This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer File: fcSs7cuGzd_tf23oyt_KAEabvI4.cer (raw, json) Hash identifier: f3EzXFGegCVutxJoYB5M1tsIAO4OCj+hMZjuKJrWOe0= Subject key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F2338AB1F8D6AC4A9F8E0F383FF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2116 AS: 3307 AS: 5381 AS: 6709 AS: 8896 AS: 9173 AS: 13052 AS: 13069 AS: 13212 AS: 25351 AS: 35094 AS: 41572 AS: 57963 IP: 31.185.24.0/21 IP: 37.191.128.0/17 IP: 45.138.236.0/22 IP: 62.63.0.0/18 IP: 62.101.192.0/18 IP: 64.28.0.0/19 IP: 77.40.128.0/17 IP: 77.88.64.0/18 IP: 77.234.48.0/21 IP: 77.241.96.0/20 IP: 78.24.144.0/21 IP: 79.135.0.0/19 IP: 80.64.192.0/20 IP: 80.241.80.0/20 IP: 81.0.128.0/18 IP: 81.175.0.0/20 IP: 81.175.20.0 -- 81.175.63.255 IP: 81.191.0.0/16 IP: 82.196.192.0/19 IP: 84.20.96.0/19 IP: 85.112.128.0/19 IP: 85.196.64.0/18 IP: 85.221.0.0/17 IP: 85.252.0.0/16 IP: 86.62.128.0/18 IP: 87.118.0.0/18 IP: 88.84.160.0/19 IP: 89.191.0.0/19 IP: 89.221.96.0/20 IP: 91.135.32.0/20 IP: 91.202.80.0/22 IP: 109.199.192.0/19 IP: 178.74.0.0/18 IP: 185.8.16.0/22 IP: 185.15.216.0/22 IP: 185.35.80.0/22 IP: 185.67.116.0/22 IP: 185.92.52.0/22 IP: 185.126.184.0/22 IP: 185.129.156.0/22 IP: 193.69.0.0/16 IP: 193.71.0.0/16 IP: 193.75.0.0/17 IP: 193.90.0.0/16 IP: 193.91.128.0/17 IP: 194.19.0.0/17 IP: 194.29.200.0/22 IP: 194.54.96.0/19 IP: 195.0.128.0 -- 195.1.255.255 IP: 195.18.128.0/17 IP: 195.139.0.0/16 IP: 195.159.0.0/16 IP: 195.204.0.0/16 IP: 212.33.128.0/19 IP: 212.62.224.0/19 IP: 212.71.64.0/19 IP: 213.52.0.0/17 IP: 213.151.128.0/19 IP: 213.158.224.0/19 IP: 213.160.224.0 -- 213.160.247.255 IP: 213.172.192.0/19 IP: 213.239.64.0/18 IP: 217.8.128.0/19 IP: 217.14.0.0/20 IP: 217.77.32.0/20 IP: 217.118.32.0/19 IP: 217.144.224.0/19 IP: 2001:840::/29 IP: 2001:8c0::/29 IP: 2001:4dd8::/29 IP: 2a00:1e18::/29 IP: 2a00:c440::/29 IP: 2a01:520::/29 IP: 2a02:270::/29 IP: 2a03:c000::/29 IP: 2a04:6340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f2:33:8a:b1:f8:d6:ac:4a:9f:8e:0f:38:3f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:b3:31:7c:e6:72:30:1c:22:6a:a5:92:0d: c3:c9:d1:f7:d3:76:b2:77:00:16:c1:49:5c:63:e7: 80:29:7e:48:76:52:9b:25:18:0c:58:33:79:86:13: 86:1a:33:c3:52:48:3b:3a:99:4b:6c:de:28:12:49: e4:f3:75:55:33:70:57:30:d9:ae:c7:14:2b:6c:96: 87:c7:8a:ff:f1:34:95:ed:7d:d2:d4:f5:dc:66:de: c9:8f:e7:49:5c:32:40:55:dd:ff:d2:6f:a5:a8:53: 