This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer (raw, json) Hash identifier: ZanF3HoQd4Uos7ORkNXh/DsvEStJgDsiHQpjnmNLNPI= Subject key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2A123986242CBFADB33FD8F68EAA4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2773 AS: 2775 -- 2778 AS: 2780 AS: 2782 AS: 2792 AS: 3320 AS: 8204 AS: 15996 AS: 20936 IP: 46.80.0.0/12 IP: 62.153.0.0 -- 62.159.255.255 IP: 62.224.0.0/14 IP: 79.192.0.0/10 IP: 80.128.0.0/11 IP: 81.28.64.0/20 IP: 84.128.0.0/10 IP: 87.128.0.0/10 IP: 91.0.0.0/10 IP: 93.192.0.0/10 IP: 185.103.92.0/22 IP: 192.166.48.0/20 IP: 193.158.0.0/15 IP: 194.25.0.0/16 IP: 194.150.228.0/23 IP: 195.145.0.0/16 IP: 195.243.0.0/16 IP: 212.184.0.0/15 IP: 217.0.0.0/13 IP: 217.80.0.0/12 IP: 217.224.0.0/11 IP: 2001:67c:1ac::/48 IP: 2003::/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a1:23:98:62:42:cb:fa:db:33:fd:8f:68:ea:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:cc:c6:2a:75:9b:4d:d1:40:f0:aa:2d:ba: 0a:e9:28:f6:28:32:a8:57:59:8d:fc:83:9c:d7:29: 7f:b0:ae:c2:87:43:94:2d:3f:6e:33:2a:46:65:7b: 1c:8f:a0:50:a5:fa:97:56:de:1d:58:9e:95:8b:cb: 25:fe:b9:4e:78:47:9d:a7:b2:b8:b9:38:8a:ef:56: 1c:83:0c:ab:ec:40:cf:a4:1c:8b:49:ec:e8:ad:32: ee:55:c8:28:72:a1:dc:40:05:bb:74:a0:95:64:82: 5e:a1:3c:f7:b5:19:12:09:81:f8:c2:0a:1b:34:86: 59:42:cc:07:f5:0a:29:29:56:30:e3:32:2d:b0:9e: 0a:a7:b3:88:ff:7b:e3:6e:a4:e6:26:46:fa:51:ba: ab:1f:8b:b8:25:a2:bd:23:81:fb:92:e1:d4:c9:b9: 99:67:58:f9:39:e3:bc:f2:02:40:71:61:63:ea:21: fd:1c:e3:11:81:a7:8e:4e:0d:9b:7a:30:53:d4:6e: 36:77:29:d2:10:da:6b:76:a1:fa:23:85:9e:a6:04: 32:c0:51:b2:22:e2:6b:13:e7:52:21:d4:0d:3d:c3: d8:01:be:d5:99:89:31:e2:21:0e:af:f2:77:2a:82: c9:7b:e6:8b:9c:33:ab:fb:8a:3a:4f:fa:9a:a1:6a: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.80.0.0/12 62.153.0.0-62.159.255.255 62.224.0.0/14 79.192.0.0/10 80.128.0.0/11 81.28.64.0/20 84.128.0.0/10 87.128.0.0/10 91.0.0.0/10 93.192.0.0/10 185.103.92.0/22 192.166.48.0/20 193.158.0.0/15 194.25.0.0/16 194.150.228.0/23 195.145.0.0/16 195.243.0.0/16 212.184.0.0/15 217.0.0.0/13 217.80.0.0/12 217.224.0.0/11 IPv6: 2001:67c:1ac::/48 2003::/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2773 2775-2778 2780 2782 2792 3320 8204 15996 20936 Signature Algorithm: sha256WithRSAEncryption 3c:8e:50:72:e1:44:af:10:07:01:49:1f:70:3f:23:d5:bf:e2: 07:2e:3d:14:52:a0:75:a2:56:73:7f:0f:6f:db:4a:1d:f7:27: 