This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer File: 4MijkN3l4VGaS9PadUqT6YhJLWc.cer (raw, json) Hash identifier: 6dk+FIUVdP016j+EibNLg1gKlddyVwDvXmbUc+gG/Ow= Subject key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A21F184074F5BBA9F000B55526923B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34934 AS: 61323 IP: 31.193.0.0/20 IP: 37.220.88.0/21 IP: 45.67.172.0/22 IP: 45.84.20.0/22 IP: 45.131.136.0/22 IP: 45.145.100.0/22 IP: 45.157.40.0/22 IP: 46.37.160.0/19 IP: 78.24.88.0/22 IP: 78.109.160.0/20 IP: 78.137.112.0/20 IP: 80.66.200.0/22 IP: 80.244.176.0/20 IP: 81.201.128.0/20 IP: 94.229.160.0/20 IP: 109.108.128.0/19 IP: 159.253.208.0/21 IP: 176.124.52.0/22 IP: 178.238.128.0/20 IP: 185.55.76.0/22 IP: 185.156.64.0/22 IP: 185.160.180.0/22 IP: 185.160.252.0/22 IP: 185.162.224.0/22 IP: 185.166.128.0/22 IP: 185.181.196.0/22 IP: 185.182.88.0/22 IP: 185.197.60.0/22 IP: 185.207.108.0/22 IP: 185.210.196.0/22 IP: 185.213.116.0/22 IP: 185.216.76.0/22 IP: 185.217.40.0/22 IP: 185.220.60.0/22 IP: 185.221.204.0/22 IP: 185.224.68.0/22 IP: 185.226.220.0/22 IP: 185.234.36.0/22 IP: 185.241.248.0/22 IP: 192.166.44.0/22 IP: 193.39.252.0/22 IP: 194.39.164.0/22 IP: 195.69.100.0/22 IP: 2a02:21a8::/32 IP: 2a02:22d0::/32 IP: 2a09:b200::/29 IP: 2a09:b600::/29 IP: 2a09:ba00::/29 IP: 2a0c:3dc0::/29 IP: 2a0d:1bc0::/29 IP: 2a0e:9380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1f:18:40:74:f5:bb:a9:f0:00:b5:55:26:92:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:f4:dc:e2:05:ad:22:73:0e:75:ad:1f:0d: 8a:dc:49:36:4a:cc:49:55:06:9a:e4:ed:c3:34:e4: 7a:fb:c2:38:37:92:52:22:c7:74:ca:73:e6:37:8e: 80:62:47:78:b9:5b:4d:38:fc:73:90:42:f8:3c:85: 29:48:49:de:ef:c2:14:5f:81:32:8c:ad:88:df:d0: f3:e2:cd:ba:6f:c8:74:67:f4:91:eb:b6:8b:5b:bc: a2:6e:3c:c4:0b:58:2a:ac:04:d3:3f:4a:10:09:d9: 88:c5:83:2e:4c:ba:42:9b:7f:aa:48:f0:9b:38:64: 74:56:f9:05:82:26:b3:b5:e4:5d:1b:ae:a2:55:04: 7b:49:a0:14:21:0c:08:1e:88:79:d1:4f:ed:98:22: 16:4f:9c:e1:96:eb:b9:64:c2:73:56:e2:da:f9:ea: 63:11:e3:d7:33:bf:b4:b7:3e:ae:be:79:a1:07:8c: 1f:bf:25:e9:25:16:68:a1:39:4d:69:f1:0d:6e:73: 84:34:a0:04:e0:d8:74:9d:2e:66:e5:52:cc:2b:91: eb:26:5d:ed:3e:0c:74:36:69:b0:ea:b2:69:2b:16: c2:b9:fb:0b:29:f4:19:02:79:ea:a5:41:a0:e8:03: 84:9e:31:e2:31:51:50:ff:f4:95:06:a3:c4:76:1d: 66:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.0.0/20 37.220.88.0/21 45.67.172.0/22 45.84.20.0/22 45.131.136.0/22 45.145.100.0/22 45.157.40.0/22 46.37.160.0/19 78.24.88.0/22 78.109.160.0/20 78.137.112.0/20 80.66.200.0/22 80.244.176.0/20 81.201.128.0/20 94.229.160.0/20 109.108.128.0/19 159.253.208.0/21 176.124.52.0/22 178.238.128.0/20 185.55.76.0/22 185.156.64.0/22 185.160.180.0/22 185.160.252.0/22 185.162.224.0/22 185.166.128.0/22 185.181.196.0/22 185.182.88.0/22 185.197.60.0/22 185.207.108.0/22 185.210.196.0/22 185.213.116.0/22 185.216.76.0/22 185.217.40.0/22 185.220.60.0/22 185.221.204.0/22 185.224.68.0/22 185.226.220.0/22 185.234.36.0/22 185.241.248.0/22 192.166.44.0/22 193.39.252.0/22 