This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.cer (raw, json) Hash identifier: J3k3a3j3MyD2HQhkhQhbQMthr/y53mXAWBrURThB+68= Subject key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5AF15E98546E300433795FE5A193 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203053 IP: 31.14.56.0/24 IP: 37.156.4.0/24 IP: 37.156.180.0/23 IP: 85.204.69.0/24 IP: 86.105.228.0/24 IP: 86.107.43.0/24 IP: 86.107.78.0/23 IP: 89.36.154.0/24 IP: 89.37.29.0/24 IP: 89.39.209.0/24 IP: 89.40.32.0/23 IP: 89.42.13.0/24 IP: 89.44.105.0/24 IP: 93.113.54.0/23 IP: 93.114.248.0/24 IP: 93.119.122.0/24 IP: 94.176.213.0/24 IP: 176.126.172.0/24 IP: 176.223.167.0/24 IP: 185.146.84.0/22 IP: 188.212.127.0/24 IP: 188.212.252.0/24 IP: 188.212.255.0/24 IP: 188.214.214.0/24 IP: 2a07:4ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5a:f1:5e:98:54:6e:30:04:33:79:5f:e5:a1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:a5:14:56:c1:33:0c:25:f1:3b:9b:e8:10: 9f:7d:1f:d3:a9:47:16:6d:2f:31:e7:19:67:6a:ac: 09:ac:3e:27:7e:73:ae:a6:6a:fa:ce:74:a3:6f:a6: 9f:40:d5:3f:9c:69:47:d9:26:24:13:a8:1a:b0:7e: ee:bb:be:7c:62:9d:bd:f5:b7:19:89:c1:e1:8d:b7: cb:4f:83:53:40:a6:a5:f2:3b:8d:a3:77:b2:ba:01: bd:96:6c:2e:bb:f4:f0:06:e1:eb:b1:6c:2d:82:04: 9a:df:61:1e:c3:50:07:54:99:a1:dd:22:3e:c7:f2: 2c:1a:51:bf:af:aa:e1:3a:06:50:1e:7b:c9:d3:32: bc:ac:ef:9a:8f:d0:d3:48:6c:4d:4b:83:49:31:9e: fc:52:9f:30:63:ac:19:b9:32:f7:23:f0:56:6a:13: 77:12:71:e3:b3:c8:0c:d1:51:f6:f6:65:cd:fb:90: 53:f0:5c:02:8f:5e:62:49:f9:5b:de:3c:2f:55:bd: 25:c4:94:5a:75:c4:23:33:c7:0f:27:b3:10:0d:2b: 07:7b:f4:db:47:2f:38:3d:44:65:d1:81:c2:6c:a6: 64:6f:22:88:80:6a:00:2c:31:3c:aa:0b:73:29:06: cb:4c:75:74:9d:27:cd:52:e3:b2:20:a0:e2:95:df: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.56.0/24 37.156.4.0/24 37.156.180.0/23 85.204.69.0/24 86.105.228.0/24 86.107.43.0/24 86.107.78.0/23 89.36.154.0/24 89.37.29.0/24 89.39.209.0/24 89.40.32.0/23 89.42.13.0/24 89.44.105.0/24 93.113.54.0/23 93.114.248.0/24 93.119.122.0/24 94.176.213.0/24 176.126.172.0/24 176.223.167.0/24 185.146.84.0/22 188.212.127.0/24 188.212.252.0/24 188.212.255.0/24 188.214.214.0/24 IPv6: 2a07:4ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203053 Signature Algorithm: sha256WithRSAEncryption 80:5f:73:67:df:57:1d:ad:6f:e6:5e:f8:d7:2b:1c:5b:c5:b5: c1:5a:d3:f7:e8:06:69:ff:57:d8:39:23:91:e0:b5:32:86:08: c1:34:16:44:d3:4e:41:58:b7:7b:a9:37:49:c6:5f:56:cc:96: 46:7d:f2:ac:c5:0e:a5:07:81:c6:32:41:ca:80:92:e8:57:25: a9:c8:34:83:55:1f:4c:6f:a0:f9:0d:1b:0d:7d:50:dc:db:02: f4:fa:9f:ac:1d:82:4f:c2:f8:d6:ad:a6:2c:ba:56:43:91:39: 0c:6f:b7:c1:31:03:cb:2b:63:47:de:af:89:30:ee:7f:87:4e: 46:4d:2f:5a:14:46:28:30:af:e6:67:27:8d:c3:f4:ab:c0:41: bd:01:5f:a8:49:0a:b4:21:db:4f:3d:5a:86:98:58:b9:50:4a: a8:f7:00:05:b2:29:09:11:94:c6:4c:47:0e:c6:e7:4b:9e:e2: 45:8e:cb:df:81:b4:88:c1:c5:90:35:ba:0d:48:fa:f8:10:a5: dd:7c:eb:99:13:98:a9:f4:88:89:b6:40:73:b2:a1:10:97:98: 59:f8:46:c5:5e:1c:f7:44:b5:04:11:12:23:55:59:a7:50:cd: e7:f2:3e:09:36:b2:41:25:46:9b:69:98:e2:68:88:d7:28:b5: d3:9c:48:04 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgISAZt6W1rxXphUbjAEM3lf5aGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDU1ZTBiODZmM2Y1MTI1MDU0ODYzY2Y5MjY0ZTYzNDZlMDliYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDalFFbBMwwl8Tub6BCffR/TqUcW bS8x5xlnaqwJrD4nfnOupmr6znSjb6afQNU/nGlH2SYkE6gasH7uu758Yp299bcZ icHhjbfLT4NTQKal8juNo3eyugG9lmwuu/TwBuHrsWwtggSa32Eew1AHVJmh3SI+ x/IsGlG/r6rhOgZQHnvJ0zK8rO+aj9DTSGxNS4NJMZ78Up8wY6wZuTL3I/BWahN3 EnHjs8gM0VH29mXN+5BT8FwCj15iSflb3jwvVb0lxJRadcQjM8cPJ7MQDSsHe/Tb Ry84PURl0YHCbKZkbyKIgGoALDE8qgtzKQbLTHV0nSfNUuOyIKDild/zsQIDAQAB o4IDPjCCAzowHQYDVR0OBBYEFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzFjYmE5 Zi1jZDZlLTRkMTItYTc4ZC1mOThjN2ZlYzE5NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvMWNiYTlm LWNkNmUtNGQxMi1hNzhkLWY5OGM3ZmVjMTk0ZS8xLzBGWGd1RzhfVVNVRlNHUFBr bVRtTkc0SnU3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG8BggrBgEF BQcBBwEB/wSBrDCBqTCBlwQCAAEwgZADBAAfDjgDBAAlnAQDBAElnLQDBABVzEUD BABWaeQDBABWaysDBAFWa04DBABZJJoDBABZJR0DBABZJ9EDBAFZKCADBABZKg0D BABZLGkDBAFdcTYDBABdcvgDBABdd3oDBABesNUDBACwfqwDBACw36cDBAK5klQD BAC81H8DBAC81PwDBAC81P8DBAC81tYwDQQCAAIwBwMFAyoHTsAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAxktMA0GCSqGSIb3DQEBCwUAA4IBAQCAX3Nn31cdrW/m XvjXKxxbxbXBWtP36AZp/1fYOSOR4LUyhgjBNBZE005BWLd7qTdJxl9WzJZGffKs xQ6lB4HGMkHKgJLoVyWpyDSDVR9Mb6D5DRsNfVDc2wL0+p+sHYJPwvjWraYsulZD kTkMb7fBMQPLK2NH3q+JMO5/h05GTS9aFEYoMK/mZyeNw/SrwEG9AV+oSQq0IdtP PVqGmFi5UEqo9wAFsikJEZTGTEcOxudLnuJFjsvfgbSIwcWQNboNSPr4EKXdfOuZ E5ip9IiJtkBzsqEQl5hZ+EbFXhz3RLUEERIjVVmnUM3n8j4JNrJBJUabaZjiaIjX KLXTnEgE -----END CERTIFICATE-----Generated at Tue Jan 27 02:51:48 2026 by rpki-client