This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer File: sVUAnD3kIcxOZ7mprkI7s13guSY.cer (raw, json) Hash identifier: ENUR2hS+oSpLhHCGaNpQCNZXx+dXcYl7J68uY0m0pjQ= Subject key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5382ECAE14BD572BE3F304B37EDFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60262 IP: 45.83.188.0/22 IP: 45.83.204.0/22 IP: 45.84.212.0 -- 45.84.219.255 IP: 45.85.88.0/22 IP: 45.85.124.0/22 IP: 45.85.224.0/22 IP: 45.86.200.0/22 IP: 45.86.248.0/22 IP: 45.87.20.0/22 IP: 45.87.28.0/22 IP: 45.88.120.0/22 IP: 45.88.244.0/22 IP: 45.91.20.0/22 IP: 45.91.132.0/22 IP: 45.92.4.0/22 IP: 45.92.88.0/22 IP: 45.92.228.0/22 IP: 45.92.248.0/22 IP: 45.93.164.0/22 IP: 45.94.28.0/22 IP: 45.94.200.0/22 IP: 45.95.176.0/22 IP: 45.95.240.0/22 IP: 45.128.196.0/22 IP: 45.129.232.0/22 IP: 45.130.116.0/22 IP: 45.130.136.0/21 IP: 45.131.4.0/22 IP: 45.131.60.0/22 IP: 45.131.208.0/22 IP: 45.132.192.0/22 IP: 45.133.252.0/22 IP: 45.134.220.0/22 IP: 45.135.4.0/22 IP: 45.136.72.0/22 IP: 45.136.252.0/22 IP: 45.137.88.0/22 IP: 45.137.100.0/22 IP: 45.137.196.0/22 IP: 45.137.204.0/22 IP: 45.138.16.0/22 IP: 45.138.52.0/22 IP: 45.139.48.0/22 IP: 45.139.160.0/21 IP: 45.139.172.0/22 IP: 45.139.252.0/22 IP: 45.140.140.0/22 IP: 45.140.188.0/22 IP: 45.140.212.0/22 IP: 45.142.16.0/22 IP: 45.142.144.0/22 IP: 45.142.204.0/22 IP: 45.143.192.0/22 IP: 45.144.156.0/22 IP: 45.144.164.0/22 IP: 45.144.188.0/22 IP: 45.144.216.0/22 IP: 45.145.248.0/22 IP: 45.146.52.0 -- 45.146.59.255 IP: 45.148.24.0/22 IP: 45.148.96.0/22 IP: 45.149.0.0/22 IP: 45.149.104.0/22 IP: 45.149.192.0/22 IP: 45.150.92.0/22 IP: 45.154.136.0/22 IP: 45.157.96.0/22 IP: 45.157.112.0/22 IP: 45.159.244.0/22 IP: 89.36.36.0/24 IP: 89.38.38.0/24 IP: 89.46.46.0/24 IP: 89.251.0.0/22 IP: 91.206.168.0/23 IP: 93.185.160.0/22 IP: 136.144.16.0/22 IP: 136.144.24.0/22 IP: 136.144.32.0/22 IP: 136.144.40.0/21 IP: 176.110.110.0/24 IP: 185.51.192.0/22 IP: 185.114.60.0/22 IP: 185.227.32.0/22 IP: 185.243.244.0/22 IP: 188.208.38.0/23 IP: 193.36.224.0/23 IP: 193.37.32.0/23 IP: 193.37.248.0/23 IP: 193.176.210.0/23 IP: 193.176.244.0/23 IP: 194.5.48.0/23 IP: 194.5.52.0/23 IP: 194.34.172.0/23 IP: 2a01:b2e0::/29 IP: 2a06:6ec0::/29 