This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer File: 96oDm4hrImV4vbakJ4G_WQRLsTg.cer (raw, json) Hash identifier: tNAnh5EWp0X5PlJ4S1sHB+6WYdB8iX36GZ7fIiYz8kg= Subject key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E380C60C37FBC60CAF3E44B1529A9E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6858 AS: 24739 AS: 31191 AS: 35000 AS: 43267 AS: 49165 IP: 37.46.52.0 -- 37.46.63.255 IP: 37.143.16.0/20 IP: 46.228.0.0/20 IP: 46.252.240.0/20 IP: 62.181.33.0/24 IP: 62.181.40.0/22 IP: 62.181.45.0/24 IP: 62.181.52.0/24 IP: 77.232.50.0 -- 77.232.63.255 IP: 78.111.80.0/22 IP: 78.111.92.0/22 IP: 78.140.192.0 -- 78.140.239.255 IP: 78.140.248.0/22 IP: 79.99.104.0/21 IP: 81.23.96.0/19 IP: 81.24.112.0/20 IP: 82.112.184.0/21 IP: 84.47.137.0/24 IP: 84.47.188.0/24 IP: 84.242.4.0/24 IP: 85.235.192.0/19 IP: 87.249.32.0/24 IP: 87.249.34.0/23 IP: 87.249.39.0 -- 87.249.40.255 IP: 87.249.42.0/24 IP: 87.249.45.0 -- 87.249.48.255 IP: 87.249.51.0 -- 87.249.52.255 IP: 89.104.96.0/24 IP: 89.104.98.0/23 IP: 89.104.103.0 -- 89.104.106.255 IP: 89.104.108.0/23 IP: 89.104.120.0/24 IP: 89.104.124.0/24 IP: 89.223.5.0/24 IP: 89.223.8.0/24 IP: 89.223.10.0/24 IP: 91.196.72.0/22 IP: 92.255.2.0/24 IP: 92.255.5.0/24 IP: 92.255.7.0 -- 92.255.8.255 IP: 92.255.10.0/24 IP: 92.255.12.0/24 IP: 92.255.14.0/24 IP: 92.255.17.0/24 IP: 92.255.24.0/24 IP: 92.255.26.0 -- 92.255.28.255 IP: 92.255.31.0/24 IP: 93.174.240.0/21 IP: 94.140.192.0/19 IP: 176.32.176.0/20 IP: 176.221.16.0/20 IP: 178.238.16.0/20 IP: 185.7.144.0/22 IP: 185.58.248.0/22 IP: 185.124.188.0/22 IP: 185.247.80.0/22 IP: 188.227.0.0/19 IP: 188.227.36.0 -- 188.227.55.255 IP: 188.227.60.0 -- 188.227.83.255 IP: 188.227.88.0 -- 188.227.105.255 IP: 188.227.108.0 -- 188.227.127.255 IP: 195.182.128.0/19 IP: 212.59.112.0/22 IP: 212.59.127.0/24 IP: 212.116.96.0/19 IP: 213.135.68.0/24 IP: 213.135.75.0 -- 213.135.76.255 IP: 213.135.78.0/24 IP: 213.135.93.0/24 IP: 213.208.185.0/24 IP: 217.197.224.0/20 IP: 2a00:1020::/32 IP: 2a01:a280::/30 IP: 2a06:aa80:: -- 2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0c:60:c3:7f:bc:60:ca:f3:e4:4b:15:29:a9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7aa039b886b226578bdb6a42781bf59044bb138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:68:bf:77:73:f6:db:54:2a:38:cb:d1:f3: ed:12:99:fb:72:13:53:41:e8:0c:28:29:7e:3f:d0: 8b:61:7c:b5:d5:d2:ed:43:01:ba:5a:5e:3c:0d:6a: 57:50:fc:75:53:9d:1d:10:c4:d5:51:44:53:39:e8: 83:d7:5b:e6:79:00:57:55:74:b8:16:bd:28:49:60: 5e:a1:47:37:a7:08:22:d2:fb:d1:e1:c4:ba:0d:de: 