This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer File: b14CML55nkSCnIcgyjg0cEVJTiA.cer (raw, json) Hash identifier: yM3PWJV/XuiQzUIb6k/DU54NB+kb+bCYytCLJmXmXKU= Subject key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BFFE9A9966AD5CE60459DB2C74AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3246 AS: 5574 AS: 8213 AS: 8996 AS: 9045 -- 9047 AS: 13116 AS: 39301 AS: 39651 AS: 50521 IP: 5.240.0.0/14 IP: 31.15.32.0/19 IP: 37.0.128.0/17 IP: 37.2.0.0/15 IP: 37.196.0.0/14 IP: 37.233.64.0/20 IP: 62.65.0.0/19 IP: 62.95.0.0/17 IP: 62.181.64.0/18 IP: 77.216.0.0/14 IP: 77.233.64.0/19 IP: 78.28.64.0/18 IP: 80.170.0.0/16 IP: 80.216.0.0/15 IP: 81.21.240.0/20 IP: 81.216.0.0/16 IP: 83.176.0.0/12 IP: 83.248.0.0/13 IP: 85.194.0.0/18 IP: 85.232.160.0/19 IP: 87.227.0.0/17 IP: 88.131.0.0/16 IP: 90.128.0.0 -- 90.144.255.255 IP: 91.95.0.0/16 IP: 91.128.0.0/14 IP: 94.186.0.0/17 IP: 95.153.0.0/18 IP: 109.197.0.0/21 IP: 151.177.0.0/16 IP: 176.68.0.0/14 IP: 178.218.152.0/22 IP: 185.2.228.0/22 IP: 185.90.24.0/22 IP: 185.95.148.0/22 IP: 188.148.0.0/14 IP: 193.12.0.0/14 IP: 193.41.14.0/23 IP: 193.41.24.0/21 IP: 193.41.46.0/24 IP: 193.150.192.0/18 IP: 193.216.0.0/15 IP: 194.114.140.0/22 IP: 194.176.96.0/24 IP: 195.22.64.0/19 IP: 195.42.192.0/19 IP: 195.54.128.0/19 IP: 195.84.0.0/16 IP: 212.53.96.0/19 IP: 212.107.32.0/19 IP: 212.119.128.0/19 IP: 212.151.0.0 -- 212.152.31.255 IP: 212.162.160.0/19 IP: 212.214.0.0/16 IP: 212.247.0.0/16 IP: 213.50.0.0/16 IP: 213.88.128.0 -- 213.89.255.255 IP: 213.100.0.0/14 IP: 213.130.192.0/19 IP: 213.131.128.0/19 IP: 213.134.96.0/19 IP: 213.173.192.0/19 IP: 213.187.192.0/19 IP: 213.200.128.0/18 IP: 217.119.160.0/20 IP: 2001:67c:2a8::/48 IP: 2001:6f0::/29 IP: 2a00:800::/25 IP: 2a00:e18::/32 IP: 2a01:1b8::/32 IP: 2a04:ae00::/26 IP: 2a05:fb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bf:fe:9a:99:66:ad:5c:e6:04:59:db:2c:74:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5e0230be799e44829c8720ca38347045494e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:c9:12:74:14:e5:d6:2e:8d:63:a6:88:0f: 78:b7:af:69:7e:e9:ce:2f:b5:d8:e7:d0:4a:7c:98: 8a:78:d5:2a:af:ae:cb:2a:6c:ca:41:74:02:97:94: 65:dc:b4:10:8c:92:43:d5:71:08:ac:9b:a3:df:39: 59:55:b5:d4:22:0f:47:07:01:e4:c3:4a:94:c9:88: 58:1a:ff:fa:a5:05:5e:ee:39:34:ca:c5:75:f5:32: 4d:83:f9:3c:ee:29:18:ea:d7:69:f6:3e:b8:75:a7: 