This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer File: d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer (raw, json) Hash identifier: oIWCMsG0P4FQjNTHTt8pHIf15M7XvJVllYCPElxtia8= Subject key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C125B1E94973C4AB63C1F10B7C4FDBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6656 AS: 8272 AS: 8426 AS: 24976 AS: 199269 AS: 201980 IP: 62.173.64.0/18 IP: 62.231.128.0/19 IP: 79.123.0.0/17 IP: 80.168.0.0/16 IP: 81.171.128.0/17 IP: 89.206.128.0/17 IP: 176.52.208.0/21 IP: 185.22.164.0/22 IP: 185.39.232.0/22 IP: 185.56.4.0/22 IP: 185.77.72.0/22 IP: 185.77.200.0/22 IP: 185.78.204.0/22 IP: 194.88.132.0/23 IP: 194.112.32.0/19 IP: 194.119.128.0/18 IP: 195.8.64.0/19 IP: 195.58.192.0/19 IP: 195.102.0.0/16 IP: 195.157.0.0/16 IP: 195.216.0.0/19 IP: 195.245.201.0/24 IP: 212.49.192.0/18 IP: 212.125.64.0/19 IP: 212.126.128.0/19 IP: 212.169.0.0/18 IP: 212.188.128.0/17 IP: 213.2.0.0/16 IP: 213.165.128.0/19 IP: 213.253.0.0/18 IP: 217.158.0.0/16 IP: 2001:67c:80::/48 IP: 2001:67c:1088::/47 IP: 2001:67c:27dc::/48 IP: 2001:a88::/32 IP: 2a00:ed0::/32 IP: 2a00:62e0::/32 IP: 2a02:4f20::/32 IP: 2a02:e100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5b:1e:94:97:3c:4a:b6:3c:1f:10:b7:c4:fd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:50:78:c6:e0:91:9e:7d:ef:77:2f:fa:e0: 42:b8:60:d6:f3:9e:c4:a2:e9:94:2e:2f:3b:08:3d: 67:fd:13:45:a7:3c:8b:e5:7a:77:2e:49:92:ec:e5: f5:c7:c1:a2:f7:de:2a:96:e7:a7:90:6c:8e:ea:e0: aa:a2:94:ad:e8:b4:50:d5:92:ec:c6:22:79:95:a9: 50:7d:40:68:0d:ba:92:eb:42:d3:04:eb:90:45:5b: cf:19:02:28:c3:93:01:1d:44:51:b5:81:8d:fd:d7: 34:b5:1e:48:58:24:fd:b0:77:75:52:4d:ff:9e:c9: 4c:de:8c:00:9f:f6:0b:d4:3e:e1:f5:5c:ac:ae:37: 5b:23:72:24:65:96:84:fb:4b:f0:95:b8:da:1d:33: 7f:39:27:0a:bc:6a:4a:d6:06:01:30:36:8f:00:9b: 90:01:45:2b:6a:47:43:a0:99:65:ce:e3:a5:3e:86: 60:64:83:71:1b:6b:8f:8b:ed:c5:e3:16:d9:70:6e: 8f:06:f0:9b:16:b4:64:78:a9:e5:f7:c2:04:e4:93: 3f:38:6a:fc:0f:9c:fd:ed:ca:ef:09:1f:09:53:a7: 3c:bf:3f:74:72:2a:22:22:39:47:90:b7:d9:15:97: 6b:b7:27:7a:04:f6:b6:51:42:5c:20:61:db:08:3b: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.173.64.0/18 62.231.128.0/19 79.123.0.0/17 80.168.0.0/16 81.171.128.0/17 89.206.128.0/17 176.52.208.0/21 185.22.164.0/22 185.39.232.0/22 185.56.4.0/22 185.77.72.0/22 185.77.200.0/22 185.78.204.0/22 194.88.132.0/23 194.112.32.0/19 194.119.128.0/18 195.8.64.0/19 195.58.192.0/19 195.102.0.0/16 195.157.0.0/16 195.216.0.0/19 195.245.201.0/24 212.49.192.0/18 212.125.64.0/19 212.126.128.0/19 212.169.0.0/18 212.188.128.0/17 213.2.0.0/16 213.165.128.0/19 213.253.0.0/18 217.158.0.0/16 IPv6: 2001:67c:80::/48 2001:67c:1088::/47 2001:67c:27dc::/48 2001:a88::/32 2a00:ed0::/32 2a00:62e0::/32 2a02:4f20::/32 