This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer File: _r8wIB8SoEDThtK07tRIRiPk0Rs.cer (raw, json) Hash identifier: t8Hwb+O9Tz59DzFj//2DtbwJahJ+I9DnJ2ykQg/1e7k= Subject key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED785BCA41653AD3BDF285A78C6855 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49658 IP: 5.32.128.0/22 IP: 46.55.252.0/22 IP: 46.254.128.0/21 IP: 77.78.152.0/21 IP: 80.72.64.0/24 IP: 80.72.72.0/24 IP: 85.187.0.0/24 IP: 85.187.2.0 -- 85.187.15.255 IP: 85.187.17.0 -- 85.187.21.255 IP: 85.187.40.0 -- 85.187.45.255 IP: 85.187.48.0/22 IP: 85.187.62.0/23 IP: 85.187.184.0 -- 85.187.186.255 IP: 85.187.191.0/24 IP: 85.187.200.0/21 IP: 85.187.218.0/23 IP: 85.187.222.0 -- 85.187.255.255 IP: 151.237.16.0 -- 151.237.39.255 IP: 151.237.62.0/23 IP: 151.237.67.0 -- 151.237.79.255 IP: 151.237.91.0 -- 151.237.93.255 IP: 151.237.96.0 -- 151.237.129.255 IP: 151.237.136.0/22 IP: 151.237.142.0/23 IP: 185.46.160.0/22 IP: 185.72.56.0/22 IP: 185.200.40.0/22 IP: 185.236.236.0/22 IP: 185.240.188.0/22 IP: 185.242.168.0/22 IP: 185.243.236.0/22 IP: 185.255.58.0/24 IP: 185.255.212.0/22 IP: 195.85.215.0/24 IP: 2a01:9e40::/32 IP: 2a03:b540::/32 IP: 2a0d:e700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:78:5b:ca:41:65:3a:d3:bd:f2:85:a7:8c:68:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=febf30201f12a040d386d2b4eed4484623e4d11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:27:52:a1:22:44:8e:af:f3:a6:e7:6a:02:2f: 06:52:b2:fe:96:ad:08:31:1d:c6:5d:e6:1f:de:f0: ec:d5:73:05:93:a9:56:67:e4:fc:28:c5:be:1a:9e: 59:d5:7c:37:34:95:a5:20:39:d1:7c:69:4f:5d:67: fe:46:f9:7d:c8:37:e5:2f:6a:23:e8:b7:ed:dc:f5: af:38:4d:18:86:5b:dd:53:a6:bf:d1:ca:8c:d6:e5: 4d:65:4b:36:92:2c:a3:3d:0f:4a:9c:33:80:94:a6: 71:8d:95:07:6a:09:48:b5:a6:6f:7c:03:ca:fc:3a: 41:b1:e0:ce:87:43:5a:90:aa:fc:5b:38:d7:0d:f8: 02:93:a6:ed:4f:f7:39:57:e7:b6:81:2c:a6:30:96: e9:38:3a:2e:1e:11:8e:3b:6f:e7:05:03:6a:20:8a: 5c:be:63:b0:64:a9:fd:e0:41:bd:be:40:3e:c5:ee: 23:92:8f:ba:a4:3d:ab:ae:8e:0c:4c:3b:7d:d3:4b: 8b:68:39:6a:11:38:5f:bd:15:a3:8a:17:6c:85:9e: 2e:55:30:48:0a:f2:fa:51:0c:f1:87:92:98:a0:6e: b4:cb:bf:5b:eb:2d:2c:0a:cb:ce:e0:a1:cb:c1:44: dc:f5:f4:71:e2:28:95:db:f1:5d:b8:63:8d:c4:9d: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.128.0/22 46.55.252.0/22 46.254.128.0/21 77.78.152.0/21 80.72.64.0/24 80.72.72.0/24 85.187.0.0/24 85.187.2.0-85.187.15.255 85.187.17.0-85.187.21.255 85.187.40.0-85.187.45.255 85.187.48.0/22 85.187.62.0/23 85.187.184.0-85.187.186.255 85.187.191.0/24 85.187.200.0/21 85.187.218.0/23 85.187.222.0-85.187.255.255 151.237.16.0-151.237.39.255 151.237.62.0/23 151.237.67.0-151.237.79.255 151.237.91.0-151.237.93.255 151.237.96.0-151.237.129.255 151.237.136.0/22 151.237.142.0/23 185.46.160.0/22 185.72.56.0/22 185.200.40.0/22 185.236.236.0/22 185.240.188.0/22 185.242.168.0/22 