This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer (raw, json) Hash identifier: QZ/wIDVcBhKb5WCGM5JtDCJ9dS7QEom0li3ydlv3FCI= Subject key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC1F5FAF559C8FA656EFE6E6B2CAFC392 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 14:01:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8826 AS: 15465 AS: 198573 AS: 202200 IP: 129.73.0.0/16 IP: 129.103.0.0/16 IP: 129.214.0.0/16 IP: 132.186.0.0/16 IP: 136.157.0.0/16 IP: 137.223.0.0/16 IP: 139.10.0.0/16 IP: 139.16.0.0/16 IP: 139.21.0.0 -- 139.25.255.255 IP: 140.231.0.0/16 IP: 141.29.0.0/16 IP: 141.73.0.0/16 IP: 143.99.0.0 -- 143.99.191.255 IP: 144.145.0.0/16 IP: 146.253.0.0 -- 146.254.255.255 IP: 147.54.0.0/16 IP: 149.212.0.0/16 IP: 149.246.0.0/16 IP: 157.163.0.0/16 IP: 158.92.0.0/16 IP: 158.226.0.0/16 IP: 161.134.0.0/16 IP: 161.218.0.0/16 IP: 163.242.0.0/16 IP: 165.218.0.0/16 IP: 167.87.0.0/16 IP: 185.75.228.0/22 IP: 192.35.0.0 -- 192.35.19.255 IP: 192.103.27.0/24 IP: 192.109.0.0 -- 192.109.9.255 IP: 192.109.32.0/22 IP: 192.109.55.0/24 IP: 192.109.57.0/24 IP: 192.109.78.0/24 IP: 192.109.112.0/23 IP: 192.109.173.0 -- 192.109.174.255 IP: 192.109.191.0 -- 192.109.194.255 IP: 192.129.41.0/24 IP: 193.8.214.0/24 IP: 193.16.212.0/24 IP: 193.16.214.0/23 IP: 193.16.222.0/23 IP: 193.16.228.0/24 IP: 193.16.230.0/23 IP: 193.16.248.0 -- 193.16.254.255 IP: 193.25.128.0/19 IP: 193.176.188.0/23 IP: 193.177.148.0/22 IP: 193.228.240.0/20 IP: 194.13.65.0/24 IP: 194.31.238.0/24 IP: 194.39.86.0/24 IP: 194.39.152.0 -- 194.39.154.255 IP: 194.55.160.0/24 IP: 194.55.252.0/23 IP: 194.99.53.0 -- 194.99.55.255 IP: 194.99.111.0/24 IP: 194.107.52.0/22 IP: 194.138.0.0/16 IP: 194.145.59.0 -- 194.145.62.255 IP: 194.153.160.0/21 IP: 194.180.205.0/24 IP: 2a00:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:f5:fa:f5:59:c8:fa:65:6e:fe:6e:6b:2c:af:c3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 14:01:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65121c3f9207a37345e38702c89d179bf444aa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:57:95:67:b1:87:ad:f8:b3:a4:b5:53:db: cd:5e:fb:54:90:05:f6:8a:74:bc:9d:88:1e:a3:95: fb:a2:58:0f:bd:b4:cc:6c:dd:c7:91:f6:31:96:0c: d7:2c:34:1a:24:c8:37:c0:c2:c7:9f:58:13:bf:17: 98:05:81:98:70:b8:b4:cc:60:38:90:c3:41:9a:f6: e5:3b:0e:14:72:43:35:22:86:77:d6:f3:77:db:9c: