85.68.0/22 IP: 185.101.228.0/22 IP: 185.104.228.0/22 IP: 185.133.152.0/22 IP: 185.142.232.0/22 IP: 185.153.184.0/22 IP: 185.172.0.0/22 IP: 185.190.20.0/22 IP: 185.197.68.0/22 IP: 185.208.148.0/22 IP: 188.75.64.0/18 IP: 188.121.128.0/19 IP: 188.136.128.0/21 IP: 188.136.140.0 -- 188.136.223.255 IP: 213.195.0.0 -- 213.195.23.255 IP: 213.207.192.0/20 IP: 217.66.192.0/19 IP: 217.146.208.0/20 IP: 2a06:db80::/29 IP: 2a0c:100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:97:fa:05:f2:46:58:47:c7:4e:fb:1c:5a:df:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:a8:93:aa:24:a7:e4:5f:48:b2:3c:05:ee: b2:c2:97:d9:62:03:47:92:07:5f:ca:ef:27:44:94: 52:ed:2a:78:62:8c:c1:34:e8:62:2e:f7:ed:3e:f2: 16:6b:e8:67:f7:d9:2b:84:17:eb:06:3d:c3:00:cc: 21:6e:eb:66:49:7c:71:74:c8:e0:25:5b:f2:e5:21: d9:e4:6e:7b:88:6a:13:16:a6:1b:17:5a:d4:44:91: 3b:b4:4f:11:4d:a6:b9:ba:5b:ad:45:db:d5:8f:e0: 3b:27:fc:62:9e:50:32:6b:ad:d3:95:51:97:05:e0: 39:dc:b4:6a:66:2f:2b:82:62:17:f8:b6:e6:7a:78: cd:d9:d3:94:8e:ea:3c:35:fc:5e:20:4f:d7:ca:da: f8:fd:61:53:a6:28:83:dc:0f:a6:e0:74:12:6e:7a: e8:d6:cd:76:ab:a7:b9:68:52:89:12:f9:79:cb:4b: f0:a2:2a:e2:18:37:96:1a:0c:4b:ce:30:c7:25:24: 21:ad:b3:6a:06:b1:87:f6:6c:b1:21:c4:e3:15:73: 97:86:ef:60:ca:e4:1c:e7:9b:3d:7d:8e:9d:07:ca: 2d:ba:8f:e3:f2:0b:e7:31:ed:82:82:42:26:f1:8e: d3:2d:52:d8:a3:8c:80:4c:b8:2c:ad:eb:f8:bf:d1: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.200.64.0/19 31.24.200.0/21 31.25.104.0/21 31.217.208.0/21 37.19.80.0/20 37.114.192.0/18 37.191.64.0/19 37.221.0.0/18 37.235.16.0/20 45.128.140.0/22 45.144.124.0/22 46.32.0.0/19 46.34.164.0-46.34.191.255 78.111.8.0/21 78.154.32.0/19 78.158.160.0/19 79.132.200.0-79.132.223.255 79.174.160.0/21 80.71.112.0/20 80.253.128.0/19 81.29.240.0/20 81.91.144.0/20 86.109.32.0/19 87.247.179.0-87.247.183.255 89.235.68.0-89.235.79.255 91.184.64.0/20 92.61.184.0/21 92.119.68.0/22 94.139.160.0/20 109.201.0.0/19 109.230.64.0/19 176.221.64.0/21 178.248.40.0/21 185.4.16.0/22 185.12.60.0/22 185.21.68.0/22 185.21.76.0/22 185.30.76.0/22 185.40.240.0/22 185.45.188.0/22 185.70.60.0/22 185.82.164.0/22 185.85.68.0/22 185.101.228.0/22 185.104.228.0/22 185.133.152.0/22 185.142.232.0/22 185.153.184.0/22 185.172.0.0/22 185.190.20.0/22 185.197.68.0/22 185.208.148.0/22 188.75.64.0/18 188.121.128.0/19 188.136.128.0/21 188.136.140.0-188.136.223.255 213.195.0.0-213.195.23.255 213.207.192.0/20 217.66.192.0/19 217.146.208.0/20 IPv6: 2a06:db80::/29 2a0c:100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24631 43343 203558 206065 Signature Algorithm: sha256WithRSAEncryption 74:7f:6d:55:aa:31:88:28:4e:af:2d:16:29:0e:27:69:1c:58: 51:cf:a6:d6:ee:58:ce:5a:97:7b:1a:50:ca:07:d6:47:50:68: b7:53:a1:67:44:97:f0:ef:e9:1e:e9:16:20:1d:f7:2f:b3:b6: 