194.39.164.0/22 195.69.100.0/22 IPv6: 2a02:21a8::/32 2a02:22d0::/32 2a09:b200::/29 2a09:b600::/29 2a09:ba00::/29 2a0c:3dc0::/29 2a0d:1bc0::/29 2a0e:9380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34934 61323 Signature Algorithm: sha256WithRSAEncryption 3f:8d:78:c5:30:cd:08:37:78:4e:70:88:9f:43:32:94:b8:94: 88:4f:e8:79:ae:24:29:0e:ab:09:e9:21:7c:8b:87:fa:04:84: 20:cb:b2:80:72:ad:81:24:d4:31:9f:78:65:22:cd:41:e2:3b: 75:7a:a1:83:5d:23:79:41:3a:56:11:8b:ed:fe:20:82:33:4d: 2c:c1:e2:20:17:cf:31:4b:59:6c:df:c7:06:73:b1:b7:93:da: 83:ca:aa:62:8f:65:ec:a2:9d:09:71:c2:74:67:1e:32:c8:6e: 36:88:2b:b1:79:56:73:05:a8:82:f9:41:d1:53:6e:92:f8:6c: 33:98:cc:e5:96:73:94:f3:60:db:d5:93:be:d0:cd:fc:a7:9e: e5:d3:e7:f5:98:3c:9e:e9:84:1f:00:9c:72:b2:a0:28:89:54: 6a:8f:09:ab:76:7b:ae:c4:41:9c:4a:04:f2:98:14:62:17:cd: b7:59:9e:bb:02:24:af:11:94:42:fa:48:2a:b2:9d:55:54:69: df:8d:30:7b:8f:07:97:8c:07:dc:c6:67:67:be:ec:8d:f0:ad: fc:76:88:bf:4d:79:d9:be:05:cb:c9:c5:bb:ba:01:f1:f5:11: 98:74:77:f2:bf:33:e6:6d:13:a1:5b:0a:9c:53:da:fc:87:bc: d6:2a:a7:76 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgISAZt4oh8YQHT1u6nwALVVJpI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM4YTM5MGRkZTVlMTUxOWE0YmQzZGE3NTRhOTNlOTg4NDkyZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12L03OIFrSJzDnWtHw2K3Ek2SsxJ VQaa5O3DNOR6+8I4N5JSIsd0ynPmN46AYkd4uVtNOPxzkEL4PIUpSEne78IUX4Ey jK2I39Dz4s26b8h0Z/SR67aLW7yibjzEC1gqrATTP0oQCdmIxYMuTLpCm3+qSPCb OGR0VvkFgiazteRdG66iVQR7SaAUIQwIHoh50U/tmCIWT5zhluu5ZMJzVuLa+epj EePXM7+0tz6uvnmhB4wfvyXpJRZooTlNafENbnOENKAE4Nh0nS5m5VLMK5HrJl3t Pgx0Nmmw6rJpKxbCufsLKfQZAnnqpUGg6AOEnjHiMVFQ//SVBqPEdh1mpQIDAQAB o4ID6zCCA+cwHQYDVR0OBBYEFODIo5Dd5eFRmkvT2nVKk+mISS1nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzg2OWIz MC1mY2Q2LTQ4ZGYtOGQyNS1iZWYzYmEyMWM3MTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvODY5YjMw LWZjZDYtNDhkZi04ZDI1LWJlZjNiYTIxYzcxNS8xLzRNaWprTjNsNFZHYVM5UGFk VXFUNlloSkxXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBYwYIKwYB BQUHAQcBAf8EggFSMIIBTjCCAQoEAgABMIIBAgMEBB/BAAMEAyXcWAMEAi1DrAME Ai1UFAMEAi2DiAMEAi2RZAMEAi2dKAMEBS4loAMEAk4YWAMEBE5toAMEBE6JcAME AlBCyAMEBFD0sAMEBFHJgAMEBF7loAMEBW1sgAMEA5/90AMEArB8NAMEBLLugAME Ark3TAMEArmcQAMEArmgtAMEArmg/AMEArmi4AMEArmmgAMEArm1xAMEArm2WAME ArnFPAMEArnPbAMEArnSxAMEArnVdAMEArnYTAMEArnZKAMEArncPAMEArndzAME ArngRAMEArni3AMEArnqJAMEArnx+AMEAsCmLAMEAsEn/AMEAsInpAMEAsNFZDA+ BAIAAjA4AwUAKgIhqAMFACoCItADBQMqCbIAAwUDKgm2AAMFAyoJugADBQMqDD3A AwUDKg0bwAMFAyoOk4AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIh2AgMA74sw DQYJKoZIhvcNAQELBQADggEBAD+NeMUwzQg3eE5wiJ9DMpS4lIhP6HmuJCkOqwnp IXyLh/oEhCDLsoByrYEk1DGfeGUizUHiO3V6oYNdI3lBOlYRi+3+IIIzTSzB4iAX zzFLWWzfxwZzsbeT2oPKqmKPZeyinQlxwnRnHjLIbjaIK7F5VnMFqIL5QdFTbpL4 bDOYzOWWc5TzYNvVk77QzfynnuXT5/WYPJ7phB8AnHKyoCiJVGqPCat2e67EQZxK BPKYFGIXzbdZnrsCJK8RlEL6SCqynVVUad+NMHuPB5eMB9zGZ2e+7I3wrfx2iL9N edm+BcvJxbu6AfH1EZh0d/K/M+ZtE6FbCpxT2vyHvNYqp3Y= -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:46 2026 by rpki-client