This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.cer (raw, json) Hash identifier: o4hGmPZ9wgKSKwbgHaYajdNYogpnhuyKoQzrxw1XSnU= Subject key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B794337D85268B4C65F165AF08A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25369 AS: 49999 AS: 52167 AS: 58325 AS: 200039 IP: 5.226.136.0/21 IP: 31.14.102.0/24 IP: 31.14.254.0/24 IP: 37.10.113.0 -- 37.10.114.255 IP: 46.102.155.0/24 IP: 46.231.160.0/21 IP: 46.247.142.0/23 IP: 64.239.236.0/22 IP: 69.5.168.0/21 IP: 77.81.102.0/24 IP: 77.81.124.0/22 IP: 77.81.191.0/24 IP: 79.139.84.0/22 IP: 80.240.108.0/23 IP: 81.19.208.0/20 IP: 82.97.192.0/23 IP: 84.247.0.0/24 IP: 84.247.40.0/22 IP: 85.204.70.0/24 IP: 86.54.136.0/22 IP: 86.104.20.0/22 IP: 86.104.248.0/22 IP: 86.106.89.0/24 IP: 86.106.112.0/24 IP: 86.106.135.0/24 IP: 86.106.157.0 -- 86.106.158.255 IP: 86.107.241.0/24 IP: 89.21.64.0/22 IP: 89.32.127.0/24 IP: 89.34.96.0/22 IP: 89.35.25.0/24 IP: 89.35.28.0/22 IP: 89.37.64.0/22 IP: 89.37.172.0/22 IP: 89.38.68.0/23 IP: 89.40.212.0/24 IP: 89.46.222.0/23 IP: 89.46.248.0/22 IP: 93.113.175.0/24 IP: 93.114.83.0/24 IP: 93.114.129.0/24 IP: 93.118.40.0/22 IP: 94.177.17.0/24 IP: 109.69.104.0/21 IP: 109.70.144.0/21 IP: 109.230.203.0/24 IP: 109.230.209.0/24 IP: 109.230.215.0/24 IP: 109.230.218.0/24 IP: 109.230.220.0/24 IP: 128.127.148.0/22 IP: 134.255.243.0/24 IP: 176.223.172.0/22 IP: 178.239.160.0/20 IP: 185.3.236.0/22 IP: 185.16.204.0/22 IP: 185.28.252.0/22 IP: 185.38.148.0/22 IP: 185.44.76.0/22 IP: 185.61.156.0/22 IP: 185.114.224.0/24 IP: 185.121.136.0/22 IP: 185.125.204.0/22 IP: 185.134.20.0/22 IP: 185.137.36.0/22 IP: 185.158.240.0/22 IP: 185.200.204.0/22 IP: 185.216.144.0/22 IP: 185.223.232.0/22 IP: 185.242.80.0/22 IP: 188.212.154.0/24 IP: 188.240.56.0/21 IP: 188.240.71.0/24 IP: 188.241.120.0/24 IP: 188.241.144.0/24 IP: 188.241.156.0/23 IP: 188.241.246.0/24 IP: 193.32.208.0/22 IP: 193.124.20.0/23 IP: 193.176.28.0/22 IP: 194.50.234.0/23 IP: 194.50.250.0/23 IP: 194.88.96.0/21 IP: 195.20.108.0/23 IP: 195.140.212.0/22 IP: 195.206.165.0 -- 195.206.167.255 IP: 195.206.169.0 -- 195.206.171.255 IP: 195.206.180.0/22 IP: 195.234.124.0/23 IP: 195.234.127.0/24 IP: 212.237.224.0/22 IP: 213.166.84.0/22 IP: 217.146.80.0/20 IP: 2a00:1a30::/32 IP: 2a01:4020::/32 IP: 2a0b:b840::/29 IP: 2a0d:7440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:94:33:7d:85:26:8b:4c:65:f1:65:af:08:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:16:6d:97:9b:a4:24:de:4c:7b:53:5e:79:45: 0c:39:25:d0:06:16:e0:16:c2:73:ff:0c:3d:46:c5: 0c:f3:4e:b2:b0:83:27:62:5a:1c:e7:ee:04:36:dc: c5:4b:32:ba:c1:f0:3d:0b:9a:45:69:32:fd:57:c4: 3f:9a:27:7b:10:ab:18:02:75:31:58:35:68:ce:e1: 9f:c5:2c:d2:f9:ff:eb:ed:66:b5:39:ea:3f:33:67: cb:b7:cc:a1:88:bc:90:b0:5b:95:15:72:ae:b1:4a: 8a:3c:f3:93:46:0b:23:02:ef:55:93:48:69:98:77: 97:2e:7f:ac:eb:4b:ca:8b:c4:0e:15:fd:79:2d:9c: 9a:fc:52:3b:ec:3d:f5:d1:19:70:c8:50:bf:10:ca: 17:9c:c6:c6:98:0b:0b:26:75:92:b7:34:e9:2b:c9: 2c:40:0f:11:e1:aa:26:dc:da:59:f0:a3:c9:87:76: 17:a3:05:23:d0:50:eb:3e:ca:18:af:31:2a:f6:0d: 23:7d:81:88:3f:5e:fc:6d:5a:ce:70:f3:06:e6:ca: 73:d3:6e:74:b7:25:94:e9:95:13:78:f4:72:e3:19: d9:af:7a:b2:8a:8a:77:2d:c5:e5:58:8a:2f:c6:71: 79:b9:5c:f3:55:67:97:ed:9b:75:7b:b5:92:66:a5: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.136.0/21 31.14.102.0/24 31.14.254.0/24 37.10.113.0-37.10.114.255 46.102.155.0/24 46.231.160.0/21 46.247.142.0/23 64.239.236.0/22 69.5.168.0/21 77.81.102.0/24 77.81.124.0/22 77.81.191.0/24 79.139.84.0/22 80.240.108.0/23 81.19.208.0/20 82.97.192.0/23 84.247.0.0/24 84.247.40.0/22 85.204.70.0/24 86.54.136.0/22 86.104.20.0/22 86.104.248.0/22 86.106.89.0/24 86.106.112.0/24 86.106.135.0/24 86.106.157.0-86.106.158.255 86.107.241.0/24 89.21.64.0/22 89.32.127.0/24 89.34.96.0/22 89.35.25.0/24 89.35.28.0/22 89.37.64.0/22 89.37.172.0/22 89.38.68.0/23 89.40.212.0/24 89.46.222.0/23 89.46.248.0/22 93.113.175.0/24 93.114.83.0/24 93.114.129.0/24 93.118.40.0/22 94.177.17.0/24 109.69.104.0/21 109.70.144.0/21 109.230.203.0/24 109.230.209.0/24 109.230.215.0/24 109.230.218.0/24 109.230.220.0/24 128.127.148.0/22 134.255.243.0/24 176.223.172.0/22 178.239.160.0/20 185.3.236.0/22 185.16.204.0/22 185.28.252.0/22 185.38.148.0/22 185.44.76.0/22 185.61.156.0/22 185.114.224.0/24 185.121.136.0/22 185.125.204.0/22 185.134.20.0/22 185.137.36.0/22 185.158.240.0/22 185.200.204.0/22 185.216.144.0/22 185.223.232.0/22 185.242.80.0/22 188.212.154.0/24 188.240.56.0/21 188.240.71.0/24 188.241.120.0/24 188.241.144.0/24 188.241.156.0/23 188.241.246.0/24 193.32.208.0/22 193.124.20.0/23 193.176.28.0/22 194.50.234.0/23 194.50.250.0/23 194.88.96.0/21 195.20.108.0/23 195.140.212.0/22 195.206.165.0-195.206.167.255 195.206.169.0-195.206.171.255 195.206.180.0/22 195.234.124.0/23 195.234.127.0/24 212.237.224.0/22 213.166.84.0/22 217.146.80.0/20 IPv6: 2a00:1a30::/32 2a01:4020::/32 2a0b:b840::/29 2a0d:7440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25369 49999 52167 58325 200039 Signature Algorithm: sha256WithRSAEncryption 29:d5:ef:4c:47:ba:93:0e:7e:ca:62:78:85:6e:a7:0d:50:53: 6d:b2:9b:ce:66:48:2b:be:e3:54:f6:1e:a8:bb:8a:5d:77:54: e6:05:4e:54:c8:46:74:cb:6c:fa:9c:c8:f6:60:f7:2c:c9:70: 5e:45:be:80:c9:23:7d:ab:f0:1c:12:49:d6:9d:6b:2d:f7:af: 29:23:d3:0c:9d:05:f3:15:c6:c4:66:ef:ca:5f:7a:f4:53:fe: 87:42:42:df:e3:86:d5:86:14:26:06:df:f7:77:d6:e7:95:65: 04:3f:27:5e:8c:6c:98:2d:56:83:90:c4:5f:95:4f:58:d3:65: ca:b4:c3:0e:94:af:11:16:75:2d:1f:b6:3f:54:81:29:16:84: 