This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer File: sVXa3bhxudalPNa0f3diUIN_d3Q.cer (raw, json) Hash identifier: L8oanvjuijBtxNl6e8LSBfh09rZxDBlJD9movvfQCxU= Subject key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84563A4C06F034F11DE71F10818BB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9066 AS: 9145 IP: 31.150.0.0/16 IP: 31.184.0.0/18 IP: 31.187.112.0/20 IP: 37.138.0.0/16 IP: 62.89.160.0/19 IP: 80.66.0.0/19 IP: 80.228.0.0/16 IP: 82.149.160.0/19 IP: 85.8.64.0/18 IP: 85.16.0.0/16 IP: 87.245.0.0/18 IP: 89.166.128.0/17 IP: 89.233.64.0/19 IP: 90.153.0.0/17 IP: 91.96.0.0/15 IP: 91.248.0.0/15 IP: 92.252.0.0/17 IP: 95.33.0.0/16 IP: 178.142.0.0/16 IP: 188.118.128.0/18 IP: 212.6.64.0/18 IP: 212.68.64.0/19 IP: 212.95.96.0/19 IP: 213.168.192.0/19 IP: 213.170.160.0/19 IP: 213.182.96.0/19 IP: 213.183.160.0/19 IP: 213.252.128.0/18 IP: 2a00:1470::/32 IP: 2a01:6c0::/32 IP: 2a01:ac00::/32 IP: 2a02:8020::/30 IP: 2a02:8200::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:56:3a:4c:06:f0:34:f1:1d:e7:1f:10:81:8b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b155daddb871b9d6a53cd6b47f776250837f7774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:c9:c2:b0:bd:20:e6:0b:05:80:d8:43:da: 89:9e:66:ee:45:cc:52:0f:21:2b:ed:95:1e:76:84: d0:d4:00:7c:dc:3f:aa:d5:a5:a5:e1:7b:40:e5:71: c2:df:66:7c:69:02:73:c1:75:23:ca:a2:c1:e7:68: 93:63:32:28:0c:5e:51:c1:82:42:2c:5d:ba:2c:1e: 45:43:04:88:15:c7:d2:44:04:d4:cf:40:93:86:79: a6:74:32:40:8a:69:a3:93:5f:fa:a4:14:0d:a4:68: 03:c3:48:67:7a:ca:df:15:18:ed:14:8f:ca:85:a7: 0a:12:52:30:de:5c:f5:ab:33:ee:62:4e:93:b1:98: 69:33:5b:88:9b:2a:b7:68:55:c8:c3:ff:3d:68:43: ae:cf:97:6a:4f:64:e3:aa:05:72:36:06:3b:e2:a5: af:32:65:c8:9e:b3:7f:a6:03:38:79:ad:fc:a1:e4: 3a:6b:85:22:41:2b:54:2c:ba:80:4c:af:1a:6c:48: cf:33:fa:7d:9b:dc:59:e1:a9:b7:65:7b:1f:a8:83: 8b:95:22:fc:9c:44:7a:cd:da:30:97:51:ed:b6:c6: 17:45:e0:3f:c2:91:0b:99:14:68:2d:d4:12:9f:53: 8d:7e:37:70:a1:0d:e5:16:79:7d:52:c9:26:07:ef: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.150.0.0/16 31.184.0.0/18 31.187.112.0/20 37.138.0.0/16 62.89.160.0/19 80.66.0.0/19 80.228.0.0/16 82.149.160.0/19 85.8.64.0/18 85.16.0.0/16 87.245.0.0/18 89.166.128.0/17 89.233.64.0/19 90.153.0.0/17 91.96.0.0/15 91.248.0.0/15 92.252.0.0/17 95.33.0.0/16 178.142.0.0/16 188.118.128.0/18 212.6.64.0/18 212.68.64.0/19 212.95.96.0/19 213.168.192.0/19 213.170.160.0/19 213.182.96.0/19 213.183.160.0/19 213.252.128.0/18 IPv6: 2a00:1470::/32 2a01:6c0::/32 2a01:ac00::/32 2a02:8020::/30 2a02:8200::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9066 9145 