d8:57:eb:ff:de:06:fa:18:83:bf:c9:6e:09:f7:cb: bb:62:0c:a9:4f:76:a3:db:dd:64:e6:e2:f3:12:ac: 81:19:5c:cd:e7:14:bc:d5:7a:0a:b7:d7:94:2f:a8: a5:0c:5b:1b:1c:ac:63:e3:91:8d:1b:ab:80:e6:c3: c2:c9:0e:f0:2b:65:e9:30:be:b9:28:93:d6:c7:1a: 5f:d6:d5:fc:ff:9d:0a:84:fc:58:4a:c7:e2:a0:c4: 2c:82:8a:8c:da:8f:d3:80:29:ba:47:17:69:f9:e0: 69:28:c0:8e:9b:e2:ee:57:16:a3:78:44:79:2f:8b: e0:1b:8d:34:ac:18:90:4e:83:a8:4b:0b:47:0d:3a: 33:9c:9a:a0:6b:7d:76:bb:0a:f6:b7:54:ac:2c:e6: a3:a4:96:d4:8c:b4:d5:e3:29:41:ad:b8:e1:db:73: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.73.0.0/16 129.103.0.0/16 129.214.0.0/16 132.186.0.0/16 136.157.0.0/16 137.223.0.0/16 139.10.0.0/16 139.16.0.0/16 139.21.0.0-139.25.255.255 140.231.0.0/16 141.29.0.0/16 141.73.0.0/16 143.99.0.0-143.99.191.255 144.145.0.0/16 146.253.0.0-146.254.255.255 147.54.0.0/16 149.212.0.0/16 149.246.0.0/16 157.163.0.0/16 158.92.0.0/16 158.226.0.0/16 161.134.0.0/16 161.218.0.0/16 163.242.0.0/16 165.218.0.0/16 167.87.0.0/16 185.75.228.0/22 192.35.0.0-192.35.19.255 192.103.27.0/24 192.109.0.0-192.109.9.255 192.109.32.0/22 192.109.55.0/24 192.109.57.0/24 192.109.78.0/24 192.109.112.0/23 192.109.173.0-192.109.174.255 192.109.191.0-192.109.194.255 192.129.41.0/24 193.8.214.0/24 193.16.212.0/24 193.16.214.0/23 193.16.222.0/23 193.16.228.0/24 193.16.230.0/23 193.16.248.0-193.16.254.255 193.25.128.0/19 193.176.188.0/23 193.177.148.0/22 193.228.240.0/20 194.13.65.0/24 194.31.238.0/24 194.39.86.0/24 194.39.152.0-194.39.154.255 194.55.160.0/24 194.55.252.0/23 194.99.53.0-194.99.55.255 194.99.111.0/24 194.107.52.0/22 194.138.0.0/16 194.145.59.0-194.145.62.255 194.153.160.0/21 194.180.205.0/24 IPv6: 2a00:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8826 15465 198573 202200 Signature Algorithm: sha256WithRSAEncryption a7:32:28:5e:35:02:5f:a2:3a:9b:b3:59:ab:60:37:d3:e0:53: c2:df:4c:83:d6:7d:2d:d7:b1:fa:b0:31:ac:63:35:35:82:e8: 21:75:e1:bc:da:d1:71:37:5f:e2:59:73:99:d6:3e:a0:1e:dc: a1:64:64:76:bf:68:a1:be:33:be:b0:51:f4:02:88:34:e0:e9: 1d:5e:54:2b:15:65:04:e4:81:70:17:57:12:06:f2:33:6f:7c: f8:fd:4e:2c:9a:89:82:3e:54:9b:e1:90:95:f6:9a:f1:60:64: 7c:ca:a0:ec:63:08:e0:e7:59:39:b5:40:a2:5a:2c:43:22:4a: 83:3d:e5:6f:a0:c5:d1:b1:c9:d9:fa:12:54:23:1f:a0:c8:9e: 7b:6a:ff:5b:02:ea:b4:ce:c4:b4:08:77:d1:64:0f:53:b6:19: 5a:0c:94:fe:62:50:c0:cb:f3:6a:87:94:2a:ce:26:0e:40:80: e1:ea:4f:45:da:35:b0:df:e8:05:95:df:01:94:38:15:d1:34: 53:47:d7:b9:76:63:81:23:ca:0a:98:f4:55:22:47:ea:1b:b3: fa:29:fc:f0:de:58:1b:0a:91:41:fb:66:9f:13:94:09:1c:83: 25:36:1b:e7:9d:1e:7c:75:0d:84:86:97:cb:b3:25:27:28:29: 05:30:87:53 -----BEGIN CERTIFICATE----- MIIHYTCCBkmgAwIBAgISAZvB9fr1Wcj6ZW7+bmssr8OSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTQwMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTEyMWMzZjkyMDdhMzczNDVlMzg3MDJjODlkMTc5YmY0NDRhYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/pXlWexh634s6S1U9vNXvtUkAX2 inS8nYgeo5X7olgPvbTMbN3HkfYxlgzXLDQaJMg3wMLHn1gTvxeYBYGYcLi0zGA4 kMNBmvblOw4UckM1IoZ31vN325zYV+v/3gb6GIO/yW4J98u7YgypT3aj291k5uLz EqyBGVzN5xS81XoKt9eUL6ilDFsbHKxj45GNG6uA5sPCyQ7wK2XpML65KJPWxxpf 1tX8/50KhPxYSsfioMQsgoqM2o/TgCm6Rxdp+eBpKMCOm+LuVxajeER5L4vgG400 rBiQToOoSwtHDToznJqga312uwr2t1SsLOajpJbUjLTV4ylBrbjh23N5aQIDAQAB o4IEbTCCBGkwHQYDVR0OBBYEFGUSHD+SB6NzReOHAsidF5v0RKoIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzEyYzEz ZS1mNjc1LTQ4ODItYmJlNi00OGQzY2ExNjFiYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMTJjMTNl LWY2NzUtNDg4Mi1iYmU2LTQ4ZDNjYTE2MWJiMC8xL1pSSWNQNUlIbzNORjQ0Y0N5 SjBYbV9SRXFnZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB3QYIKwYB BQUHAQcBAf8EggHMMIIByDCCAbUEAgABMIIBrQMDAIFJAwMAgWcDAwCB1gMDAIS6 AwMAiJ0DAwCJ3wMDAIsKAwMAixAwCgMDAIsVAwMBixgDAwCM5wMDAI0dAwMAjUkw CwMDAI9jAwQGj2OAAwMAkJEwCgMDAJL9AwMAkv4DAwCTNgMDAJXUAwMAlfYDAwCd owMDAJ5cAwMAnuIDAwChhgMDAKHaAwMAo/IDAwCl2gMDAKdXAwQCuUvkMAsDAwDA IwMEAsAjEAMEAMBnGzALAwMAwG0DBAHAbQgDBALAbSADBADAbTcDBADAbTkDBADA bU4DBAHAbXAwDAMEAMBtrQMEAMBtrjAMAwQAwG2/AwQAwG3CAwQAwIEpAwQAwQjW AwQAwRDUAwQBwRDWAwQBwRDeAwQAwRDkAwQBwRDmMAwDBAPBEPgDBADBEP4DBAXB GYADBAHBsLwDBALBsZQDBATB5PADBADCDUEDBADCH+4DBADCJ1YwDAMEA8InmAME AMInmgMEAMI3oAMEAcI3/DAMAwQAwmM1AwQDwmMwAwQAwmNvAwQCwms0AwMAwoow DAMEAMKROwMEAMKRPgMEA8KZoAMEAMK0zTANBAIAAjAHAwUDKgCtgDAnBggrBgEF BQcBCAEB/wQYMBagFDASAgIiegICPGkCAwMHrQIDAxXYMA0GCSqGSIb3DQEBCwUA A4IBAQCnMiheNQJfojqbs1mrYDfT4FPC30yD1n0t17H6sDGsYzU1gughdeG82tFx N1/iWXOZ1j6gHtyhZGR2v2ihvjO+sFH0Aog04OkdXlQrFWUE5IFwF1cSBvIzb3z4 /U4smomCPlSb4ZCV9prxYGR8yqDsYwjg51k5tUCiWixDIkqDPeVvoMXRscnZ+hJU Ix+gyJ57av9bAuq0zsS0CHfRZA9TthlaDJT+YlDAy/Nqh5QqziYOQIDh6k9F2jWw 3+gFld8BlDgV0TRTR9e5dmOBI8oKmPRVIkfqG7P6Kfzw3lgbCpFB+2afE5QJHIMl NhvnnR58dQ2EhpfLsyUnKCkFMIdT -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:01 2026 by rpki-client