This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer File: i0eqCfLGEPb0S051wc2dzTiE5V0.cer (raw, json) Hash identifier: vTAeuBhBj41dP3xlHklWZbc/ea46OSGdJah7hJ+QZb8= Subject key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A21ED643E41793775A7F2D0C4D682F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39454 AS: 48551 AS: 49676 IP: 5.253.225.0/24 IP: 31.193.186.0/24 IP: 45.94.252.0/22 IP: 45.150.150.0/24 IP: 45.159.196.0/22 IP: 91.217.177.0/24 IP: 91.234.52.0/24 IP: 91.246.31.0/24 IP: 103.216.60.0/22 IP: 146.19.104.0/24 IP: 157.119.188.0/22 IP: 185.63.114.0/24 IP: 185.74.221.0/24 IP: 185.86.180.0/22 IP: 185.128.40.0/24 IP: 185.149.192.0/24 IP: 185.159.189.0/24 IP: 185.228.58.0/24 IP: 185.229.134.0/23 IP: 185.236.36.0/22 IP: 185.238.143.0/24 IP: 185.252.84.0/23 IP: 193.27.9.0/24 IP: 194.147.212.0/24 IP: 194.147.222.0/24 IP: 195.114.4.0/23 IP: 195.114.8.0/23 IP: 195.214.235.0/24 IP: 2a05:ba40::/29 IP: 2a0d:9500::/29 IP: 2a0f:5040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1e:d6:43:e4:17:93:77:5a:7f:2d:0c:4d:68:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:38:7c:61:de:f8:a2:d3:e5:a6:72:0b:ea: a6:9f:a7:8c:5f:37:d9:a3:d8:0f:83:41:4f:29:25: 54:40:fc:56:2f:96:a3:cb:26:c1:f2:44:32:87:34: ca:5c:5e:99:da:5b:b2:18:1e:b0:dc:52:9b:c4:d4: 3a:09:8f:1f:f9:72:ad:3e:bf:ae:d9:9d:db:5b:9e: 23:72:52:a7:5b:a9:2b:ea:7c:04:40:8e:b5:ed:9d: ad:28:e4:4f:a0:8b:4e:57:74:7c:c3:2e:fa:28:76: 5e:63:54:a0:c0:d4:ae:d6:73:26:90:b1:80:6e:fc: d5:7a:e6:cf:44:fc:86:9b:9b:73:e7:41:a6:50:80: 3b:34:59:17:06:96:32:49:ae:42:24:a8:52:ed:4c: 76:4b:59:3e:2d:76:d8:5c:d6:0c:ab:ed:30:dd:3d: 4c:1e:05:53:be:33:81:78:f0:31:bc:29:16:99:c3: 4e:2a:65:59:f9:54:f2:a7:a3:c8:ef:e5:b4:de:1b: bd:4f:b3:9b:38:5a:a0:dd:65:2f:84:23:7f:2e:09: d2:75:0b:42:e7:b0:10:35:70:e6:82:67:81:fd:29: cb:b5:dc:b5:4b:22:1b:b7:75:7f:71:70:ad:a5:cc: 17:cb:27:a9:4a:8e:12:96:8d:08:17:70:01:b6:73: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.225.0/24 31.193.186.0/24 45.94.252.0/22 45.150.150.0/24 45.159.196.0/22 91.217.177.0/24 91.234.52.0/24 91.246.31.0/24 103.216.60.0/22 146.19.104.0/24 157.119.188.0/22 185.63.114.0/24 185.74.221.0/24 185.86.180.0/22 185.128.40.0/24 185.149.192.0/24 185.159.189.0/24 185.228.58.0/24 185.229.134.0/23 185.236.36.0/22 185.238.143.0/24 185.252.84.0/23 193.27.9.0/24 194.147.212.0/24 194.147.222.0/24 195.114.4.0/23 195.114.8.0/23 195.214.235.0/24 IPv6: 2a05:ba40::/29 2a0d:9500::/29 2a0f:5040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39454 48551 49676 Signature Algorithm: sha256WithRSAEncryption 