This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.cer (raw, json) Hash identifier: lZfhZW+hv7F4Xlo4M+wYPhiZmOGAEMlhmLe2Thu0kX4= Subject key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB596D585F4B690D83C6210E8BE4C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208677 IP: 31.40.248.0/23 IP: 37.18.8.0 -- 37.18.10.255 IP: 37.18.22.0/24 IP: 37.18.72.0/23 IP: 37.18.100.0 -- 37.18.102.255 IP: 37.18.107.0 -- 37.18.122.255 IP: 37.44.196.0 -- 37.44.198.255 IP: 37.230.139.0/24 IP: 37.230.179.0 -- 37.230.181.255 IP: 37.230.184.0 -- 37.230.186.255 IP: 37.230.192.0/21 IP: 37.230.224.0/24 IP: 37.230.233.0/24 IP: 45.9.24.0/22 IP: 45.89.224.0/22 IP: 45.132.176.0/22 IP: 45.136.146.0/23 IP: 45.151.30.0/23 IP: 45.155.204.0/23 IP: 46.16.36.0/24 IP: 46.243.141.0 -- 46.243.143.255 IP: 46.243.172.0/24 IP: 46.243.201.0/24 IP: 46.243.205.0 -- 46.243.206.255 IP: 46.243.226.0/23 IP: 46.243.244.0/23 IP: 46.253.132.0/24 IP: 62.233.43.0/24 IP: 82.202.136.0/21 IP: 82.202.156.0/22 IP: 84.54.56.0/22 IP: 85.208.85.0 -- 85.208.87.255 IP: 85.208.209.0 -- 85.208.211.255 IP: 85.209.149.0 -- 85.209.151.255 IP: 85.235.82.0/23 IP: 87.242.84.0 -- 87.242.95.255 IP: 87.242.100.0/22 IP: 87.242.116.0 -- 87.242.127.255 IP: 88.218.65.0 -- 88.218.67.255 IP: 89.232.160.0 -- 89.232.171.255 IP: 89.232.176.0/22 IP: 91.224.86.0/23 IP: 94.139.252.0/22 IP: 94.158.22.0/23 IP: 95.174.88.0/21 IP: 141.101.151.0 -- 141.101.152.255 IP: 141.101.201.0/24 IP: 152.89.196.0/24 IP: 168.222.176.0/22 IP: 176.108.240.0/20 IP: 176.109.96.0/20 IP: 176.123.160.0/21 IP: 178.170.191.0 -- 178.170.197.255 IP: 178.170.242.0/24 IP: 185.50.200.0/22 IP: 185.234.11.0/24 IP: 185.241.57.0/24 IP: 188.72.96.0/24 IP: 188.72.106.0 -- 188.72.109.255 IP: 188.72.117.0 -- 188.72.118.255 IP: 192.144.12.0/22 IP: 192.144.28.0/24 IP: 193.42.116.0/23 IP: 193.105.4.0/24 IP: 193.163.94.0/24 IP: 193.201.8.0/24 IP: 194.5.92.0/23 IP: 194.26.228.0/24 IP: 194.50.72.0/24 IP: 194.113.34.0/23 IP: 195.128.152.0/24 IP: 213.171.24.0/21 IP: 213.178.153.0 -- 213.178.154.255 IP: 2a0c:2b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:59:6d:58:5f:4b:69:0d:83:c6:21:0e:8b:e4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:46:67:78:72:8a:3b:c9:c8:ef:4b:b7:df: 60:78:83:a2:0f:fb:cd:d3:7b:cc:48:31:64:37:82: fb:0d:78:68:62:52:e4:ae:a1:09:b1:47:8b:aa:86: 45:44:e2:fb:27:63:8d:40:17:76:05:b5:00:28:b3: 8e:b5:57:97:c1:03:20:17:41:c5:ca:ff:bb:bb:f6: 2a:01:85:51:f3:08:01:77:3e:fb:99:65:61:a2:4c: f9:cb:cb:56:ac:33:06:26:b4:7c:f0:41:5e:a6:cc: c6:59:4e:f6:f3:1d:e6:f6:88:fe:e0:5b:c5:31:38: 