This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer File: mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer (raw, json) Hash identifier: 2fLVBg4PShfXhFOweqjy52ynJBw4HiFehSVG/nE9wNs= Subject key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13311D7D1EA7DD275CB9BB98313517 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197757 IP: 5.181.168.0/22 IP: 5.183.252.0/22 IP: 45.10.164.0/22 IP: 45.66.208.0/22 IP: 45.93.212.0/22 IP: 45.128.184.0/22 IP: 45.132.184.0/22 IP: 45.138.100.0/22 IP: 45.148.124.0/22 IP: 45.151.232.0/22 IP: 46.21.80.0/22 IP: 77.83.244.0/22 IP: 77.220.192.0/22 IP: 83.171.224.0/22 IP: 89.19.56.0/22 IP: 91.132.196.0/22 IP: 92.118.168.0/22 IP: 93.177.116.0/22 IP: 95.81.72.0/22 IP: 109.122.192.0/21 IP: 141.98.84.0/22 IP: 147.78.180.0/22 IP: 160.20.156.0/22 IP: 185.24.108.0/22 IP: 185.29.124.0/22 IP: 185.58.112.0/22 IP: 185.59.232.0/22 IP: 185.61.216.0/21 IP: 185.68.184.0/22 IP: 185.68.244.0/22 IP: 185.71.144.0/22 IP: 185.71.212.0/22 IP: 185.73.180.0/22 IP: 185.73.216.0/22 IP: 185.75.132.0/22 IP: 185.76.240.0/22 IP: 185.77.136.0/22 IP: 185.77.216.0/21 IP: 185.78.76.0/22 IP: 185.79.48.0/22 IP: 185.79.76.0/22 IP: 185.79.132.0 -- 185.79.139.255 IP: 185.81.144.0/22 IP: 185.81.172.0/22 IP: 185.81.184.0/22 IP: 185.88.36.0/22 IP: 185.88.96.0/21 IP: 185.89.40.0/22 IP: 185.89.104.0/21 IP: 185.95.100.0/22 IP: 185.95.228.0/22 IP: 185.96.36.0/22 IP: 185.96.80.0/22 IP: 185.96.132.0/22 IP: 185.97.0.0/22 IP: 185.97.76.0/22 IP: 185.98.40.0/22 IP: 185.100.156.0/22 IP: 185.101.200.0/22 IP: 185.102.112.0/22 IP: 185.103.60.0/22 IP: 185.104.148.0/22 IP: 185.105.44.0/22 IP: 185.110.128.0/22 IP: 185.111.24.0/22 IP: 185.112.56.0/22 IP: 185.113.136.0/22 IP: 185.168.208.0/22 IP: 185.175.224.0/22 IP: 185.177.236.0/22 IP: 185.180.108.0/22 IP: 185.182.128.0/22 IP: 185.185.144.0/22 IP: 193.38.228.0/22 IP: 193.161.204.0/23 IP: 193.161.246.0/23 IP: 193.221.200.0/22 IP: 193.221.212.0/22 IP: 194.104.8.0/22 IP: 213.108.0.0/22 IP: 213.170.220.0/22 IP: 213.232.120.0/22 IP: 217.145.224.0/22 IP: 2a00:90a0::/29 IP: 2a03:7ca0::/29 IP: 2a03:7da0::/29 IP: 2a03:7f60::/29 IP: 2a05:3480::/29 IP: 2a05:c8c0::/29 IP: 2a05:cc80::/29 IP: 2a05:d440::/29 IP: 2a06:2c00::/29 IP: 