This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer File: v4CafmyhTQoal2Zz4DGeNOlW7T0.cer (raw, json) Hash identifier: cez/AZyEIkYHTsHZSgMJd9cWQIY9TGWa4BYGDa02r24= Subject key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC9F405F1F29D5470CEE4B485193F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35332 IP: 2.56.192.0/22 IP: 37.235.112.0/21 IP: 45.89.144.0/22 IP: 45.91.96.0/22 IP: 45.92.208.0/22 IP: 45.116.184.0/22 IP: 45.132.4.0/22 IP: 45.138.136.0/22 IP: 77.242.112.0/20 IP: 83.138.61.0/24 IP: 85.208.132.0/22 IP: 87.236.0.0/21 IP: 103.75.36.0/22 IP: 139.28.200.0/22 IP: 152.89.152.0/22 IP: 185.70.4.0/22 IP: 185.113.212.0/22 IP: 185.151.96.0/22 IP: 185.171.89.0 -- 185.171.90.255 IP: 185.217.160.0/22 IP: 188.34.0.0/18 IP: 188.92.56.0/21 IP: 194.5.181.0/24 IP: 194.153.185.0/24 IP: 194.156.2.0/24 IP: 194.156.134.0/24 IP: 194.156.144.0/24 IP: 195.234.88.0/23 IP: 205.132.144.0/21 IP: 208.75.220.0/22 IP: 208.88.128.0/22 IP: 212.16.112.0/20 IP: 2a00:a000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9f:40:5f:1f:29:d5:47:0c:ee:4b:48:51:93:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:cd:42:e4:e3:f9:a5:fa:f9:ad:d1:7d:31: 2a:41:f3:a7:7c:67:91:fc:6c:ea:5e:9b:83:8d:88: 12:bb:c0:25:24:cf:82:de:04:22:f3:4c:ee:10:4f: 72:10:9d:64:08:c5:48:17:dc:01:3c:ee:80:72:f5: 23:03:b8:db:47:68:c3:c9:13:a9:b2:e4:5b:5b:6d: ed:76:05:b4:ba:40:0f:15:fa:65:ff:36:ac:eb:4f: 93:c7:1a:d9:4e:15:41:2f:6b:e8:3e:29:0d:78:4d: b1:27:03:46:71:f1:57:97:f8:89:09:94:90:aa:6e: 37:4d:8f:4f:ac:01:5e:b2:3a:c5:4b:0f:42:cc:2c: 01:7f:fd:8f:1e:f2:89:8f:1d:6d:89:e4:bb:7d:2b: 4b:a0:04:4b:2c:73:39:3b:93:07:96:27:c3:81:a2: d5:b9:32:2a:d4:74:72:14:d5:3f:6a:a9:ea:4b:ec: e4:f6:8b:f1:41:69:c1:6b:2c:fc:7c:fe:34:46:7f: 71:2d:0d:6e:48:f3:aa:ac:e5:24:78:50:14:ff:62: 3f:7d:dd:ac:59:b2:27:a7:98:50:c3:3d:53:16:16: 32:51:b0:e4:7f:c2:da:50:00:d8:58:f2:29:4f:7e: c7:db:50:68:a7:ce:c1:e1:66:4a:34:bb:f2:e5:57: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.192.0/22 37.235.112.0/21 45.89.144.0/22 45.91.96.0/22 45.92.208.0/22 45.116.184.0/22 45.132.4.0/22 45.138.136.0/22 77.242.112.0/20 83.138.61.0/24 85.208.132.0/22 87.236.0.0/21 103.75.36.0/22 139.28.200.0/22 152.89.152.0/22 185.70.4.0/22 185.113.212.0/22 185.151.96.0/22 185.171.89.0-185.171.90.255 185.217.160.0/22 188.34.0.0/18 188.92.56.0/21 194.5.181.0/24 194.153.185.0/24 194.156.2.0/24 194.156.134.0/24 194.156.144.0/24 195.234.88.0/23 205.132.144.0/21 208.75.220.0/22 208.88.128.0/22 212.16.112.0/20 IPv6: 2a00:a000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35332 Signature Algorithm: sha256WithRSAEncryption 