This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer (raw, json) Hash identifier: VX3VXoxHCkRQ3hGF621tAro5xsi4/3UgUFrV5Apd7o4= Subject key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2B4CB368A352C673516F9B0698C43 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29066 IP: 37.61.208.0/20 IP: 62.75.130.0/24 IP: 62.75.136.0/24 IP: 62.75.167.0/24 IP: 62.75.179.0/24 IP: 62.75.181.0 -- 62.75.183.255 IP: 62.75.194.0 -- 62.75.198.255 IP: 62.75.201.0 -- 62.75.204.255 IP: 62.75.207.0/24 IP: 62.75.213.0 -- 62.75.224.255 IP: 62.75.228.0 -- 62.75.230.255 IP: 62.75.232.0 -- 62.75.238.255 IP: 62.75.252.0/22 IP: 62.138.0.0/22 IP: 62.138.5.0 -- 62.138.8.255 IP: 62.138.10.0 -- 62.138.12.255 IP: 62.138.14.0/24 IP: 62.138.16.0/24 IP: 62.138.18.0/23 IP: 62.138.24.0/24 IP: 62.138.26.0/24 IP: 78.138.96.0 -- 78.138.107.255 IP: 78.138.118.0/24 IP: 78.138.126.0/23 IP: 80.86.81.0 -- 80.86.87.255 IP: 80.86.90.0 -- 80.86.95.255 IP: 85.25.1.0/24 IP: 85.25.8.0/21 IP: 85.25.20.0/24 IP: 85.25.27.0/24 IP: 85.25.40.0 -- 85.25.64.255 IP: 85.25.66.0 -- 85.25.68.255 IP: 85.25.71.0 -- 85.25.79.255 IP: 85.25.92.0/22 IP: 85.25.98.0 -- 85.25.100.255 IP: 85.25.102.0 -- 85.25.110.255 IP: 85.25.116.0 -- 85.25.120.255 IP: 85.25.122.0 -- 85.25.157.255 IP: 85.25.159.0 -- 85.25.160.255 IP: 85.25.172.0 -- 85.25.174.255 IP: 85.25.176.0 -- 85.25.203.255 IP: 85.25.206.0 -- 85.25.211.255 IP: 85.25.213.0 -- 85.25.220.255 IP: 85.25.222.0/23 IP: 85.25.226.0/23 IP: 85.25.232.0/23 IP: 85.25.235.0 -- 85.25.239.255 IP: 85.25.242.0 -- 85.25.244.255 IP: 85.25.246.0/24 IP: 85.25.248.0/21 IP: 85.93.88.0 -- 85.93.93.255 IP: 85.195.64.0/18 IP: 87.119.195.0/24 IP: 87.119.220.0/22 IP: 92.42.104.0/21 IP: 92.204.40.0/23 IP: 92.204.53.0 -- 92.204.54.255 IP: 92.204.96.0/20 IP: 92.204.160.0 -- 92.204.207.255 IP: 92.204.240.0/20 IP: 92.205.32.0/21 IP: 92.205.112.0/20 IP: 92.205.152.0/22 IP: 134.119.176.0 -- 134.119.223.255 IP: 146.0.224.0/19 IP: 151.106.0.0/19 IP: 151.106.48.0/20 IP: 185.19.216.0/22 IP: 185.136.156.0 -- 185.136.171.255 IP: 188.138.0.0 -- 188.138.11.255 IP: 188.138.16.0/22 IP: 188.138.24.0 -- 188.138.47.255 IP: 188.138.56.0/21 IP: 188.138.68.0 -- 188.138.79.255 IP: 188.138.81.0 -- 188.138.127.255 IP: 195.69.240.0/22 IP: 217.118.19.0/24 IP: 217.118.23.0 -- 217.118.24.255 IP: 217.118.26.0/23 IP: 217.172.170.0 -- 217.172.172.255 IP: 217.172.176.0 -- 217.172.190.255 IP: 2a01:7a0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b4:cb:36:8a:35:2c:67:35:16:f9:b0:69:8c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:fd:39:c4:42:41:b9:5d:72:81:41:81:da: da:1a:88:a8:86:62:eb:b1:ed:77:0b:1e:c8:24:4d: 46:61:29:fc:45:70:84:0e:b4:a4:33:0d:ae:36:fc: 59:23:ba:a5:44:bc:f8:1c:dd:b0:48:bc:4b:65:91: 76:7c:ac:5e:6e:17:1c:cb:42:80:bb:14:a6:11:7a: 8f:00:63:3f:62:90:62:01:fc:20:91:68:b7:9b:61: 3e:05:10:01:f0:6b:8d:2e:73:e5:59:a5:77:43:b8: 