This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer File: l59cqMM_E0w8FX1IucKuTpG2ML8.cer (raw, json) Hash identifier: 4XUl4ykfn0wpYgwYy6SAvGGCMc3z/8kU+jlDQDecVhU= Subject key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82C64763B45238863B48C040D8DACB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6424 AS: 34425 AS: 43652 AS: 47787 AS: 47943 AS: 49260 AS: 50028 AS: 61290 IP: 5.183.96.0/22 IP: 103.243.124.0/22 IP: 146.19.95.0/24 IP: 146.19.249.0/24 IP: 185.83.248.0/22 IP: 185.112.251.0/24 IP: 185.162.183.0/24 IP: 185.166.144.0/24 IP: 188.93.192.0/21 IP: 193.107.13.0/24 IP: 193.109.184.0/21 IP: 193.163.151.0/24 IP: 195.200.252.0/23 IP: 212.52.23.0/24 IP: 2001:b18::/32 IP: 2a05:a040::/29 IP: 2a0b:e740::/29 IP: 2a0d:82c0::/29 IP: 2a0e:5f00::/29 IP: 2a0f:7700::/29 IP: 2a0f:8900::/29 IP: 2a0f:d300::/29 IP: 2a10:ee40::/29 IP: 2a11:c00::/29 IP: 2a12:c1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c6:47:63:b4:52:38:86:3b:48:c0:40:d8:da:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:f7:05:cd:7f:db:8b:7a:36:eb:c3:f4:f7: 85:08:7e:b9:d5:7d:99:d2:21:47:83:e6:6d:b4:c8: 38:5d:df:25:61:0f:f3:48:08:70:2c:af:9c:42:35: 8f:f2:5f:ab:49:5e:25:59:75:bd:f6:a4:29:ed:32: b9:5a:6c:dd:2e:78:7c:64:a0:21:45:11:f4:b7:ac: 4b:bd:50:86:40:1a:40:d9:e0:b9:4a:c9:18:ca:f0: 0c:28:85:24:3b:f5:e6:ab:ad:f0:e8:0a:a6:aa:7f: 5f:e1:ae:ae:ec:04:a2:9f:ca:ff:b8:f0:9d:86:b3: 59:80:77:65:c5:86:6b:d3:05:ca:85:8e:2f:cc:1e: 2d:be:86:d1:85:54:1c:6e:35:61:9e:1e:2d:ae:16: bb:bf:07:02:4d:1e:5d:6d:fc:7b:3a:b4:3d:fd:d4: cb:a5:aa:42:e6:90:ba:24:76:03:6e:54:cf:aa:4e: 1e:1c:9c:d0:2e:25:bc:1d:0f:f2:47:6c:37:9a:f6: 4d:61:68:72:50:5d:92:ed:64:b4:51:e3:f6:19:8c: 10:51:cf:71:d9:34:c8:06:37:28:9c:88:0e:67:6c: e3:9c:5a:d1:ae:b8:e8:23:57:c7:08:2a:6c:fb:47: e3:fe:e7:39:fe:ea:75:fb:82:e6:6e:7f:be:f7:e2: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.96.0/22 103.243.124.0/22 146.19.95.0/24 146.19.249.0/24 185.83.248.0/22 185.112.251.0/24 185.162.183.0/24 185.166.144.0/24 188.93.192.0/21 193.107.13.0/24 193.109.184.0/21 193.163.151.0/24 195.200.252.0/23 212.52.23.0/24 IPv6: 2001:b18::/32 2a05:a040::/29 2a0b:e740::/29 2a0d:82c0::/29 2a0e:5f00::/29 2a0f:7700::/29 2a0f:8900::/29 2a0f:d300::/29 2a10:ee40::/29 2a11:c00::/29 2a12:c1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6424 34425 43652 47787 47943 49260 50028 61290 Signature Algorithm: sha256WithRSAEncryption 33:64:74:d5:91:42:f0:c3:fc:40:74:b6:8b:97:de:0d:c3:f8: d0:04:51:70:da:16:fd:7b:32:4a:c8:10:10:a8:60:88:b9:91: 4c:4c:2c:9c:28:cf:5b:fd:89:98:f0:22:57:24:aa:6c:a4:78: b6:22:cd:48:d2:7c:ae:9a:76:66:2d:3a:4c:9a:99:28:ce:1c: 33:f4:cb:03:2e:4c:e9:8d:8b:e4:a5:50:3d:7b:4f:fc:99:56: 50:d7:02:e3:32:53:5f:99:b6:88:95:f9:ac:2b:c1:6e:7e:37: 14:9b:55:07:8c:1f:30:e0:ac:73:a4:34:6d:43:26:45:71:d8: 27:1f:ef:7d:6e:54:21:61:68:1f:80:b7:b1:c2:e6:37:aa:97: 75:00:85:c1:89:a2:33:16:45:33:2f:c1:43:69:c0:77:c2:35: f6:d6:5e:bc:9c:7c:18:a6:04:dc:ee:6a:28:5e:2e:4f:72:b7: ff:1c:43:f7:44:42:08:0c:50:26:72:00:d1:ce:f4:fa:e0:5d: 2d:63:1b:cc:87:ff:5a:f0:33:f5:5c:73:37:67:c9:01:ed:15: d5:52:5e:5f:5b:83:cb:ef:9e:fa:22:0d:e2:90:4f:d7:a1:0b: 96:69:82:2d:1e:78:31:6f:d6:7d:09:57:20:b2:94:77:db:f4: f5:91:2c:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISAZt/gsZHY7RSOIY7SMBA2NrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzlmNWNhOGMzM2YxMzRjM2MxNTdkNDhiOWMyYWU0ZTkxYjYzMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAser3Bc1/24t6NuvD9PeFCH651X2Z 0iFHg+ZttMg4Xd8lYQ/zSAhwLK+cQjWP8l+rSV4lWXW99qQp7TK5WmzdLnh8ZKAh RRH0t6xLvVCGQBpA2eC5SskYyvAMKIUkO/Xmq63w6Aqmqn9f4a6u7ASin8r/uPCd hrNZgHdlxYZr0wXKhY4vzB4tvobRhVQcbjVhnh4trha7vwcCTR5dbfx7OrQ9/dTL papC5pC6JHYDblTPqk4eHJzQLiW8HQ/yR2w3mvZNYWhyUF2S7WS0UeP2GYwQUc9x 2TTIBjconIgOZ2zjnFrRrrjoI1fHCCps+0fj/uc5/up1+4Lmbn++9+JgTwIDAQAB o4IDaDCCA2QwHQYDVR0OBBYEFJefXKjDPxNMPBV9SLnCrk6RtjC/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2Y2NTYx MC01OWY2LTRhZDYtYTlkOC0xNDcwYWMzNjRkZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZjY1NjEw LTU5ZjYtNGFkNi1hOWQ4LTE0NzBhYzM2NGRkMi8xL2w1OWNxTU1fRTB3OEZYMUl1 Y0t1VHBHMk1MOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHEBggrBgEF BQcBBwEB/wSBtDCBsTBaBAIAATBUAwQCBbdgAwQCZ/N8AwQAkhNfAwQAkhP5AwQC uVP4AwQAuXD7AwQAuaK3AwQAuaaQAwQDvF3AAwQAwWsNAwQDwW24AwQAwaOXAwQB w8j8AwQA1DQXMFMEAgACME0DBQAgAQsYAwUDKgWgQAMFAyoL50ADBQMqDYLAAwUD Kg5fAAMFAyoPdwADBQMqD4kAAwUDKg/TAAMFAyoQ7kADBQMqEQwAAwUDKhLBwDA8 BggrBgEFBQcBCAEB/wQtMCugKTAnAgIZGAIDAIZ5AgMAqoQCAwC6qwIDALtHAgMA wGwCAwDDbAIDAO9qMA0GCSqGSIb3DQEBCwUAA4IBAQAzZHTVkULww/xAdLaLl94N w/jQBFFw2hb9ezJKyBAQqGCIuZFMTCycKM9b/YmY8CJXJKpspHi2Is1I0nyumnZm LTpMmpkozhwz9MsDLkzpjYvkpVA9e0/8mVZQ1wLjMlNfmbaIlfmsK8FufjcUm1UH jB8w4KxzpDRtQyZFcdgnH+99blQhYWgfgLexwuY3qpd1AIXBiaIzFkUzL8FDacB3 wjX21l68nHwYpgTc7mooXi5Pcrf/HEP3REIIDFAmcgDRzvT64F0tYxvMh/9a8DP1 XHM3Z8kB7RXVUl5fW4PL7576Ig3ikE/XoQuWaYItHngxb9Z9CVcgspR32/T1kSzp -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:16 2026 by rpki-client