2a06:6b40::/29 IP: 2a07:e5c0::/29 IP: 2a09:3640::/29 IP: 2a0a:a780::/29 IP: 2a0b:d280::/29 IP: 2a0c:a840::/29 IP: 2a0c:a8c0::/29 IP: 2a0c:dcc0::/29 IP: 2a0c:e3c0::/29 IP: 2a0d:b40::/29 IP: 2a0d:7840::/29 IP: 2a0d:bd40::/29 IP: 2a0e:4f40::/29 IP: 2a0e:6140::/29 IP: 2a0e:7b40::/29 IP: 2a0e:d240::/29 IP: 2a10:cf40::/29 IP: 2a10:d240::/29 IP: 2a10:d5c0::/29 IP: 2a10:e040::/29 IP: 2a10:f440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:31:1d:7d:1e:a7:dd:27:5c:b9:bb:98:31:35:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aee15c33de358938d6900a1b3c14480a389e85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:57:c3:ce:f6:38:61:bb:eb:d9:49:04:50: 5f:43:9c:c3:f9:5b:38:0e:e3:28:4c:78:62:00:3d: fc:cd:55:71:5e:20:97:c9:e1:70:a5:36:bc:75:dc: 32:fe:1e:9f:c8:b2:ca:21:76:a5:30:42:69:f3:5c: 84:27:1c:21:50:0a:b5:ce:76:cf:4b:18:26:25:ba: 10:f1:9d:ff:40:e4:7c:e4:4e:03:17:5b:d6:c2:c5: 16:2c:c0:66:04:ed:66:fe:15:99:53:d7:f4:b1:b5: 3f:7d:62:f1:5b:37:2b:5c:f3:c7:fd:02:64:85:1f: 4e:63:12:6f:5f:ea:a3:de:cc:2d:53:1a:0c:70:5f: 3a:d0:c4:6c:08:c0:2b:9b:e9:15:5e:7e:53:83:33: 63:d6:e9:5b:8d:0b:b0:9d:b6:0d:7a:99:2e:67:37: db:f0:b2:87:44:73:8e:3d:7f:da:12:64:7e:58:e5: e2:30:4f:c5:49:b5:8a:17:03:49:7c:2e:29:8d:f2: 7e:07:4b:19:3a:5e:da:b3:78:fd:15:38:b0:76:cf: 22:27:1c:00:0e:df:2b:96:d3:d3:dd:87:a1:dc:11: 6a:b4:7d:66:de:53:32:60:df:15:ae:c9:46:b6:ec: 53:de:2b:c8:75:d6:f5:fe:31:1a:fb:c0:1c:3d:40: 20:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.168.0/22 5.183.252.0/22 45.10.164.0/22 45.66.208.0/22 45.93.212.0/22 45.128.184.0/22 45.132.184.0/22 45.138.100.0/22 45.148.124.0/22 45.151.232.0/22 46.21.80.0/22 77.83.244.0/22 77.220.192.0/22 83.171.224.0/22 89.19.56.0/22 91.132.196.0/22 92.118.168.0/22 93.177.116.0/22 95.81.72.0/22 109.122.192.0/21 141.98.84.0/22 147.78.180.0/22 160.20.156.0/22 185.24.108.0/22 185.29.124.0/22 185.58.112.0/22 185.59.232.0/22 185.61.216.0/21 185.68.184.0/22 185.68.244.0/22 185.71.144.0/22 185.71.212.0/22 185.73.180.0/22 185.73.216.0/22 185.75.132.0/22 185.76.240.0/22 185.77.136.0/22 185.77.216.0/21 185.78.76.0/22 185.79.48.0/22 185.79.76.0/22 185.79.132.0-185.79.139.255 185.81.144.0/22 185.81.172.0/22 185.81.184.0/22 185.88.36.0/22 185.88.96.0/21 