This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer File: X5ZnbPOY05lMTdSilllGFN_1hsc.cer (raw, json) Hash identifier: TuFSTHbDD8q/8YPnV0tJKjCYoN/7ZKtkFlqTEg4Ln70= Subject key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD620F1B2FF87221210B4C3525CA2A78B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:00:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198417 AS: 215822 IP: 31.14.64.0/24 IP: 31.14.218.0/24 IP: 31.14.232.0/24 IP: 31.14.253.0/24 IP: 37.153.137.0/24 IP: 84.247.57.0/24 IP: 86.105.194.0/24 IP: 86.105.197.0/24 IP: 86.106.21.0/24 IP: 86.106.82.0/24 IP: 86.106.178.0/24 IP: 86.107.188.0/24 IP: 89.32.124.0/24 IP: 89.32.128.0/24 IP: 89.32.201.0/24 IP: 89.32.205.0/24 IP: 89.34.175.0/24 IP: 89.35.152.0/24 IP: 89.38.71.0/24 IP: 89.39.151.0/24 IP: 89.40.131.0/24 IP: 89.41.30.0/24 IP: 89.42.34.0/24 IP: 89.43.39.0/24 IP: 89.46.128.0 -- 89.46.130.255 IP: 89.47.35.0/24 IP: 92.114.34.0/24 IP: 92.114.99.0/24 IP: 93.113.88.0/24 IP: 93.113.108.0/24 IP: 93.114.141.0/24 IP: 93.114.250.0/24 IP: 94.177.64.0/24 IP: 94.177.119.0/24 IP: 159.20.112.0/21 IP: 176.223.162.0/24 IP: 176.223.180.0/24 IP: 188.208.18.0/24 IP: 188.215.40.0/22 IP: 188.240.16.0/24 IP: 188.240.46.0/24 IP: 2a10:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:20:f1:b2:ff:87:22:12:10:b4:c3:52:5c:a2:a7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 12:00:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f96676cf398d3994c4dd4a296594614dff586c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:8b:f9:a7:73:da:a5:17:75:cd:a1:94:5e: d7:81:5f:40:9b:a4:99:89:4a:26:3b:73:82:14:d5: 2b:1f:00:55:40:7d:ef:97:2d:d2:68:f2:c6:c9:81: 92:87:5a:ce:ef:b8:4a:b4:86:c8:90:e9:4c:7d:b9: 68:5c:98:3f:d8:f1:26:47:a0:67:27:53:e4:3a:e5: f9:f3:2c:a9:c4:83:b7:c4:a9:3c:fd:c2:81:6e:c7: 46:2f:fe:4a:a3:cc:b5:e3:3c:80:d5:9a:1a:1e:ed: 99:14:15:6d:b2:eb:0e:51:5d:a4:c0:d5:f7:2c:49: 0a:b9:30:aa:f9:f9:15:0b:b3:21:6b:dc:e8:74:ec: 4d:b7:2b:b7:f6:c0:e7:da:3e:03:b7:b4:f7:22:32: 0c:f1:66:3f:e5:69:f0:7b:2e:17:54:9a:13:59:d2: cb:4d:43:28:8e:23:76:d7:0f:d8:34:5d:15:11:a7: aa:56:22:65:4c:9e:48:77:9c:8a:34:3d:ea:00:d0: ec:91:04:dd:88:0a:46:f4:0d:14:a6:c0:f1:d7:33: 7f:b2:70:4f:75:d1:4c:cb:4e:82:dd:9d:29:a0:2d: 3b:29:bf:6d:03:e3:e3:9a:7d:e9:c0:f0:17:e0:39: 86:52:70:18:85:eb:03:99:20:50:08:42:52:e4:c7: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.64.0/24 31.14.218.0/24 31.14.232.0/24 31.14.253.0/24 37.153.137.0/24 84.247.57.0/24 86.105.194.0/24 86.105.197.0/24 86.106.21.0/24 86.106.82.0/24 86.106.178.0/24 86.107.188.0/24 89.32.124.0/24 89.32.128.0/24 89.32.201.0/24 89.32.205.0/24 89.34.175.0/24 89.35.152.0/24 89.38.71.0/24 89.39.151.0/24 89.40.131.0/24 89.41.30.0/24 89.42.34.0/24 89.43.39.0/24 89.46.128.0-89.46.130.255 89.47.35.0/24 92.114.34.0/24 92.114.99.0/24 93.113.88.0/24 93.113.108.0/24 93.114.141.0/24 93.114.250.0/24 94.177.64.0/24 94.177.119.0/24 159.20.112.0/21 176.223.162.0/24 