This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer File: sSZ6Uay2bymRvqUkP-OIBolxofE.cer (raw, json) Hash identifier: fUS6YTaLM0ArLlGJtQPCEQvnFSse2DCtbWnv2NfgWSY= Subject key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C130B2627F8B6AB8A9FE7F26D1DFD09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47764 AS: 49797 AS: 57973 AS: 60863 AS: 199295 AS: 207970 AS: 211963 AS: 213235 IP: 5.61.232.0/21 IP: 5.181.60.0/22 IP: 5.188.140.0/22 IP: 37.139.32.0/22 IP: 37.139.40.0/22 IP: 45.84.128.0/22 IP: 62.217.160.0/20 IP: 79.137.174.0/23 IP: 79.137.240.0/21 IP: 83.166.232.0/21 IP: 83.166.248.0/21 IP: 83.217.216.0/22 IP: 84.23.52.0/22 IP: 85.192.32.0/22 IP: 87.239.104.0/21 IP: 89.208.84.0/22 IP: 89.208.196.0/22 IP: 89.208.208.0/22 IP: 89.208.216.0/21 IP: 89.208.228.0/22 IP: 89.221.228.0 -- 89.221.239.255 IP: 90.156.148.0/22 IP: 90.156.212.0 -- 90.156.219.255 IP: 90.156.232.0/21 IP: 90.156.248.0/22 IP: 91.231.132.0/22 IP: 91.237.76.0/24 IP: 94.100.176.0/20 IP: 94.139.244.0/22 IP: 95.163.32.0/19 IP: 95.163.180.0/22 IP: 95.163.208.0 -- 95.163.219.255 IP: 95.163.248.0/21 IP: 109.120.180.0/22 IP: 109.120.188.0/22 IP: 128.140.168.0/21 IP: 130.49.224.0/19 IP: 146.185.208.0/22 IP: 146.185.240.0/22 IP: 155.212.192.0/20 IP: 176.112.168.0/21 IP: 178.22.88.0/21 IP: 178.237.16.0/20 IP: 185.5.136.0/22 IP: 185.6.244.0/22 IP: 185.86.144.0/22 IP: 185.130.112.0/22 IP: 185.131.68.0/22 IP: 185.180.200.0/22 IP: 185.187.63.0/24 IP: 185.241.192.0/22 IP: 188.93.56.0/21 IP: 195.211.20.0/22 IP: 213.219.212.0/22 IP: 217.69.128.0/20 IP: 2a00:1148::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0b:26:27:f8:b6:ab:8a:9f:e7:f2:6d:1d:fd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1267a51acb66f2991bea5243fe388068971a1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:58:37:0f:74:8e:08:25:f6:04:d1:b2:96: 6c:44:7c:22:f6:57:df:4b:33:62:54:a1:34:a2:0d: 72:3b:55:1e:01:98:dc:b2:dd:c2:32:ef:58:63:76: b3:2e:f8:2c:90:30:89:9a:ee:0f:00:c2:35:eb:6a: ba:5f:9a:4f:27:9c:28:2a:45:b5:9f:1b:d4:97:bc: 56:d1:8e:89:52:7e:e0:e0:82:e5:87:a8:5a:2e:91: b8:8c:3d:09:b8:90:6c:7a:ef:0b:dc:d4:01:90:23: 54:24:19:c8:58:a5:41:1f:e1:52:7b:7e:ce:b0:6f: 57:74:f4:d9:6d:a0:30:23:2a:22:dc:92:b0:8a:3f: 97:a7:6f:98:ea:c2:a7:e2:b3:67:83:aa:ba:a6:a6: 50:00:10:c8:24:b1:22:68:db:f7:63:a0:19:e9:ac: 81:62:ca:97:ff:ef:54:18:2a:e8:b1:bd:6c:99:08: 21:a2:a8:e4:f5:8a:d9:fe:44:11:b2:32:08:22:49: c2:0f:7f:6d:d4:42:7c:22:bf:4b:53:74:7c:41:e5: 87:c1:31:51:1f:d5:89:03:9c:73:6d:5f:01:69:44: 20:d8:a7:e4:7e:c4:fa:b5:10:71:17:35:a4:d8:69: db:46:fa:c3:60:e4:04:b0:7b:e0:82:8e:e9:25:04: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.232.0/21 5.181.60.0/22 5.188.140.0/22 37.139.32.0/22 37.139.40.0/22 45.84.128.0/22 62.217.160.0/20 79.137.174.0/23 79.137.240.0/21 83.166.232.0/21 83.166.248.0/21 83.217.216.0/22 84.23.52.0/22 85.192.32.0/22 87.239.104.0/21 89.208.84.0/22 89.208.196.0/22 89.208.208.0/22 89.208.216.0/21 89.208.228.0/22 89.221.228.0-89.221.239.255 90.156.148.0/22 90.156.212.0-90.156.219.255 90.156.232.0/21 90.156.248.0/22 91.231.132.0/22 91.237.76.0/24 94.100.176.0/20 94.139.244.0/22 95.163.32.0/19 95.163.180.0/22 95.163.208.0-95.163.219.255 95.163.248.0/21 109.120.180.0/22 109.120.188.0/22 128.140.168.0/21 130.49.224.0/19 146.185.208.0/22 