This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer File: 1-75S2DTiaNxpiDApL95LY8faOS4.cer (raw, json) Hash identifier: XqO8lfG310mOaUfjbk63RjAm18DorakxHWujkjEK3Jg= Subject key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3656BB70CEA641BB46A6C40ACB7C4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15411 IP: 193.149.128.0/24 IP: 193.149.137.0 -- 193.149.138.255 IP: 193.149.140.0/23 IP: 193.149.146.0/23 IP: 193.149.150.0/24 IP: 193.149.152.0/24 IP: 193.149.154.0/24 IP: 193.149.165.0/24 IP: 193.149.171.0 -- 193.149.172.255 IP: 193.149.177.0/24 IP: 193.149.184.0/24 IP: 193.149.186.0/24 IP: 193.149.188.0/24 IP: 193.149.191.0/24 IP: 195.85.0.0/23 IP: 195.85.4.0/23 IP: 195.85.8.0/23 IP: 195.85.13.0 -- 195.85.18.255 IP: 195.85.22.0/24 IP: 195.85.24.0 -- 195.85.26.255 IP: 195.85.28.0/22 IP: 195.85.37.0/24 IP: 195.85.39.0/24 IP: 195.85.45.0 -- 195.85.47.255 IP: 195.85.50.0/24 IP: 195.85.52.0/23 IP: 195.85.55.0 -- 195.85.58.255 IP: 195.85.60.0/23 IP: 195.85.66.0/23 IP: 195.85.74.0/24 IP: 195.85.76.0/23 IP: 195.85.80.0 -- 195.85.84.255 IP: 195.85.86.0/23 IP: 195.85.89.0 -- 195.85.93.255 IP: 195.85.96.0 -- 195.85.101.255 IP: 195.85.104.0/23 IP: 195.85.109.0 -- 195.85.112.255 IP: 195.85.117.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:56:bb:70:ce:a6:41:bb:46:a6:c4:0a:cb:7c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbbe52d834e268dc698830292fde4b63c7da392e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:5e:20:b3:d1:93:a8:40:ef:1a:ea:34:63: 4c:eb:ee:c8:6a:69:8d:03:76:b1:83:2a:b3:a7:b4: 75:14:53:44:d4:e5:2a:c7:cf:9d:88:ec:ca:ff:b2: b0:11:88:93:53:b6:97:c2:24:82:ad:61:79:77:28: 59:84:c7:01:d1:d7:47:f6:92:4b:e7:d5:b2:9c:ed: 03:a9:ac:64:91:72:d2:f1:ac:f0:6a:86:cc:28:c0: 14:52:ab:b1:26:89:44:2e:e0:5c:48:b0:12:cf:8c: 19:17:c8:12:aa:b8:dd:67:b4:02:cc:b1:9f:bd:a1: 1d:87:66:65:68:84:db:3a:2e:e4:74:1f:e8:a8:5a: 81:c8:fb:1e:3a:08:87:d9:10:54:a7:be:d3:5e:06: 27:96:61:e5:fd:17:68:0d:7e:a0:02:60:53:ee:47: 4d:c5:33:39:c5:54:29:a9:d8:82:7b:3a:0c:1c:14: aa:dd:a7:c4:c7:7b:da:b3:25:6d:59:d2:f5:d2:8a: b8:c9:4f:3b:cc:a0:3d:84:25:b5:5d:c4:e8:35:27: 50:06:f7:44:78:8b:a0:d2:73:b8:06:2b:39:91:75: e9:ea:c8:31:0b:48:4a:20:1a:be:11:55:60:de:4a: 28:06:7f:2d:d8:8b:b4:ee:73:b9:ac:c7:61:de:f1: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.128.0/24 193.149.137.0-193.149.138.255 193.149.140.0/23 193.149.146.0/23 193.149.150.0/24 193.149.152.0/24 193.149.154.0/24 193.149.165.0/24 193.149.171.0-193.149.172.255 193.149.177.0/24 193.149.184.0/24 193.149.186.0/24 193.149.188.0/24 193.149.191.0/24 195.85.0.0/23 195.85.4.0/23 195.85.8.0/23 195.85.13.0-195.85.18.255 195.85.22.0/24 195.85.24.0-195.85.26.255 195.85.28.0/22 195.85.37.0/24 195.85.39.0/24 195.85.45.0-195.85.47.255 195.85.50.0/24 195.85.52.0/23 195.85.55.0-195.85.58.255 195.85.60.0/23 195.85.66.0/23 195.85.74.0/24 195.85.76.0/23 195.85.80.0-195.85.84.255 195.85.86.0/23 195.85.89.0-195.85.93.255 195.85.96.0-195.85.101.255 195.85.104.0/23 195.85.109.0-195.85.112.255 195.85.117.