This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer File: 1Ion9EsQQExS9v_E4I3IK_i13uQ.cer (raw, json) Hash identifier: T2Kwpgibp92+jRK56D0S69j0sVZHopjIQAy8WjjKAVY= Subject key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73ABF938E1B97A0B9B3962EF5E1D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200598 AS: 208308 IP: 5.35.192.0/21 IP: 24.235.22.0/23 IP: 31.187.92.0/22 IP: 37.153.132.0/24 IP: 50.20.224.0/20 IP: 62.112.4.0/22 IP: 62.112.30.0/24 IP: 62.164.224.0/19 IP: 66.9.96.0/20 IP: 66.117.8.0/22 IP: 69.72.72.0/22 IP: 74.124.204.0/22 IP: 77.81.1.0/24 IP: 77.223.192.0 -- 77.223.201.255 IP: 77.223.214.0/23 IP: 79.110.184.0/22 IP: 79.139.52.0/22 IP: 79.139.64.0/23 IP: 83.142.200.0/21 IP: 84.247.20.0/24 IP: 84.247.59.0/24 IP: 85.204.28.0/23 IP: 85.204.160.0/22 IP: 86.104.8.0/24 IP: 86.104.209.0/24 IP: 86.106.28.0/23 IP: 86.106.108.0/24 IP: 88.135.96.0/20 IP: 89.20.50.0/23 IP: 89.32.130.0/23 IP: 89.34.171.0/24 IP: 89.37.60.0/23 IP: 89.39.172.0/23 IP: 89.39.184.0/23 IP: 89.40.166.0/24 IP: 89.40.236.0/23 IP: 89.42.29.0/24 IP: 89.42.40.0/24 IP: 89.42.213.0/24 IP: 89.42.215.0/24 IP: 89.44.102.0/24 IP: 89.47.249.0/24 IP: 91.210.80.0/22 IP: 91.217.106.0/23 IP: 93.114.182.0/24 IP: 93.119.184.0/21 IP: 94.26.64.0/23 IP: 94.26.110.0/23 IP: 94.101.103.0/24 IP: 94.176.96.0/24 IP: 94.177.27.0/24 IP: 94.177.113.0/24 IP: 94.177.118.0/24 IP: 95.178.8.0/21 IP: 95.215.144.0/22 IP: 116.50.16.0/21 IP: 121.127.48.0/20 IP: 128.0.60.0/22 IP: 141.193.108.0/22 IP: 141.193.214.0/23 IP: 162.216.138.0/23 IP: 162.250.216.0/22 IP: 168.75.224.0/20 IP: 168.149.248.0/23 IP: 173.214.200.0/22 IP: 176.111.54.0/23 IP: 176.222.48.0/22 IP: 176.223.181.0/24 IP: 178.216.184.0/21 IP: 178.255.244.0/22 IP: 188.215.12.0/22 IP: 188.241.192.0/24 IP: 192.109.205.0/24 IP: 192.200.192.0/19 IP: 193.91.8.0/23 IP: 194.88.120.0/21 IP: 194.149.76.0/22 IP: 195.78.90.0/23 IP: 195.128.136.0/24 IP: 195.133.202.0/23 IP: 198.14.16.0/20 IP: 198.145.112.0/22 IP: 199.48.230.0/23 IP: 204.15.4.0/22 IP: 205.134.244.0/22 IP: 205.220.216.0/23 IP: 212.32.96.0/19 IP: 212.69.88.0/21 IP: 217.144.108.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3a:bf:93:8e:1b:97:a0:b9:b3:96:2e:f5:e1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:4d:26:90:fe:c8:01:30:49:70:0b:86:9a: ee:4a:fa:f7:63:b8:df:e6:ca:c8:22:9b:a7:47:5d: 75:12:25:df:07:fc:9b:da:e4:10:e2:6e:35:ad:80: ab:71:84:82:20:db:c3:0b:9e:37:be:2e:04:26:c7: 2e:e1:32:e2:92:41:e4:91:77:25:5b:0a:55:ea:ca: fe:2c:0b:46:11:a7:b4:8b:f9:86:fc:fe:cc:22:f9: e4:ac:59:8c:6f:93:74:c7:43:cb:c7:fb:7f:25:b7: 58:69:9e:d0:50:13:a3:b3:6d:66:7d:fa:36:23:c5: 05:18:8c:38:9b:85:19:26:88:38:5f:0a:99:96:50: 33:61:f9:2a:b6:53:db:33:c4:9f:ce:58:8e:82:ed: fc:9b:1b:d7:8b:95:ea:5a:d5:f7:dd:8e:85:be:e0: 3f:ec:6f:0f:60:77:ce:9b:43:52:ca:00:01:e4:a3: fd:8d:4c:ea:5d:d7:36:92:78:a5:33:0d:99:23:ea: ac:27:2b:9f:6f:8e:b0:f2:7b:c7:ee:1b:9e:5c:d1: 65:1c:ed:70:e4:68:08:8f:b9:7e:a1:6b:bd:f1:14: 4a:74:42:4d:96:09:11:db:93:93:0e:30:a5:01:52: 95:c7:e2:47:74:fa:f7:83:11:6a:b8:dd:07:84:ee: fa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.192.0/21 24.235.22.0/23 31.187.92.0/22 37.153.132.0/24 50.20.224.0/20 62.112.4.0/22 62.112.30.0/24 62.164.224.0/19 66.9.96.0/20 66.117.8.0/22 69.72.72.0/22 74.124.204.0/22 77.81.1.0/24 77.223.192.0-77.223.201.255 77.223.214.0/23 79.110.184.0/22 79.139.52.0/22 79.139.64.0/23 83.142.200.0/21 84.247.20.0/24 84.247.59.0/24 85.204.28.0/23 85.204.160.0/22 86.104.8.0/24 86.104.209.0/24 86.106.28.0/23 86.106.108.0/24 88.135.96.0/20 89.20.50.0/23 89.32.130.0/23 89.34.171.0/24 89.37.60.0/23 89.39.172.0/23 89.39.184.0/23 89.40.166.0/24 89.40.236.0/23 89.42.29.0/24 89.42.40.0/24 89.42.213.0/24 89.42.215.0/24 89.44.102.0/24 89.47.249.0/24 91.210.80.0/22 91.217.106.0/23 93.114.182.0/24 93.119.184.0/21 94.26.64.0/23 94.26.110.0/23 94.101.103.0/24 94.176.96.0/24 94.177.27.0/24 94.177.113.0/24 94.177.118.0/24 95.178.8.0/21 95.215.144.0/22 116.50.16.0/21 121.127.48.0/20 128.0.60.0/22 141.193.108.0/22 141.193.214.0/23 162.216.138.0/23 162.250.216.0/22 168.75.224.0/20 168.149.248.0/23 173.214.200.0/22 176.111.54.0/23 176.222.48.0/22 176.223.181.0/24 178.216.184.0/21 178.255.244.0/22 188.215.12.0/22 188.241.192.0/24 192.109.205.0/24 192.200.192.0/19 193.91.8.0/23 194.88.120.0/21 194.149.76.0/22 195.78.90.0/23 195.128.136.0/24 195.133.202.0/23 198.14.16.0/20 198.145.112.0/22 199.48.230.0/23 204.15.4.0/22 205.134.244.0/22 205.220.216.0/23 212.32.96.0/19 212.69.88.0/21 217.144.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200598 208308 Signature Algorithm: sha256WithRSAEncryption 95:39:92:bb:6a:d2:be:1a:c9:4b:de:3d:fd:32:07:a6:50:73: 27:df:e7:46:11:cc:fe:f6:c0:e5:41:43:0c:7b:4f:d4:a6:c1: 66:e8:60:c9:43:c9:43:0b:d3:63:0f:08:48:db:3d:36:25:c5: 9b:b4:b2:03:f2:f7:d5:e9:98:05:90:67:dd:aa:3b:9f:6f:58: aa:6d:68:e8:01:c5:0e:a4:25:e6:25:49:07:aa:b2:59:96:84: 5e:19:8d:4e:d6:a8:9f:ce:b4:82:23:8a:74:29:d0:ae:9e:1a: 3d:c1:c8:ac:29:b0:61:64:f3:96:61:87:c4:92:0c:d9:2c:bd: 19:67:71:9e:e0:60:d8:30:6c:67:42:82:03:8e:85:d2:05:1f: 60:3f:85:36:cc:e0:84:24:76:18:80:63:c0:e7:a9:ef:69:18: 