61:13:72:bc:fb:f7:4e:12:4d:0a:f8:f8:d6:f6:90:c8:9b:8c: e6:52:d4:99:22:22:cb:64:3b:c5:e8:32:39:7c:02:b8:38:36: fa:80:73:c1:f0:55:f7:79:e8:8d:75:7b:26:3c:3a:33:8a:05: 36:98:6c:41:a0:a0:d8:74:cd:08:a2:f8:70:29:8d:dc:08:ce: 8e:db:ef:2e:18:02:ea:51:6c:61:4b:01:4d:b4:70:c0:d0:e5: ef:19:be:a3:88:43:2a:a3:a2:23:3f:d1:dc:b9:30:89:47:b6: 8e:3d:49:cb:5c:fa:b0:fe:54:9e:2d:4a:69:0d:54:30:c0:a6: 08:6a:59:2c:b9:b9:b4:ab:f0:7a:32:90:cc:fc:19:d1:93:64: a9:db:c2:90:3a:92:a4:6f:18:dc:67:9e:48:53:28:67:94:46: d5:5a:66:bf:7a:93:e0:36:f8:1d:3c:91:83:d5:f0:0f:ac:6d: f5:4a:cb:06:57:5b:de:0f:71:4c:45:81:49:07:63:ea:2a:d5: 58:12:98:8f:67:15:02:c9:74:58:68:e0:d5:12:35:7b:9e:f2: 4e:b0:fa:89:ce:35:a4:2c:e1:d3:00:14:3a:8b:15:b4:e8:09: 40:38:9f:9a:f3:74:e9:a2:17:ef:df:89:be:c4:ab:50:96:4a: e7:07:b0:48 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISAZt4oh7WQ+QXk3dafy0MTWgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQ3YWEwOWYyYzYxMGY2ZjQ0YjRlNzVjMWNkOWRjZDM4ODRlNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI44fGHe+KLT5aZyC+qmn6eMXzfZ o9gPg0FPKSVUQPxWL5ajyybB8kQyhzTKXF6Z2luyGB6w3FKbxNQ6CY8f+XKtPr+u 2Z3bW54jclKnW6kr6nwEQI617Z2tKORPoItOV3R8wy76KHZeY1SgwNSu1nMmkLGA bvzVeubPRPyGm5tz50GmUIA7NFkXBpYySa5CJKhS7Ux2S1k+LXbYXNYMq+0w3T1M HgVTvjOBePAxvCkWmcNOKmVZ+VTyp6PI7+W03hu9T7ObOFqg3WUvhCN/LgnSdQtC 57AQNXDmgmeB/SnLtdy1SyIbt3V/cXCtpcwXyyepSo4Slo0IF3ABtnNv/QIDAQAB o4IDbjCCA2owHQYDVR0OBBYEFItHqgnyxhD29EtOdcHNnc04hOVdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2Y1NjBl MS03ODQwLTQ5NTEtYWI3OC01MDAxNTM5ZDcxODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvZjU2MGUx LTc4NDAtNDk1MS1hYjc4LTUwMDE1MzlkNzE4NS8xL2kwZXFDZkxHRVBiMFMwNTF3 YzJkelRpRTVWMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHiBggrBgEF BQcBBwEB/wSB0jCBzzCBrwQCAAEwgagDBAAF/eEDBAAfwboDBAItXvwDBAAtlpYD BAItn8QDBABb2bEDBABb6jQDBABb9h8DBAJn2DwDBACSE2gDBAKdd7wDBAC5P3ID BAC5St0DBAK5VrQDBAC5gCgDBAC5lcADBAC5n70DBAC55DoDBAG55YYDBAK57CQD BAC57o8DBAG5/FQDBADBGwkDBADCk9QDBADCk94DBAHDcgQDBAHDcggDBADD1usw GwQCAAIwFQMFAyoFukADBQMqDZUAAwUDKg9QQDAkBggrBgEFBQcBCAEB/wQVMBOg ETAPAgMAmh4CAwC9pwIDAMIMMA0GCSqGSIb3DQEBCwUAA4IBAQBhE3K8+/dOEk0K +PjW9pDIm4zmUtSZIiLLZDvF6DI5fAK4ODb6gHPB8FX3eeiNdXsmPDozigU2mGxB oKDYdM0IovhwKY3cCM6O2+8uGALqUWxhSwFNtHDA0OXvGb6jiEMqo6IjP9HcuTCJ R7aOPUnLXPqw/lSeLUppDVQwwKYIalksubm0q/B6MpDM/BnRk2Sp28KQOpKkbxjc Z55IUyhnlEbVWma/epPgNvgdPJGD1fAPrG31SssGV1veD3FMRYFJB2PqKtVYEpiP ZxUCyXRYaODVEjV7nvJOsPqJzjWkLOHTABQ6ixW06AlAOJ+a83Tpohfv34m+xKtQ lkrnB7BI -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:41 2026 by rpki-client