176.223.180.0/24 188.208.18.0/24 188.215.40.0/22 188.240.16.0/24 188.240.46.0/24 IPv6: 2a10:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198417 215822 Signature Algorithm: sha256WithRSAEncryption 1a:28:de:21:38:40:74:5c:4a:47:3a:de:c3:f3:14:29:46:f3: a7:3e:38:fe:59:32:62:e6:bd:69:cb:19:51:c4:74:97:b3:e7: 1f:d3:05:dc:12:da:35:d9:e1:3b:c0:f2:b2:c2:0f:c6:a8:7c: fd:eb:ad:e4:72:34:a1:e9:57:9b:2c:3b:4f:d1:6a:8d:70:6b: 82:41:54:c1:18:9a:cf:b0:92:64:87:d8:c1:9e:8b:5f:64:5e: e7:31:2e:0f:64:21:53:78:5e:13:65:0e:52:8b:e4:28:30:ff: 6e:04:90:76:09:3f:9d:da:e7:58:f6:6c:5f:ae:4a:9e:c5:37: 84:c2:4d:a8:ed:3a:17:a3:f3:d0:d0:a5:1e:77:ee:aa:d7:f0: 40:3b:69:38:67:17:62:b0:30:4a:64:2b:79:7f:98:2f:8d:3c: d5:95:47:3b:76:9a:4f:f2:c6:a6:5e:85:ac:43:87:ae:9a:6c: ff:9c:b1:d5:8b:a6:c7:ba:17:31:2c:92:c7:86:83:9b:2f:03: e3:78:a4:b0:85:fd:9e:61:1f:a4:7a:e0:a7:6b:66:fa:0d:98: 83:5a:53:04:19:45:c2:c1:fe:d3:23:eb:f9:6e:99:5a:be:2f: 00:97:24:ce:01:a3:ed:8a:a9:8d:e2:96:d0:de:5e:fd:43:b7: 24:ed:cd:68 -----BEGIN CERTIFICATE----- MIIGqTCCBZGgAwIBAgISAZvWIPGy/4ciEhC0w1JcoqeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTIwMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjk2Njc2Y2YzOThkMzk5NGM0ZGQ0YTI5NjU5NDYxNGRmZjU4NmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1keL+adz2qUXdc2hlF7XgV9Am6SZ iUomO3OCFNUrHwBVQH3vly3SaPLGyYGSh1rO77hKtIbIkOlMfbloXJg/2PEmR6Bn J1PkOuX58yypxIO3xKk8/cKBbsdGL/5Ko8y14zyA1ZoaHu2ZFBVtsusOUV2kwNX3 LEkKuTCq+fkVC7Mha9zodOxNtyu39sDn2j4Dt7T3IjIM8WY/5Wnwey4XVJoTWdLL TUMojiN21w/YNF0VEaeqViJlTJ5Id5yKND3qANDskQTdiApG9A0UpsDx1zN/snBP ddFMy06C3Z0poC07Kb9tA+Pjmn3pwPAX4DmGUnAYhesDmSBQCEJS5MfeKQIDAQAB o4IDtTCCA7EwHQYDVR0OBBYEFF+WZ2zzmNOZTE3UopZZRhTf9YbHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzZhNjgw NS01Y2UwLTQxMjgtYTA0Yy1mNjJmMzVhZjQzNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvNmE2ODA1 LTVjZTAtNDEyOC1hMDRjLWY2MmYzNWFmNDM3MS8xL1g1Wm5iUE9ZMDVsTVRkU2ls bGxHRk5fMWhzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBLQYIKwYB BQUHAQcBAf8EggEcMIIBGDCCAQUEAgABMIH+AwQAHw5AAwQAHw7aAwQAHw7oAwQA Hw79AwQAJZmJAwQAVPc5AwQAVmnCAwQAVmnFAwQAVmoVAwQAVmpSAwQAVmqyAwQA Vmu8AwQAWSB8AwQAWSCAAwQAWSDJAwQAWSDNAwQAWSKvAwQAWSOYAwQAWSZHAwQA WSeXAwQAWSiDAwQAWSkeAwQAWSoiAwQAWSsnMAwDBAdZLoADBABZLoIDBABZLyMD BABcciIDBABccmMDBABdcVgDBABdcWwDBABdco0DBABdcvoDBABesUADBABesXcD BAOfFHADBACw36IDBACw37QDBAC80BIDBAK81ygDBAC88BADBAC88C4wDQQCAAIw BwMFAyoQPsAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAwcRAgMDSw4wDQYJKoZI hvcNAQELBQADggEBABoo3iE4QHRcSkc63sPzFClG86c+OP5ZMmLmvWnLGVHEdJez 5x/TBdwS2jXZ4TvA8rLCD8aofP3rreRyNKHpV5ssO0/Rao1wa4JBVMEYms+wkmSH 2MGei19kXucxLg9kIVN4XhNlDlKL5Cgw/24EkHYJP53a51j2bF+uSp7FN4TCTajt Ohej89DQpR537qrX8EA7aThnF2KwMEpkK3l/mC+NPNWVRzt2mk/yxqZehaxDh66a bP+csdWLpse6FzEskseGg5svA+N4pLCF/Z5hH6R64KdrZvoNmINaUwQZRcLB/tMj 6/lumVq+LwCXJM4Bo+2KqY3iltDeXv1DtyTtzWg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:32 2026 by rpki-client