This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer (raw, json) Hash identifier: 9hYPEEsGYfCRM7IzSdmfG+q2TdvCEcrrGV0keRuKgE8= Subject key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A5F083770DEE8CB6F880A746F5862B16B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 07 Nov 2025 15:56:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 3326 AS: 8207 AS: 13249 AS: 15785 AS: 20725 AS: 20754 AS: 21011 AS: 21075 AS: 21219 AS: 21261 AS: 21338 AS: 25216 AS: 31520 AS: 35123 AS: 42727 AS: 43918 AS: 44924 AS: 197743 IP: 5.1.0.0/19 IP: 31.3.192.0/20 IP: 31.128.64.0/23 IP: 31.128.68.0 -- 31.128.95.255 IP: 37.46.216.0/21 IP: 46.164.128.0/18 IP: 77.88.200.0 -- 77.88.223.255 IP: 77.88.240.0/20 IP: 77.222.128.0/19 IP: 80.70.64.0/19 IP: 80.77.32.0/20 IP: 80.91.160.0/19 IP: 80.249.224.0/20 IP: 85.159.0.0/21 IP: 88.81.224.0/19 IP: 91.193.68.0/22 IP: 91.197.220.0/22 IP: 91.204.92.0/22 IP: 91.237.152.0/24 IP: 93.183.192.0/18 IP: 94.232.72.0/21 IP: 109.206.32.0/19 IP: 141.170.224.0/19 IP: 176.102.32.0/19 IP: 176.112.0.0/19 IP: 176.241.104.0/21 IP: 176.241.128.0/19 IP: 178.213.168.0/21 IP: 185.8.40.0/22 IP: 185.46.248.0/22 IP: 185.183.108.0/22 IP: 188.0.64.0/19 IP: 188.247.96.0/19 IP: 193.16.105.0/24 IP: 193.41.48.0/22 IP: 193.108.48.0/22 IP: 193.108.128.0/23 IP: 193.109.80.0/24 IP: 193.109.164.0/22 IP: 193.238.96.0/22 IP: 194.29.60.0/22 IP: 194.110.79.0/24 IP: 194.146.196.0/22 IP: 195.69.176.0/22 IP: 195.114.128.0/19 IP: 195.225.52.0/23 IP: 213.111.192.0/18 IP: 213.133.160.0/19 IP: 217.112.208.0/20 IP: 2a00:1d88::/32 IP: 2a01:758::/32 IP: 2a02:70::/32 IP: 2a04:a900::/29 IP: 2a0f:b540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5f:08:37:70:de:e8:cb:6f:88:0a:74:6f:58:62:b1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 7 15:56:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:2a:66:37:16:5a:fa:16:ce:f4:ff:a4:df: 96:cd:25:09:8a:c9:5c:d4:12:5c:9a:52:fc:ba:a2: 17:24:e8:62:68:78:8d:28:51:d9:48:de:ed:d2:94: f9:21:54:23:d3:23:a4:ea:fb:b6:cc:d2:aa:17:c0: 35:c2:28:54:01:3f:3b:76:59:e5:ed:40:3d:04:2c: 2e:b4:3f:cb:50:91:99:28:d7:64:02:35:87:00:54: 62:e5:f2:a7:fc:1d:46:af:50:b4:e5:98:10:ac:79: 39:8b:92:70:84:56:19:ff:73:1d:10:28:f5:a8:6f: ae:65:37:dc:42:51:69:1d:3d:84:4d:24:43:e7:79: 31:d3:f7:3d:1f:02:65:09:c8:b9:3b:44:b6:f0:cb: eb:30:5b:5f:e0:2a:4d:6d:78:c6:8f:0a:a6:5c:2b: fb:13:65:a5:00:10:e3:f3:5d:85:2d:bd:bc:b1:d1: 30:77:cb:ab:ce:76:5e:21:c4:44:1e:58:1f:6b:5c: 93:cd:03:db:03:c8:cf:9b:1f:14:b9:b6:3f:90:61: 86:e3:3b:0a:75:aa:dd:2b:c9:4c:df:2c:e2:62:0b: c3:4a:e6:8f:f1:14:94:0a:35:10:54:49:1c:ba:87: a2:a7:9b:99:59:81:40:22:2b:46:85:ca:15:6d:aa: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.0.0/19 31.3.192.0/20 31.128.64.0/23 31.128.68.0-31.128.95.255 37.46.216.0/21 46.164.128.0/18 77.88.200.0-77.88.223.255 77.88.240.0/20 77.222.128.0/19 80.70.64.0/19 80.77.32.0/20 80.91.160.0/19 80.249.224.0/20 85.159.0.0/21 88.81.224.0/19 91.193.68.0/22 91.197.220.0/22 91.204.92.0/22 91.237.152.0/24 93.183.192.0/18 94.232.72.0/21 109.206.32.0/19 141.170.224.0/19 176.102.32.0/19 176.112.0.0/19 176.241.104.0/21 176.241.128.0/19 178.213.168.0/21 185.8.40.0/22 185.46.248.0/22 185.183.108.0/22 188.0.64.0/19 188.247.96.0/19 193.16.105.0/24 193.41.48.0/22 193.108.48.0/22 193.108.128.0/23 193.109.80.0/24 193.109.164.0/22 193.238.96.0/22 