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15411 Signature Algorithm: sha256WithRSAEncryption 12:93:25:c4:4c:3e:bb:e1:c9:f1:ea:c4:1a:99:b9:53:a8:c9: 45:5d:93:8d:36:06:ea:79:5b:5d:ce:14:f0:08:f4:e9:12:2c: 04:15:3d:a5:5b:79:8c:64:5c:a6:a3:8f:5f:43:5b:a6:8d:a2: 6a:94:5c:fd:3c:78:65:2c:e8:44:e6:c0:26:73:4e:5a:4c:91: dd:bc:fc:62:d5:15:8f:d4:66:e5:db:63:2f:63:f0:71:23:d4: ea:d5:d5:aa:3a:66:17:13:8c:a7:93:66:99:3f:71:0f:9c:12: c6:f5:1f:45:a8:a3:fe:ba:cc:ab:ca:de:6d:f9:ee:e1:58:0e: 0a:7d:aa:7a:34:dc:ae:02:3a:80:6c:33:a2:e5:64:eb:b9:aa: cc:93:03:8e:52:73:c6:e8:5e:cc:95:58:e7:5c:41:44:2a:35: 23:e0:4a:6f:05:9a:1b:41:f0:85:38:9f:88:1a:00:5f:e8:e3: 0b:90:ec:40:ad:30:d6:f7:91:f1:56:56:4f:82:f9:67:a6:43: 08:46:54:f4:fa:38:d4:73:7e:f0:cb:61:9f:f8:33:d6:60:53: 9b:6c:dc:75:7a:92:a0:01:6c:82:06:1f:3d:ce:9b:7b:22:c1: 14:fc:7c:71:65:b6:6c:85:45:1d:e5:87:ec:bf:19:1a:ef:73: 5a:de:b8:8f -----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgISAZt7Nla7cM6mQbtGpsQKy3xKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmJlNTJkODM0ZTI2OGRjNjk4ODMwMjkyZmRlNGI2M2M3ZGEzOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8BeILPRk6hA7xrqNGNM6+7IammN A3axgyqzp7R1FFNE1OUqx8+diOzK/7KwEYiTU7aXwiSCrWF5dyhZhMcB0ddH9pJL 59WynO0DqaxkkXLS8azwaobMKMAUUquxJolELuBcSLASz4wZF8gSqrjdZ7QCzLGf vaEdh2ZlaITbOi7kdB/oqFqByPseOgiH2RBUp77TXgYnlmHl/RdoDX6gAmBT7kdN xTM5xVQpqdiCezoMHBSq3afEx3vasyVtWdL10oq4yU87zKA9hCW1XcToNSdQBvdE eIug0nO4Bis5kXXp6sgxC0hKIBq+EVVg3kooBn8t2Iu07nO5rMdh3vGtUQIDAQAB o4ID2DCCA9QwHQYDVR0OBBYEFPu+Utg04mjcaYgwKS/eS2PH2jkuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5L2Q4NGI3 YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMxZjUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0Yjdh LTdlYjAtNDZhMi04YThhLTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFw TDk1TFk4ZmFPUzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAVUGCCsG AQUFBwEHAQH/BIIBRDCCAUAwggE8BAIAATCCATQDBADBlYAwDAMEAMGViQMEAMGV igMEAcGVjAMEAcGVkgMEAMGVlgMEAMGVmAMEAMGVmgMEAMGVpTAMAwQAwZWrAwQA wZWsAwQAwZWxAwQAwZW4AwQAwZW6AwQAwZW8AwQAwZW/AwQBw1UAAwQBw1UEAwQB w1UIMAwDBADDVQ0DBADDVRIDBADDVRYwDAMEA8NVGAMEAMNVGgMEAsNVHAMEAMNV JQMEAMNVJzAMAwQAw1UtAwQEw1UgAwQAw1UyAwQBw1U0MAwDBADDVTcDBADDVToD BAHDVTwDBAHDVUIDBADDVUoDBAHDVUwwDAMEBMNVUAMEAMNVVAMEAcNVVjAMAwQA w1VZAwQBw1VcMAwDBAXDVWADBAHDVWQDBAHDVWgwDAMEAMNVbQMEAMNVcAMEAMNV dTAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI8MzANBgkqhkiG9w0BAQsFAAOCAQEA EpMlxEw+u+HJ8erEGpm5U6jJRV2TjTYG6nlbXc4U8Aj06RIsBBU9pVt5jGRcpqOP X0Nbpo2iapRc/Tx4ZSzoRObAJnNOWkyR3bz8YtUVj9Rm5dtjL2PwcSPU6tXVqjpm FxOMp5NmmT9xD5wSxvUfRaij/rrMq8rebfnu4VgOCn2qejTcrgI6gGwzouVk67mq zJMDjlJzxuhezJVY51xBRCo1I+BKbwWaG0HwhTifiBoAX+jjC5DsQK0w1veR8VZW T4L5Z6ZDCEZU9Po41HN+8Mthn/gz1mBTm2zcdXqSoAFsggYfPc6beyLBFPx8cWW2 bIVFHeWH7L8ZGu9zWt64jw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:45 2026 by rpki-client