This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer File: gnYDqTvKMbAY9RH21LC3VG6WM2I.cer (raw, json) Hash identifier: qf+LMlwk0PtFffocTzQXbQSYDc1Ez4ZxtmpUFsS4emc= Subject key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F77C73F112C350B070C4C0EAFA83E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211415 AS: 211440 AS: 212609 AS: 212669 IP: 2.56.184.0/22 IP: 5.252.184.0/22 IP: 31.40.232.0/22 IP: 45.11.152.0/22 IP: 45.14.144.0/22 IP: 45.82.52.0/22 IP: 45.84.108.0/22 IP: 45.90.248.0/22 IP: 45.93.224.0/22 IP: 45.130.76.0/22 IP: 45.133.108.0/22 IP: 45.138.28.0/22 IP: 45.147.152.0/22 IP: 45.157.180.0/22 IP: 85.8.168.0/22 IP: 85.208.124.0/22 IP: 89.190.148.0/22 IP: 91.132.12.0/22 IP: 139.28.172.0/22 IP: 141.98.56.0/22 IP: 152.89.0.0/22 IP: 185.60.144.0/22 IP: 185.124.241.0/24 IP: 185.169.228.0/22 IP: 193.37.220.0/22 IP: 194.26.142.0/24 IP: 194.31.180.0/22 IP: 194.121.51.0/24 IP: 194.121.59.0/24 IP: 194.124.144.0/24 IP: 194.124.200.0/24 IP: 212.60.0.0/22 IP: 2a03:b2c0::/29 IP: 2a07:6080::/29 IP: 2a07:6c80::/29 IP: 2a09:140::/29 IP: 2a09:9c0::/29 IP: 2a09:4a40::/29 IP: 2a09:7240::/29 IP: 2a09:a780::/29 IP: 2a09:e980::/29 IP: 2a09:fc80::/29 IP: 2a0d:4180::/29 IP: 2a0d:df40::/29 IP: 2a0d:e0c0::/29 IP: 2a0e:1b40::/29 IP: 2a0e:2b00::/29 IP: 2a0e:5780::/29 IP: 2a0e:be00::/29 IP: 2a10:240::/29 IP: 2a10:4c0::/29 IP: 2a10:740::/29 IP: 2a10:840::/29 IP: 2a10:9c0::/29 IP: 2a10:bc0::/29 IP: 2a10:f40::/29 IP: 2a10:12c0::/29 IP: 2a10:14c0::/29 IP: 2a10:17c0::/29 IP: 2a10:3980::/29 IP: 2a11:58c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:77:c7:3f:11:2c:35:0b:07:0c:4c:0e:af:a8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827603a93bca31b018f511f6d4b0b7546e963362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:d3:57:55:38:f1:fc:0f:ab:77:74:b0:d9: f9:21:9b:53:80:17:0c:73:c6:67:49:68:61:10:77: bc:4d:b8:fa:26:cd:dd:47:cf:8e:41:de:a6:1f:cc: 5f:bb:f4:72:6e:e7:ed:ea:83:f5:bb:40:40:c3:8f: f4:48:e5:f9:a1:3d:c4:ff:a7:71:10:16:ac:61:98: 2f:fa:1e:35:7d:bd:f4:a3:46:08:b2:95:d1:f3:f8: 17:74:4a:af:44:87:c1:c9:5a:20:9c:c4:62:1d:ea: 05:50:c1:a0:7d:98:2f:40:49:ac:e5:2a:e0:6d:83: 67:96:b8:94:91:25:de:a7:a9:27:c7:19:60:39:23: 66:8e:e0:46:14:d6:1b:ab:50:d2:fc:1f:dc:2a:09: 84:ec:c3:90:ff:b9:87:b3:82:60:bc:26:a4:c8:c9: 54:82:55:07:0b:53:2e:b5:95:2e:85:2d:06:d0:99: cd:e1:1e:05:b0:57:dd:47:02:88:da:41:02:6a:e1: 86:41:3c:48:e4:74:45:f8:bd:92:4a:85:e7:fd:86: f1:d4:61:3b:e4:43:52:eb:d8:9e:14:5c:3f:f2:d2: 45:e2:66:b5:08:02:bd:93:1e:38:91:35:dd:8e:93: 4f:50:9b:4f:fc:52:73:ba:d0:47:5b:3c:b4:ee:6c: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.184.0/22 5.252.184.0/22 31.40.232.0/22 45.11.152.0/22 45.14.144.0/22 45.82.52.0/22 45.84.108.0/22 45.90.248.0/22 45.93.224.0/22 45.130.76.0/22 45.133.108.0/22 45.138.28.0/22 45.147.152.0/22 45.157.180.0/22 85.8.168.0/22 85.208.124.0/22 89.190.148.0/22 91.132.12.0/22 139.28.172.0/22 141.98.56.0/22 152.89.0.0/22 185.60.144.0/22 185.124.241.0/24 185.169.228.0/22 193.37.220.0/22 194.26.142.0/24 194.31.180.0/22 194.121.51.0/24 194.121.59.0/24 194.124.144.0/24 194.124.200.0/24 212.60.0.0/22 IPv6: 2a03:b2c0::/29 2a07:6080::/29 2a07:6c80::/29 2a09:140::/29 2a09:9c0::/29 2a09:4a40::/29 2a09:7240::/29 2a09:a780::/29 2a09:e980::/29 2a09:fc80::/29 2a0d:4180::/29 