22:c4:13:44:bd:41:14:8b:51:87:b9:de:f1:68:29: 39:63:f9:98:e4:c6:4e:de:cb:0d:48:6b:b9:40:29: 35:f8:38:35:8d:db:a7:03:97:de:5b:52:c0:55:d3: 8b:14:25:3d:59:1d:a6:da:87:2b:0d:de:ca:2c:c8: 1b:87:8d:f7:f4:7c:c3:eb:c4:16:93:b3:f5:49:c7: b1:4a:3c:ed:83:07:da:d9:6b:9e:f2:0c:37:65:51: 28:8b:63:0f:cb:ed:87:a2:23:c2:b4:91:fc:8a:3b: 9d:53:4a:fb:72:48:8d:65:a2:b7:22:f3:3e:37:ff: 24:1c:cb:e6:c6:68:5e:df:20:7f:c7:73:98:78:fa: 5b:40:fc:97:24:d5:11:2d:41:96:58:b1:ab:35:d7: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.240.0.0/14 31.15.32.0/19 37.0.128.0/17 37.2.0.0/15 37.196.0.0/14 37.233.64.0/20 62.65.0.0/19 62.95.0.0/17 62.181.64.0/18 77.216.0.0/14 77.233.64.0/19 78.28.64.0/18 80.170.0.0/16 80.216.0.0/15 81.21.240.0/20 81.216.0.0/16 83.176.0.0/12 83.248.0.0/13 85.194.0.0/18 85.232.160.0/19 87.227.0.0/17 88.131.0.0/16 90.128.0.0-90.144.255.255 91.95.0.0/16 91.128.0.0/14 94.186.0.0/17 95.153.0.0/18 109.197.0.0/21 151.177.0.0/16 176.68.0.0/14 178.218.152.0/22 185.2.228.0/22 185.90.24.0/22 185.95.148.0/22 188.148.0.0/14 193.12.0.0/14 193.41.14.0/23 193.41.24.0/21 193.41.46.0/24 193.150.192.0/18 193.216.0.0/15 194.114.140.0/22 194.176.96.0/24 195.22.64.0/19 195.42.192.0/19 195.54.128.0/19 195.84.0.0/16 212.53.96.0/19 212.107.32.0/19 212.119.128.0/19 212.151.0.0-212.152.31.255 212.162.160.0/19 212.214.0.0/16 212.247.0.0/16 213.50.0.0/16 213.88.128.0-213.89.255.255 213.100.0.0/14 213.130.192.0/19 213.131.128.0/19 213.134.96.0/19 213.173.192.0/19 213.187.192.0/19 213.200.128.0/18 217.119.160.0/20 IPv6: 2001:67c:2a8::/48 2001:6f0::/29 2a00:800::/25 2a00:e18::/32 2a01:1b8::/32 2a04:ae00::/26 2a05:fb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3246 5574 8213 8996 9045-9047 13116 39301 39651 50521 Signature Algorithm: sha256WithRSAEncryption 26:32:59:47:c6:3b:55:8b:a4:07:ec:0c:a5:79:12:7d:5f:c3: 36:98:75:00:5d:49:f8:7c:bd:b3:b3:18:71:19:10:fd:88:1e: e7:9c:6e:48:76:69:7c:4d:78:89:87:03:5e:cb:82:22:ac:89: 63:2b:df:aa:87:cd:80:3c:43:f6:b3:6a:ce:d6:26:7d:08:2e: 23:49:b4:d1:68:59:ea:7e:9d:ff:80:e6:78:6e:74:f2:26:31: 31:0a:ee:21:d5:b9:99:58:9f:ec:cc:3a:1f:d1:6e:a0:e3:02: 4f:60:6d:06:4e:7c:c6:a5:30:45:b1:76:28:2a:20:6c:85:dc: 16:f2:78:ff:7c:80:b7:0c:a2:a2:8d:ea:75:72:1b:8e:e9:7e: 07:2c:72:87:53:c9:f9:7b:b2:ca:d9:8b:48:6b:bf:4a:29:1b: 13:3e:af:ec:08:ef:8b:90:34:da:1d:20:ba:7c:a0:85:5a:87: 