07:ef:10:ae:82:14:a2:52:4d:3f:22:61:0b:8a:dd: bf:33:19:68:b8:3b:53:a9:e8:52:7b:6c:7e:b2:ef: 0a:3b:3f:b1:35:a5:10:ac:fa:69:de:b5:c2:70:5a: 71:fd:e4:39:c5:ae:bd:e1:3a:0d:85:b0:8f:86:6b: 05:e0:e0:4c:f8:17:f5:7d:60:9c:98:ed:14:12:18: 40:b8:9d:f6:c1:0e:5c:14:d7:16:0b:3c:0a:7a:77: f5:f1:4f:4f:24:19:41:57:e9:cd:46:97:48:69:ae: d3:a4:cd:17:c6:74:90:9e:7b:db:4c:0c:81:e4:82: 96:51:0f:8c:15:9a:44:95:90:f5:58:93:36:76:ca: e1:d8:26:1c:9b:fc:90:0a:ad:c7:6a:4e:3d:13:1c: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.208.0/20 62.75.130.0/24 62.75.136.0/24 62.75.167.0/24 62.75.179.0/24 62.75.181.0-62.75.183.255 62.75.194.0-62.75.198.255 62.75.201.0-62.75.204.255 62.75.207.0/24 62.75.213.0-62.75.224.255 62.75.228.0-62.75.230.255 62.75.232.0-62.75.238.255 62.75.252.0/22 62.138.0.0/22 62.138.5.0-62.138.8.255 62.138.10.0-62.138.12.255 62.138.14.0/24 62.138.16.0/24 62.138.18.0/23 62.138.24.0/24 62.138.26.0/24 78.138.96.0-78.138.107.255 78.138.118.0/24 78.138.126.0/23 80.86.81.0-80.86.87.255 80.86.90.0-80.86.95.255 85.25.1.0/24 85.25.8.0/21 85.25.20.0/24 85.25.27.0/24 85.25.40.0-85.25.64.255 85.25.66.0-85.25.68.255 85.25.71.0-85.25.79.255 85.25.92.0/22 85.25.98.0-85.25.100.255 85.25.102.0-85.25.110.255 85.25.116.0-85.25.120.255 85.25.122.0-85.25.157.255 85.25.159.0-85.25.160.255 85.25.172.0-85.25.174.255 85.25.176.0-85.25.203.255 85.25.206.0-85.25.211.255 85.25.213.0-85.25.220.255 85.25.222.0/23 85.25.226.0/23 85.25.232.0/23 85.25.235.0-85.25.239.255 85.25.242.0-85.25.244.255 85.25.246.0/24 85.25.248.0/21 85.93.88.0-85.93.93.255 85.195.64.0/18 87.119.195.0/24 87.119.220.0/22 92.42.104.0/21 92.204.40.0/23 92.204.53.0-92.204.54.255 92.204.96.0/20 92.204.160.0-92.204.207.255 92.204.240.0/20 92.205.32.0/21 92.205.112.0/20 92.205.152.0/22 134.119.176.0-134.119.223.255 146.0.224.0/19 151.106.0.0/19 151.106.48.0/20 185.19.216.0/22 185.136.156.0-185.136.171.255 188.138.0.0-188.138.11.255 188.138.16.0/22 188.138.24.0-188.138.47.255 188.138.56.0/21 188.138.68.0-188.138.79.255 188.138.81.0-188.138.127.255 195.69.240.0/22 217.118.19.0/24 217.118.23.0-217.118.24.255 217.118.26.0/23 217.172.170.0-217.172.172.255 217.172.176.0-217.172.190.255 IPv6: 2a01:7a0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29066 Signature Algorithm: sha256WithRSAEncryption 53:ca:6c:70:b1:cd:c9:41:05:4c:e2:71:b1:c4:6b:87:1f:7d: 2c:81:e4:55:01:e8:db:ae:a8:89:5f:d3:e5:f1:26:18:e9:13: 49:07:fb:5c:26:cb:36:f2:aa:37:18:ce:af:d5:e6:f6:a6:ef: 97:ba:c4:fd:e7:e0:a1:d7:17:8f:df:b2:3e:60:d1:32:a9:e0: dc:aa:29:99:e3:84:7b:da:48:15:8c:13:d4:1e:e0:24:47:2c: 98:d7:38:64:7b:1f:4b:cc:52:40:05:31:a5:94:e6:19:2e:80: 8f:62:6f:d3:9f:c2:16:f0:27:2e:3a:0b:0d:0b:13:6e:f0:3b: 1d:cd:5f:96:7c:73:b3:71:b6:b3:ae:f9:2e:6f:85:54:2d:76: c4:57:b5:4d:13:89:85:c3:13:b7:8e:1c:62:be:e1:43:ea:33: 9e:c1:d5:fc:eb:61:92:c0:c8:ab:87:4a:ea:2e:de:43:30:d0: 