185.243.236.0/22 185.255.58.0/24 185.255.212.0/22 195.85.215.0/24 IPv6: 2a01:9e40::/32 2a03:b540::/32 2a0d:e700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49658 Signature Algorithm: sha256WithRSAEncryption 1c:a7:25:1b:99:a5:32:6a:6f:dd:9d:d5:fc:dd:cf:71:8d:e7: 78:85:55:b5:e2:dd:7c:d5:78:12:f7:3a:20:96:3d:0e:56:4a: f2:8e:3d:84:ce:76:d2:5f:5f:19:9e:15:77:b9:71:cf:42:fa: dc:b6:8b:64:fa:d9:47:ce:bd:d9:98:a7:e1:d7:89:1b:f6:3d: 57:c3:d4:4c:1a:e4:e5:b5:79:a7:18:8a:d4:3e:1d:f3:af:ce: 51:4f:35:de:b0:f0:11:21:d8:a8:f4:56:b1:f8:25:1d:3d:52: e8:fd:d2:9c:e2:95:8c:4d:a9:67:e6:87:2c:14:9c:cb:d3:74: 06:f8:0d:f7:5a:9d:d5:1f:ba:f0:ef:1c:7f:fa:50:9b:78:7f: 21:ef:30:1c:cd:8e:41:e7:85:b3:9c:f3:89:dc:95:34:7a:d8: e2:18:1b:ce:f4:9a:f1:91:a9:17:39:c8:c7:fb:84:08:a9:1e: fd:e6:76:69:b1:c4:08:91:31:55:bd:19:0c:d3:91:c2:42:fa: ca:9a:8a:b6:83:70:cc:a9:65:b3:20:32:f6:31:6a:73:ed:1c: 49:a4:86:9f:c8:ff:19:06:40:e0:b8:f4:40:80:de:bf:e4:90: 42:06:34:d8:d0:fe:b5:9f:15:f6:d5:49:07:58:c3:cf:f4:a9: a7:49:fd:24 -----BEGIN CERTIFICATE----- MIIGyDCCBbCgAwIBAgISAZt87XhbykFlOtO98oWnjGhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CdSoSJEjq/zpudqAi8GUrL+lq0I MR3GXeYf3vDs1XMFk6lWZ+T8KMW+Gp5Z1Xw3NJWlIDnRfGlPXWf+Rvl9yDflL2oj 6Lft3PWvOE0YhlvdU6a/0cqM1uVNZUs2kiyjPQ9KnDOAlKZxjZUHaglItaZvfAPK /DpBseDOh0NakKr8WzjXDfgCk6btT/c5V+e2gSymMJbpODouHhGOO2/nBQNqIIpc vmOwZKn94EG9vkA+xe4jko+6pD2rro4MTDt900uLaDlqEThfvRWjihdshZ4uVTBI CvL6UQzxh5KYoG60y79b6y0sCsvO4KHLwUTc9fRx4iiV2/FduGONxJ2f3QIDAQAB o4ID1DCCA9AwHQYDVR0OBBYEFP6/MCAfEqBA04bStO7USEYj5NEbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2Y4YzRh Mi05NmFjLTRiNGUtYTE5NS1hOTdjMGRjMGE3NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvZjhjNGEy LTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8xL19yOHdJQjhTb0VEVGh0SzA3 dFJJUmlQazBScy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBUQYIKwYB BQUHAQcBAf8EggFAMIIBPDCCARsEAgABMIIBEwMEAgUggAMEAi43/AMEAy7+gAME A01OmAMEAFBIQAMEAFBISAMEAFW7ADAMAwQBVbsCAwQEVbsAMAwDBABVuxEDBAFV uxQwDAMEA1W7KAMEAVW7LAMEAlW7MAMEAVW7PjAMAwQDVbu4AwQAVbu6AwQAVbu/ AwQDVbvIAwQBVbvaMAsDBAFVu94DAwJVuDAMAwQEl+0QAwQDl+0gAwQBl+0+MAwD BACX7UMDBASX7UAwDAMEAJftWwMEAZftXDAMAwQFl+1gAwQBl+2AAwQCl+2IAwQB l+2OAwQCuS6gAwQCuUg4AwQCucgoAwQCuezsAwQCufC8AwQCufKoAwQCufPsAwQA uf86AwQCuf/UAwQAw1XXMBsEAgACMBUDBQAqAZ5AAwUAKgO1QAMFAyoN5wAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAMH6MA0GCSqGSIb3DQEBCwUAA4IBAQAcpyUb maUyam/dndX83c9xjed4hVW14t181XgS9zoglj0OVkryjj2EznbSX18ZnhV3uXHP Qvrctotk+tlHzr3ZmKfh14kb9j1Xw9RMGuTltXmnGIrUPh3zr85RTzXesPARIdio 9Fax+CUdPVLo/dKc4pWMTaln5ocsFJzL03QG+A33Wp3VH7rw7xx/+lCbeH8h7zAc zY5B54WznPOJ3JU0etjiGBvO9JrxkakXOcjH+4QIqR795nZpscQIkTFVvRkM05HC QvrKmoq2g3DMqWWzIDL2MWpz7RxJpIafyP8ZBkDguPRAgN6/5JBCBjTY0P61nxX2 1UkHWMPP9KmnSf0k -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:38 2026 by rpki-client