This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer File: Zd83n6ryEKcDbawF3mtXctvk3Ww.cer (raw, json) Hash identifier: K0sTJ5ATc0yg8sRNrquJoBgQe+jAtuUrBbR167ZYq4A= Subject key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37618A8B94E14DE0418B9ACA2460E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201838 IP: 45.12.172.0/22 IP: 45.81.72.0/22 IP: 45.86.8.0/22 IP: 45.89.84.0/22 IP: 45.89.156.0/22 IP: 45.90.172.0/22 IP: 45.91.112.0/22 IP: 45.93.172.0/22 IP: 45.94.60.0/22 IP: 45.94.176.0/22 IP: 45.95.248.0/22 IP: 45.117.136.0/22 IP: 45.128.32.0/22 IP: 45.128.136.0/22 IP: 45.132.136.0/21 IP: 45.133.88.0/22 IP: 45.141.236.0/22 IP: 45.144.56.0/22 IP: 45.144.160.0/22 IP: 45.146.8.0/22 IP: 45.146.60.0/22 IP: 45.148.12.0/22 IP: 45.148.56.0/22 IP: 45.148.252.0/22 IP: 45.149.72.0/22 IP: 45.149.220.0/22 IP: 45.150.144.0/22 IP: 45.152.4.0/22 IP: 45.153.220.0/22 IP: 45.159.88.0/22 IP: 45.159.152.0/22 IP: 45.248.144.0/22 IP: 46.102.170.0/23 IP: 62.133.48.0/22 IP: 62.197.132.0/22 IP: 77.75.60.0/22 IP: 79.171.153.0 -- 79.171.159.255 IP: 80.76.56.0/22 IP: 89.36.112.0/20 IP: 89.43.208.0/21 IP: 89.45.176.0/20 IP: 89.222.16.0/20 IP: 91.209.86.0/24 IP: 93.113.26.0/23 IP: 94.176.208.0/23 IP: 94.177.138.0/23 IP: 94.247.86.0/23 IP: 95.214.184.0/22 IP: 95.214.228.0/22 IP: 103.7.204.0/22 IP: 103.205.24.0/22 IP: 130.255.16.0/22 IP: 130.255.28.0/22 IP: 147.12.128.0/17 IP: 171.22.104.0/22 IP: 178.239.192.0/22 IP: 178.239.200.0/22 IP: 178.255.88.0/21 IP: 185.59.124.0/22 IP: 185.71.36.0/22 IP: 185.103.72.0/22 IP: 185.111.172.0/22 IP: 185.115.144.0/22 IP: 185.121.228.0/22 IP: 185.229.104.0/22 IP: 185.230.248.0/22 IP: 185.236.60.0/22 IP: 185.237.60.0/22 IP: 185.238.220.0/22 IP: 185.240.196.0/22 IP: 185.241.164.0/22 IP: 185.245.236.0/22 IP: 188.212.122.0/23 IP: 188.215.16.0/23 IP: 188.215.74.0/23 IP: 188.241.106.0/23 IP: 192.166.208.0/21 IP: 193.42.52.0/22 IP: 193.164.20.0/22 IP: 194.4.156.0/22 IP: 212.132.192.0/18 IP: 213.32.248.0/22 IP: 2a02:6b60::/28 IP: 2a03:3820::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:61:8a:8b:94:e1:4d:e0:41:8b:9a:ca:24:60:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a3:c1:dc:39:45:53:9b:07:2b:03:06:df:97: b7:ee:77:fb:63:cb:e1:35:68:ab:6f:a7:ad:06:1c: a7:02:3f:e1:92:c0:e9:b1:40:31:16:10:a5:9f:26: 47:2e:f5:d5:3a:ca:b0:c8:6c:d1:bc:b4:32:84:d5: a0:c6:ec:98:92:42:f5:a4:97:d0:07:fc:c2:6a:fc: 45:5b:b8:bc:07:44:d7:52:7b:ab:37:40:cc:a0:df: 6d:b0:18:54:ec:4b:e9:a9:b7:ab:ea:23:7e:10:bd: fb:00:a4:4a:37:1c:b6:7e:51:22:73:4f:f9:1c:ff: 39:e9:55:a2:80:13:56:c3:44:4e:ac:d1:9a:d6:f7: 80:f8:9a:61:2d:5c:ee:a1:25:95:19:ce:5c:f6:72: b3:39:9b:a1:d6:e8:91:93:23:05:b6:1e:cf:03:5e: 25:44:35:f8:6a:96:82:ca:08:e4:fb:61:4a:c6:f1: 06:48:65:1d:a5:f9:31:87:75:26:5a:1c:ee:5f:b2: 77:c9:62:2f:6a:57:05:53:b1:d8:1a:03:42:1a:e5: b4:a4:41:ef:29:09:20:af:99:61:17:4f:05:bf:63: e1:4c:3f:39:82:17:43:89:80:b5:17:ce:9f:79:b7: 4e:c7:65:0a:44:0f:87:26:87:9e:61:22:02:07:0f: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.172.0/22 45.81.72.0/22 45.86.8.0/22 45.89.84.0/22 45.89.156.0/22 45.90.172.0/22 45.91.112.0/22 45.93.172.0/22 45.94.60.0/22 45.94.176.0/22 45.95.248.0/22 45.117.136.0/22 45.128.32.0/22 45.128.136.0/22 45.132.136.0/21 45.133.88.0/22 45.141.236.0/22 45.144.56.0/22 45.144.160.0/22 45.146.8.0/22 45.146.60.0/22 45.148.12.0/22 45.148.56.0/22 45.148.252.0/22 45.149.72.0/22 45.149.220.0/22 45.150.144.0/22 45.152.4.0/22 45.153.220.0/22 45.159.88.0/22 45.159.152.0/22 45.248.144.0/22 46.102.170.0/23 62.133.48.0/22 62.197.132.0/22 77.75.60.0/22 79.171.153.0-79.171.159.255 80.76.56.0/22 89.36.112.0/20 89.43.208.0/21 89.45.176.0/20 89.222.16.0/20 91.209.86.0/24 93.113.26.0/23 94.176.208.0/23 94.177.138.0/23 94.247.86.0/23 95.214.184.0/22 95.214.228.0/22 103.7.204.0/22 103.205.24.0/22 130.255.16.0/22 130.255.28.0/22 147.12.128.0/17 171.22.104.0/22 178.239.192.0/22 178.239.200.0/22 178.255.88.0/21 185.59.124.0/22 185.71.36.0/22 185.103.72.0/22 185.111.172.0/22 185.115.144.0/22 185.121.228.0/22 185.229.104.0/22 185.230.248.0/22 185.236.60.0/22 185.237.60.0/22 185.238.220.0/22 185.240.196.0/22 185.241.164.0/22 185.245.236.0/22 188.212.122.0/23 188.215.16.0/23 188.215.74.0/23 188.241.106.0/23 192.166.208.0/21 193.42.52.0/22 193.164.20.0/22 194.4.156.0/22 212.132.192.0/18 213.32.248.0/22 IPv6: 2a02:6b60::/28 2a03:3820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201838 Signature Algorithm: sha256WithRSAEncryption 8d:9b:4a:dc:d9:51:a9:01:0a:a3:2c:a3:5f:8e:39:50:e6:a2: 8f:86:c6:88:73:64:24:f9:2a:71:8d:64:43:1a:79:d1:cd:8b: ec:54:36:47:d8:ef:50:a4:ae:8d:4b:fa:03:16:f7:f1:6c:df: 20:de:e0:a2:9b:bd:00:60:a4:64:8e:1e:4a:ab:6a:f4:a1:ea: 3a:a8:d7:8a:b1:40:ad:ba:d6:48:33:8a:34:64:c2:c8:cf:a5: bf:ee:73:91:f7:53:fd:38:be:b7:e5:eb:91:81:f1:a5:fe:04: b8:c2:39:ee:89:76:ac:ab:ae:86:21:cb:cd:b2:00:e1:9a:9d: e1:5f:cc:4e:3e:b4:d8:f6:0a:08:ef:55:61:c7:2d:1e:e9:84: cc:10:60:a2:b5:d8:62:f7:20:46:69:67:4e:48:73:4f:c3:17: 