2a02:e100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6656 8272 8426 24976 199269 201980 Signature Algorithm: sha256WithRSAEncryption 47:cd:67:c8:5b:43:73:91:ef:02:cd:59:ff:ae:86:9f:58:11: 47:62:04:17:4c:c2:eb:4f:ce:88:85:d2:5d:b7:f3:8d:19:c8: f7:40:93:53:6f:4a:b7:f5:45:d1:4c:2e:65:da:6b:ea:62:e6: b4:35:8e:21:29:ce:e6:f2:63:f7:63:d2:3b:90:23:75:aa:9a: 5f:a9:66:2f:f7:df:31:96:53:a9:b0:bd:c8:de:61:b8:e1:56: db:f9:19:0e:2a:d6:33:35:bc:2f:0b:49:63:6b:74:e5:cf:22: c3:95:1e:8c:d3:a6:d0:e0:06:d0:52:d4:91:58:17:fe:e1:65: 2f:3c:d6:de:91:d8:80:c0:a7:ef:e5:11:b6:6a:77:fa:2f:8d: b2:23:45:5a:eb:75:83:72:27:c5:7d:fe:8c:36:40:8d:ca:bc: 4a:01:04:4e:bb:32:72:61:b9:fb:39:d4:54:48:32:1d:01:aa: 68:5f:8b:e1:d5:25:e4:25:64:1e:5b:05:a0:2b:c2:a0:e1:76: 2c:a0:44:56:73:9d:b3:47:74:f2:64:3b:65:9f:9a:9d:07:74: df:d0:09:0b:b5:0d:dc:4e:cd:eb:b0:d8:d8:48:a8:9e:84:87: 4f:a1:61:be:42:d9:5d:c0:b2:01:30:fb:d9:f2:cb:1c:12:89: 71:db:7d:23 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgISAZt8ElselJc8SrY8HxC3xP29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2I4Y2Y0NTRiMDk2MmQxNmE0ODU1ODA4ZmQzYWJjMTU4NTJiYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro5QeMbgkZ5973cv+uBCuGDW857E oumULi87CD1n/RNFpzyL5Xp3LkmS7OX1x8Gi994qluenkGyO6uCqopSt6LRQ1ZLs xiJ5lalQfUBoDbqS60LTBOuQRVvPGQIow5MBHURRtYGN/dc0tR5IWCT9sHd1Uk3/ nslM3owAn/YL1D7h9VysrjdbI3IkZZaE+0vwlbjaHTN/OScKvGpK1gYBMDaPAJuQ AUUrakdDoJllzuOlPoZgZINxG2uPi+3F4xbZcG6PBvCbFrRkeKnl98IE5JM/OGr8 D5z97crvCR8JU6c8vz90cioiIjlHkLfZFZdrtyd6BPa2UUJcIGHbCDuXMQIDAQAB o4IDsjCCA64wHQYDVR0OBBYEFHe4z0VLCWLRakhVgI/Tq8FYUrvYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2MxNzFj YS00YjFiLTQxODctYmE0Ni1hNGZjOWUyNDU4ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvYzE3MWNh LTRiMWItNDE4Ny1iYTQ2LWE0ZmM5ZTI0NThlYy8xL2Q3alBSVXNKWXRGcVNGV0Fq OU9yd1ZoU3U5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGgYIKwYB BQUHAQcBAf8EggEJMIIBBTCBvAQCAAEwgbUDBAY+rUADBAU+54ADBAdPewADAwBQ qAMEB1GrgAMEB1nOgAMEA7A00AMEArkWpAMEArkn6AMEArk4BAMEArlNSAMEArlN yAMEArlOzAMEAcJYhAMEBcJwIAMEBsJ3gAMEBcMIQAMEBcM6wAMDAMNmAwMAw50D BAXD2AADBADD9ckDBAbUMcADBAXUfUADBAXUfoADBAbUqQADBAfUvIADAwDVAgME BdWlgAMEBtX9AAMDANmeMEQEAgACMD4DBwAgAQZ8AIADBwEgAQZ8EIgDBwAgAQZ8 J9wDBQAgAQqIAwUAKgAO0AMFACoAYuADBQAqAk8gAwUDKgLhADAvBggrBgEFBQcB CAEB/wQgMB6gHDAaAgIaAAICIFACAiDqAgJhkAIDAwplAgMDFPwwDQYJKoZIhvcN AQELBQADggEBAEfNZ8hbQ3OR7wLNWf+uhp9YEUdiBBdMwutPzoiF0l23840ZyPdA k1NvSrf1RdFMLmXaa+pi5rQ1jiEpzubyY/dj0juQI3Wqml+pZi/33zGWU6mwvcje YbjhVtv5GQ4q1jM1vC8LSWNrdOXPIsOVHozTptDgBtBS1JFYF/7hZS881t6R2IDA p+/lEbZqd/ovjbIjRVrrdYNyJ8V9/ow2QI3KvEoBBE67MnJhufs51FRIMh0Bqmhf i+HVJeQlZB5bBaArwqDhdiygRFZznbNHdPJkO2Wfmp0HdN/QCQu1DdxOzeuw2NhI qJ6Eh0+hYb5C2V3AsgEw+9nyyxwSiXHbfSM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:06 2026 by rpki-client