185.89.40.0/22 185.89.104.0/21 185.95.100.0/22 185.95.228.0/22 185.96.36.0/22 185.96.80.0/22 185.96.132.0/22 185.97.0.0/22 185.97.76.0/22 185.98.40.0/22 185.100.156.0/22 185.101.200.0/22 185.102.112.0/22 185.103.60.0/22 185.104.148.0/22 185.105.44.0/22 185.110.128.0/22 185.111.24.0/22 185.112.56.0/22 185.113.136.0/22 185.168.208.0/22 185.175.224.0/22 185.177.236.0/22 185.180.108.0/22 185.182.128.0/22 185.185.144.0/22 193.38.228.0/22 193.161.204.0/23 193.161.246.0/23 193.221.200.0/22 193.221.212.0/22 194.104.8.0/22 213.108.0.0/22 213.170.220.0/22 213.232.120.0/22 217.145.224.0/22 IPv6: 2a00:90a0::/29 2a03:7ca0::/29 2a03:7da0::/29 2a03:7f60::/29 2a05:3480::/29 2a05:c8c0::/29 2a05:cc80::/29 2a05:d440::/29 2a06:2c00::/29 2a06:6b40::/29 2a07:e5c0::/29 2a09:3640::/29 2a0a:a780::/29 2a0b:d280::/29 2a0c:a840::/29 2a0c:a8c0::/29 2a0c:dcc0::/29 2a0c:e3c0::/29 2a0d:b40::/29 2a0d:7840::/29 2a0d:bd40::/29 2a0e:4f40::/29 2a0e:6140::/29 2a0e:7b40::/29 2a0e:d240::/29 2a10:cf40::/29 2a10:d240::/29 2a10:d5c0::/29 2a10:e040::/29 2a10:f440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197757 Signature Algorithm: sha256WithRSAEncryption 38:73:a4:93:24:c7:b3:b3:a2:d4:b0:92:98:f5:6c:4a:4c:ec: e1:99:17:80:05:66:54:69:78:92:28:7b:1f:e8:70:15:82:c5: 5e:52:1b:5b:d7:c5:81:0e:3e:42:bb:ab:37:d5:5c:60:d7:69: 8f:22:db:12:c8:81:27:29:f2:d2:1a:48:ce:6c:f8:19:21:0d: b1:70:08:fc:67:11:30:53:29:99:5c:33:24:dd:d2:05:6f:65: 5f:6d:81:e4:06:5c:27:76:1a:c1:64:4c:c8:2f:f5:b9:5b:d7: d2:20:fd:c5:d9:88:f0:ac:42:d9:91:31:ee:ce:59:9e:0d:32: d7:fb:35:13:10:e9:b7:3d:d3:08:2b:c5:48:08:dc:28:6f:35: b9:35:1d:1a:0c:b5:0a:74:b2:3a:01:38:aa:77:7e:a8:b3:e3: c4:5a:70:55:b3:fe:a0:e9:17:0f:f7:f0:45:ee:e5:5f:6f:4d: 9a:71:5a:a0:12:93:fa:21:21:fa:31:5f:0f:c3:d7:9f:5a:79: 18:09:42:f6:ce:ee:97:cb:e6:d3:72:f0:71:ef:4a:ef:9d:cf: 5b:2f:50:c8:e4:b5:04:ee:47:e7:f4:79:d9:11:95:0d:fa:5c: 0e:5e:ae:64:d1:ad:90:db:5a:ef:ea:9c:83:0f:1b:d6:d7:b8: 9f:43:97:90 -----BEGIN CERTIFICATE----- MIIIbjCCB1agAwIBAgISAZt8EzEdfR6n3SdcubuYMTUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVlMTVjMzNkZTM1ODkzOGQ2OTAwYTFiM2MxNDQ4MGEzODllODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhtXw872OGG769lJBFBfQ5zD+Vs4 