This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer File: dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer (raw, json) Hash identifier: /Qi99V4z1sXicWrbiShIOcScDoGUK4+tDiHlkCNPi8s= Subject key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EDCB718A7030979B48AE73BD0C2F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8919 AS: 9015 IP: 31.5.0.0/16 IP: 31.14.35.0/24 IP: 62.121.64.0/18 IP: 77.81.16.0/20 IP: 78.96.0.0/15 IP: 81.89.0.0/20 IP: 82.208.128.0/18 IP: 82.210.128.0/18 IP: 83.103.128.0/17 IP: 84.117.0.0/16 IP: 85.186.0.0/16 IP: 85.204.0.0/20 IP: 85.204.184.0/21 IP: 86.104.136.0/21 IP: 86.105.64.0/20 IP: 86.106.32.0/19 IP: 89.33.72.0/21 IP: 89.38.72.0/22 IP: 89.38.237.0/24 IP: 89.42.248.0/21 IP: 89.43.80.0/22 IP: 89.44.78.0/23 IP: 89.44.208.0/24 IP: 89.136.0.0/15 IP: 93.113.32.0/23 IP: 93.113.241.0 -- 93.113.243.255 IP: 93.114.32.0/21 IP: 93.114.190.0/23 IP: 93.114.216.0/21 IP: 93.117.66.0/23 IP: 93.117.138.0/23 IP: 93.117.154.0/23 IP: 93.118.46.0/23 IP: 93.119.126.0/23 IP: 93.119.137.0 -- 93.119.139.255 IP: 93.119.224.0 -- 93.119.226.255 IP: 94.176.144.0/23 IP: 94.177.108.0/22 IP: 95.76.0.0/15 IP: 185.63.136.0/22 IP: 188.208.117.0 -- 188.208.119.255 IP: 188.214.92.0/24 IP: 188.214.153.0 -- 188.214.154.255 IP: 188.214.195.0 -- 188.214.197.255 IP: 188.215.3.0/24 IP: 188.240.64.0/22 IP: 193.178.165.0/24 IP: 194.102.99.0/24 IP: 194.102.146.0/24 IP: 194.102.248.0/21 IP: 194.105.17.0/24 IP: 194.105.24.0/21 IP: 195.20.107.0/24 IP: 195.234.172.0/24 IP: 213.164.224.0/19 IP: 2a04:2400::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:dc:b7:18:a7:03:09:79:b4:8a:e7:3b:d0:c2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75790c7ecf24d28be2e13fe069118cee27d58002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:af:73:0b:82:a1:f9:7a:e0:f5:5f:d4:7b: de:02:3b:49:90:8a:5b:8e:c8:83:a1:c8:ad:b1:a2: a3:cf:19:e6:38:f9:76:b2:16:92:f5:87:0f:2d:df: ed:d0:2c:79:81:6d:04:e2:f1:e9:b1:eb:2a:8a:ec: b4:a4:0f:04:33:6d:9a:59:93:01:ed:8d:2f:0f:37: d5:00:4a:5f:47:53:95:f5:57:e3:08:9b:02:63:b4: 17:94:f7:a8:9b:0f:6c:f6:50:ff:1b:37:0d:1b:8b: 7e:bb:e8:df:bb:7d:6a:f7:d4:4b:ee:b5:a9:b1:55: 00:7a:ad:48:f9:74:04:56:00:65:de:25:dc:67:4f: 95:c2:7a:62:6c:3d:9d:53:3b:56:ed:fb:8c:2d:f2: 7d:22:df:22:7d:6e:ff:1e:05:22:f7:99:d9:14:63: 24:b1:cc:c1:79:83:de:cf:53:5a:ef:fa:44:7d:b4: c6:45:a9:3a:93:91:6e:ef:c2:ee:75:47:66:96:74: 5e:56:01:be:ea:b5:fa:08:37:6b:8e:fe:5d:1c:87: ad:7c:04:d8:bc:06:06:c0:6a:e9:d6:42:09:b7:7f: be:44:c2:e9:82:00:4d:cb:3e:ef:e9:c2:54:e0:5c: 76:26:47:1e:95:f2:0c:64:79:7d:29:96:dc:84:0a: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.5.0.0/16 31.14.35.0/24 62.121.64.0/18 77.81.16.0/20 78.96.0.0/15 81.89.0.0/20 82.208.128.0/18 82.210.128.0/18 83.103.128.0/17 84.117.0.0/16 85.186.0.0/16 85.204.0.0/20 85.204.184.0/21 86.104.136.0/21 86.105.64.0/20 86.106.32.0/19 89.33.72.0/21 89.38.72.0/22 89.38.237.0/24 89.42.248.0/21 89.43.80.0/22 89.44.78.0/23 89.44.208.0/24 89.136.0.0/15 93.113.32.0/23 93.113.241.0-93.113.243.255 93.114.32.0/21 93.114.190.0/23 93.114.216.0/21 93.117.66.0/23 93.117.138.0/23 93.117.154.0/23 93.118.46.0/23 93.119.126.0/23 93.119.137.0-93.119.139.255 93.119.224.0-93.119.226.255 94.176.144.0/23 94.177.108.0/22 95.76.0.0/15 