41:23:0d:ff:fc:db:ed:21:d5:72:71:c6:9d:a0:fa: db:4c:eb:a6:65:c9:a5:13:8b:de:f4:d5:fc:90:1c: 67:96:62:0a:d0:68:88:71:a8:8f:48:c7:bc:5c:ab: 5c:e6:96:e8:17:ef:d3:67:58:59:33:ed:9f:72:72: a6:46:e6:d0:05:67:b3:c1:f6:e2:64:f7:a5:47:0e: 73:12:12:7f:95:54:f6:c3:0f:40:71:2d:44:2e:71: f6:83:78:98:f1:ff:da:34:9f:38:ad:69:b6:40:2a: e8:5c:8f:89:96:af:4a:99:8e:fc:3b:fa:56:d1:93: 22:d4:7f:b1:a1:aa:a4:8b:92:b9:20:80:12:dd:b7: b9:4a:c5:2b:c3:10:8b:79:2d:52:74:97:c9:a5:fa: 55:81:19:50:86:99:63:92:b2:55:4d:8c:c6:6b:d7: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.52.0-37.46.63.255 37.143.16.0/20 46.228.0.0/20 46.252.240.0/20 62.181.33.0/24 62.181.40.0/22 62.181.45.0/24 62.181.52.0/24 77.232.50.0-77.232.63.255 78.111.80.0/22 78.111.92.0/22 78.140.192.0-78.140.239.255 78.140.248.0/22 79.99.104.0/21 81.23.96.0/19 81.24.112.0/20 82.112.184.0/21 84.47.137.0/24 84.47.188.0/24 84.242.4.0/24 85.235.192.0/19 87.249.32.0/24 87.249.34.0/23 87.249.39.0-87.249.40.255 87.249.42.0/24 87.249.45.0-87.249.48.255 87.249.51.0-87.249.52.255 89.104.96.0/24 89.104.98.0/23 89.104.103.0-89.104.106.255 89.104.108.0/23 89.104.120.0/24 89.104.124.0/24 89.223.5.0/24 89.223.8.0/24 89.223.10.0/24 91.196.72.0/22 92.255.2.0/24 92.255.5.0/24 92.255.7.0-92.255.8.255 92.255.10.0/24 92.255.12.0/24 92.255.14.0/24 92.255.17.0/24 92.255.24.0/24 92.255.26.0-92.255.28.255 92.255.31.0/24 93.174.240.0/21 94.140.192.0/19 176.32.176.0/20 176.221.16.0/20 178.238.16.0/20 185.7.144.0/22 185.58.248.0/22 185.124.188.0/22 185.247.80.0/22 188.227.0.0/19 188.227.36.0-188.227.55.255 188.227.60.0-188.227.83.255 188.227.88.0-188.227.105.255 188.227.108.0-188.227.127.255 195.182.128.0/19 212.59.112.0/22 212.59.127.0/24 212.116.96.0/19 213.135.68.0/24 213.135.75.0-213.135.76.255 213.135.78.0/24 213.135.93.0/24 213.208.185.0/24 217.197.224.0/20 IPv6: 2a00:1020::/32 2a01:a280::/30 2a06:aa80::-2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 6858 24739 31191 35000 43267 49165 Signature Algorithm: sha256WithRSAEncryption 17:8a:ba:78:3a:99:f1:b4:bf:ac:b9:16:53:fb:53:87:9e:47: 4d:a0:67:da:4d:c7:fd:f6:ee:ca:31:5c:43:89:a9:cd:af:46: fa:6e:cc:50:20:72:fe:61:9c:da:f3:c1:36:5f:5a:60:41:18: a7:f5:02:0b:5e:10:d1:4c:e4:65:71:ad:ae:77:26:b0:31:34: 75:aa:7d:43:80:da:d7:d1:33:05:06:76:fb:53:20:68:f9:38: da:5d:c6:04:9f:e8:55:88:9e:d4:23:df:49:aa:4b:de:bd:fc: a9:9a:0e:6a:3b:e9:67:6e:00:25:bc:f1:d2:ff:46:5e:2a:0e: 52:39:7e:bc:3c:31:04:84:f6:1e:ce:d3:84:9c:3d:11:07:b4: b0:5c:6d:90:45:a9:f2:cf:4a:61:c5:4d:20:75:52:b7:9c:31: e2:3d:34:4a:43:78:3c:c9:78:c1:ec:5f:82:78:65:46:8b:f8: c4:c5:97:2b:4e:43:bc:97:17:04:6f:b7:5e:da:3e:05:c1:92: 8a:d7:1c:6d:ab:ba:61:48:b6:1a:6f:16:f7:51:3f:e1:fb:69: 81:8d:2b:8b:6c:19:01:28:c8:d2:50:09:d0:49:79:f1:90:8c: 05:27:1b:2b:7f:c6:61:1a:b3:c1:cb:d7:36:a5:1c:81:25:31: 12:48:0f:18 -----BEGIN CERTIFICATE----- MIIH7jCCBtagAwIBAgISAZt+OAxgw3+8YMrz5EsVKanpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2FhMDM5Yjg4NmIyMjY1NzhiZGI2YTQyNzgxYmY1OTA0NGJiMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukhov3dz9ttUKjjL0fPtEpn7chNT QegMKCl+P9CLYXy11dLtQwG6Wl48DWpXUPx1U50dEMTVUURTOeiD11vmeQBXVXS4 Fr0oSWBeoUc3pwgi0vvR4cS6Dd5BIw3//NvtIdVyccadoPrbTOumZcmlE4ve9NX8 kBxnlmIK0GiIcaiPSMe8XKtc5pboF+/TZ1hZM+2fcnKmRubQBWezwfbiZPelRw5z EhJ/lVT2ww9AcS1ELnH2g3iY8f/aNJ84rWm2QCroXI+Jlq9KmY78O/pW0ZMi1H+x oaqki5K5IIAS3be5SsUrwxCLeS1SdJfJpfpVgRlQhpljkrJVTYzGa9dX5wIDAQAB o4IE+jCCBPYwHQYDVR0OBBYEFPeqA5uIayJleL22pCeBv1kES7E4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzRiYmQ2 Yy05MWVmLTQ0NjEtODIxYi02ZjYyMWQ3MzZhZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvNGJiZDZj LTkxZWYtNDQ2MS04MjFiLTZmNjIxZDczNmFmZi8xLzk2b0RtNGhySW1WNHZiYWtK NEdfV1FSTHNUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICYQYIKwYB BQUHAQcBAf8EggJQMIICTDCCAiIEAgABMIICGjAMAwQCJS40AwQGJS4AAwQEJY8Q AwQELuQAAwQELvzwAwQAPrUhAwQCPrUoAwQAPrUtAwQAPrU0MAwDBAFN6DIDBAZN 6AADBAJOb1ADBAJOb1wwDAMEBk6MwAMEBE6M4AMEAk6M+AMEA09jaAMEBVEXYAME BFEYcAMEA1JwuAMEAFQviQMEAFQvvAMEAFTyBAMEBVXrwAMEAFf5IAMEAVf5IjAM AwQAV/knAwQAV/koAwQAV/kqMAwDBABX+S0DBABX+TAwDAMEAFf5MwMEAFf5NAME AFloYAMEAVloYjAMAwQAWWhnAwQAWWhqAwQBWWhsAwQAWWh4AwQAWWh8AwQAWd8F AwQAWd8IAwQAWd8KAwQCW8RIAwQAXP8CAwQAXP8FMAwDBABc/wcDBABc/wgDBABc /woDBABc/wwDBABc/w4DBABc/xEDBABc/xgwDAMEAVz/GgMEAFz/HAMEAFz/HwME A12u8AMEBV6MwAMEBLAgsAMEBLDdEAMEBLLuEAMEArkHkAMEArk6+AMEArl8vAME Arn3UAMEBbzjADAMAwQCvOMkAwQDvOMwMAwDBAK84zwDBAK841AwDAMEA7zjWAME AbzjaDAMAwQCvONsAwQHvOMAAwQFw7aAAwQC1DtwAwQA1Dt/AwQF1HRgAwQA1YdE MAwDBADVh0sDBADVh0wDBADVh04DBADVh10DBADV0LkDBATZxeAwJAQCAAIwHgMF ACoAECADBQIqAaKAMA4DBQcqBqqAAwUAKgaqhjAwBggrBgEFBQcBCAEB/wQhMB+g HTAbAgIaygICYKMCAnnXAgMAiLgCAwCpAwIDAMANMA0GCSqGSIb3DQEBCwUAA4IB AQAXirp4OpnxtL+suRZT+1OHnkdNoGfaTcf99u7KMVxDianNr0b6bsxQIHL+YZza 88E2X1pgQRin9QILXhDRTORlca2udyawMTR1qn1DgNrX0TMFBnb7UyBo+TjaXcYE n+hViJ7UI99Jqkvevfypmg5qO+lnbgAlvPHS/0ZeKg5SOX68PDEEhPYeztOEnD0R B7SwXG2QRanyz0phxU0gdVK3nDHiPTRKQ3g8yXjB7F+CeGVGi/jExZcrTkO8lxcE b7de2j4FwZKK1xxtq7phSLYabxb3UT/h+2mBjSuLbBkBKMjSUAnQSXnxkIwFJxsr f8ZhGrPBy9c2pRyBJTESSA8Y -----END CERTIFICATE-----Generated at Mon Feb 2 15:49:18 2026 by rpki-client