5a:02:79:79:50:c1:ae:90:37:58:20:55:cd:99:22: 18:dc:26:f2:11:26:a7:2c:a6:8e:ca:36:72:dd:f4: 98:62:3b:bb:48:fd:c0:15:44:6a:a1:16:29:c8:68: 9d:32:c4:73:42:0e:30:fd:59:5e:64:70:89:bc:93: 8b:df:cd:0a:93:97:c9:66:ee:35:97:51:11:23:f5: 17:f4:bd:82:35:7d:85:de:43:14:72:f0:e0:be:a9: 41:1e:10:66:84:b5:57:77:98:da:b4:34:6a:b4:0a: cb:6a:45:fd:10:52:39:c4:44:2d:ff:a8:95:49:2e: a6:ca:ac:f7:47:ea:55:9d:d9:fe:27:3d:9f:45:03: 03:79:08:c0:2c:b1:d3:f3:3d:fd:cc:58:95:1a:16: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.24.0/21 37.191.128.0/17 45.138.236.0/22 62.63.0.0/18 62.101.192.0/18 64.28.0.0/19 77.40.128.0/17 77.88.64.0/18 77.234.48.0/21 77.241.96.0/20 78.24.144.0/21 79.135.0.0/19 80.64.192.0/20 80.241.80.0/20 81.0.128.0/18 81.175.0.0/20 81.175.20.0-81.175.63.255 81.191.0.0/16 82.196.192.0/19 84.20.96.0/19 85.112.128.0/19 85.196.64.0/18 85.221.0.0/17 85.252.0.0/16 86.62.128.0/18 87.118.0.0/18 88.84.160.0/19 89.191.0.0/19 89.221.96.0/20 91.135.32.0/20 91.202.80.0/22 109.199.192.0/19 178.74.0.0/18 185.8.16.0/22 185.15.216.0/22 185.35.80.0/22 185.67.116.0/22 185.92.52.0/22 185.126.184.0/22 185.129.156.0/22 193.69.0.0/16 193.71.0.0/16 193.75.0.0/17 193.90.0.0/16 193.91.128.0/17 194.19.0.0/17 194.29.200.0/22 194.54.96.0/19 195.0.128.0-195.1.255.255 195.18.128.0/17 195.139.0.0/16 195.159.0.0/16 195.204.0.0/16 212.33.128.0/19 212.62.224.0/19 212.71.64.0/19 213.52.0.0/17 213.151.128.0/19 213.158.224.0/19 213.160.224.0-213.160.247.255 213.172.192.0/19 213.239.64.0/18 217.8.128.0/19 217.14.0.0/20 217.77.32.0/20 217.118.32.0/19 217.144.224.0/19 IPv6: 2001:840::/29 2001:8c0::/29 2001:4dd8::/29 2a00:1e18::/29 2a00:c440::/29 2a01:520::/29 2a02:270::/29 2a03:c000::/29 2a04:6340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2116 3307 5381 6709 8896 9173 13052 13069 13212 25351 35094 41572 57963 Signature Algorithm: sha256WithRSAEncryption ad:aa:04:8f:29:e3:89:dc:ae:f6:b7:55:8c:c5:6c:cc:a4:ab: 8f:9e:22:1c:31:68:f0:04:c2:14:c4:de:59:74:a2:66:e6:81: 85:c5:c2:c7:d4:d7:97:5b:47:a5:fc:3a:ce:f8:d4:c4:53:3b: 17:dc:e9:fa:b9:eb:24:b8:4e:4a:f8:0e:be:96:d0:90:b2:36: e3:29:b1:71:d1:35:41:12:b2:7b:bb:56:a5:2d:72:7c:8c:27: 26:11:42:62:dc:38:9b:bf:e3:09:a4:39:75:37:ae:c1:d6:44: 63:aa:62:99:66:f8:a4:f2:7f:d2:52:ff:e5:5d:03:14:a1:38: ae:82:d2:e3:4e:7d:2c:35:4e:90:18:43:9e:01:53:5b:55:ea: bf:19:fc:6d:f4:2c:88:22:d7:fa:7c:3a:fe:28:1d:d3:48:cc: 97:6a:da:d8:99:8f:18:af:57:ca:54:ea:77:22:1e:58:e0:2b: 