58:85:2c:df:89:2d:ea:6d:29:6c:f1:c6:e9:24:38:5a:8c:0b: 4f:a0:ed:76:ce:ab:20:f5:55:a7:e6:a8:f6:b3:67:3d:e9:90: 1e:5e:ff:dd:e9:06:94:89:e2:57:85:f9:2d:70:29:43:98:ab: 00:7c:2d:96:50:d6:5a:ce:b2:61:63:62:46:8b:48:ea:cf:d7: eb:1f:7d:7d -----BEGIN CERTIFICATE----- MIIIszCCB5ugAwIBAgISAZt4orTLNoo1LGc1FvmwaYxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGU0OTE4ZmM3ZmRmYjczYmJhOGNmNThkNGNiNWZlNDQ5Y2Y4M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK39OcRCQbldcoFBgdraGoiohmLr se13Cx7IJE1GYSn8RXCEDrSkMw2uNvxZI7qlRLz4HN2wSLxLZZF2fKxebhccy0KA uxSmEXqPAGM/YpBiAfwgkWi3m2E+BRAB8GuNLnPlWaV3Q7gH7xCughSiUk0/ImEL it2/MxlouDtTqehSe2x+su8KOz+xNaUQrPpp3rXCcFpx/eQ5xa694ToNhbCPhmsF 4OBM+Bf1fWCcmO0UEhhAuJ32wQ5cFNcWCzwKenf18U9PJBlBV+nNRpdIaa7TpM0X xnSQnnvbTAyB5IKWUQ+MFZpElZD1WJM2dsrh2CYcm/yQCq3Hak49Exyn+wIDAQAB o4IFvzCCBbswHQYDVR0OBBYEFKjkkY/H/ftzu6jPWNTLX+RJz4P2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzE4NWVi My0yYWIyLTQ1YjUtYWEzMy0wMTVlYTUwMTk1MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMTg1ZWIz LTJhYjItNDViNS1hYTMzLTAxNWVhNTAxOTUyMC8xL3FPU1JqOGY5LTNPN3FNOVkx TXRmNUVuUGdfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDPQYIKwYB BQUHAQcBAf8EggMsMIIDKDCCAxUEAgABMIIDDQMEBCU90AMEAD5LggMEAD5LiAME AD5LpwMEAD5LszAMAwQAPku1AwQDPkuwMAwDBAE+S8IDBAA+S8YwDAMEAD5LyQME AD5LzAMEAD5LzzAMAwQAPkvVAwQAPkvgMAwDBAI+S+QDBAA+S+YwDAMEAz5L6AME AD5L7gMEAj5L/AMEAj6KADAMAwQAPooFAwQAPooIMAwDBAE+igoDBAA+igwDBAA+ ig4DBAA+ihADBAE+ihIDBAA+ihgDBAA+ihowDAMEBU6KYAMEAk6KaAMEAE6KdgME AU6KfjAMAwQAUFZRAwQDUFZQMAwDBAFQVloDBAVQVkADBABVGQEDBANVGQgDBABV GRQDBABVGRswDAMEA1UZKAMEAFUZQDAMAwQBVRlCAwQAVRlEMAwDBABVGUcDBARV GUADBAJVGVwwDAMEAVUZYgMEAFUZZDAMAwQBVRlmAwQAVRluMAwDBAJVGXQDBABV GXgwDAMEAVUZegMEAVUZnDAMAwQAVRmfAwQAVRmgMAwDBAJVGawDBABVGa4wDAME BFUZsAMEAlUZyDAMAwQBVRnOAwQCVRnQMAwDBABVGdUDBABVGdwDBAFVGd4DBAFV GeIDBAFVGegwDAMEAFUZ6wMEBFUZ4DAMAwQBVRnyAwQAVRn0AwQAVRn2AwQDVRn4 MAwDBANVXVgDBAFVXVwDBAZVw0ADBABXd8MDBAJXd9wDBANcKmgDBAFczCgwDAME AFzMNQMEAFzMNgMEBFzMYDAMAwQFXMygAwQEXMzAAwQEXMzwAwQDXM0gAwQEXM1w AwQCXM2YMAwDBASGd7ADBAWGd8ADBAWSAOADBAWXagADBASXajADBAK5E9gwDAME ArmInAMEArmIqDALAwMBvIoDBAK8iggDBAK8ihAwDAMEA7yKGAMEBLyKIAMEA7yK ODAMAwQCvIpEAwQEvIpAMAwDBAC8ilEDBAe8igADBALDRfADBADZdhMwDAMEANl2 FwMEANl2GAMEAdl2GjAMAwQB2ayqAwQA2aysMAwDBATZrLADBADZrL4wDQQCAAIw BwMFAyoBB6AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICcYowDQYJKoZIhvcNAQEL BQADggEBAFPKbHCxzclBBUzicbHEa4cffSyB5FUB6NuuqIlf0+XxJhjpE0kH+1wm yzbyqjcYzq/V5vam75e6xP3n4KHXF4/fsj5g0TKp4NyqKZnjhHvaSBWME9Qe4CRH LJjXOGR7H0vMUkAFMaWU5hkugI9ib9OfwhbwJy46Cw0LE27wOx3NX5Z8c7NxtrOu +S5vhVQtdsRXtU0TiYXDE7eOHGK+4UPqM57B1fzrYZLAyKuHSuou3kMw0FiFLN+J LeptKWzxxukkOFqMC0+g7XbOqyD1VafmqPazZz3pkB5e/93pBpSJ4leF+S1wKUOY qwB8LZZQ1lrOsmFjYkaLSOrP1+sffX0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:20 2026 by rpki-client