8c:34:f9:d9:f1:46:8f:c8:ff:fa:68:95:45:3d:9b:fa:88:d3: f5:de:a7:c9:11:41:f8:18:a0:90:e9:8c:7e:da:f8:cf:f7:ec: eb:a0:44:67:36:12:0e:78:3d:37:74:ef:5e:04:d9:5e:75:23: 21:f0:f7:de:bc:1c:7f:7d:92:51:b5:c4:54:bc:ce:b2:04:21: c6:2f:3d:85:be:e2:83:9d:54:ef:e1:a3:ec:ed:83:24:01:1f: a8:25:52:40 -----BEGIN CERTIFICATE----- MIIHuzCCBqOgAwIBAgISAZt3xzq/k44bl6C5s5Yu9eHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDhhMjdmNDRiMTA0MDRjNTJmNmZmYzRlMDhkYzgyYmY4YjVkZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ1NJpD+yAEwSXALhpruSvr3Y7jf 5srIIpunR111EiXfB/yb2uQQ4m41rYCrcYSCINvDC543vi4EJscu4TLikkHkkXcl WwpV6sr+LAtGEae0i/mG/P7MIvnkrFmMb5N0x0PLx/t/JbdYaZ7QUBOjs21mffo2 I8UFGIw4m4UZJog4XwqZllAzYfkqtlPbM8SfzliOgu38mxvXi5XqWtX33Y6FvuA/ 7G8PYHfOm0NSygAB5KP9jUzqXdc2knilMw2ZI+qsJyufb46w8nvH7hueXNFlHO1w 5GgIj7l+oWu98RRKdEJNlgkR25OTDjClAVKVx+JHdPr3gxFquN0HhO76+wIDAQAB o4IExzCCBMMwHQYDVR0OBBYEFNSKJ/RLEEBMUvb/xOCNyCv4td7kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzRiYjVh Ny0zNDZjLTQxOTUtOWQwZi01OWY1OTg0YjY0ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvNGJiNWE3 LTM0NmMtNDE5NS05ZDBmLTU5ZjU5ODRiNjRlYS8xLzFJb245RXNRUUV4Uzl2X0U0 STNJS19pMTN1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICPwYIKwYB BQUHAQcBAf8EggIuMIICKjCCAiYEAgABMIICHgMEAwUjwAMEARjrFgMEAh+7XAME ACWZhAMEBDIU4AMEAj5wBAMEAD5wHgMEBT6k4AMEBEIJYAMEAkJ1CAMEAkVISAME Akp8zAMEAE1RATAMAwQGTd/AAwQBTd/IAwQBTd/WAwQCT264AwQCT4s0AwQBT4tA AwQDU47IAwQAVPcUAwQAVPc7AwQBVcwcAwQCVcygAwQAVmgIAwQAVmjRAwQBVmoc AwQAVmpsAwQEWIdgAwQBWRQyAwQBWSCCAwQAWSKrAwQBWSU8AwQBWSesAwQBWSe4 AwQAWSimAwQBWSjsAwQAWSodAwQAWSooAwQAWSrVAwQAWSrXAwQAWSxmAwQAWS/5 AwQCW9JQAwQBW9lqAwQAXXK2AwQDXXe4AwQBXhpAAwQBXhpuAwQAXmVnAwQAXrBg AwQAXrEbAwQAXrFxAwQAXrF2AwQDX7IIAwQCX9eQAwQDdDIQAwQEeX8wAwQCgAA8 AwQCjcFsAwQBjcHWAwQBotiKAwQCovrYAwQEqEvgAwQBqJX4AwQCrdbIAwQBsG82 AwQCsN4wAwQAsN+1AwQDsti4AwQCsv/0AwQCvNcMAwQAvPHAAwQAwG3NAwQFwMjA AwQBwVsIAwQDwlh4AwQCwpVMAwQBw05aAwQAw4CIAwQBw4XKAwQExg4QAwQCxpFw AwQBxzDmAwQCzA8EAwQCzYb0AwQBzdzYAwQF1CBgAwQD1EVYAwQC2ZBsMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwMPlgIDAy20MA0GCSqGSIb3DQEBCwUAA4IBAQCV OZK7atK+GslL3j39MgemUHMn3+dGEcz+9sDlQUMMe0/UpsFm6GDJQ8lDC9NjDwhI 2z02JcWbtLID8vfV6ZgFkGfdqjufb1iqbWjoAcUOpCXmJUkHqrJZloReGY1O1qif zrSCI4p0KdCunho9wcisKbBhZPOWYYfEkgzZLL0ZZ3Ge4GDYMGxnQoIDjoXSBR9g P4U2zOCEJHYYgGPA56nvaRiMNPnZ8UaPyP/6aJVFPZv6iNP13qfJEUH4GKCQ6Yx+ 2vjP9+zroERnNhIOeD03dO9eBNledSMh8PfevBx/fZJRtcRUvM6yBCHGLz2FvuKD nVTv4aPs7YMkAR+oJVJA -----END CERTIFICATE-----Generated at Thu Jan 22 15:17:48 2026 by rpki-client