This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer (raw, json) Hash identifier: jydEd2mahP09GJYesRx21tr7LPPyaBc44WW6156EK94= Subject key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAAAC325324A8DED60B57CA6CA4A6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57218 AS: 62140 IP: 5.62.192.0/18 IP: 5.72.0.0/15 IP: 5.134.128.0/18 IP: 5.200.96.0/19 IP: 37.44.56.0/21 IP: 37.137.0.0/16 IP: 37.153.176.0/20 IP: 37.156.48.0/20 IP: 37.156.152.0/21 IP: 77.81.192.0/19 IP: 89.32.0.0/19 IP: 89.32.96.0/20 IP: 89.34.32.0/19 IP: 89.34.128.0/19 IP: 89.41.192.0/19 IP: 89.47.64.0/20 IP: 89.47.128.0/19 IP: 91.229.214.0/23 IP: 92.114.64.0/20 IP: 93.114.16.0/20 IP: 94.24.0.0 -- 94.24.23.255 IP: 94.24.80.0 -- 94.24.103.255 IP: 95.162.0.0/16 IP: 185.24.136.0/22 IP: 185.24.228.0/22 IP: 188.208.64.0/19 IP: 188.208.144.0 -- 188.208.191.255 IP: 188.208.224.0/19 IP: 188.214.4.0/22 IP: 188.214.84.0/22 IP: 188.215.24.0/22 IP: 188.215.88.0/22 IP: 213.195.32.0 -- 213.195.51.255 IP: 2a03:ef40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:aa:c3:25:32:4a:8d:ed:60:b5:7c:a6:ca:4a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:d2:19:9d:99:20:0f:6e:85:52:c1:0d:55: 3b:14:83:a4:a8:db:93:98:da:10:68:5a:7f:26:73: aa:c1:55:ba:57:e3:b3:71:68:21:e5:41:60:50:49: 65:c6:61:c0:2d:4f:d7:4d:48:e0:c6:7f:0d:23:c0: 6d:5f:21:e1:12:05:26:4a:ab:9d:dd:cb:d1:39:bb: 37:47:9d:6b:78:f2:b0:98:9d:14:e2:f7:05:83:32: 22:c8:75:bd:7c:ff:fa:cf:05:a8:0c:f4:03:e1:6a: 2e:cb:69:79:af:68:1c:83:88:61:a5:59:a8:98:be: c9:9d:ac:98:96:69:71:12:28:8b:02:f7:78:93:8d: e2:1b:5b:53:e8:69:f3:c5:b0:11:21:3d:f4:8a:ac: cd:12:7b:ca:1f:6b:d1:14:0d:84:94:33:f2:5c:45: dc:6a:50:06:b3:01:ba:ad:02:58:3c:a1:4c:eb:ff: 5e:7e:4d:4d:0e:ed:ac:0c:34:5b:04:0c:f5:66:d6: 31:e8:f4:77:d1:01:f8:7f:0e:84:f7:d3:26:f2:df: 88:b4:15:7a:53:92:4a:18:49:c9:ef:96:9f:0a:8e: 0d:75:88:1c:94:b9:9a:7d:d3:f7:52:8d:c0:4c:8b: a6:5c:e7:4f:7b:30:f8:ff:f4:80:fd:5c:be:a5:f6: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.192.0/18 5.72.0.0/15 5.134.128.0/18 5.200.96.0/19 37.44.56.0/21 37.137.0.0/16 37.153.176.0/20 37.156.48.0/20 37.156.152.0/21 77.81.192.0/19 89.32.0.0/19 89.32.96.0/20 89.34.32.0/19 89.34.128.0/19 89.41.192.0/19 89.47.64.0/20 89.47.128.0/19 91.229.214.0/23 92.114.64.0/20 93.114.16.0/20 94.24.0.0-94.24.23.255 94.24.80.0-94.24.103.255 95.162.0.0/16 185.24.136.0/22 185.24.228.0/22 188.208.64.0/19 188.208.144.0-188.208.191.255 188.208.224.0/19 188.214.4.0/22 188.214.84.0/22 188.215.24.0/22 188.215.88.0/22 213.195.32.0-213.195.51.255 IPv6: 2a03:ef40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57218 62140 Signature Algorithm: sha256WithRSAEncryption 