8f:a5:a6:90:bd:2b:e9:93:bc:44:1f:97:2e:31:c8:10:94:13: e0:35:8a:be:d1:c2:5b:4a:4d:fc:fe:a6:98:59:a9:01:2f:b9: ba:5a:b6:17:36:6e:fb:bd:fc:2b:41:df:4d:8f:88:bf:4c:a8: b2:09:1b:2d:45:cb:43:22:04:80:4d:e6:1c:4f:c4:cc:79:cb: 16:4f:8a:86:65:a4:3e:c9:23:3c:fe:7e:4a:09:e1:39:51:0a: bd:b5:5f:da:fd:c3:22:a0:de:a5:e1:a8:9c:3d:45:67:d3:89: cf:e3:3c:d9:8b:e3:b7:87:d3:c2:7d:c2:53:b4:95:13:ea:77: 0a:e3:7f:79:a3:20:73:f0:47:0d:0f:92:8c:cb:21:2f:cd:bf: db:db:2e:3b:44:c0:02:38:65:f1:18:47:3b:c1:79:1a:a4:24: cc:b6:31:59:36:d0:b6:a6:95:d1:26:0f:5d:23:a2:5e:ef:c9: e6:9d:68:bd:87:09:d8:c3:10:9d:a2:f9:1a:d0:22:90:eb:c3: 14:dd:05:b8:3a:d0:18:d5:27:62:c4:18:96:5c:06:11:77:a6: 97:c4:64:80:8e:2d:16:9e:68:51:38:e7:32:26:9f:af:b8:44: c5:84:ed:27:14:ce:57:3d:02:98:4f:25:ad:dc:e7:0b:43:1a: ad:78:2f:41 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgISAZt57J9AXx8p1UcM7ktIUZP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjgwOWE3ZTZjYTE0ZDBhMWE5NzY2NzNlMDMxOWUzNGU5NTZlZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTLNQuTj+aX6+a3RfTEqQfOnfGeR /GzqXpuDjYgSu8AlJM+C3gQi80zuEE9yEJ1kCMVIF9wBPO6AcvUjA7jbR2jDyROp suRbW23tdgW0ukAPFfpl/zas60+TxxrZThVBL2voPikNeE2xJwNGcfFXl/iJCZSQ qm43TY9PrAFesjrFSw9CzCwBf/2PHvKJjx1tieS7fStLoARLLHM5O5MHlifDgaLV uTIq1HRyFNU/aqnqS+zk9ovxQWnBayz8fP40Rn9xLQ1uSPOqrOUkeFAU/2I/fd2s WbInp5hQwz1TFhYyUbDkf8LaUADYWPIpT37H21Bop87B4WZKNLvy5VftrQIDAQAB o4IDdjCCA3IwHQYDVR0OBBYEFL+Amn5soU0KGpdmc+AxnjTpVu09MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzNhMzgy YS0zZGRhLTQ3OTYtYjMyMC0zZmRmYjQxNDBmMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvM2EzODJh LTNkZGEtNDc5Ni1iMzIwLTNmZGZiNDE0MGYyNC8xL3Y0Q2FmbXloVFFvYWwyWno0 REdlTk9sVzdUMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH0BggrBgEF BQcBBwEB/wSB5DCB4TCBzwQCAAEwgcgDBAICOMADBAMl63ADBAItWZADBAItW2AD BAItXNADBAItdLgDBAIthAQDBAItiogDBARN8nADBABTij0DBAJV0IQDBANX7AAD BAJnSyQDBAKLHMgDBAKYWZgDBAK5RgQDBAK5cdQDBAK5l2AwDAMEALmrWQMEALmr WgMEArnZoAMEBrwiAAMEA7xcOAMEAMIFtQMEAMKZuQMEAMKcAgMEAMKchgMEAMKc kAMEAcPqWAMEA82EkAMEAtBL3AMEAtBYgAMEBNQQcDANBAIAAjAHAwUAKgCgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAigQwDQYJKoZIhvcNAQELBQADggEBAI+l ppC9K+mTvEQfly4xyBCUE+A1ir7RwltKTfz+pphZqQEvubpathc2bvu9/CtB302P iL9MqLIJGy1Fy0MiBIBN5hxPxMx5yxZPioZlpD7JIzz+fkoJ4TlRCr21X9r9wyKg 3qXhqJw9RWfTic/jPNmL47eH08J9wlO0lRPqdwrjf3mjIHPwRw0PkozLIS/Nv9vb LjtEwAI4ZfEYRzvBeRqkJMy2MVk20LamldEmD10jol7vyeadaL2HCdjDEJ2i+RrQ IpDrwxTdBbg60BjVJ2LEGJZcBhF3ppfEZICOLRaeaFE45zImn6+4RMWE7ScUzlc9 AphPJa3c5wtDGq14L0E= -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:37 2026 by rpki-client