Signature Algorithm: sha256WithRSAEncryption 3b:8c:90:7f:df:d5:01:09:cd:62:4f:da:36:5f:09:ec:d0:ed: 34:3b:39:27:92:a5:4b:fe:0d:05:05:6f:71:9d:74:99:a3:8a: a4:1a:26:81:44:fb:75:47:d0:9f:31:c4:26:e6:68:70:72:87: a6:7b:33:60:6e:99:4f:a7:c7:0d:ca:e7:2d:d5:18:bf:ac:6e: ff:8b:06:3a:52:3f:a3:62:f1:67:45:a8:14:e2:50:33:6b:5b: cb:84:b6:21:a5:41:9d:a5:d2:33:85:4b:5d:f9:04:4c:5e:00: 24:8e:44:39:b6:e3:ed:97:2e:3c:5b:6a:01:2d:4e:f8:21:a7: 92:da:95:0a:ac:f5:64:cd:0b:a1:c8:b5:3d:72:e4:9f:21:3f: 60:5b:53:c7:e9:b8:08:27:a9:86:aa:ac:ae:3f:fc:00:fe:37: ce:02:79:17:d3:84:b9:73:25:ed:68:53:93:8d:fb:62:03:cc: 15:d9:1c:0e:41:52:8c:e1:72:18:06:6c:f0:27:eb:ed:ed:69: cb:48:5b:ea:95:ac:b3:34:db:77:22:7e:ed:54:dc:98:0e:ef: 42:66:48:39:d7:9e:11:aa:c4:91:06:9e:1a:96:5b:b4:c8:50: fb:04:52:c8:f3:ff:32:b3:04:bd:c4:6e:bb:3f:be:cb:7d:99: 77:c4:a2:ce -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISAZt/hFY6TAbwNPEd5x8QgYuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTU1ZGFkZGI4NzFiOWQ2YTUzY2Q2YjQ3Zjc3NjI1MDgzN2Y3Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudfJwrC9IOYLBYDYQ9qJnmbuRcxS DyEr7ZUedoTQ1AB83D+q1aWl4XtA5XHC32Z8aQJzwXUjyqLB52iTYzIoDF5RwYJC LF26LB5FQwSIFcfSRATUz0CThnmmdDJAimmjk1/6pBQNpGgDw0hnesrfFRjtFI/K hacKElIw3lz1qzPuYk6TsZhpM1uImyq3aFXIw/89aEOuz5dqT2TjqgVyNgY74qWv MmXInrN/pgM4ea38oeQ6a4UiQStULLqATK8abEjPM/p9m9xZ4am3ZXsfqIOLlSL8 nER6zdowl1HttsYXReA/wpELmRRoLdQSn1ONfjdwoQ3lFnl9UskmB+8+YwIDAQAB o4IDbTCCA2kwHQYDVR0OBBYEFLFV2t24cbnWpTzWtH93YlCDf3d0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzhmZDZl Ny00OTZmLTQ3Y2YtODBmYi01NDY4YjJjZjBhNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvOGZkNmU3 LTQ5NmYtNDdjZi04MGZiLTU0NjhiMmNmMGE3Ny8xL3NWWGEzYmh4dWRhbFBOYTBm M2RpVUlOX2QzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHoBggrBgEF BQcBBwEB/wSB2DCB1TCBpwQCAAEwgaADAwAflgMEBh+4AAMEBB+7cAMDACWKAwQF PlmgAwQFUEIAAwMAUOQDBAVSlaADBAZVCEADAwBVEAMEBlf1AAMEB1mmgAMEBVnp QAMEB1qZAAMDAVtgAwMBW/gDBAdc/AADAwBfIQMDALKOAwQGvHaAAwQG1AZAAwQF 1ERAAwQF1F9gAwQF1ajAAwQF1aqgAwQF1bZgAwQF1begAwQG1fyAMCkEAgACMCMD BQAqABRwAwUAKgEGwAMFACoBrAADBQIqAoAgAwUFKgKCADAdBggrBgEFBQcBCAEB /wQOMAygCjAIAgIjagICI7kwDQYJKoZIhvcNAQELBQADggEBADuMkH/f1QEJzWJP 2jZfCezQ7TQ7OSeSpUv+DQUFb3GddJmjiqQaJoFE+3VH0J8xxCbmaHByh6Z7M2Bu mU+nxw3K5y3VGL+sbv+LBjpSP6Ni8WdFqBTiUDNrW8uEtiGlQZ2l0jOFS135BExe ACSORDm24+2XLjxbagEtTvghp5LalQqs9WTNC6HItT1y5J8hP2BbU8fpuAgnqYaq rK4//AD+N84CeRfThLlzJe1oU5ON+2IDzBXZHA5BUozhchgGbPAn6+3tactIW+qV rLM023cifu1U3JgO70JmSDnXnhGqxJEGnhqWW7TIUPsEUsjz/zKzBL3Ebrs/vst9 mXfEos4= -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:09 2026 by rpki-client