1e:0d:ec:ab:e7:bd:a9:94:f7:d8:8d:55:68:25:bc:fd:01:e5: 71:ec:4b:fc:95:12:40:37:b4:7d:ae:d1:c1:f6:be:fb:7e:52: 32:ac:8e:64:c6:b8:30:d2:0b:49:25:bc:a8:45:c2:e6:da:bb: 93:08:3c:10:a6:4f:d9:c0:70:d4:8b:ae:40:05:56:2c:1f:e0: ed:6a:f8:3b:bd:1b:e0:ef:cb:82:15:5a:2d:e1:28:cd:43:1c: 0d:00:e9:49:9a:d5:1c:30:da:4b:75:da:ac:4e:99:a8:3f:c9: b1:4b:de:7d:73:fe:2d:38:6b:26:e7:32:9d:9a:96:96:6b:e8: 2a:ee:5c:21:16:c2:b9:ed:34:07:eb:93:f7:1f:b0:77:67:da: 47:6f:78:22:fc:3d:db:fd:e8:22:ee:fc:16:27:56:31:5c:c1: ce:84:d0:a3:ae:12:8d:2c:c2:cd:9c:d2:6c:fd:28:30:30:f7: b4:9b:03:dc:a9:7f:1d:48:b1:c5:d9:f5:54:62:ee:dc:8e:da: 19:42:1b:37 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgISAZt7o5f6BfJGWEfHTvscWt9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjY5OGM0YjYxMmFmZWUyY2JiMWNkZDUwOWU0ZjAyNDZmYmI4MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGOok6okp+RfSLI8Be6ywpfZYgNH kgdfyu8nRJRS7Sp4YozBNOhiLvftPvIWa+hn99krhBfrBj3DAMwhbutmSXxxdMjg JVvy5SHZ5G57iGoTFqYbF1rURJE7tE8RTaa5ulutRdvVj+A7J/xinlAya63TlVGX BeA53LRqZi8rgmIX+LbmenjN2dOUjuo8NfxeIE/Xytr4/WFTpiiD3A+m4HQSbnro 1s12q6e5aFKJEvl5y0vwoiriGDeWGgxLzjDHJSQhrbNqBrGH9myxIcTjFXOXhu9g yuQc55s9fY6dB8otuo/j8gvnMe2CgkIm8Y7TLVLYo4yATLgsrev4v9HD2wIDAQAB o4IEXzCCBFswHQYDVR0OBBYEFFtpjEthKv7iy7HN1Qnk8CRvu4DhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2MxNmY1 NS1iNDRkLTQwYzMtOWRhYy1jYzJmYWZlM2E4YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvYzE2ZjU1 LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8xL1cybU1TMkVxX3VMTHNjM1ZD ZVR3SkctN2dPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBzgYIKwYB BQUHAQcBAf8EggG9MIIBuTCCAZ8EAgABMIIBlwMEBQXIQAMEAx8YyAMEAx8ZaAME Ax/Z0AMEBCUTUAMEBiVywAMEBSW/QAMEBiXdAAMEBCXrEAMEAi2AjAMEAi2QfAME BS4gADAMAwQCLiKkAwQGLiKAAwQDTm8IAwQFTpogAwQFTp6gMAwDBANPhMgDBAVP hMADBANPrqADBARQR3ADBAVQ/YADBARRHfADBARRW5ADBAVWbSAwDAMEAFf3swME A1f3sDAMAwQCWetEAwQEWetAAwQEW7hAAwQDXD24AwQCXHdEAwQEXougAwQFbckA AwQFbeZAAwQDsN1AAwQDsvgoAwQCuQQQAwQCuQw8AwQCuRVEAwQCuRVMAwQCuR5M AwQCuSjwAwQCuS28AwQCuUY8AwQCuVKkAwQCuVVEAwQCuWXkAwQCuWjkAwQCuYWY AwQCuY7oAwQCuZm4AwQCuawAAwQCub4UAwQCucVEAwQCudCUAwQGvEtAAwQFvHmA AwQDvIiAMAwDBAK8iIwDBAW8iMAwCwMDANXDAwQD1cMQAwQE1c/AAwQF2ULAAwQE 2ZLQMBQEAgACMA4DBQMqBtuAAwUDKgwBADAoBggrBgEFBQcBCAEB/wQZMBegFTAT AgJgNwIDAKlPAgMDGyYCAwMk8TANBgkqhkiG9w0BAQsFAAOCAQEAdH9tVaoxiChO ry0WKQ4naRxYUc+m1u5YzlqXexpQygfWR1Bot1OhZ0SX8O/pHukWIB33L7O2Hg3s q+e9qZT32I1VaCW8/QHlcexL/JUSQDe0fa7Rwfa++35SMqyOZMa4MNILSSW8qEXC 5tq7kwg8EKZP2cBw1IuuQAVWLB/g7Wr4O70b4O/LghVaLeEozUMcDQDpSZrVHDDa S3XarE6ZqD/JsUvefXP+LThrJucynZqWlmvoKu5cIRbCue00B+uT9x+wd2faR294 Ivw92/3oIu78FidWMVzBzoTQo64SjSzCzZzSbP0oMDD3tJsD3Kl/HUixxdn1VGLu 3I7aGUIbNw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:24 2026 by rpki-client