IP: 2a07:e340::/29 IP: 2a0e:6c40::/29 IP: 2a0e:8780::/29 IP: 2a0e:a280::/29 IP: 2a0e:a3c0::/29 IP: 2a0e:a580::/29 IP: 2a0e:bac0::/29 IP: 2a0e:be80::/29 IP: 2a0e:c180::/29 IP: 2a0e:c740::/29 IP: 2a0e:ee80::/29 IP: 2a0f:9c0::/29 IP: 2a0f:a40::/29 IP: 2a0f:f40::/29 IP: 2a0f:fc0::/29 IP: 2a0f:11c0::/29 IP: 2a0f:15c0::/29 IP: 2a0f:2740::/29 IP: 2a0f:32c0::/29 IP: 2a0f:3340::/29 IP: 2a0f:33c0::/29 IP: 2a0f:3440::/29 IP: 2a0f:34c0::/29 IP: 2a0f:e380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:38:2e:ca:e1:4b:d5:72:be:3f:30:4b:37:ed:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:61:e7:3e:21:85:fe:37:0a:57:02:47:ce: 0f:2a:e4:ac:4b:d5:b3:40:86:74:0d:79:4b:1f:03: 17:43:54:5c:3d:44:a9:7f:67:df:32:92:ac:a8:00: 69:bd:7e:07:81:8f:d2:03:88:ea:7b:b7:9c:08:db: de:46:c3:7b:e5:72:0a:6d:c3:49:21:d3:df:cf:0c: 8e:13:79:fd:29:20:4b:89:3f:a2:9b:7a:26:36:4f: e0:8a:5c:be:df:d6:1a:ef:7d:09:b7:07:42:6e:f5: cb:77:fe:78:1d:c7:4f:32:1a:99:82:63:39:f5:e2: 4e:4f:07:3a:91:51:9e:89:87:11:94:a2:34:34:98: d6:24:93:9e:50:3e:b1:4a:59:9f:65:36:b3:b5:0f: 36:c9:0d:de:75:93:70:66:ee:87:b3:14:6f:a4:71: be:4a:cd:fe:51:b7:26:e8:b3:7c:e5:79:b4:51:58: 30:16:c6:20:e4:93:2e:4e:18:d5:2f:9e:83:04:19: 95:d9:ce:93:a0:6a:37:bd:4b:7b:2f:4f:2a:ef:be: 0a:e0:19:f9:d9:83:d2:4a:68:5c:eb:14:fd:21:7a: f7:9b:52:4f:01:7b:7b:07:52:f1:54:cc:20:db:00: 9b:0e:48:61:81:7f:45:9a:32:47:a9:a8:62:1a:c5: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.188.0/22 45.83.204.0/22 45.84.212.0-45.84.219.255 45.85.88.0/22 45.85.124.0/22 45.85.224.0/22 45.86.200.0/22 45.86.248.0/22 45.87.20.0/22 45.87.28.0/22 45.88.120.0/22 45.88.244.0/22 45.91.20.0/22 45.91.132.0/22 45.92.4.0/22 45.92.88.0/22 45.92.228.0/22 45.92.248.0/22 45.93.164.0/22 45.94.28.0/22 45.94.200.0/22 45.95.176.0/22 45.95.240.0/22 45.128.196.0/22 45.129.232.0/22 45.130.116.0/22 45.130.136.0/21 45.131.4.0/22 45.131.60.0/22 45.131.208.0/22 45.132.192.0/22 45.133.252.0/22 45.134.220.0/22 45.135.4.0/22 45.136.72.0/22 45.136.252.0/22 45.137.88.0/22 45.137.100.0/22 45.137.196.0/22 45.137.204.0/22 45.138.16.0/22 45.138.52.0/22 45.139.48.0/22 45.139.160.0/21 45.139.172.0/22 45.139.252.0/22 45.140.140.0/22 45.140.188.0/22 45.140.212.0/22 45.142.16.0/22 