185.63.136.0/22 188.208.117.0-188.208.119.255 188.214.92.0/24 188.214.153.0-188.214.154.255 188.214.195.0-188.214.197.255 188.215.3.0/24 188.240.64.0/22 193.178.165.0/24 194.102.99.0/24 194.102.146.0/24 194.102.248.0/21 194.105.17.0/24 194.105.24.0/21 195.20.107.0/24 195.234.172.0/24 213.164.224.0/19 IPv6: 2a04:2400::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8919 9015 Signature Algorithm: sha256WithRSAEncryption 13:a8:00:fa:18:d9:55:7b:29:ff:46:ef:17:0f:f4:4f:04:f7: 43:a1:11:00:24:a6:45:c6:fb:b0:35:27:df:66:95:f8:ef:3b: f6:da:9e:5d:58:3f:63:fc:a9:48:c3:f7:b9:5d:ba:31:cd:14: 28:90:58:c5:db:5b:8d:5f:71:dc:e1:4e:06:60:98:89:7f:1a: dc:cb:b5:ae:b5:6a:1d:32:81:5b:82:f6:b5:ab:7c:89:a1:9c: a7:79:d1:49:5d:ab:d5:6e:7b:27:a3:01:e6:61:5a:b6:4d:00: c9:72:97:94:d0:b9:fd:11:e0:8f:98:f6:89:bb:f3:74:1d:04: 07:c1:2e:c5:09:d9:01:85:75:4d:7e:e0:e8:3b:20:88:80:14: fd:a7:00:5c:a8:9d:43:bb:58:c5:c7:24:db:ef:df:2d:2e:cd: 00:7b:cd:e0:9c:ad:d4:d0:b8:1c:ad:d3:ff:c5:a2:d5:b8:75: 48:08:50:09:d1:46:2f:a3:38:7e:3a:e6:1c:cd:76:68:ab:cd: 32:58:43:6c:a5:05:35:f6:a3:78:ea:3d:64:ab:c6:21:7e:4a: 14:36:23:9e:e3:0a:13:45:2c:b9:e9:e9:e3:c4:f2:01:3c:89: 3a:69:6a:3f:68:86:8f:53:c5:27:4f:bd:6d:3b:61:a6:c7:e9: d2:b4:44:9c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgISAZt8fty3GKcDCXm0iuc70MLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTc5MGM3ZWNmMjRkMjhiZTJlMTNmZTA2OTExOGNlZTI3ZDU4MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQivcwuCofl64PVf1HveAjtJkIpb jsiDocitsaKjzxnmOPl2shaS9YcPLd/t0Cx5gW0E4vHpsesqiuy0pA8EM22aWZMB 7Y0vDzfVAEpfR1OV9VfjCJsCY7QXlPeomw9s9lD/GzcNG4t+u+jfu31q99RL7rWp sVUAeq1I+XQEVgBl3iXcZ0+VwnpibD2dUztW7fuMLfJ9It8ifW7/HgUi95nZFGMk sczBeYPez1Na7/pEfbTGRak6k5Fu78LudUdmlnReVgG+6rX6CDdrjv5dHIetfATY vAYGwGrp1kIJt3++RMLpggBNyz7v6cJU4Fx2JkcelfIMZHl9KZbchAp46wIDAQAB o4IEKjCCBCYwHQYDVR0OBBYEFHV5DH7PJNKL4uE/4GkRjO4n1YACMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzQ5NmQ1 Ni04NmZmLTQ4YmUtYmRlMy0yNzFmZGUyZGM2NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNDk2ZDU2 LTg2ZmYtNDhiZS1iZGUzLTI3MWZkZTJkYzY1NS8xL2RYa01mczhrMG92aTRUX2dh UkdNN2lmVmdBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBpAYIKwYB BQUHAQcBAf8EggGTMIIBjzCCAXwEAgABMIIBdAMDAB8FAwQAHw4jAwQGPnlAAwQE TVEQAwMBTmADBARRWQADBAZS0IADBAZS0oADBAdTZ4ADAwBUdQMDAFW6AwQEVcwA AwQDVcy4AwQDVmiIAwQEVmlAAwQFVmogAwQDWSFIAwQCWSZIAwQAWSbtAwQDWSr4 AwQCWStQAwQBWSxOAwQAWSzQAwMBWYgDBAFdcSAwDAMEAF1x8QMEAl1x8AMEA11y IAMEAV1yvgMEA11y2AMEAV11QgMEAV11igMEAV11mgMEAV12LgMEAV13fjAMAwQA XXeJAwQCXXeIMAwDBAVdd+ADBABdd+IDBAFesJADBAJesWwDAwFfTAMEArk/iDAM AwQAvNB1AwQDvNBwAwQAvNZcMAwDBAC81pkDBAC81powDAMEALzWwwMEAbzWxAME ALzXAwMEArzwQAMEAMGypQMEAMJmYwMEAMJmkgMEA8Jm+AMEAMJpEQMEA8JpGAME AMMUawMEAMPqrAMEBdWk4DANBAIAAjAHAwUFKgQkADAdBggrBgEFBQcBCAEB/wQO MAygCjAIAgIi1wICIzcwDQYJKoZIhvcNAQELBQADggEBABOoAPoY2VV7Kf9G7xcP 9E8E90OhEQAkpkXG+7A1J99mlfjvO/banl1YP2P8qUjD97ldujHNFCiQWMXbW41f cdzhTgZgmIl/GtzLta61ah0ygVuC9rWrfImhnKd50Uldq9VueyejAeZhWrZNAMly l5TQuf0R4I+Y9om783QdBAfBLsUJ2QGFdU1+4Og7IIiAFP2nAFyonUO7WMXHJNvv 3y0uzQB7zeCcrdTQuByt0//FotW4dUgIUAnRRi+jOH465hzNdmirzTJYQ2ylBTX2 o3jqPWSrxiF+ShQ2I57jChNFLLnp6ePE8gE8iTppaj9oho9TxSdPvW07YabH6dK0 RJw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:40 2026 by rpki-client