This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer File: v7CXo2wjJdEDH_QJG6AKhkWdQog.cer (raw, json) Hash identifier: hlDwy5l/kYBQ/fn9EosGE3hwt6dSeuD7xN9Z9vjcDBc= Subject key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3DE29115AD3C7414F855F09E375A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8696 AS: 12301 AS: 20523 AS: 20922 AS: 34588 IP: 62.77.192.0/22 IP: 62.77.200.0 -- 62.77.239.255 IP: 62.77.242.0 -- 62.77.247.255 IP: 79.120.128.0/19 IP: 79.120.168.0/23 IP: 79.120.176.0 -- 79.120.247.255 IP: 79.120.250.0/23 IP: 81.0.64.0 -- 81.0.81.255 IP: 81.0.88.0/23 IP: 81.0.96.0/23 IP: 81.0.100.0 -- 81.0.107.255 IP: 81.0.110.0 -- 81.0.121.255 IP: 81.0.124.0/23 IP: 81.94.176.0/20 IP: 82.131.160.0 -- 82.131.181.255 IP: 82.131.192.0/22 IP: 82.131.199.0/24 IP: 82.131.208.0/21 IP: 82.141.128.0/18 IP: 82.144.160.0/22 IP: 82.144.168.0/22 IP: 82.144.178.0 -- 82.144.187.255 IP: 82.144.190.0/23 IP: 87.97.64.0/20 IP: 89.186.98.0 -- 89.186.101.255 IP: 89.186.104.0/23 IP: 89.186.116.0/23 IP: 91.82.8.0 -- 91.82.23.255 IP: 91.82.40.0 -- 91.82.55.255 IP: 91.82.58.0/23 IP: 91.82.62.0/23 IP: 91.82.72.0 -- 91.82.81.255 IP: 91.82.84.0 -- 91.82.129.255 IP: 91.82.148.0 -- 91.82.159.255 IP: 91.82.174.0/23 IP: 91.82.184.0/22 IP: 91.82.192.0 -- 91.82.209.255 IP: 91.82.216.0 -- 91.82.227.255 IP: 91.82.236.0/22 IP: 91.82.244.0 -- 91.82.249.255 IP: 91.82.252.0/22 IP: 91.83.40.0 -- 91.83.51.255 IP: 91.83.56.0 -- 91.83.93.255 IP: 91.83.96.0 -- 91.83.101.255 IP: 91.83.104.0 -- 91.83.109.255 IP: 91.83.112.0/21 IP: 91.83.122.0 -- 91.83.135.255 IP: 91.83.146.0 -- 91.83.153.255 IP: 91.83.156.0 -- 91.83.179.255 IP: 91.83.208.0 -- 91.83.251.255 IP: 91.83.254.0/23 IP: 94.125.248.0/21 IP: 185.50.28.0/22 IP: 193.68.32.0/19 IP: 193.91.64.0/19 IP: 193.226.194.0 -- 193.226.211.255 IP: 193.226.216.0 -- 193.226.225.255 IP: 193.226.228.0/22 IP: 193.226.234.0 -- 193.226.237.255 IP: 193.226.242.0/23 IP: 193.226.250.0 -- 193.226.255.255 IP: 194.143.224.0/19 IP: 194.169.253.0/24 IP: 195.184.0.0/19 IP: 212.24.160.0/19 IP: 212.108.192.0/18 IP: 213.16.64.0/18 IP: 213.163.0.0/18 IP: 213.197.64.0/21 IP: 213.197.96.0/19 IP: 213.253.192.0/18 IP: 217.150.128.0/20 IP: 2001:1aa0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:de:29:11:5a:d3:c7:41:4f:85:5f:09:e3:75:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:75:94:1e:ee:02:30:73:d2:fe:03:be:0c: 82:1f:aa:c4:c2:ae:2f:20:8f:ad:b0:86:07:d8:f3: 85:04:e5:41:3a:b7:61:c1:82:ac:c2:14:ed:b4:f8: a6:c5:10:08:6e:7f:31:0c:50:3f:42:60:f2:e1:a3: 4a:54:e1:79:06:6b:dd:5c:3a:74:9d:7c:49:af:02: b4:12:3a:62:73:d7:92:01:5a:0e:3e:39:15:e1:ad: 