This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer (raw, json) Hash identifier: QkHB7i9/RIoAcxODIekxVHZmrvph5iEx4O3KRA02ixw= Subject key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDB7171580D8B773B04FE092E50D84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3326 AS: 8207 AS: 13249 AS: 15785 AS: 20725 AS: 20754 AS: 21011 AS: 21075 AS: 21219 AS: 21261 AS: 21338 AS: 25216 AS: 31520 AS: 35123 AS: 42727 AS: 43918 AS: 44924 AS: 197743 IP: 5.1.0.0/19 IP: 31.3.192.0/20 IP: 31.128.64.0/23 IP: 31.128.68.0 -- 31.128.95.255 IP: 37.46.216.0/21 IP: 46.164.128.0/18 IP: 77.88.200.0 -- 77.88.223.255 IP: 77.88.240.0/20 IP: 77.222.128.0/19 IP: 80.70.64.0/19 IP: 80.77.32.0/20 IP: 80.91.160.0/19 IP: 80.249.224.0/20 IP: 85.159.0.0/21 IP: 88.81.224.0/19 IP: 91.193.68.0/22 IP: 91.197.220.0/22 IP: 91.204.92.0/22 IP: 91.237.152.0/24 IP: 93.183.192.0/18 IP: 94.232.72.0/21 IP: 109.206.32.0/19 IP: 141.170.224.0/19 IP: 176.102.32.0/19 IP: 176.112.0.0/19 IP: 176.241.104.0/21 IP: 176.241.128.0/19 IP: 178.213.168.0/21 IP: 185.8.40.0/22 IP: 185.46.248.0/22 IP: 185.183.108.0/22 IP: 188.0.64.0/19 IP: 188.247.96.0/19 IP: 193.16.105.0/24 IP: 193.41.48.0/22 IP: 193.108.48.0/22 IP: 193.108.128.0/23 IP: 193.109.80.0/24 IP: 193.109.164.0/22 IP: 193.238.96.0/22 IP: 194.29.60.0/22 IP: 194.110.79.0/24 IP: 194.146.196.0/22 IP: 195.69.176.0/22 IP: 195.114.128.0/19 IP: 195.225.52.0/23 IP: 213.111.192.0/18 IP: 213.133.160.0/19 IP: 217.112.208.0/20 IP: 2a00:1d88::/32 IP: 2a01:758::/32 IP: 2a02:70::/32 IP: 2a04:a900::/29 IP: 2a0f:b540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b7:17:15:80:d8:b7:73:b0:4f:e0:92:e5:0d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:2a:66:37:16:5a:fa:16:ce:f4:ff:a4:df: 96:cd:25:09:8a:c9:5c:d4:12:5c:9a:52:fc:ba:a2: 17:24:e8:62:68:78:8d:28:51:d9:48:de:ed:d2:94: f9:21:54:23:d3:23:a4:ea:fb:b6:cc:d2:aa:17:c0: 35:c2:28:54:01:3f:3b:76:59:e5:ed:40:3d:04:2c: 2e:b4:3f:cb:50:91:99:28:d7:64:02:35:87:00:54: 62:e5:f2:a7:fc:1d:46:af:50:b4:e5:98:10:ac:79: 39:8b:92:70:84:56:19:ff:73:1d:10:28:f5:a8:6f: ae:65:37:dc:42:51:69:1d:3d:84:4d:24:43:e7:79: 31:d3:f7:3d:1f:02:65:09:c8:b9:3b:44:b6:f0:cb: eb:30:5b:5f:e0:2a:4d:6d:78:c6:8f:0a:a6:5c:2b: fb:13:65:a5:00:10:e3:f3:5d:85:2d:bd:bc:b1:d1: 30:77:cb:ab:ce:76:5e:21:c4:44:1e:58:1f:6b:5c: 93:cd:03:db:03:c8:cf:9b:1f:14:b9:b6:3f:90:61: 86:e3:3b:0a:75:aa:dd:2b:c9:4c:df:2c:e2:62:0b: c3:4a:e6:8f:f1:14:94:0a:35:10:54:49:1c:ba:87: a2:a7:9b:99:59:81:40:22:2b:46:85:ca:15:6d:aa: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.0.0/19 31.3.192.0/20 31.128.64.0/23 31.128.68.0-31.128.95.255 37.46.216.0/21 46.164.128.0/18 77.88.200.0-77.88.223.255 77.88.240.0/20 77.222.128.0/19 80.70.64.0/19 80.77.32.0/20 80.91.160.0/19 80.249.224.0/20 85.159.0.0/21 88.81.224.0/19 91.193.68.0/22 91.197.220.0/22 91.204.92.0/22 91.237.152.0/24 93.183.192.0/18 94.232.72.0/21 109.206.32.0/19 141.170.224.0/19 176.102.32.0/19 176.112.0.0/19 176.241.104.0/21 176.241.128.0/19 178.213.168.0/21 185.8.40.0/22 185.46.248.0/22 185.183.108.0/22 188.0.64.0/19 188.247.96.0/19 193.16.105.0/24 193.41.48.0/22 193.108.48.0/22 193.108.128.0/23 193.109.80.0/24 193.109.164.0/22 193.238.96.0/22 194.29.60.0/22 194.110.79.0/24 194.146.196.0/22 