75:5c:0a:97:14:60:9c:5a:f3:70:56:ab:28:e4:33:0d:99:0b: 29:c8:89:da:69:c9:95:3e:d8:e0:89:59:ce:dc:62:fe:1f:98: 3d:49:b3:b2:f7:40:a5:9e:ad:6b:1b:b9:8e:be:dc:22:82:aa: de:b7:8f:02:c7:a0:94:64:29:d8:a1:77:9c:0f:f8:ad:2d:af: 26:95:af:7a:f0:f1:ff:4a:74:67:29:37:15:3b:dd:fb:3c:fc: 82:52:ff:26 -----BEGIN CERTIFICATE----- MIIHojCCBoqgAwIBAgISAZt+N2GKi5ThTeBBi5rKJGDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWRmMzc5ZmFhZjIxMGE3MDM2ZGFjMDVkZTZiNTc3MmRiZTRkZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6PB3DlFU5sHKwMG35e37nf7Y8vh NWirb6etBhynAj/hksDpsUAxFhClnyZHLvXVOsqwyGzRvLQyhNWgxuyYkkL1pJfQ B/zCavxFW7i8B0TXUnurN0DMoN9tsBhU7Evpqber6iN+EL37AKRKNxy2flEic0/5 HP856VWigBNWw0ROrNGa1veA+JphLVzuoSWVGc5c9nKzOZuh1uiRkyMFth7PA14l RDX4apaCygjk+2FKxvEGSGUdpfkxh3UmWhzuX7J3yWIvalcFU7HYGgNCGuW0pEHv KQkgr5lhF08Fv2PhTD85ghdDiYC1F86febdOx2UKRA+HJoeeYSICBw9g9wIDAQAB o4IErjCCBKowHQYDVR0OBBYEFGXfN5+q8hCnA22sBd5rV3Lb5N1sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2VkNTFl Yy03OGU2LTRmZjAtYmE1OC0wNzZjODhiODgwMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvZWQ1MWVj LTc4ZTYtNGZmMC1iYTU4LTA3NmM4OGI4ODAyZi8xL1pkODNuNnJ5RUtjRGJhd0Yz bXRYY3R2azNXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICKwYIKwYB BQUHAQcBAf8EggIaMIICFjCCAfwEAgABMIIB9AMEAi0MrAMEAi1RSAMEAi1WCAME Ai1ZVAMEAi1ZnAMEAi1arAMEAi1bcAMEAi1drAMEAi1ePAMEAi1esAMEAi1f+AME Ai11iAMEAi2AIAMEAi2AiAMEAy2EiAMEAi2FWAMEAi2N7AMEAi2QOAMEAi2QoAME Ai2SCAMEAi2SPAMEAi2UDAMEAi2UOAMEAi2U/AMEAi2VSAMEAi2V3AMEAi2WkAME Ai2YBAMEAi2Z3AMEAi2fWAMEAi2fmAMEAi34kAMEAS5mqgMEAj6FMAMEAj7FhAME Ak1LPDAMAwQAT6uZAwQFT6uAAwQCUEw4AwQEWSRwAwQDWSvQAwQEWS2wAwQEWd4Q AwQAW9FWAwQBXXEaAwQBXrDQAwQBXrGKAwQBXvdWAwQCX9a4AwQCX9bkAwQCZwfM AwQCZ80YAwQCgv8QAwQCgv8cAwQHkwyAAwQCqxZoAwQCsu/AAwQCsu/IAwQDsv9Y AwQCuTt8AwQCuUckAwQCuWdIAwQCuW+sAwQCuXOQAwQCuXnkAwQCueVoAwQCueb4 AwQCuew8AwQCue08AwQCue7cAwQCufDEAwQCufGkAwQCufXsAwQBvNR6AwQBvNcQ AwQBvNdKAwQBvPFqAwQDwKbQAwQCwSo0AwQCwaQUAwQCwgScAwQG1ITAAwQC1SD4 MBQEAgACMA4DBQQqAmtgAwUAKgM4IDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD FG4wDQYJKoZIhvcNAQELBQADggEBAI2bStzZUakBCqMso1+OOVDmoo+GxohzZCT5 KnGNZEMaedHNi+xUNkfY71Ckro1L+gMW9/Fs3yDe4KKbvQBgpGSOHkqravSh6jqo 14qxQK261kgzijRkwsjPpb/uc5H3U/04vrfl65GB8aX+BLjCOe6JdqyrroYhy82y AOGaneFfzE4+tNj2CgjvVWHHLR7phMwQYKK12GL3IEZpZ05Ic0/DF3VcCpcUYJxa 83BWqyjkMw2ZCynIidppyZU+2OCJWc7cYv4fmD1Js7L3QKWerWsbuY6+3CKCqt63 jwLHoJRkKdihd5wP+K0tryaVr3rw8f9KdGcpNxU73fs8/IJS/yY= -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:21 2026 by rpki-client