70:50:4b:c8:e4:cf:9d:70:96:c8:d7:c8:47:2a:71:80:ab:7a: 64:f9:91:a7:02:9a:fa:a1:7a:99:ad:7b:d8:ab:29:c5:58:ba: a5:dd:69:b4:b3:12:ed:da:02:ca:3d:cb:f1:d3:59:5a:63:de: bb:99:91:52:58:5d:12:ff:91:13:26:57:d8:e4:89:78:61:43: c3:02:55:4d:f6:ac:46:a0:8d:9b:15:2c:74:b2:2a:ca:06:85: b8:2f:6f:d1:3c:d7:91:94:1f:8e:f1:b5:1a:da:6f:40:25:e0: c4:45:e4:9a:90:5a:87:7b:0b:41:03:42:32:42:f9:cd:a6:9f: 83:3c:41:97:d0:c4:a9:84:3f:d7:bd:2b:0f:32:77:91:41:4b: 6d:c0:17:ac:43:30:56:52:c7:bb:89:bf:3a:25:df:a2:94:c2: 76:4f:ea:4e:ab:cf:2f:00:eb:a8:a6:c4:e3:0c:2d:0b:4a:55: 81:38:73:ab:2a:aa:6c:92:3e:9c:b3:25:39:e2:c0:ba:58:8c: 21:fe:78:ac:69:30:fe:15:7b:cf:de:ce:c8:76:62:68:06:11: 67:47:1f:7e:4b:90:02:0e:0c:23:56:83:ee:6e:12:e0:f6:67: ea:6f:91:fc:2b:9b:04:2e:2a:6b:13:90:69:2f:b3:81:72:37: 7a:8f:d0:eb -----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgISAZt9yqrDJTJKje1gtXymykpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzY3YzkzYjgyMjVkMDRjMzc2MWMxM2NlZmVlNWY4MzI5MzU4ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2vSGZ2ZIA9uhVLBDVU7FIOkqNuT mNoQaFp/JnOqwVW6V+OzcWgh5UFgUEllxmHALU/XTUjgxn8NI8BtXyHhEgUmSqud 3cvRObs3R51rePKwmJ0U4vcFgzIiyHW9fP/6zwWoDPQD4Wouy2l5r2gcg4hhpVmo mL7JnayYlmlxEiiLAvd4k43iG1tT6GnzxbARIT30iqzNEnvKH2vRFA2ElDPyXEXc alAGswG6rQJYPKFM6/9efk1NDu2sDDRbBAz1ZtYx6PR30QH4fw6E99Mm8t+ItBV6 U5JKGEnJ75afCo4NdYgclLmafdP3Uo3ATIumXOdPezD4//SA/Vy+pfYTFQIDAQAB o4IDljCCA5IwHQYDVR0OBBYEFKxnyTuCJdBMN2HBPO/uX4MpNY4jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2FjOGU2 Zi01ZjgzLTQ0OWItOGM5ZC03N2MxMDQ4NDIyZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYWM4ZTZm LTVmODMtNDQ5Yi04YzlkLTc3YzEwNDg0MjJkOC8xL3JHZkpPNElsMEV3M1ljRTg3 LTVmZ3lrMWppTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBDgYIKwYB BQUHAQcBAf8Egf4wgfswgekEAgABMIHiAwQGBT7AAwMBBUgDBAYFhoADBAUFyGAD BAMlLDgDAwAliQMEBCWZsAMEBCWcMAMEAyWcmAMEBU1RwAMEBVkgAAMEBFkgYAME BVkiIAMEBVkigAMEBVkpwAMEBFkvQAMEBVkvgAMEAVvl1gMEBFxyQAMEBF1yEDAL AwMDXhgDBANeGBAwDAMEBF4YUAMEA14YYAMDAF+iAwQCuRiIAwQCuRjkAwQFvNBA MAwDBAS80JADBAa80IADBAW80OADBAK81gQDBAK81lQDBAK81xgDBAK811gwDAME BdXDIAMEAtXDMDANBAIAAjAHAwUDKgPvQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMA34ICAwDyvDANBgkqhkiG9w0BAQsFAAOCAQEAcFBLyOTPnXCWyNfIRypxgKt6 ZPmRpwKa+qF6ma172KspxVi6pd1ptLMS7doCyj3L8dNZWmPeu5mRUlhdEv+REyZX 2OSJeGFDwwJVTfasRqCNmxUsdLIqygaFuC9v0TzXkZQfjvG1GtpvQCXgxEXkmpBa h3sLQQNCMkL5zaafgzxBl9DEqYQ/170rDzJ3kUFLbcAXrEMwVlLHu4m/OiXfopTC dk/qTqvPLwDrqKbE4wwtC0pVgThzqyqqbJI+nLMlOeLAuliMIf54rGkw/hV7z97O yHZiaAYRZ0cffkuQAg4MI1aD7m4S4PZn6m+R/CubBC4qaxOQaS+zgXI3eo/Q6w== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:33 2026 by rpki-client