0c:b2:5e:14:45:2b:7e:7d:c9:61:32:8a:82:14:7f: 21:bf:5f:42:a0:6e:ec:3d:ce:c6:e1:ef:99:09:a3: ce:aa:d4:1b:bf:1f:d7:24:a3:5f:44:e1:60:0d:cb: 48:28:38:ea:63:ab:ea:c6:5c:42:32:47:4f:79:6a: fe:a7:76:1c:57:00:7a:7c:9e:8d:20:9f:e0:6e:73: 09:50:30:a4:25:5b:c9:54:5e:25:8c:4b:29:ec:3d: d1:19:64:46:43:40:58:cf:a5:50:1d:b8:47:85:6e: 0b:94:cc:03:fc:40:35:f2:f4:9d:5c:8a:72:46:fc: 2c:ca:37:10:e4:9b:65:61:99:67:cc:05:d6:8f:fd: bd:20:95:0d:97:b2:0e:3b:bf:03:cd:fc:46:40:ce: 33:be:9d:7a:c1:e3:11:05:13:76:ca:4f:01:f2:1d: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.192.0/22 62.77.200.0-62.77.239.255 62.77.242.0-62.77.247.255 79.120.128.0/19 79.120.168.0/23 79.120.176.0-79.120.247.255 79.120.250.0/23 81.0.64.0-81.0.81.255 81.0.88.0/23 81.0.96.0/23 81.0.100.0-81.0.107.255 81.0.110.0-81.0.121.255 81.0.124.0/23 81.94.176.0/20 82.131.160.0-82.131.181.255 82.131.192.0/22 82.131.199.0/24 82.131.208.0/21 82.141.128.0/18 82.144.160.0/22 82.144.168.0/22 82.144.178.0-82.144.187.255 82.144.190.0/23 87.97.64.0/20 89.186.98.0-89.186.101.255 89.186.104.0/23 89.186.116.0/23 91.82.8.0-91.82.23.255 91.82.40.0-91.82.55.255 91.82.58.0/23 91.82.62.0/23 91.82.72.0-91.82.81.255 91.82.84.0-91.82.129.255 91.82.148.0-91.82.159.255 91.82.174.0/23 91.82.184.0/22 91.82.192.0-91.82.209.255 91.82.216.0-91.82.227.255 91.82.236.0/22 91.82.244.0-91.82.249.255 91.82.252.0/22 91.83.40.0-91.83.51.255 91.83.56.0-91.83.93.255 91.83.96.0-91.83.101.255 91.83.104.0-91.83.109.255 91.83.112.0/21 91.83.122.0-91.83.135.255 91.83.146.0-91.83.153.255 91.83.156.0-91.83.179.255 91.83.208.0-91.83.251.255 91.83.254.0/23 94.125.248.0/21 185.50.28.0/22 193.68.32.0/19 193.91.64.0/19 193.226.194.0-193.226.211.255 193.226.216.0-193.226.225.255 193.226.228.0/22 193.226.234.0-193.226.237.255 193.226.242.0/23 193.226.250.0-193.226.255.255 194.143.224.0/19 194.169.253.0/24 195.184.0.0/19 212.24.160.0/19 212.108.192.0/18 213.16.64.0/18 213.163.0.0/18 213.197.64.0/21 213.197.96.0/19 213.253.192.0/18 217.150.128.0/20 IPv6: 2001:1aa0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8696 12301 20523 20922 34588 Signature Algorithm: sha256WithRSAEncryption 94:4b:41:59:8a:c3:ac:8d:bd:ec:43:7d:f0:09:8d:07:5d:09: 6c:73:96:59:70:23:5d:06:50:02:43:31:92:42:0f:65:aa:67: 5c:91:8e:ed:ff:a8:99:fe:56:74:a7:12:c6:c5:df:13:60:ef: 5b:4b:be:d9:82:68:5b:90:76:d3:6e:f6:e3:c7:08:d4:5d:16: 86:6f:4a:4a:ba:b8:28:e8:38:f8:35:79:bf:2f:27:b2:22:35: 00:1f:49:c9:27:19:f3:59:b3:c6:9c:bc:62:d8:ad:89:b0:2c: d5:18:d5:a0:cd:94:15:b8:8f:f6:7c:37:33:fe:5c:7d:67:a6: ae:e8:7d:b1:bd:5d:03:7d:d8:45:f0:9b:58:7a:52:97:d8:c8: 4d:9f:e4:13:75:d4:a8:97:30:7f:2f:31:c2:cf:7e:6f:a4:d2: f8:80:16:f9:88:cd:be:03:b0:63:ba:2a:3b:f1:7f:eb:a6:89: 37:f7:af:06:99:92:9f:51:2c:b6:af:0a:11:83:21:3b:15:9f: ed:77:86:20:04:29:75:fd:78:85:21:57:32:c8:34:55:ae:5a: 0a:ab:ec:33:46:1d:ab:da:67:48:d8:cd:5c:a4:e9:df:c0:d0: ce:4d:1d:59:77:ba:ba:5a:81:81:ba:1f:8e:86:3b:78:8d:74: 47:5e:34:97 -----BEGIN CERTIFICATE----- MIIITjCCBzagAwIBAgISAZt7o94pEVrTx0FPhV8J43WlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUl1lB7uAjBz0v4DvgyCH6rEwq4v II+tsIYH2POFBOVBOrdhwYKswhTttPimxRAIbn8xDFA/QmDy4aNKVOF5BmvdXDp0 nXxJrwK0Ejpic9eSAVoOPjkV4a0Msl4URSt+fclhMoqCFH8hv19CoG7sPc7G4e+Z CaPOqtQbvx/XJKNfROFgDctIKDjqY6vqxlxCMkdPeWr+p3YcVwB6fJ6NIJ/gbnMJ UDCkJVvJVF4ljEsp7D3RGWRGQ0BYz6VQHbhHhW4LlMwD/EA18vSdXIpyRvwsyjcQ 5JtlYZlnzAXWj/29IJUNl7IOO78DzfxGQM4zvp16weMRBRN2yk8B8h2rRwIDAQAB o4IFWjCCBVYwHQYDVR0OBBYEFL+wl6NsIyXRAx/0CRugCoZFnUKIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2YyYzVl OC04ZDM3LTQ4MzgtYTMzYi1lY2M0OWJkYzJhZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZjJjNWU4 LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRFREhfUUpH NkFLaGtXZFFvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICxwYIKwYB BQUHAQcBAf8EggK2MIICsjCCAp8EAgABMIIClwMEAj5NwDAMAwQDPk3IAwQEPk3g MAwDBAE+TfIDBAM+TfADBAVPeIADBAFPeKgwDAMEBE94sAMEA0948AMEAU94+jAM AwQGUQBAAwQBUQBQAwQBUQBYAwQBUQBgMAwDBAJRAGQDBAJRAGgwDAMEAVEAbgME AVEAeAMEAVEAfAMEBFFesDAMAwQFUoOgAwQBUoO0AwQCUoPAAwQAUoPHAwQDUoPQ AwQGUo2AAwQCUpCgAwQCUpCoMAwDBAFSkLIDBAJSkLgDBAFSkL4DBARXYUAwDAME AVm6YgMEAVm6ZAMEAVm6aAMEAVm6dDAMAwQDW1IIAwQDW1IQMAwDBANbUigDBANb UjADBAFbUjoDBAFbUj4wDAMEA1tSSAMEAVtSUDAMAwQCW1JUAwQBW1KAMAwDBAJb UpQDBAVbUoADBAFbUq4DBAJbUrgwDAMEBltSwAMEAVtS0DAMAwQDW1LYAwQCW1Lg AwQCW1LsMAwDBAJbUvQDBAFbUvgDBAJbUvwwDAMEA1tTKAMEAltTMDAMAwQDW1M4 AwQBW1NcMAwDBAVbU2ADBAFbU2QwDAMEA1tTaAMEAVtTbAMEA1tTcDAMAwQBW1N6 AwQDW1OAMAwDBAFbU5IDBAFbU5gwDAMEAltTnAMEAltTsDAMAwQEW1PQAwQCW1P4 AwQBW1P+AwQDXn34AwQCuTIcAwQFwUQgAwQFwVtAMAwDBAHB4sIDBALB4tAwDAME A8Hi2AMEAcHi4AMEAsHi5DAMAwQBweLqAwQBweLsAwQBweLyMAsDBAHB4voDAwDB 4gMEBcKP4AMEAMKp/QMEBcO4AAMEBdQYoAMEBtRswAMEBtUQQAMEBtWjAAMEA9XF QAMEBdXFYAMEBtX9wAMEBNmWgDANBAIAAjAHAwUDIAEaoDAqBggrBgEFBQcBCAEB /wQbMBmgFzAVAgIh+AICMA0CAlArAgJRugIDAIccMA0GCSqGSIb3DQEBCwUAA4IB AQCUS0FZisOsjb3sQ33wCY0HXQlsc5ZZcCNdBlACQzGSQg9lqmdckY7t/6iZ/lZ0 pxLGxd8TYO9bS77ZgmhbkHbTbvbjxwjUXRaGb0pKurgo6Dj4NXm/LyeyIjUAH0nJ JxnzWbPGnLxi2K2JsCzVGNWgzZQVuI/2fDcz/lx9Z6au6H2xvV0DfdhF8JtYelKX 2MhNn+QTddSolzB/LzHCz35vpNL4gBb5iM2+A7Bjuio78X/rpok3968GmZKfUSy2 rwoRgyE7FZ/td4YgBCl1/XiFIVcyyDRVrloKq+wzRh2r2mdI2M1cpOnfwNDOTR1Z d7q6WoGBuh+Ohjt4jXRHXjSX -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:11 2026 by rpki-client