86:ec:63:68:7b:1b:4a:a2:78:de:f2:ef:94:88:18: 8e:9f:5c:da:18:3e:ef:72:69:84:39:63:e1:76:2b: 6b:c4:24:72:ff:4c:63:da:57:55:90:06:5e:03:ca: 10:38:6e:67:c3:11:f5:ee:a5:e6:9d:98:5b:0b:f8: bb:80:63:f5:34:00:d2:28:98:34:04:f8:71:e4:a1: 5d:09:25:22:66:52:2d:a1:c2:68:5e:73:2f:31:7a: c8:60:68:0e:ce:be:e5:65:60:d9:81:03:c4:11:b6: 53:41:a4:d6:0b:e9:c6:ae:ed:49:d2:a6:2b:5b:ad: 6e:b0:b6:ba:2f:5a:98:a6:97:04:41:cf:f3:0c:1b: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.248.0/23 37.18.8.0-37.18.10.255 37.18.22.0/24 37.18.72.0/23 37.18.100.0-37.18.102.255 37.18.107.0-37.18.122.255 37.44.196.0-37.44.198.255 37.230.139.0/24 37.230.179.0-37.230.181.255 37.230.184.0-37.230.186.255 37.230.192.0/21 37.230.224.0/24 37.230.233.0/24 45.9.24.0/22 45.89.224.0/22 45.132.176.0/22 45.136.146.0/23 45.151.30.0/23 45.155.204.0/23 46.16.36.0/24 46.243.141.0-46.243.143.255 46.243.172.0/24 46.243.201.0/24 46.243.205.0-46.243.206.255 46.243.226.0/23 46.243.244.0/23 46.253.132.0/24 62.233.43.0/24 82.202.136.0/21 82.202.156.0/22 84.54.56.0/22 85.208.85.0-85.208.87.255 85.208.209.0-85.208.211.255 85.209.149.0-85.209.151.255 85.235.82.0/23 87.242.84.0-87.242.95.255 87.242.100.0/22 87.242.116.0-87.242.127.255 88.218.65.0-88.218.67.255 89.232.160.0-89.232.171.255 89.232.176.0/22 91.224.86.0/23 94.139.252.0/22 94.158.22.0/23 95.174.88.0/21 141.101.151.0-141.101.152.255 141.101.201.0/24 152.89.196.0/24 168.222.176.0/22 176.108.240.0/20 176.109.96.0/20 176.123.160.0/21 178.170.191.0-178.170.197.255 178.170.242.0/24 185.50.200.0/22 185.234.11.0/24 185.241.57.0/24 188.72.96.0/24 188.72.106.0-188.72.109.255 188.72.117.0-188.72.118.255 192.144.12.0/22 192.144.28.0/24 193.42.116.0/23 193.105.4.0/24 193.163.94.0/24 193.201.8.0/24 194.5.92.0/23 194.26.228.0/24 194.50.72.0/24 194.113.34.0/23 195.128.152.0/24 213.171.24.0/21 213.178.153.0-213.178.154.255 IPv6: 2a0c:2b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208677 Signature Algorithm: sha256WithRSAEncryption 52:46:82:97:3d:60:df:c4:b4:fc:40:bd:c1:30:36:b4:29:89: d9:e9:b1:97:ae:57:55:7c:83:82:cf:54:f2:96:20:39:34:fb: d2:0b:77:6c:85:98:98:c4:0c:c8:22:ee:c9:27:d5:8b:a2:6b: ec:7c:46:d3:03:b8:c5:75:7b:32:62:61:6f:c6:cb:06:6b:7f: 50:c6:bb:eb:ac:3a:a7:e6:8d:b1:32:39:93:f5:54:12:02:2d: 01:ce:cc:38:bc:d4:8b:36:99:24:18:a0:fc:d0:e1:f9:4e:57: 5e:53:c9:f3:b4:53:d7:9d:5b:63:52:bf:00:1a:c8:93:89:f3: 74:b6:33:41:32:93:69:29:29:16:58:29:0c:b7:0d:8c:4c:65: 89:12:cb:c3:51:00:ef:72:cd:57:58:30:cc:cd:f4:3a:00:09: 35:b6:7c:11:53:fd:40:a3:f1:ac:b2:44:79:2b:a9:fb:41:dd: 