This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer (raw, json) Hash identifier: k7wEHyIk+sWr5elC6zzevJJtyzQtTX5o+xVdphLy9Y0= Subject key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A6A490520572CB4E3AC71BB3D9118 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29075 AS: 50618 AS: 57179 AS: 64438 AS: 198507 IP: 37.143.52.0/22 IP: 45.9.196.0/22 IP: 45.10.224.0/22 IP: 45.14.176.0/22 IP: 45.81.192.0/22 IP: 45.94.124.0 -- 45.94.131.255 IP: 85.118.32.0/19 IP: 91.109.176.0/20 IP: 128.204.224.0/20 IP: 141.255.144.0/20 IP: 178.20.48.0/21 IP: 185.10.252.0/22 IP: 185.96.184.0/22 IP: 185.118.0.0/22 IP: 185.123.24.0/22 IP: 185.132.72.0/22 IP: 185.177.180.0/22 IP: 188.121.224.0/19 IP: 212.85.144.0/20 IP: 2a00:1b88::/29 IP: 2a02:2178::/29 IP: 2a06:e040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6a:49:05:20:57:2c:b4:e3:ac:71:bb:3d:91:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:92:55:83:ce:41:51:7f:f3:12:c6:61:13: 64:cb:52:61:e4:86:f8:6e:04:c8:69:01:32:52:61: e8:91:dc:1f:a3:da:7d:26:ba:9f:97:6a:43:5b:c6: 87:12:5f:71:67:1b:51:48:2c:2a:36:45:d3:5e:3b: 9c:6e:70:1a:3e:9a:f2:3b:ac:af:1c:45:54:df:20: be:42:09:49:12:39:1c:07:3e:42:d4:9d:48:c4:0a: ac:e9:81:e9:ce:49:10:73:03:78:66:f5:e4:01:94: 02:8f:58:2c:84:d6:68:fd:5f:50:ad:a6:d7:58:05: da:10:9a:a0:fa:61:58:d8:5c:ac:8c:52:b2:79:f0: ce:2e:ef:d0:da:71:c4:77:c3:10:cc:a8:f5:2f:20: e5:16:4f:07:f4:98:53:b4:b1:98:79:6e:74:26:19: be:5e:00:59:41:47:fb:2e:11:e1:59:22:cd:3a:24: 17:c1:e0:96:69:04:4b:20:fd:5e:52:eb:49:fb:ce: 13:48:0e:87:af:07:25:34:8b:a8:64:4b:69:5e:0f: 58:b9:94:14:b5:31:b6:59:2a:15:cb:14:a8:f7:66: b3:a1:4a:26:d2:69:0d:13:fb:5c:a8:51:43:8f:7d: 16:d3:35:fe:6c:d9:2b:60:66:51:69:ac:a5:6f:68: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.52.0/22 45.9.196.0/22 45.10.224.0/22 45.14.176.0/22 45.81.192.0/22 45.94.124.0-45.94.131.255 85.118.32.0/19 91.109.176.0/20 128.204.224.0/20 141.255.144.0/20 178.20.48.0/21 185.10.252.0/22 185.96.184.0/22 185.118.0.0/22 185.123.24.0/22 185.132.72.0/22 185.177.180.0/22 188.121.224.0/19 212.85.144.0/20 IPv6: 2a00:1b88::/29 2a02:2178::/29 2a06:e040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29075 50618 57179 64438 198507 Signature Algorithm: sha256WithRSAEncryption 0b:b9:3d:6b:0f:17:19:1c:c7:36:b7:50:ee:a7:fc:62:76:37: 52:16:35:ea:61:49:db:0d:9f:fb:05:df:fa:b3:a3:41:17:7b: 