DuMoTHhiAD38zVVxXiCXyeFwpTa8ddwy/h6fyLLKIXalMEJp81yEJxwhUAq1znbP SxgmJboQ8Z3/QOR85E4DF1vWwsUWLMBmBO1m/hWZU9f0sbU/fWLxWzcrXPPH/QJk hR9OYxJvX+qj3swtUxoMcF860MRsCMArm+kVXn5TgzNj1ulbjQuwnbYNepkuZzfb 8LKHRHOOPX/aEmR+WOXiME/FSbWKFwNJfC4pjfJ+B0sZOl7as3j9FTiwds8iJxwA Dt8rltPT3Yeh3BFqtH1m3lMyYN8VrslGtuxT3ivIddb1/jEa+8AcPUAgAwIDAQAB o4IFejCCBXYwHQYDVR0OBBYEFJruFcM941iTjWkAobPBRICjiehbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzcyZjc3 Zi03NmFiLTRlNzktYTA2Mi02ZWU1MzRkOTJlNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzJmNzdm LTc2YWItNGU3OS1hMDYyLTZlZTUzNGQ5MmU1Mi8xL211NFZ3ejNqV0pPTmFRQ2hz OEZFZ0tPSjZGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIC9wYIKwYB BQUHAQcBAf8EggLmMIIC4jCCAgIEAgABMIIB+gMEAgW1qAMEAgW3/AMEAi0KpAME Ai1C0AMEAi1d1AMEAi2AuAMEAi2EuAMEAi2KZAMEAi2UfAMEAi2X6AMEAi4VUAME Ak1T9AMEAk3cwAMEAlOr4AMEAlkTOAMEAluExAMEAlx2qAMEAl2xdAMEAl9RSAME A216wAMEAo1iVAMEApNOtAMEAqAUnAMEArkYbAMEArkdfAMEArk6cAMEArk76AME A7k92AMEArlEuAMEArlE9AMEArlHkAMEArlH1AMEArlJtAMEArlJ2AMEArlLhAME ArlM8AMEArlNiAMEA7lN2AMEArlOTAMEArlPMAMEArlPTDAMAwQCuU+EAwQCuU+I AwQCuVGQAwQCuVGsAwQCuVG4AwQCuVgkAwQDuVhgAwQCuVkoAwQDuVloAwQCuV9k AwQCuV/kAwQCuWAkAwQCuWBQAwQCuWCEAwQCuWEAAwQCuWFMAwQCuWIoAwQCuWSc AwQCuWXIAwQCuWZwAwQCuWc8AwQCuWiUAwQCuWksAwQCuW6AAwQCuW8YAwQCuXA4 AwQCuXGIAwQCuajQAwQCua/gAwQCubHsAwQCubRsAwQCubaAAwQCubmQAwQCwSbk AwQBwaHMAwQBwaH2AwQCwd3IAwQCwd3UAwQCwmgIAwQC1WwAAwQC1arcAwQC1eh4 AwQC2ZHgMIHZBAIAAjCB0gMFAyoAkKADBQMqA3ygAwUDKgN9oAMFAyoDf2ADBQMq BTSAAwUDKgXIwAMFAyoFzIADBQMqBdRAAwUDKgYsAAMFAyoGa0ADBQMqB+XAAwUD Kgk2QAMFAyoKp4ADBQMqC9KAAwUDKgyoQAMFAyoMqMADBQMqDNzAAwUDKgzjwAMF AyoNC0ADBQMqDXhAAwUDKg29QAMFAyoOT0ADBQMqDmFAAwUDKg57QAMFAyoO0kAD BQMqEM9AAwUDKhDSQAMFAyoQ1cADBQMqEOBAAwUDKhD0QDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMDBH0wDQYJKoZIhvcNAQELBQADggEBADhzpJMkx7OzotSwkpj1 bEpM7OGZF4AFZlRpeJIoex/ocBWCxV5SG1vXxYEOPkK7qzfVXGDXaY8i2xLIgScp 8tIaSM5s+BkhDbFwCPxnETBTKZlcMyTd0gVvZV9tgeQGXCd2GsFkTMgv9blb19Ig /cXZiPCsQtmRMe7OWZ4NMtf7NRMQ6bc90wgrxUgI3ChvNbk1HRoMtQp0sjoBOKp3 fqiz48RacFWz/qDpFw/38EXu5V9vTZpxWqASk/ohIfoxXw/D159aeRgJQvbO7pfL 5tNy8HHvSu+dz1svUMjktQTuR+f0edkRlQ36XA5ermTRrZDbWu/qnIMPG9bXuJ9D l5A= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:49 2026 by rpki-client