2a0d:df40::/29 2a0d:e0c0::/29 2a0e:1b40::/29 2a0e:2b00::/29 2a0e:5780::/29 2a0e:be00::/29 2a10:240::/29 2a10:4c0::/29 2a10:740::/29 2a10:840::/29 2a10:9c0::/29 2a10:bc0::/29 2a10:f40::/29 2a10:12c0::/29 2a10:14c0::/29 2a10:17c0::/29 2a10:3980::/29 2a11:58c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211415 211440 212609 212669 Signature Algorithm: sha256WithRSAEncryption 80:3f:2a:aa:f8:aa:a7:87:f5:e9:cf:45:f3:9e:13:46:48:a8: 9a:4f:4d:a0:46:77:e2:11:6f:c3:88:39:23:a3:f0:fd:e9:00: b3:5b:fa:d0:37:11:ce:54:c4:d4:88:15:f3:e1:3c:92:ae:58: 5e:3f:84:f2:9c:78:61:06:08:3d:bd:47:cd:37:08:7e:cb:b7: 13:71:67:ab:e5:2f:f4:f8:7a:f4:a2:e9:b3:8b:fe:d1:24:3f: 2e:9f:d8:d5:51:2d:30:54:52:b8:ac:3a:51:f3:48:a3:26:bb: b2:bc:36:43:28:9b:5f:90:a9:17:48:e3:4f:80:dd:c7:16:75: fb:04:df:96:b4:05:08:02:cd:7b:e9:8d:15:72:e9:1f:c5:39: 45:45:b2:c8:d6:e1:21:06:c2:13:fb:b7:b0:68:a4:67:e7:7f: 88:96:eb:44:30:48:d0:99:76:a6:40:cc:11:7a:f1:a4:f6:82: 57:cc:dc:6c:0b:a4:d0:b3:00:9f:16:fc:50:e0:a5:5c:fc:f3: 7a:18:31:34:0b:14:bd:a6:3f:18:af:4e:b8:78:58:79:ef:f3: ca:22:41:75:88:ca:7a:26:e9:22:ea:bc:3a:47:93:af:c7:db: 13:47:e9:e3:80:da:f4:1b:02:48:58:cf:30:aa:76:18:28:e4: 27:8a:a1:bd -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgISAZt8f3fHPxEsNQsHDEwOr6g+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjc2MDNhOTNiY2EzMWIwMThmNTExZjZkNGIwYjc1NDZlOTYzMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMPTV1U48fwPq3d0sNn5IZtTgBcM c8ZnSWhhEHe8Tbj6Js3dR8+OQd6mH8xfu/Rybuft6oP1u0BAw4/0SOX5oT3E/6dx EBasYZgv+h41fb30o0YIspXR8/gXdEqvRIfByVognMRiHeoFUMGgfZgvQEms5Srg bYNnlriUkSXep6knxxlgOSNmjuBGFNYbq1DS/B/cKgmE7MOQ/7mHs4JgvCakyMlU glUHC1MutZUuhS0G0JnN4R4FsFfdRwKI2kECauGGQTxI5HRF+L2SSoXn/Ybx1GE7 5ENS69ieFFw/8tJF4ma1CAK9kx44kTXdjpNPUJtP/FJzutBHWzy07myRFwIDAQAB o4IERjCCBEIwHQYDVR0OBBYEFIJ2A6k7yjGwGPUR9tSwt1RuljNiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzkxYWY2 Ni1kMzk0LTQyZmEtYTBjNi1iMTZjYjRkZmFkZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOTFhZjY2 LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8xL2duWURxVHZLTWJBWTlSSDIx TEMzVkc2V00ySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBtAYIKwYB BQUHAQcBAf8EggGjMIIBnzCBxwQCAAEwgcADBAICOLgDBAIF/LgDBAIfKOgDBAIt C5gDBAItDpADBAItUjQDBAItVGwDBAItWvgDBAItXeADBAItgkwDBAIthWwDBAIt ihwDBAItk5gDBAItnbQDBAJVCKgDBAJV0HwDBAJZvpQDBAJbhAwDBAKLHKwDBAKN YjgDBAKYWQADBAK5PJADBAC5fPEDBAK5qeQDBALBJdwDBADCGo4DBALCH7QDBADC eTMDBADCeTsDBADCfJADBADCfMgDBALUPAAwgdIEAgACMIHLAwUDKgOywAMFAyoH YIADBQMqB2yAAwUDKgkBQAMFAyoJCcADBQMqCUpAAwUDKglyQAMFAyoJp4ADBQMq CemAAwUDKgn8gAMFAyoNQYADBQMqDd9AAwUDKg3gwAMFAyoOG0ADBQMqDisAAwUD Kg5XgAMFAyoOvgADBQMqEAJAAwUDKhAEwAMFAyoQB0ADBQMqEAhAAwUDKhAJwAMF AyoQC8ADBQMqEA9AAwUDKhASwAMFAyoQFMADBQMqEBfAAwUDKhA5gAMFAyoRWMAw KQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAznXAgMDOfACAwM+gQIDAz69MA0GCSqG SIb3DQEBCwUAA4IBAQCAPyqq+Kqnh/Xpz0XznhNGSKiaT02gRnfiEW/DiDkjo/D9 6QCzW/rQNxHOVMTUiBXz4TySrlheP4TynHhhBgg9vUfNNwh+y7cTcWer5S/0+Hr0 oumzi/7RJD8un9jVUS0wVFK4rDpR80ijJruyvDZDKJtfkKkXSONPgN3HFnX7BN+W tAUIAs176Y0VcukfxTlFRbLI1uEhBsIT+7ewaKRn53+IlutEMEjQmXamQMwRevGk 9oJXzNxsC6TQswCfFvxQ4KVc/PN6GDE0CxS9pj8Yr064eFh57/PKIkF1iMp6Juki 6rw6R5Ovx9sTR+njgNr0GwJIWM8wqnYYKOQniqG9 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:54 2026 by rpki-client