47:2e:da:a2:53:c8:d6:3d:55:91:67:1c:ce:95:29:ff:2f:59: e9:a7:0b:9b:e0:1a:34:ba:36:5b:e1:53:88:d5:ab:13:b1:96: 2a:83:73:f7:0e:92:5c:ac:de:4a:51:c9:31:d8:c5:40:13:97: 65:b9:ee:c1:ad:9f:ec:08:e8:60:17:9d:1c:78:5f:ed:1b:77: b5:dd:9f:2f -----BEGIN CERTIFICATE----- MIIHeTCCBmGgAwIBAgISAZt3xr/+mplmrVzmBFnbLHSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjVlMDIzMGJlNzk5ZTQ0ODI5Yzg3MjBjYTM4MzQ3MDQ1NDk0ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfXJEnQU5dYujWOmiA94t69pfunO L7XY59BKfJiKeNUqr67LKmzKQXQCl5Rl3LQQjJJD1XEIrJuj3zlZVbXUIg9HBwHk w0qUyYhYGv/6pQVe7jk0ysV19TJNg/k87ikY6tdp9j64dacixBNEvUEUi1GHud7x aCk5Y/mY5MZO3ssNSGu5QCk1+Dg1jdunA5feW1LAVdOLFCU9WR2m2ocrDd7KLMgb h4339HzD68QWk7P1ScexSjztgwfa2Wue8gw3ZVEoi2MPy+2HoiPCtJH8ijudU0r7 ckiNZaK3IvM+N/8kHMvmxmhe3yB/x3OYePpbQPyXJNURLUGWWLGrNde2YwIDAQAB o4IEhTCCBIEwHQYDVR0OBBYEFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzcwY2Nl Zi0xN2YzLTQ5MjgtOWMwYi1iYTdjN2Q4MTkwY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNzBjY2Vm LTE3ZjMtNDkyOC05YzBiLWJhN2M3ZDgxOTBjYS8xL2IxNENNTDU1bmtTQ25JY2d5 amcwY0VWSlRpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB2gYIKwYB BQUHAQcBAf8EggHJMIIBxTCCAYYEAgABMIIBfgMDAgXwAwQFHw8gAwQHJQCAAwMB JQIDAwIlxAMEBCXpQAMEBT5BAAMEBz5fAAMEBj61QAMDAk3YAwQFTelAAwQGThxA AwMAUKoDAwFQ2AMEBFEV8AMDAFHYAwMEU7ADAwNT+AMEBlXCAAMEBVXooAMEB1fj AAMDAFiDMAoDAwdagAMDAFqQAwMAW18DAwJbgAMEB166AAMEBl+ZAAMEA23FAAMD AJexAwMCsEQDBAKy2pgDBAK5AuQDBAK5WhgDBAK5X5QDAwK8lAMDAsEMAwQBwSkO AwQDwSkYAwQAwSkuAwQGwZbAAwMBwdgDBALCcowDBADCsGADBAXDFkADBAXDKsAD BAXDNoADAwDDVAMEBdQ1YAMEBdRrIAMEBdR3gDALAwMA1JcDBAXUmAADBAXUoqAD AwDU1gMDANT3AwMA1TIwCwMEB9VYgAMDAdVYAwMC1WQDBAXVgsADBAXVg4ADBAXV hmADBAXVrcADBAXVu8ADBAbVyIADBATZd6AwOQQCAAIwMwMHACABBnwCqAMFAyAB BvADBQcqAAgAAwUAKgAOGAMFACoBAbgDBQYqBK4AAwUDKgX7ADBCBggrBgEFBQcB CAEB/wQzMDGgLzAtAgIMrgICFcYCAiAVAgIjJDAIAgIjVQICI1cCAjM8AgMAmYUC AwCa4wIDAMVZMA0GCSqGSIb3DQEBCwUAA4IBAQAmMllHxjtVi6QH7AyleRJ9X8M2 mHUAXUn4fL2zsxhxGRD9iB7nnG5Idml8TXiJhwNey4IirIljK9+qh82APEP2s2rO 1iZ9CC4jSbTRaFnqfp3/gOZ4bnTyJjExCu4h1bmZWJ/szDof0W6g4wJPYG0GTnzG pTBFsXYoKiBshdwW8nj/fIC3DKKijep1chuO6X4HLHKHU8n5e7LK2YtIa79KKRsT Pq/sCO+LkDTaHSC6fKCFWodHLtqiU8jWPVWRZxzOlSn/L1nppwub4Bo0ujZb4VOI 1asTsZYqg3P3DpJcrN5KUckx2MVAE5dlue7BrZ/sCOhgF50ceF/tG3e13Z8v -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:56 2026 by rpki-client