194.29.60.0/22 194.110.79.0/24 194.146.196.0/22 195.69.176.0/22 195.114.128.0/19 195.225.52.0/23 213.111.192.0/18 213.133.160.0/19 217.112.208.0/20 IPv6: 2a00:1d88::/32 2a01:758::/32 2a02:70::/32 2a04:a900::/29 2a0f:b540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3326 8207 13249 15785 20725 20754 21011 21075 21219 21261 21338 25216 31520 35123 42727 43918 44924 197743 Signature Algorithm: sha256WithRSAEncryption 3f:5e:64:3c:dc:33:5d:e3:70:9b:ee:53:02:64:31:ac:8d:8b: 88:08:01:35:d9:8a:53:b6:f3:31:9d:b7:49:1e:06:49:ff:ff: c8:1e:7e:55:01:b3:dc:a3:98:cf:3b:67:9a:5f:44:ee:fa:8d: ab:01:10:0d:02:17:a4:e7:b4:e2:76:39:be:5e:6b:e1:c4:91: a1:da:03:d2:0d:67:f1:b6:36:24:35:7a:69:7e:9c:62:6a:44: 9f:9a:90:a0:a2:58:45:7f:06:30:c2:51:57:64:7b:f6:7d:2c: 9b:eb:5a:ed:1c:58:91:1d:af:98:ce:f1:54:60:ec:9e:8d:16: 2c:1a:cc:5d:3c:08:12:99:63:f7:24:7f:fb:ff:55:47:89:e2: 74:2b:02:e2:55:55:56:04:16:6d:7e:f4:ff:c6:4e:96:28:cc: 8b:b6:95:29:e6:11:fe:c3:d1:f7:27:91:0e:b0:cb:0e:20:fc: e8:01:2a:78:94:15:f1:c1:59:0d:f8:62:01:80:d8:83:e7:d7: 97:6d:0b:4c:84:73:e0:76:9c:3b:2f:f1:df:06:4b:39:cb:f5: 26:bd:ef:95:8b:7c:56:7a:33:a6:5d:21:78:b8:ab:d8:e0:f8: dc:09:04:90:65:7a:6d:9a:33:33:02:71:98:6f:68:37:e2:62: 95:26:7e:b0 -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgISAZpfCDdw3ujLb4gKdG9YYrFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA3MTU1NjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmM4ZGJlNTIwODNhZDMzNWM5ZjFmZGU2MDE2ZWM4YjQ5MjkzMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgEqZjcWWvoWzvT/pN+WzSUJislc 1BJcmlL8uqIXJOhiaHiNKFHZSN7t0pT5IVQj0yOk6vu2zNKqF8A1wihUAT87dlnl 7UA9BCwutD/LUJGZKNdkAjWHAFRi5fKn/B1Gr1C05ZgQrHk5i5JwhFYZ/3MdECj1 qG+uZTfcQlFpHT2ETSRD53kx0/c9HwJlCci5O0S28MvrMFtf4CpNbXjGjwqmXCv7 E2WlABDj812FLb28sdEwd8urznZeIcREHlgfa1yTzQPbA8jPmx8UubY/kGGG4zsK dardK8lM3yziYgvDSuaP8RSUCjUQVEkcuoeip5uZWYFAIitGhcoVbaqd8QIDAQAB o4IETTCCBEkwHQYDVR0OBBYEFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2NlNmNj Yi0yNWNmLTQ5MTctYjNjZC0zMDU2YWY5YTMzNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvY2U2Y2Ni LTI1Y2YtNDkxNy1iM2NkLTMwNTZhZjlhMzM1ZS8xL3E4amI1U0NEclROY254X2VZ QmJzaTBrcE1VQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBggYIKwYB BQUHAQcBAf8EggFxMIIBbTCCAT4EAgABMIIBNgMEBQUBAAMEBB8DwAMEAR+AQDAM AwQCH4BEAwQFH4BAAwQDJS7YAwQGLqSAMAwDBANNWMgDBAVNWMADBARNWPADBAVN 3oADBAVQRkADBARQTSADBAVQW6ADBARQ+eADBANVnwADBAVYUeADBAJbwUQDBAJb xdwDBAJbzFwDBABb7ZgDBAZdt8ADBANe6EgDBAVtziADBAWNquADBAWwZiADBAWw cAADBAOw8WgDBAWw8YADBAOy1agDBAK5CCgDBAK5LvgDBAK5t2wDBAW8AEADBAW8 92ADBADBEGkDBALBKTADBALBbDADBAHBbIADBADBbVADBALBbaQDBALB7mADBALC HTwDBADCbk8DBALCksQDBALDRbADBAXDcoADBAHD4TQDBAbVb8ADBAXVhaADBATZ cNAwKQQCAAIwIwMFACoAHYgDBQAqAQdYAwUAKgIAcAMFAyoEqQADBQAqD7VAMGIG CCsGAQUFBwEIAQH/BFMwUaBPME0CAgz+AgIgDwICM8ECAj2pAgJQ9QICURICAlIT AgJSUwICUuMCAlMNAgJTWgICYoACAnsgAgMAiTMCAwCm5wIDAKuOAgMAr3wCAwME bzANBgkqhkiG9w0BAQsFAAOCAQEAP15kPNwzXeNwm+5TAmQxrI2LiAgBNdmKU7bz MZ23SR4GSf//yB5+VQGz3KOYzztnml9E7vqNqwEQDQIXpOe04nY5vl5r4cSRodoD 0g1n8bY2JDV6aX6cYmpEn5qQoKJYRX8GMMJRV2R79n0sm+ta7RxYkR2vmM7xVGDs no0WLBrMXTwIEplj9yR/+/9VR4nidCsC4lVVVgQWbX70/8ZOlijMi7aVKeYR/sPR 9yeRDrDLDiD86AEqeJQV8cFZDfhiAYDYg+fXl20LTIRz4HacOy/x3wZLOcv1Jr3v lYt8Vnozpl0heLir2OD43AkEkGV6bZozMwJxmG9oN+JilSZ+sA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:42 2025 by rpki-client