146.185.240.0/22 155.212.192.0/20 176.112.168.0/21 178.22.88.0/21 178.237.16.0/20 185.5.136.0/22 185.6.244.0/22 185.86.144.0/22 185.130.112.0/22 185.131.68.0/22 185.180.200.0/22 185.187.63.0/24 185.241.192.0/22 188.93.56.0/21 195.211.20.0/22 213.219.212.0/22 217.69.128.0/20 IPv6: 2a00:1148::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47764 49797 57973 60863 199295 207970 211963 213235 Signature Algorithm: sha256WithRSAEncryption 25:f7:e4:d8:46:5e:0d:9a:95:07:31:05:19:4c:16:b0:2d:ce: d8:42:77:bb:af:34:de:7b:71:42:0d:35:fb:4a:ab:c3:2f:fb: d9:00:2d:a6:56:b6:11:6d:a9:a1:f6:82:e0:f9:f7:6a:ce:70: 5f:d0:84:74:d5:d5:21:1c:6a:93:ec:34:a6:3c:e4:e9:e6:55: 68:72:6d:65:f8:6d:eb:12:71:d0:b9:d7:01:19:c0:34:de:8e: 57:3a:91:9f:3a:4c:36:cd:b1:36:99:8a:fb:cb:04:9f:dc:d7: a2:cf:2b:7d:26:a1:f0:b8:ba:9f:26:c6:13:43:88:45:7e:ca: 00:0c:fb:5e:56:8e:44:ff:1a:6a:95:f7:9f:5f:e7:2c:c8:ff: d1:8e:8d:e6:2a:a2:14:39:d6:42:e3:a9:74:39:f1:24:4b:92: 5b:7d:38:d2:3a:4f:b3:54:7d:10:ea:ed:aa:4f:a5:36:b4:d7: 00:b7:01:13:13:23:47:46:81:13:4b:69:ff:42:91:50:6f:d3: eb:e0:3e:5b:4f:51:f9:85:6f:22:2d:a8:bb:d1:b0:a0:c1:b4: c5:4a:ef:79:01:8d:64:e5:60:ed:89:d2:33:33:83:58:03:85: 25:9c:a1:b1:c2:c6:e1:0c:b4:60:18:73:b4:45:1f:75:bb:76: c4:18:81:31 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgISAZt8EwsmJ/i2q4qf5/JtHf0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTI2N2E1MWFjYjY2ZjI5OTFiZWE1MjQzZmUzODgwNjg5NzFhMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KJYNw90jggl9gTRspZsRHwi9lff SzNiVKE0og1yO1UeAZjcst3CMu9YY3azLvgskDCJmu4PAMI162q6X5pPJ5woKkW1 nxvUl7xW0Y6JUn7g4ILlh6haLpG4jD0JuJBseu8L3NQBkCNUJBnIWKVBH+FSe37O sG9XdPTZbaAwIyoi3JKwij+Xp2+Y6sKn4rNng6q6pqZQABDIJLEiaNv3Y6AZ6ayB YsqX/+9UGCrosb1smQghoqjk9YrZ/kQRsjIIIknCD39t1EJ8Ir9LU3R8QeWHwTFR H9WJA5xzbV8BaUQg2KfkfsT6tRBxFzWk2GnbRvrDYOQEsHvggo7pJQQjnwIDAQAB o4IEODCCBDQwHQYDVR0OBBYEFLEmelGstm8pkb6lJD/jiAaJcaHxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2Q3NGNh Mi0zZGU2LTRiNjktYTAwMC05NGQxYjg5ZjhjYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvZDc0Y2Ey LTNkZTYtNGI2OS1hMDAwLTk0ZDFiODlmOGNiMi8xL3NTWjZVYXkyYnltUnZxVWtQ LU9JQm9seG9mRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBkgYIKwYB BQUHAQcBAf8EggGBMIIBfTCCAWoEAgABMIIBYgMEAwU96AMEAgW1PAMEAgW8jAME AiWLIAMEAiWLKAMEAi1UgAMEBD7ZoAMEAU+JrgMEA0+J8AMEA1Om6AMEA1Om+AME AlPZ2AMEAlQXNAMEAlXAIAMEA1fvaAMEAlnQVAMEAlnQxAMEAlnQ0AMEA1nQ2AME AlnQ5DAMAwQCWd3kAwQEWd3gAwQCWpyUMAwDBAJanNQDBAJanNgDBANanOgDBAJa nPgDBAJb54QDBABb7UwDBAReZLADBAJei/QDBAVfoyADBAJfo7QwDAMEBF+j0AME Al+j2AMEA1+j+AMEAm14tAMEAm14vAMEA4CMqAMEBYIx4AMEApK50AMEApK58AME BJvUwAMEA7BwqAMEA7IWWAMEBLLtEAMEArkFiAMEArkG9AMEArlWkAMEArmCcAME ArmDRAMEArm0yAMEALm7PwMEArnxwAMEA7xdOAMEAsPTFAMEAtXb1AMEBNlFgDAN BAIAAjAHAwUDKgARSDA9BggrBgEFBQcBCAEB/wQuMCygKjAoAgMAupQCAwDChQID AOJ1AgMA7b8CAwMKfwIDAyxiAgMDO/sCAwNA8zANBgkqhkiG9w0BAQsFAAOCAQEA Jffk2EZeDZqVBzEFGUwWsC3O2EJ3u6803ntxQg01+0qrwy/72QAtpla2EW2pofaC 4Pn3as5wX9CEdNXVIRxqk+w0pjzk6eZVaHJtZfht6xJx0LnXARnANN6OVzqRnzpM Ns2xNpmK+8sEn9zXos8rfSah8Li6nybGE0OIRX7KAAz7XlaORP8aapX3n1/nLMj/ 0Y6N5iqiFDnWQuOpdDnxJEuSW3040jpPs1R9EOrtqk+lNrTXALcBExMjR0aBE0tp /0KRUG/T6+A+W09R+YVvIi2ou9GwoMG0xUrveQGNZOVg7YnSMzODWAOFJZyhscLG 4Qy0YBhztEUfdbt2xBiBMQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:35:24 2026 by rpki-client