This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer File: 8EpYBH83u8BXlEu_jK2HQoeVkto.cer (raw, json) Hash identifier: YMhVfQ49aShDm/JCEPZz/T1U1tNRKwPZi0mL9Y6AJxU= Subject key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C04632F49D98317D1196AD8A40C5A3B66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 11:35:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201891 IP: 5.180.84.0/22 IP: 14.102.16.0/22 IP: 14.102.52.0/22 IP: 14.102.60.0/22 IP: 14.102.84.0/22 IP: 31.222.216.0/22 IP: 45.89.44.0/22 IP: 45.116.104.0/22 IP: 45.144.196.0/22 IP: 45.150.116.0/22 IP: 45.150.180.0/22 IP: 46.244.18.0/23 IP: 46.244.96.0/22 IP: 46.244.108.0/22 IP: 46.244.114.0 -- 46.244.119.255 IP: 62.169.128.0/21 IP: 62.169.140.0/22 IP: 66.56.80.0/20 IP: 77.246.245.0/24 IP: 81.95.48.0/22 IP: 81.95.56.0/21 IP: 84.51.232.0/22 IP: 92.51.232.0/21 IP: 92.51.248.0/21 IP: 92.240.144.0/21 IP: 103.61.196.0/22 IP: 103.125.76.0/22 IP: 103.138.78.0/23 IP: 103.198.28.0/22 IP: 103.210.196.0/22 IP: 103.213.212.0/22 IP: 103.255.76.0/23 IP: 107.150.166.0 -- 107.150.169.255 IP: 107.150.172.0/23 IP: 110.172.180.0/22 IP: 114.69.236.0/22 IP: 118.91.180.0/22 IP: 124.198.128.0/19 IP: 147.90.0.0/16 IP: 155.2.176.0 -- 155.2.223.255 IP: 158.173.128.0/17 IP: 162.218.176.0/22 IP: 163.47.104.0/22 IP: 167.160.0.0/22 IP: 167.160.12.0/23 IP: 167.160.16.0/23 IP: 167.160.28.0/23 IP: 170.62.88.0 -- 170.62.119.255 IP: 170.62.160.0/23 IP: 170.62.176.0 -- 170.62.187.255 IP: 170.62.194.0/23 IP: 170.62.202.0/23 IP: 170.62.206.0/23 IP: 170.62.224.0 -- 170.62.247.255 IP: 185.19.40.0/24 IP: 185.34.108.0/22 IP: 185.51.48.0/22 IP: 185.51.54.0/23 IP: 185.70.112.0/22 IP: 185.102.168.0/21 IP: 185.145.80.0/22 IP: 185.161.110.0/23 IP: 185.192.212.0/22 IP: 185.203.148.0/22 IP: 185.212.172.0/22 IP: 185.238.128.0/22 IP: 185.243.140.0/22 IP: 190.106.64.0/20 IP: 192.140.220.0/22 IP: 192.253.208.0/22 IP: 193.142.58.0/23 IP: 198.55.28.0/22 IP: 202.49.92.0/22 IP: 202.49.244.0/22 IP: 202.50.124.0/22 IP: 203.188.160.0/19 IP: 212.32.48.0/22 IP: 212.32.68.0 -- 212.32.79.255 IP: 212.56.48.0/21 IP: 212.56.60.0/22 IP: 212.78.244.0 -- 212.78.251.255 IP: 212.104.144.0/22 IP: 213.254.160.0/22 IP: 213.254.172.0/22 IP: 213.254.188.0/22 IP: 2a04:30c0::/29 IP: 2a06:25c0::/29 IP: 2a14:4d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:63:2f:49:d9:83:17:d1:19:6a:d8:a4:0c:5a:3b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 11:35:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f04a58047f37bbc057944bbf8cad8742879592da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0f:da:b4:5e:6b:91:29:a3:eb:99:5d:51:b3: f5:38:fc:b9:dd:99:28:00:ab:0f:41:ab:e3:a2:15: a7:f4:26:55:af:7e:67:a7:a0:ad:c1:ae:d3:a8:44: e0:73:0d:61:31:f1:e8:6d:0f:67:5c:d4:9c:58:6c: 60:03:60:b6:23:fc:b7:8e:53:d1:b5:58:ab:4d:4b: c5:81:ba:df:72:8e:fb:f8:86:f8:6a:56:94:32:f3: 35:9b:96:de:bf:75:6f:9e:4b:eb:6c:a7:65:2f:45: 04:df:ba:6c:85:fe:81:4a:aa:64:f6:20:01:4a:02: 3c:24:bb:22:45:77:82:ef:37:9c:41:28:15:f8:e0: cb:e8:5a:3c:e6:00:6e:91:f1:0e:1e:cd:ad:b2:0a: 56:5f:25:01:30:1f:61:77:e4:f5:f0:8d:62:16:33: 2d:05:4c:c2:a5:85:f8:cf:0b:d6:9e:2f:ad:9c:df: ac:16:41:f3:bc:ea:96:ba:4c:de:e4:16:c8:39:0e: ac:f1:19:3d:9a:83:8a:a6:96:4c:0b:e8:d4:ff:9e: 34:7e:1e:2d:3c:9c:a0:cc:ca:2a:e1:5e:ef:82:60: ea:2a:d3:6a:94:cb:9a:cb:55:6d:6f:93:64:5e:e6: 18:53:4b:fd:df:3f:cd:34:00:5c:26:50:d5:cc:d8: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.84.0/22 14.102.16.0/22 14.102.52.0/22 14.102.60.0/22 14.102.84.0/22 31.222.216.0/22 45.89.44.0/22 45.116.104.0/22 45.144.196.0/22 45.150.116.0/22 45.150.180.0/22 46.244.18.0/23 46.244.96.0/22 46.244.108.0/22 46.244.114.0-46.244.119.255 62.169.128.0/21 62.169.140.0/22 66.56.80.0/20 77.246.245.0/24 81.95.48.0/22 81.95.56.0/21 84.51.232.0/22 92.51.232.0/21 92.51.248.0/21 92.240.144.0/21 103.61.196.0/22 103.125.76.0/22 103.138.78.0/23 103.198.28.0/22 103.210.196.0/22 103.213.212.0/22 103.255.76.0/23 107.150.166.0-107.150.169.255 107.150.172.0/23 110.172.180.0/22 114.69.236.0/22 118.91.180.0/22 124.198.128.0/19 147.90.0.0/16 155.2.176.0-155.2.223.255 158.173.128.0/17 162.218.176.0/22 163.47.104.0/22 167.160.0.0/22 167.160.12.0/23 167.160.16.0/23 167.160.28.0/23 170.62.88.0-170.62.119.255 170.62.160.0/23 170.62.176.0-170.62.187.255 170.62.194.0/23 170.62.202.0/23 170.62.206.0/23 170.62.224.0-170.62.247.255 185.19.40.0/24 185.34.108.0/22 185.51.48.0/22 185.51.54.0/23 185.70.112.0/22 185.102.168.0/21 185.145.80.0/22 185.161.110.0/23 185.192.212.0/22 185.203.148.0/22 185.212.172.0/22 185.238.128.0/22 185.243.140.0/22 190.106.64.0/20 192.140.220.0/22 192.253.208.0/22 193.142.58.0/23 198.55.28.0/22 202.49.92.0/22 202.49.244.0/22 202.50.124.0/22 203.188.160.0/19 212.32.48.0/22 212.32.68.0-212.32.79.255 212.56.48.0/21 212.56.60.0/22 212.78.244.0-212.78.251.255 212.104.144.0/22 213.254.160.0/22 213.254.172.0/22 213.254.188.0/22 IPv6: 2a04:30c0::/29 2a06:25c0::/29 2a14:4d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201891 Signature Algorithm: sha256WithRSAEncryption 47:3e:02:2d:4c:c7:fe:4a:4e:a8:1a:0f:cd:e5:68:f4:0f:71: 35:3d:3e:67:f0:54:20:0f:70:e4:b7:d6:85:c9:84:74:cb:5f: 0e:aa:ef:f2:98:db:2b:80:07:58:f7:d5:7c:69:a9:3d:e0:f1: 69:3a:12:20:e0:9e:e2:c8:d1:7e:a9:e8:4d:59:1e:56:2f:ad: 2c:23:1a:2c:88:e8:db:1b:76:7d:3a:9f:99:f4:d3:53:65:b1: b2:da:de:0c:3d:8a:a1:5e:78:95:b2:e6:60:06:25:b2:38:77: 45:53:21:f0:31:69:f4:0e:ea:7b:6b:4b:c0:17:d4:dd:c7:50: 11:cc:3a:e9:c1:a9:f2:20:fd:c1:9e:cd:91:ae:e6:25:9e:43: cb:a3:aa:05:49:50:5b:f0:9a:e8:70:39:10:0e:e9:7d:96:5b: ce:73:45:49:a8:cc:58:21:68:bb:c3:12:e9:41:2f:5c:fd:0a: 7a:02:40:b7:a1:b6:b1:11:2c:0d:43:63:f1:94:a5:d9:63:6a: 8a:6b:5a:bc:6e:9f:fc:62:a0:60:b1:3b:e8:9d:1f:37:62:bb: 6b:60:37:24:a3:da:a6:d5:ee:92:09:3d:92:fe:47:f1:51:ab: cb:4d:ff:9a:e8:12:c2:8d:96:7b:08:68:3c:73:ff:bc:0c:a2: fb:65:cf:87 -----BEGIN CERTIFICATE----- MIIH8jCCBtqgAwIBAgISAZwEYy9J2YMX0Rlq2KQMWjtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTEzNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDRhNTgwNDdmMzdiYmMwNTc5NDRiYmY4Y2FkODc0Mjg3OTU5MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A/atF5rkSmj65ldUbP1OPy53Zko AKsPQavjohWn9CZVr35np6Ctwa7TqETgcw1hMfHobQ9nXNScWGxgA2C2I/y3jlPR tVirTUvFgbrfco77+Ib4alaUMvM1m5bev3VvnkvrbKdlL0UE37pshf6BSqpk9iAB SgI8JLsiRXeC7zecQSgV+ODL6Fo85gBukfEOHs2tsgpWXyUBMB9hd+T18I1iFjMt BUzCpYX4zwvWni+tnN+sFkHzvOqWukze5BbIOQ6s8Rk9moOKppZMC+jU/540fh4t PJygzMoq4V7vgmDqKtNqlMuay1Vtb5NkXuYYU0v93z/NNABcJlDVzNhl0QIDAQAB o4IE/jCCBPowHQYDVR0OBBYEFPBKWAR/N7vAV5RLv4yth0KHlZLaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzJiYTk3 ZS01OThiLTQ4ZGQtOGQ1Ni1mNWZiNzFiOWE1MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMmJhOTdl LTU5OGItNDhkZC04ZDU2LWY1ZmI3MWI5YTUxZi8xLzhFcFlCSDgzdThCWGxFdV9q SzJIUW9lVmt0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICewYIKwYB BQUHAQcBAf8EggJqMIICZjCCAkUEAgABMIICPQMEAgW0VAMEAg5mEAMEAg5mNAME Ag5mPAMEAg5mVAMEAh/e2AMEAi1ZLAMEAi10aAMEAi2QxAMEAi2WdAMEAi2WtAME AS70EgMEAi70YAMEAi70bDAMAwQBLvRyAwQDLvRwAwQDPqmAAwQCPqmMAwQEQjhQ AwQATfb1AwQCUV8wAwQDUV84AwQCVDPoAwQDXDPoAwQDXDP4AwQDXPCQAwQCZz3E AwQCZ31MAwQBZ4pOAwQCZ8YcAwQCZ9LEAwQCZ9XUAwQBZ/9MMAwDBAFrlqYDBAFr lqgDBAFrlqwDBAJurLQDBAJyRewDBAJ2W7QDBAV8xoADAwCTWjAMAwQEmwKwAwQF mwLAAwQHnq2AAwQCotqwAwQCoy9oAwQCp6AAAwQBp6AMAwQBp6AQAwQBp6AcMAwD BAOqPlgDBAOqPnADBAGqPqAwDAMEBKo+sAMEAqo+uAMEAao+wgMEAao+ygMEAao+ zjAMAwQFqj7gAwQDqj7wAwQAuRMoAwQCuSJsAwQCuTMwAwQBuTM2AwQCuUZwAwQD uWaoAwQCuZFQAwQBuaFuAwQCucDUAwQCucuUAwQCudSsAwQCue6AAwQCufOMAwQE vmpAAwQCwIzcAwQCwP3QAwQBwY46AwQCxjccAwQCyjFcAwQCyjH0AwQCyjJ8AwQF y7ygAwQC1CAwMAwDBALUIEQDBATUIEADBAPUODADBALUODwwDAMEAtRO9AMEAtRO +AMEAtRokAMEAtX+oAMEAtX+rAMEAtX+vDAbBAIAAjAVAwUDKgQwwAMFAyoGJcAD BQMqFE1AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMUozANBgkqhkiG9w0BAQsF AAOCAQEARz4CLUzH/kpOqBoPzeVo9A9xNT0+Z/BUIA9w5LfWhcmEdMtfDqrv8pjb K4AHWPfVfGmpPeDxaToSIOCe4sjRfqnoTVkeVi+tLCMaLIjo2xt2fTqfmfTTU2Wx streDD2KoV54lbLmYAYlsjh3RVMh8DFp9A7qe2tLwBfU3cdQEcw66cGp8iD9wZ7N ka7mJZ5Dy6OqBUlQW/Ca6HA5EA7pfZZbznNFSajMWCFou8MS6UEvXP0KegJAt6G2 sREsDUNj8ZSl2WNqimtavG6f/GKgYLE76J0fN2K7a2A3JKPaptXukgk9kv5H8VGr y03/mugSwo2WewhoPHP/vAyi+2XPhw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:02 2026 by rpki-client