45.142.144.0/22 45.142.204.0/22 45.143.192.0/22 45.144.156.0/22 45.144.164.0/22 45.144.188.0/22 45.144.216.0/22 45.145.248.0/22 45.146.52.0-45.146.59.255 45.148.24.0/22 45.148.96.0/22 45.149.0.0/22 45.149.104.0/22 45.149.192.0/22 45.150.92.0/22 45.154.136.0/22 45.157.96.0/22 45.157.112.0/22 45.159.244.0/22 89.36.36.0/24 89.38.38.0/24 89.46.46.0/24 89.251.0.0/22 91.206.168.0/23 93.185.160.0/22 136.144.16.0/22 136.144.24.0/22 136.144.32.0/22 136.144.40.0/21 176.110.110.0/24 185.51.192.0/22 185.114.60.0/22 185.227.32.0/22 185.243.244.0/22 188.208.38.0/23 193.36.224.0/23 193.37.32.0/23 193.37.248.0/23 193.176.210.0/23 193.176.244.0/23 194.5.48.0/23 194.5.52.0/23 194.34.172.0/23 IPv6: 2a01:b2e0::/29 2a06:6ec0::/29 2a07:e340::/29 2a0e:6c40::/29 2a0e:8780::/29 2a0e:a280::/29 2a0e:a3c0::/29 2a0e:a580::/29 2a0e:bac0::/29 2a0e:be80::/29 2a0e:c180::/29 2a0e:c740::/29 2a0e:ee80::/29 2a0f:9c0::/29 2a0f:a40::/29 2a0f:f40::/29 2a0f:fc0::/29 2a0f:11c0::/29 2a0f:15c0::/29 2a0f:2740::/29 2a0f:32c0::/29 2a0f:3340::/29 2a0f:33c0::/29 2a0f:3440::/29 2a0f:34c0::/29 2a0f:e380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60262 Signature Algorithm: sha256WithRSAEncryption 20:a8:d1:56:76:9c:7c:70:06:f5:b1:e1:74:99:3a:5a:9d:47: 5d:ef:61:dc:62:59:4c:7f:c4:d6:4e:5f:50:46:2d:7e:a9:6a: 6d:f6:40:bb:d8:7d:07:75:58:3d:ac:fe:9c:2f:f8:52:9e:2a: 4e:40:0e:17:19:7e:44:2d:67:95:58:e5:b5:ff:fb:40:52:6e: 93:ef:33:33:f7:6d:fc:12:47:60:b1:f1:36:81:ce:e9:07:bb: 8e:a5:e2:53:14:91:bf:77:55:69:04:7f:a1:6b:ff:34:42:03: 9e:0d:ec:66:79:e5:ef:ea:09:f4:e5:46:b4:93:55:25:d2:5c: 4f:5b:eb:88:d9:63:d5:98:5b:67:fe:f1:9f:f5:8f:bd:54:29: a2:cd:d3:19:b0:b9:16:0a:d1:f0:59:c5:92:88:2b:1b:f8:52: fa:a1:7b:1f:8b:9f:9c:a8:7f:28:8d:36:c2:20:6d:ec:9b:3d: 87:08:94:bf:3b:49:2d:89:3b:65:57:66:4b:98:35:b0:b5:6b: 99:3e:c4:46:7f:f6:62:af:d5:60:c1:18:19:f6:fd:3d:14:23: 6b:f1:84:09:7f:ea:df:39:d2:d5:da:0a:62:c6:ac:43:53:09: 70:f9:31:df:a8:ca:02:0e:21:2d:1d:6e:64:9e:c9:ea:41:ec: 58:d3:ad:62 -----BEGIN CERTIFICATE----- MIIIljCCB36gAwIBAgISAZt7pTguyuFL1XK+PzBLN+3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9hh5z4hhf43ClcCR84PKuSsS9Wz QIZ0DXlLHwMXQ1RcPUSpf2ffMpKsqABpvX4HgY/SA4jqe7ecCNveRsN75XIKbcNJ IdPfzwyOE3n9KSBLiT+im3omNk/gily+39Ya730JtwdCbvXLd/54HcdPMhqZgmM5 9eJOTwc6kVGeiYcRlKI0NJjWJJOeUD6xSlmfZTaztQ82yQ3edZNwZu6HsxRvpHG+ Ss3+Ubcm6LN85Xm0UVgwFsYg5JMuThjVL56DBBmV2c6ToGo3vUt7L08q774K4Bn5 2YPSSmhc6xT9IXr3m1JPAXt7B1LxVMwg2wCbDkhhgX9FmjJHqahiGsUnIQIDAQAB o4IFojCCBZ4wHQYDVR0OBBYEFLFVAJw95CHMTme5qa5CO7Nd4LkmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2RlOTAy Yy0zZDEzLTQ3ZDEtYTVlNi03Mzg1NmFmNDlmM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZGU5MDJj LTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4T1o3bXBy a0k3czEzZ3VTWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDHwYIKwYB BQUHAQcBAf8EggMOMIIDCjCCAkYEAgABMIICPgMEAi1TvAMEAi1TzDAMAwQCLVTU AwQCLVTYAwQCLVVYAwQCLVV8AwQCLVXgAwQCLVbIAwQCLVb4AwQCLVcUAwQCLVcc AwQCLVh4AwQCLVj0AwQCLVsUAwQCLVuEAwQCLVwEAwQCLVxYAwQCLVzkAwQCLVz4 AwQCLV2kAwQCLV4cAwQCLV7IAwQCLV+wAwQCLV/wAwQCLYDEAwQCLYHoAwQCLYJ0 AwQDLYKIAwQCLYMEAwQCLYM8AwQCLYPQAwQCLYTAAwQCLYX8AwQCLYbcAwQCLYcE AwQCLYhIAwQCLYj8AwQCLYlYAwQCLYlkAwQCLYnEAwQCLYnMAwQCLYoQAwQCLYo0 AwQCLYswAwQDLYugAwQCLYusAwQCLYv8AwQCLYyMAwQCLYy8AwQCLYzUAwQCLY4Q AwQCLY6QAwQCLY7MAwQCLY/AAwQCLZCcAwQCLZCkAwQCLZC8AwQCLZDYAwQCLZH4 MAwDBAItkjQDBAItkjgDBAItlBgDBAItlGADBAItlQADBAItlWgDBAItlcADBAIt llwDBAItmogDBAItnWADBAItnXADBAItn/QDBABZJCQDBABZJiYDBABZLi4DBAJZ +wADBAFbzqgDBAJduaADBAKIkBADBAKIkBgDBAKIkCADBAOIkCgDBACwbm4DBAK5 M8ADBAK5cjwDBAK54yADBAK58/QDBAG80CYDBAHBJOADBAHBJSADBAHBJfgDBAHB sNIDBAHBsPQDBAHCBTADBAHCBTQDBAHCIqwwgb0EAgACMIG2AwUDKgGy4AMFAyoG bsADBQMqB+NAAwUDKg5sQAMFAyoOh4ADBQMqDqKAAwUDKg6jwAMFAyoOpYADBQMq DrrAAwUDKg6+gAMFAyoOwYADBQMqDsdAAwUDKg7ugAMFAyoPCcADBQMqDwpAAwUD Kg8PQAMFAyoPD8ADBQMqDxHAAwUDKg8VwAMFAyoPJ0ADBQMqDzLAAwUDKg8zQAMF AyoPM8ADBQMqDzRAAwUDKg80wAMFAyoP44AwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAOtmMA0GCSqGSIb3DQEBCwUAA4IBAQAgqNFWdpx8cAb1seF0mTpanUdd72Hc YllMf8TWTl9QRi1+qWpt9kC72H0HdVg9rP6cL/hSnipOQA4XGX5ELWeVWOW1//tA Um6T7zMz9238EkdgsfE2gc7pB7uOpeJTFJG/d1VpBH+ha/80QgOeDexmeeXv6gn0 5Ua0k1Ul0lxPW+uI2WPVmFtn/vGf9Y+9VCmizdMZsLkWCtHwWcWSiCsb+FL6oXsf i5+cqH8ojTbCIG3smz2HCJS/O0ktiTtlV2ZLmDWwtWuZPsRGf/Zir9VgwRgZ9v09 FCNr8YQJf+rfOdLV2gpixqxDUwlw+THfqMoCDiEtHW5knsnqQexY061i -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:25 2026 by rpki-client