This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer File: pPhDYAPTdgICa2VTF1XKj80xvtI.cer (raw, json) Hash identifier: +yBK5JaVeRqjunybeUKrEb+zWsU4uX1+qX2J/BvTRY8= Subject key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364FB92A96F857ABD336AA53D2848C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28717 AS: 29542 AS: 31027 AS: 34932 AS: 35589 AS: 42525 AS: 44508 IP: 5.56.144.0/20 IP: 5.83.24.0/21 IP: 5.179.80.0/20 IP: 37.49.128.0/20 IP: 37.205.120.0/21 IP: 46.32.156.0/22 IP: 62.12.32.0 -- 62.12.55.255 IP: 62.116.192.0/19 IP: 77.233.224.0/19 IP: 77.243.32.0/20 IP: 78.111.160.0/20 IP: 78.153.160.0/19 IP: 80.88.128.0/20 IP: 80.243.112.0/20 IP: 81.27.208.0/20 IP: 82.192.160.0/19 IP: 83.136.88.0/21 IP: 83.151.128.0/18 IP: 87.116.0.0/18 IP: 88.212.64.0/18 IP: 89.221.160.0/20 IP: 91.143.112.0/20 IP: 91.198.227.0/24 IP: 92.62.192.0/20 IP: 93.176.64.0/18 IP: 94.18.0.0/16 IP: 94.101.208.0/20 IP: 109.202.128.0/19 IP: 130.185.128.0/20 IP: 176.222.232.0/21 IP: 185.17.192.0/22 IP: 185.20.240.0/22 IP: 185.67.128.0/22 IP: 188.120.64.0/19 IP: 193.105.116.0/24 IP: 193.105.149.0/24 IP: 194.182.0.0/18 IP: 194.182.96.0/21 IP: 195.93.176.0/23 IP: 195.93.182.0/23 IP: 195.140.132.0/22 IP: 212.60.96.0/19 IP: 212.98.64.0/18 IP: 217.63.96.0/19 IP: 217.74.208.0/20 IP: 217.116.208.0/20 IP: 217.195.176.0/20 IP: 2a01:4f0::/32 IP: 2a01:7e8::/32 IP: 2a02:188::/29 IP: 2a02:460::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4f:b9:2a:96:f8:57:ab:d3:36:aa:53:d2:84:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:ec:4e:18:80:32:8a:54:af:f4:12:bf:65: b6:94:af:b5:32:6a:e3:cf:32:13:d6:dc:2d:13:d3: fa:9d:00:6b:f9:9a:9e:99:28:d8:a8:74:f0:14:26: ab:8a:cc:21:4c:7e:77:92:29:f4:e3:ce:bd:81:8f: 41:7e:d7:13:43:5d:7d:50:30:50:4e:4f:0f:9d:d6: bf:c1:bc:23:34:82:d1:ad:e2:0a:2a:45:d0:39:16: 3b:37:f0:b4:2f:52:1b:31:eb:87:76:56:b4:63:79: db:ad:cc:6f:1e:e5:dc:0e:2f:39:82:b0:f1:53:b5: 6b:e2:bb:72:6d:68:3a:f3:f5:0a:5a:f2:35:27:3d: 64:5d:83:8d:1f:10:98:65:77:79:df:2f:9f:d1:5f: 6c:35:4c:e8:9b:2a:32:ac:d7:bf:d6:3d:69:5c:a3: a3:6f:c2:aa:d9:58:41:92:ed:74:7d:c0:7a:f7:a4: 18:45:a4:64:8c:cc:b8:6e:b1:87:44:b3:94:1e:53: da:b7:14:8d:9b:98:a6:ff:08:e1:93:e5:f7:e4:23: c1:0a:68:d9:87:7e:9f:ad:35:ca:76:05:1e:cc:ac: f9:d7:f4:36:7a:c3:ea:b0:b1:ae:89:e5:20:ce:99: 02:18:20:c0:ca:4e:d7:5b:13:0a:4a:ee:23:e5:02: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.144.0/20 5.83.24.0/21 5.179.80.0/20 37.49.128.0/20 37.205.120.0/21 46.32.156.0/22 62.12.32.0-62.12.55.255 62.116.192.0/19 77.233.224.0/19 77.243.32.0/20 78.111.160.0/20 78.153.160.0/19 80.88.128.0/20 80.243.112.0/20 81.27.208.0/20 82.192.160.0/19 83.136.88.0/21 83.151.128.0/18 87.116.0.0/18 88.212.64.0/18 89.221.160.0/20 91.143.112.0/20 91.198.227.0/24 92.62.192.0/20 93.176.64.0/18 94.18.0.0/16 94.101.208.0/20 109.202.128.0/19 130.185.128.0/20 176.222.232.0/21 185.17.192.0/22 185.20.240.0/22 185.67.128.0/22 188.120.64.0/19 193.105.116.0/24 193.105.149.0/24 194.182.0.0/18 194.182.96.0/21 195.93.176.0/23 195.93.182.0/23 195.140.132.0/22 