4d:96:16:d5:17:d2:9b:ed:35:28:e9:c4:a9:f8:fa:25:43:de: ea:3d:74:0d:0d:b4:8f:e9:ee:47:a6:ce:00:f4:fa:47:01:70: 01:69:cb:d7:9b:29:96:61:22:a2:e6:e7:41:d1:e0:c7:cd:99: cd:73:eb:cd:f6:03:f7:62:44:b4:e9:6d:2d:c7:81:9d:3d:93: 29:63:13:70:a3:9e:eb:04:eb:41:72:1b:00:3a:47:86:bd:59: 19:5e:42:e8:22:3e:dc:e3:a9:0a:c7:63:0d:c0:3d:b8:e3:de: 4e:33:39:f0:c4:df:ba:12:87:76:d1:79:15:b6:8b:6b:63:34: 95:c0:31:3d:01:65:c9:6d:23:71:d0:c9:e2:bc:0f:76:50:2e: a6:cb:d9:48:f2:97:98:21:65:b9:31:52:a3:d9:63:8f:1f:7b: 97:16:9e:52:e3:26:6c:46:f4:d2:3a:37:78:40:a2:f4:28:c0: c2:60:38:8d:98:97:e2:70:5d:f9:af:1c:5f:0f:40:e3:6b:5a: 81:f8:76:94:7f:c0:a4:bc:8b:4b:64:5b:8c:3b:37:22:d4:68: 3c:51:19:b6 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgISAZt6WmpJBSBXLLTjrHG7PZEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmRlMWQ5ZGNkYjI1YzFlNTMyYzVjOWI2OWRmYTc1N2UzMDYyMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7WSVYPOQVF/8xLGYRNky1Jh5Ib4 bgTIaQEyUmHokdwfo9p9Jrqfl2pDW8aHEl9xZxtRSCwqNkXTXjucbnAaPpryO6yv HEVU3yC+QglJEjkcBz5C1J1IxAqs6YHpzkkQcwN4ZvXkAZQCj1gshNZo/V9QrabX WAXaEJqg+mFY2FysjFKyefDOLu/Q2nHEd8MQzKj1LyDlFk8H9JhTtLGYeW50Jhm+ XgBZQUf7LhHhWSLNOiQXweCWaQRLIP1eUutJ+84TSA6HrwclNIuoZEtpXg9YuZQU tTG2WSoVyxSo92azoUom0mkNE/tcqFFDj30W0zX+bNkrYGZRaaylb2gqqQIDAQAB o4IDSDCCA0QwHQYDVR0OBBYEFGbeHZ3NslweUyxcm2nfp1fjBiEOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzYwZmNm ZS03YjJjLTQ2NzItYmMyZi00MDQ3OTg3MDk3NmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNjBmY2Zl LTdiMmMtNDY3Mi1iYzJmLTQwNDc5ODcwOTc2ZS8xL1p0NGRuYzJ5WEI1VExGeWJh ZC1uVi1NR0lRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGzBggrBgEF BQcBBwEB/wSBozCBoDCBgAQCAAEwegMEAiWPNAMEAi0JxAMEAi0K4AMEAi0OsAME Ai1RwDAMAwQCLV58AwQCLV6AAwQFVXYgAwQEW22wAwQEgMzgAwQEjf+QAwQDshQw AwQCuQr8AwQCuWC4AwQCuXYAAwQCuXsYAwQCuYRIAwQCubG0AwQFvHngAwQE1FWQ MBsEAgACMBUDBQMqABuIAwUDKgIheAMFAyoG4EAwLQYIKwYBBQUHAQgBAf8EHjAc oBowGAICcZMCAwDFugIDAN9bAgMA+7YCAwMHazANBgkqhkiG9w0BAQsFAAOCAQEA C7k9aw8XGRzHNrdQ7qf8YnY3UhY16mFJ2w2f+wXf+rOjQRd7TZYW1RfSm+01KOnE qfj6JUPe6j10DQ20j+nuR6bOAPT6RwFwAWnL15splmEioubnQdHgx82ZzXPrzfYD 92JEtOltLceBnT2TKWMTcKOe6wTrQXIbADpHhr1ZGV5C6CI+3OOpCsdjDcA9uOPe TjM58MTfuhKHdtF5FbaLa2M0lcAxPQFlyW0jcdDJ4rwPdlAupsvZSPKXmCFluTFS o9ljjx97lxaeUuMmbEb00jo3eECi9CjAwmA4jZiX4nBd+a8cXw9A42tagfh2lH/A pLyLS2RbjDs3ItRoPFEZtg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:09 2026 by rpki-client