05:e9:1e:55:f8:4f:02:00:f1:d4:4c:df:e7:dd:2c:95:b0:00: 27:e6:71:a4:d3:fa:49:6c:79:f4:13:a3:0e:f7:ee:cb:ff:99: 5b:55:e9:c3:9f:85:aa:d1:8b:8e:f8:7c:99:ac:87:17:39:7c: fd:ac:74:c1:37:e0:e1:20:bb:2f:34:82:b8:aa:1e:36:45:0a: 39:dd:7d:98 -----BEGIN CERTIFICATE----- MIIHsjCCBpqgAwIBAgISAZt4ovIzirH41qxKn44POD/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGM0YWNlZGNiODZjZGRmZWQ3ZjZkZThjYWRmY2EwMDQ2OWJiYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IKzMXzmcjAcImqlkg3DydH303ay dwAWwUlcY+eAKX5IdlKbJRgMWDN5hhOGGjPDUkg7OplLbN4oEknk83VVM3BXMNmu xxQrbJaHx4r/8TSV7X3S1PXcZt7Jj+dJXDJAVd3/0m+lqFNaAnl5UMGukDdYIFXN mSIY3CbyESanLKaOyjZy3fSYYju7SP3AFURqoRYpyGidMsRzQg4w/VleZHCJvJOL 380Kk5fJZu41l1ERI/UX9L2CNX2F3kMUcvDgvqlBHhBmhLVXd5jatDRqtArLakX9 EFI5xEQt/6iVSS6myqz3R+pVndn+Jz2fRQMDeQjALLHT8z39zFiVGhbqlQIDAQAB o4IEvjCCBLowHQYDVR0OBBYEFH3ErO3Lhs3f7X9t6MrfygBGm7yOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzNkMmEx NC02Yjc5LTQ2ODktOTU3OS0zOTQ4MDI4NWE5NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvM2QyYTE0 LTZiNzktNDY4OS05NTc5LTM5NDgwMjg1YTk0OC8xL2ZjU3M3Y3VHemRfdGYyM295 dF9LQUVhYnZJNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICCQYIKwYB BQUHAQcBAf8EggH4MIIB9DCCAakEAgABMIIBoQMEAx+5GAMEByW/gAMEAi2K7AME Bj4/AAMEBj5lwAMEBUAcAAMEB00ogAMEBk1YQAMEA03qMAMEBE3xYAMEA04YkAME BU+HAAMEBFBAwAMEBFDxUAMEBlEAgAMEBFGvADAMAwQCUa8UAwQGUa8AAwMAUb8D BAVSxMADBAVUFGADBAVVcIADBAZVxEADBAdV3QADAwBV/AMEBlY+gAMEBld2AAME BVhUoAMEBVm/AAMEBFndYAMEBFuHIAMEAlvKUAMEBW3HwAMEBrJKAAMEArkIEAME ArkP2AMEArkjUAMEArlDdAMEArlcNAMEArl+uAMEArmBnAMDAMFFAwMAwUcDBAfB SwADAwDBWgMEB8FbgAMEB8ITAAMEAsIdyAMEBcI2YDALAwQHwwCAAwMBwwADBAfD EoADAwDDiwMDAMOfAwMAw8wDBAXUIYADBAXUPuADBAXUR0ADBAfVNAADBAXVl4AD BAXVnuAwDAMEBdWg4AMEA9Wg8AMEBdWswAMEBtXvQAMEBdkIgAMEBNkOAAMEBNlN IAMEBdl2IAMEBdmQ4DBFBAIAAjA/AwUDIAEIQAMFAyABCMADBQMgAU3YAwUDKgAe GAMFAyoAxEADBQMqAQUgAwUDKgICcAMFAyoDwAADBQMqBGNAMEwGCCsGAQUFBwEI AQH/BD0wO6A5MDcCAghEAgIM6wICFQUCAho1AgIiwAICI9UCAjL8AgIzDQICM5wC AmMHAgMAiRYCAwCiZAIDAOJrMA0GCSqGSIb3DQEBCwUAA4IBAQCtqgSPKeOJ3K72 t1WMxWzMpKuPniIcMWjwBMIUxN5ZdKJm5oGFxcLH1NeXW0el/DrO+NTEUzsX3On6 ueskuE5K+A6+ltCQsjbjKbFx0TVBErJ7u1alLXJ8jCcmEUJi3Dibv+MJpDl1N67B 1kRjqmKZZvik8n/SUv/lXQMUoTiugtLjTn0sNU6QGEOeAVNbVeq/Gfxt9CyIItf6 fDr+KB3TSMyXatrYmY8Yr1fKVOp3Ih5Y4CsF6R5V+E8CAPHUTN/n3SyVsAAn5nGk 0/pJbHn0E6MO9+7L/5lbVenDn4Wq0YuO+HyZrIcXOXz9rHTBN+DhILsvNIK4qh42 RQo53X2Y -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:41 2026 by rpki-client