195.69.176.0/22 195.114.128.0/19 195.225.52.0/23 213.111.192.0/18 213.133.160.0/19 217.112.208.0/20 IPv6: 2a00:1d88::/32 2a01:758::/32 2a02:70::/32 2a04:a900::/29 2a0f:b540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3326 8207 13249 15785 20725 20754 21011 21075 21219 21261 21338 25216 31520 35123 42727 43918 44924 197743 Signature Algorithm: sha256WithRSAEncryption 3f:1d:fc:a4:bd:03:4c:44:38:27:df:7e:1b:5f:f7:bc:9f:b5: b9:a7:f4:61:d0:7c:f9:00:40:f4:20:47:cd:dd:6e:06:0e:0d: b0:03:9d:c7:84:53:02:17:4b:c0:b1:50:16:05:2b:a3:78:92: 24:df:a2:42:b4:e1:d4:45:64:45:61:38:e2:63:22:24:c9:29: ec:21:5c:17:f5:fa:19:fe:e9:52:99:37:0b:bb:0b:d6:51:bd: 77:f7:3e:a3:dc:f3:f3:52:35:2b:88:4e:a7:bf:14:55:2b:de: d6:a2:a7:08:46:c0:30:d1:f5:7b:72:af:53:03:01:ac:33:97: 46:1c:9b:01:a9:a8:ec:5c:9b:14:17:f1:8c:b9:c5:44:8b:a6: 7e:d6:96:c4:ae:2e:12:e2:cf:c9:66:7d:6b:92:f4:6b:7d:20: c1:36:16:c9:49:dc:87:d0:c5:74:9b:91:ac:46:3a:4e:20:0c: 6c:f5:89:97:86:9b:c2:fb:71:50:7c:e9:dd:88:73:90:2b:f3: 55:78:82:f3:69:e8:a5:02:bc:9d:31:7c:c5:16:ab:bc:63:58: 72:65:7e:33:1b:f3:d5:df:fa:ad:ea:d7:9c:e1:72:20:93:37: 70:78:e4:ce:c9:65:67:27:a8:c0:ae:a5:f3:3a:d9:ba:44:15: 2f:64:41:5e -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgISAZt87bcXFYDYt3OwT+CS5Q2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmM4ZGJlNTIwODNhZDMzNWM5ZjFmZGU2MDE2ZWM4YjQ5MjkzMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgEqZjcWWvoWzvT/pN+WzSUJislc 1BJcmlL8uqIXJOhiaHiNKFHZSN7t0pT5IVQj0yOk6vu2zNKqF8A1wihUAT87dlnl 7UA9BCwutD/LUJGZKNdkAjWHAFRi5fKn/B1Gr1C05ZgQrHk5i5JwhFYZ/3MdECj1 qG+uZTfcQlFpHT2ETSRD53kx0/c9HwJlCci5O0S28MvrMFtf4CpNbXjGjwqmXCv7 E2WlABDj812FLb28sdEwd8urznZeIcREHlgfa1yTzQPbA8jPmx8UubY/kGGG4zsK dardK8lM3yziYgvDSuaP8RSUCjUQVEkcuoeip5uZWYFAIitGhcoVbaqd8QIDAQAB o4IETTCCBEkwHQYDVR0OBBYEFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2NlNmNj Yi0yNWNmLTQ5MTctYjNjZC0zMDU2YWY5YTMzNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvY2U2Y2Ni LTI1Y2YtNDkxNy1iM2NkLTMwNTZhZjlhMzM1ZS8xL3E4amI1U0NEclROY254X2VZ QmJzaTBrcE1VQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBggYIKwYB BQUHAQcBAf8EggFxMIIBbTCCAT4EAgABMIIBNgMEBQUBAAMEBB8DwAMEAR+AQDAM AwQCH4BEAwQFH4BAAwQDJS7YAwQGLqSAMAwDBANNWMgDBAVNWMADBARNWPADBAVN 3oADBAVQRkADBARQTSADBAVQW6ADBARQ+eADBANVnwADBAVYUeADBAJbwUQDBAJb xdwDBAJbzFwDBABb7ZgDBAZdt8ADBANe6EgDBAVtziADBAWNquADBAWwZiADBAWw cAADBAOw8WgDBAWw8YADBAOy1agDBAK5CCgDBAK5LvgDBAK5t2wDBAW8AEADBAW8 92ADBADBEGkDBALBKTADBALBbDADBAHBbIADBADBbVADBALBbaQDBALB7mADBALC HTwDBADCbk8DBALCksQDBALDRbADBAXDcoADBAHD4TQDBAbVb8ADBAXVhaADBATZ cNAwKQQCAAIwIwMFACoAHYgDBQAqAQdYAwUAKgIAcAMFAyoEqQADBQAqD7VAMGIG CCsGAQUFBwEIAQH/BFMwUaBPME0CAgz+AgIgDwICM8ECAj2pAgJQ9QICURICAlIT AgJSUwICUuMCAlMNAgJTWgICYoACAnsgAgMAiTMCAwCm5wIDAKuOAgMAr3wCAwME bzANBgkqhkiG9w0BAQsFAAOCAQEAPx38pL0DTEQ4J99+G1/3vJ+1uaf0YdB8+QBA 9CBHzd1uBg4NsAOdx4RTAhdLwLFQFgUro3iSJN+iQrTh1EVkRWE44mMiJMkp7CFc F/X6Gf7pUpk3C7sL1lG9d/c+o9zz81I1K4hOp78UVSve1qKnCEbAMNH1e3KvUwMB rDOXRhybAamo7FybFBfxjLnFRIumftaWxK4uEuLPyWZ9a5L0a30gwTYWyUnch9DF dJuRrEY6TiAMbPWJl4abwvtxUHzp3YhzkCvzVXiC82nopQK8nTF8xRarvGNYcmV+ Mxvz1d/6rerXnOFyIJM3cHjkzsllZyeowK6l8zrZukQVL2RBXg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:46 2026 by rpki-client