212.60.96.0/19 212.98.64.0/18 217.63.96.0/19 217.74.208.0/20 217.116.208.0/20 217.195.176.0/20 IPv6: 2a01:4f0::/32 2a01:7e8::/32 2a02:188::/29 2a02:460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28717 29542 31027 34932 35589 42525 44508 Signature Algorithm: sha256WithRSAEncryption 82:4c:37:02:f5:c5:57:08:ca:7f:a2:5a:c3:19:fb:31:09:ca: d4:5f:01:5e:5e:e3:a5:d9:ea:60:35:ef:df:18:c1:a6:99:73: c8:58:fc:65:3b:22:da:33:b6:de:da:83:65:9e:21:07:0a:e9: c2:23:a3:83:63:1a:97:93:f9:ba:38:5e:f9:9e:8f:5c:fd:14: 9e:d4:1d:3e:3e:a5:89:d6:97:f8:3d:2b:38:ae:43:c1:ce:a6: 25:fd:23:8a:09:f2:0a:7e:6c:09:cd:73:16:09:df:ec:2c:f4: c9:95:ec:4c:91:ac:24:db:6a:55:b7:9a:fd:3b:8e:3f:d4:5f: 16:a1:2b:d0:1a:55:dd:a8:be:47:9f:2c:cd:34:7a:c7:78:bb: 02:52:39:e8:f6:92:8b:b6:f6:b7:00:00:d0:5c:9c:19:35:4d: 56:90:74:db:15:a6:1e:ec:a3:19:dd:19:84:b2:6c:71:1b:61: 4b:64:86:6e:f4:6d:28:30:9f:aa:10:7c:da:52:c5:63:ab:37: 50:56:b0:8b:66:af:1b:3f:e6:19:d0:b5:06:af:34:1f:90:ed: 02:b7:04:37:87:4b:82:90:e9:41:6f:b5:4b:1b:c9:b4:c0:31: 3d:c7:96:bb:61:7e:b5:cb:fd:e2:f5:c2:9a:fd:7a:a0:40:05: 4c:97:19:79 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgISAZt7Nk+5Kpb4V6vTNqpT0oSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGY4NDM2MDAzZDM3NjAyMDI2YjY1NTMxNzU1Y2E4ZmNkMzFiZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1zsThiAMopUr/QSv2W2lK+1Mmrj zzIT1twtE9P6nQBr+ZqemSjYqHTwFCariswhTH53kin04869gY9BftcTQ119UDBQ Tk8Pnda/wbwjNILRreIKKkXQORY7N/C0L1IbMeuHdla0Y3nbrcxvHuXcDi85grDx U7Vr4rtybWg68/UKWvI1Jz1kXYONHxCYZXd53y+f0V9sNUzomyoyrNe/1j1pXKOj b8Kq2VhBku10fcB696QYRaRkjMy4brGHRLOUHlPatxSNm5im/wjhk+X35CPBCmjZ h36frTXKdgUezKz51/Q2esPqsLGuieUgzpkCGCDAyk7XWxMKSu4j5QIL+QIDAQAB o4IEBDCCBAAwHQYDVR0OBBYEFKT4Q2AD03YCAmtlUxdVyo/NMb7SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzUxNTYw OC01MDEyLTRhNDAtYjMyNC0yN2JmODNjZGVkNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvNTE1NjA4 LTUwMTItNGE0MC1iMzI0LTI3YmY4M2NkZWQ2Yi8xL3BQaERZQVBUZGdJQ2EyVlRG MVhLajgweHZ0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBZgYIKwYB BQUHAQcBAf8EggFVMIIBUTCCASkEAgABMIIBIQMEBAU4kAMEAwVTGAMEBAWzUAME BCUxgAMEAyXNeAMEAi4gnDAMAwQFPgwgAwQDPgwwAwQFPnTAAwQFTengAwQETfMg AwQETm+gAwQFTpmgAwQEUFiAAwQEUPNwAwQEURvQAwQFUsCgAwQDU4hYAwQGU5eA AwQGV3QAAwQGWNRAAwQEWd2gAwQEW49wAwQAW8bjAwQEXD7AAwQGXbBAAwMAXhID BAReZdADBAVtyoADBASCuYADBAOw3ugDBAK5EcADBAK5FPADBAK5Q4ADBAW8eEAD BADBaXQDBADBaZUDBAbCtgADBAPCtmADBAHDXbADBAHDXbYDBALDjIQDBAXUPGAD BAbUYkADBAXZP2ADBATZStADBATZdNADBATZw7AwIgQCAAIwHAMFACoBBPADBQAq AQfoAwUDKgIBiAMFACoCBGAwNQYIKwYBBQUHAQgBAf8EJjAkoCIwIAICcC0CAnNm AgJ5MwIDAIh0AgMAiwUCAwCmHQIDAK3cMA0GCSqGSIb3DQEBCwUAA4IBAQCCTDcC 9cVXCMp/olrDGfsxCcrUXwFeXuOl2epgNe/fGMGmmXPIWPxlOyLaM7be2oNlniEH CunCI6ODYxqXk/m6OF75no9c/RSe1B0+PqWJ1pf4PSs4rkPBzqYl/SOKCfIKfmwJ zXMWCd/sLPTJlexMkawk22pVt5r9O44/1F8WoSvQGlXdqL5HnyzNNHrHeLsCUjno 9pKLtva3AADQXJwZNU1WkHTbFaYe7KMZ3RmEsmxxG2FLZIZu9G0oMJ+qEHzaUsVj qzdQVrCLZq8bP+YZ0LUGrzQfkO0CtwQ3h0uCkOlBb7VLG8m0wDE9x5a7YX61y/3i 9cKa/XqgQAVMlxl5 -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:39 2026 by rpki-client