4f:97:8d:d7:da:16:5d:e6:d3:4f:57:18:64:e6:fa:8d:73:db: d6:b2:b8:39:8c:e3:cf:c7:c3:92:f9:36:e0:65:14:38:72:4d: 75:a8:f4:3f:86:18:10:92:2f:57:7c:c0:10:fc:8e:05:82:22: 0d:50:c4:79:cb:33:bc:f3:25:df:5c:3c:fe:ce:26:84:53:00: 84:22:ff:a2:51:eb:b2:b0:f9:79:be:31:66:2c:74:c4:1a:dd: ac:5f:8c:e9:b3:84:da:1f:4e:b3:23:44:67:da:2d:9e:06:d9: a7:46:85:aa -----BEGIN CERTIFICATE----- MIIIHTCCBwWgAwIBAgISAZt3WLeUM32FJotMZfFlrwimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDM3Y2M4ZjE2YjNjNmNiZDMzNDZhYTNlZDYxNzcxZjNlODNhYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RZtl5ukJN5Me1NeeUUMOSXQBhbg FsJz/ww9RsUM806ysIMnYloc5+4ENtzFSzK6wfA9C5pFaTL9V8Q/mid7EKsYAnUx WDVozuGfxSzS+f/r7Wa1Oeo/M2fLt8yhiLyQsFuVFXKusUqKPPOTRgsjAu9Vk0hp mHeXLn+s60vKi8QOFf15LZya/FI77D310RlwyFC/EMoXnMbGmAsLJnWStzTpK8ks QA8R4aom3NpZ8KPJh3YXowUj0FDrPsoYrzEq9g0jfYGIP178bVrOcPMG5spz0250 tyWU6ZUTePRy4xnZr3qyiop3LcXlWIovxnF5uVzzVWeX7Zt1e7WSZqWvyQIDAQAB o4IFKTCCBSUwHQYDVR0OBBYEFP03zI8Ws8bL0zRqo+1hdx8+g6yXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzA1ZTE3 Zi1kMzFmLTQzMWYtYThiYy03ZTA1YWI0MWI2ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMDVlMTdm LWQzMWYtNDMxZi1hOGJjLTdlMDVhYjQxYjZlNC8xL19UZk1qeGF6eHN2VE5HcWo3 V0YzSHo2RHJKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICkwYIKwYB BQUHAQcBAf8EggKCMIICfjCCAlYEAgABMIICTgMEAwXiiAMEAB8OZgMEAB8O/jAM AwQAJQpxAwQAJQpyAwQALmabAwQDLuegAwQBLveOAwQCQO/sAwQDRQWoAwQATVFm AwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQEURPQAwQBUmHAAwQAVPcAAwQCVPco AwQAVcxGAwQCVjaIAwQCVmgUAwQCVmj4AwQAVmpZAwQAVmpwAwQAVmqHMAwDBABW ap0DBABWap4DBABWa/EDBAJZFUADBABZIH8DBAJZImADBABZIxkDBAJZIxwDBAJZ JUADBAJZJawDBAFZJkQDBABZKNQDBAFZLt4DBAJZLvgDBABdca8DBABdclMDBABd coEDBAJddigDBABesREDBANtRWgDBANtRpADBABt5ssDBABt5tEDBABt5tcDBABt 5toDBABt5twDBAKAf5QDBACG//MDBAKw36wDBASy76ADBAK5A+wDBAK5EMwDBAK5 HPwDBAK5JpQDBAK5LEwDBAK5PZwDBAC5cuADBAK5eYgDBAK5fcwDBAK5hhQDBAK5 iSQDBAK5nvADBAK5yMwDBAK52JADBAK53+gDBAK58lADBAC81JoDBAO88DgDBAC8 8EcDBAC88XgDBAC88ZADBAG88ZwDBAC88fYDBALBINADBAHBfBQDBALBsBwDBAHC MuoDBAHCMvoDBAPCWGADBAHDFGwDBALDjNQwDAMEAMPOpQMEA8POoDAMAwQAw86p AwQCw86oAwQCw860AwQBw+p8AwQAw+p/AwQC1O3gAwQC1aZUAwQE2ZJQMCIEAgAC MBwDBQAqABowAwUAKgFAIAMFAyoLuEADBQMqDXRAMC0GCCsGAQUFBwEIAQH/BB4w HKAaMBgCAmMZAgMAw08CAwDLxwIDAOPVAgMDDWcwDQYJKoZIhvcNAQELBQADggEB ACnV70xHupMOfspieIVupw1QU22ym85mSCu+41T2Hqi7il13VOYFTlTIRnTLbPqc yPZg9yzJcF5FvoDJI32r8BwSSdaday33rykj0wydBfMVxsRm78pfevRT/odCQt/j htWGFCYG3/d31ueVZQQ/J16MbJgtVoOQxF+VT1jTZcq0ww6UrxEWdS0ftj9UgSkW hE+XjdfaFl3m009XGGTm+o1z29ayuDmM48/Hw5L5NuBlFDhyTXWo9D+GGBCSL1d8 wBD8jgWCIg1QxHnLM7zzJd9cPP7OJoRTAIQi/6JR67Kw+Xm+MWYsdMQa3axfjOmz hNofTrMjRGfaLZ4G2adGhao= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:47 2026 by rpki-client