84:21:90:a5:8e:7f:32:f6:b6:56:75:49:68:4f:e9:02:9f:e2: 0b:39:05:10:34:4e:8d:de:44:8c:d1:53:a6:a0:95:62:8a:ea: 2d:2c:8d:ab:46:41:23:af:da:b6:5b:e7:e2:3f:f2:37:98:7d: 5d:b3:2d:d2:a8:67:21:cc:94:f2:0d:ba:40:a0:0c:ad:be:87: 08:df:d5:c6 -----BEGIN CERTIFICATE----- MIIH/jCCBuagAwIBAgISAZt9y1ltWF9LaQ2DxiEOi+TCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTE5ZTFmM2ZlNjliNGViZGZmMDJhOWE4NTdlN2M2YzJiMjUzMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHVGZ3hyijvJyO9Lt99geIOiD/vN 03vMSDFkN4L7DXhoYlLkrqEJsUeLqoZFROL7J2ONQBd2BbUAKLOOtVeXwQMgF0HF yv+7u/YqAYVR8wgBdz77mWVhokz5y8tWrDMGJrR88EFepszGWU728x3m9oj+4FvF MTiG7GNoextKonje8u+UiBiOn1zaGD7vcmmEOWPhditrxCRy/0xj2ldVkAZeA8oQ OG5nwxH17qXmnZhbC/i7gGP1NADSKJg0BPhx5KFdCSUiZlItocJoXnMvMXrIYGgO zr7lZWDZgQPEEbZTQaTWC+nGru1J0qYrW61usLa6L1qYppcEQc/zDBvOPwIDAQAB o4IFCjCCBQYwHQYDVR0OBBYEFPkZ4fP+abTr3/AqmoV+fGwrJTAaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzFjOTgw OS0xZjYwLTQzYzItODEwMy1kYWQwNDIwYjg1ZDMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5 LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVkMy8xLzEtUm5oOF81cHRPdmY4Q3Fh aFg1OGJDc2xNQm8ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAoYGCCsG AQUFBwEHAQH/BIICdTCCAnEwggJeBAIAATCCAlYDBAEfKPgwDAMEAyUSCAMEACUS CgMEACUSFgMEASUSSDAMAwQCJRJkAwQAJRJmMAwDBAAlEmsDBAAlEnowDAMEAiUs xAMEACUsxgMEACXmizAMAwQAJeazAwQBJea0MAwDBAMl5rgDBAAl5roDBAMl5sAD BAAl5uADBAAl5ukDBAItCRgDBAItWeADBAIthLADBAEtiJIDBAEtlx4DBAEtm8wD BAAuECQwDAMEAC7zjQMEBC7zgAMEAC7zrAMEAC7zyTAMAwQALvPNAwQALvPOAwQB LvPiAwQBLvP0AwQALv2EAwQAPukrAwQDUsqIAwQCUsqcAwQCVDY4MAwDBABV0FUD BANV0FAwDAMEAFXQ0QMEAlXQ0DAMAwQAVdGVAwQDVdGQAwQBVetSMAwDBAJX8lQD BAVX8kADBAJX8mQwDAMEAlfydAMEB1fyADAMAwQAWNpBAwQCWNpAMAwDBAVZ6KAD BAJZ6KgDBAJZ6LADBAFb4FYDBAJei/wDBAFenhYDBANfrlgwDAMEAI1llwMEAI1l mAMEAI1lyQMEAJhZxAMEAqjesAMEBLBs8AMEBLBtYAMEA7B7oDAMAwQAsqq/AwQB sqrEAwQAsqryAwQCuTLIAwQAueoLAwQAufE5AwQAvEhgMAwDBAG8SGoDBAG8SGww DAMEALxIdQMEALxIdgMEAsCQDAMEAMCQHAMEAcEqdAMEAMFpBAMEAMGjXgMEAMHJ CAMEAcIFXAMEAMIa5AMEAMIySAMEAcJxIgMEAMOAmAMEA9WrGDAMAwQA1bKZAwQA 1bKaMA0EAgACMAcDBQMqDCuAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvJTAN BgkqhkiG9w0BAQsFAAOCAQEAUkaClz1g38S0/EC9wTA2tCmJ2emxl65XVXyDgs9U 8pYgOTT70gt3bIWYmMQMyCLuySfVi6Jr7HxG0wO4xXV7MmJhb8bLBmt/UMa766w6 p+aNsTI5k/VUEgItAc7MOLzUizaZJBig/NDh+U5XXlPJ87RT151bY1K/ABrIk4nz dLYzQTKTaSkpFlgpDLcNjExliRLLw1EA73LNV1gwzM30OgAJNbZ8EVP9QKPxrLJE eSup+0HdhCGQpY5/Mva2VnVJaE/pAp/iCzkFEDROjd5EjNFTpqCVYorqLSyNq0ZB I6/atlvn4j/yN5h9XbMt0qhnIcyU8g26QKAMrb6HCN/Vxg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:14 2026 by rpki-client