32:ea:b0:c7:3a:51:cc:9f:e8:d4:85:1a:21:73:84:cf:30:ca: 32:06:86:8f:70:27:af:08:14:8d:fd:55:f4:0c:e4:c8:d4:cc: 42:a0:52:d2:9b:9f:a9:2b:e0:e3:9a:ac:b6:20:c0:77:10:e7: 1e:7a:6e:a8:8f:dd:af:fe:0c:49:2b:28:a4:cf:04:d5:a6:79: 3b:16:79:e2:5e:2c:5b:5e:5b:46:6e:0f:f8:00:9e:91:be:e4: 60:fa:a8:ac:5b:33:ae:bf:ad:52:f7:17:ef:ef:d0:ae:8d:88: ad:6e:ed:b3:10:b5:b5:c7:95:56:97:36:c4:2a:45:1b:c5:f2: 04:6b:dd:2b:47:c2:59:4b:56:f1:f6:57:73:c9:42:83:c2:2f: 00:32:a3:e0:d8:d7:01:0c:14:92:ea:71:59:c2:87:61:66:64: 25:c4:21:b1:b0:79:c9:23:b0:f2:96:87:f7:c7:7d:83:25:cf: dc:50:f7:78:1d:34:36:93:75:87:1e:14:50:18:41:3c:ef:3c: 07:26:78:e9:6a:1e:75:ce:39:6d:0f:49:62:9b:32:43:cd:f5: 15:fe:3c:c8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgISAZt4oqEjmGJCy/rbM/2PaOqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWQ3MTAwZTc3ZWQ5MTE5ZDY2ZTIzMjFiYjY3MTFkN2U3NjA5ODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxULMxip1m03RQPCqLboK6Sj2KDKo V1mN/IOc1yl/sK7Ch0OULT9uMypGZXscj6BQpfqXVt4dWJ6Vi8sl/rlOeEedp7K4 uTiK71Ycgwyr7EDPpByLSezorTLuVcgocqHcQAW7dKCVZIJeoTz3tRkSCYH4wgob NIZZQswH9QopKVYw4zItsJ4Kp7OI/3vjbqTmJkb6UbqrH4u4JaK9I4H7kuHUybmZ Z1j5OeO88gJAcWFj6iH9HOMRgaeOTg2bejBT1G42dynSENprdqH6I4WepgQywFGy IuJrE+dSIdQNPcPYAb7VmYkx4iEOr/J3KoLJe+aLnDOr+4o6T/qaoWrk9wIDAQAB o4IDTjCCA0owHQYDVR0OBBYEFPrXEA537ZEZ1m4jIbtnEdfnYJgrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzAxZDQx MS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJmM2UvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDEx LWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1o dTJjUjEtZGdtQ3MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBpgYIKwYB BQUHAQcBAf8EgZYwgZMwegQCAAEwdAMDBC5QMAoDAwA+mQMDBT6AAwMCPuADAwZP wAMDBVCAAwQEURxAAwMGVIADAwZXgAMDBlsAAwMGXcADBAK5Z1wDBATApjADAwHB ngMDAMIZAwQBwpbkAwMAw5EDAwDD8wMDAdS4AwMD2QADAwTZUAMDBdngMBUEAgAC MA8DBwAgAQZ8AawDBAUgAwAwPwYIKwYBBQUHAQgBAf8EMDAuoCwwKgICCtUwCAIC CtcCAgraAgIK3AICCt4CAgroAgIM+AICIAwCAj58AgJRyDANBgkqhkiG9w0BAQsF AAOCAQEAPI5QcuFErxAHAUkfcD8j1b/iBy49FFKgdaJWc38Pb9tKHfcnMuqwxzpR zJ/o1IUaIXOEzzDKMgaGj3AnrwgUjf1V9AzkyNTMQqBS0pufqSvg45qstiDAdxDn HnpuqI/dr/4MSSsopM8E1aZ5OxZ54l4sW15bRm4P+ACekb7kYPqorFszrr+tUvcX 7+/Qro2IrW7tsxC1tceVVpc2xCpFG8XyBGvdK0fCWUtW8fZXc8lCg8IvADKj4NjX AQwUkupxWcKHYWZkJcQhsbB5ySOw8paH98d9gyXP3FD3eB00NpN1hx4UUBhBPO88 ByZ46Woedc45bQ9JYpsyQ831Ff48yA== -----END CERTIFICATE-----Generated at Fri Jan 9 18:08:11 2026 by rpki-client