This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer (raw, json) Hash identifier: hbezXFtKfBbFreddJ+LMciKh4t5FsVwNXMk5Ds8WS/U= Subject key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D16DB849DE83CE4F2B72EF96E09D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42007 AS: 44676 AS: 48430 AS: 51298 AS: 52107 IP: 2.57.0.0/24 IP: 2.59.160.0/22 IP: 2.59.216.0/22 IP: 5.1.41.0/24 IP: 5.182.36.0/22 IP: 31.222.241.0/24 IP: 45.8.144.0/22 IP: 45.10.216.0/22 IP: 45.66.12.0/22 IP: 45.67.32.0/22 IP: 45.84.0.0/22 IP: 45.87.152.0/22 IP: 45.89.52.0/22 IP: 45.93.8.0/22 IP: 45.130.168.0/22 IP: 45.148.244.0/22 IP: 45.159.248.0/22 IP: 46.16.34.0/24 IP: 62.3.63.0/24 IP: 62.133.60.0/22 IP: 62.233.39.0/24 IP: 78.40.116.0/22 IP: 80.71.156.0/24 IP: 81.177.212.0/22 IP: 91.132.188.0/22 IP: 91.197.0.0/22 IP: 91.207.183.0/24 IP: 91.231.180.0/24 IP: 92.118.88.0/22 IP: 92.119.200.0/22 IP: 93.157.106.0/24 IP: 93.185.164.0/22 IP: 94.103.188.0/24 IP: 94.231.221.0 -- 94.231.223.255 IP: 94.247.137.0/24 IP: 141.98.168.0/22 IP: 146.19.78.0/24 IP: 146.19.124.0/24 IP: 146.19.209.0/24 IP: 171.22.180.0/22 IP: 176.116.0.0/24 IP: 176.125.240.0/22 IP: 185.103.164.0/22 IP: 185.139.212.0/22 IP: 185.144.114.0/24 IP: 185.212.117.0/24 IP: 185.231.204.0/22 IP: 185.234.9.0/24 IP: 188.119.120.0/21 IP: 193.3.179.0/24 IP: 193.27.90.0/24 IP: 193.35.227.0/24 IP: 193.43.146.0/23 IP: 193.46.56.0/23 IP: 193.57.136.0/22 IP: 193.178.210.0/24 IP: 194.4.48.0/22 IP: 194.26.209.0/24 IP: 194.31.109.0/24 IP: 194.48.94.0/24 IP: 194.55.164.0/22 IP: 194.116.172.0/23 IP: 194.116.190.0/23 IP: 194.156.100.0/22 IP: 195.95.133.0/24 IP: 213.109.203.0/24 IP: 213.232.235.0/24 IP: 2a00:9680::/29 IP: 2a03:f500::/29 IP: 2a07:400::/29 IP: 2a07:640::/29 IP: 2a07:c80::/29 IP: 2a07:1840::/29 IP: 2a07:6c00::/29 IP: 2a09:280::/29 IP: 2a0b:44c0::/29 IP: 2a0b:5c00::/29 IP: 2a0b:6600::/29 IP: 2a0b:7840::/29 IP: 2a0b:9a00::/29 IP: 2a0c:7b00::/29 IP: 2a0c:7d00::/29 IP: 2a0e:5ec0::/29 IP: 2a0e:cfc0::/29 IP: 2a10:4280::/29 IP: 2a10:4380::/29 IP: 2a10:4b80::/29 IP: 2a10:4f80::/29 IP: 2a10:5080::/29 IP: 2a10:5180::/29 IP: 2a10:6d80::/29 IP: 2a10:6e80::/29 IP: 2a10:6f80::/29 IP: 2a10:7380::/29 IP: 2a10:7480::/29 IP: 2a10:7580::/29 IP: 2a10:7e80::/29 IP: 2a10:9940::/29 IP: 2a10:99c0::/29 IP: 2a10:9bc0::/29 IP: 2a10:9c40::/29 IP: 2a10:9cc0::/29 IP: 2a10:ad00::/29 IP: 2a10:af00::/29 IP: 2a10:b100::/29 IP: 2a11:1a40::/29 IP: 2a11:1c00::/29 IP: 2a11:2400::/29 IP: 2a11:2700::/29 IP: 2a11:3ec0::/29 IP: 2a11:7140::/29 IP: 2a11:8100::/29 IP: 2a11:f680::/29 IP: 2a11:f800::/29 IP: 2a12:4800::/29 IP: 2a14:1280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:db:84:9d:e8:3c:e4:f2:b7:2e:f9:6e:09:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:26:a3:bd:e0:23:6e:57:5a:1b:80:53:a2: 88:e5:33:48:db:32:da:a0:84:2d:0c:4a:3c:65:56: a3:09:16:fb:c2:99:50:d6:8d:bc:6d:48:4f:ab:99: dc:f5:9b:aa:47:84:41:4b:37:c6:41:06:e9:26:35: 44:87:5a:db:7a:a0:56:42:23:c4:60:f0:67:b4:33: 0f:1a:ae:7c:bd:f6:5c:64:04:d7:b1:3f:6a:47:c4: 30:e0:da:44:43:bf:0d:0b:9b:60:fd:aa:2b:71:4a: 35:86:a5:d9:8a:59:6e:b2:37:79:56:05:19:f3:80: 23:3b:a1:76:e7:c2:3e:58:39:81:08:0a:cf:1b:f4: a1:fe:d4:e4:57:7f:17:91:96:34:14:85:50:ff:f9: a3:82:18:36:34:aa:b4:78:eb:06:09:85:66:bc:4a: 85:63:10:31:7b:74:dc:b7:3c:cd:cc:b8:ba:37:87: ee:41:0e:df:2a:3a:e9:6c:56:38:13:01:31:e8:16: 3a:e5:ea:5e:de:5b:52:c9:66:9c:5a:20:6d:a8:f0: 4a:45:66:74:35:4e:8d:5c:86:93:9a:26:8e:24:ff: fc:10:15:87:21:10:6c:ef:9f:00:10:8f:82:b6:75: 64:3b:fa:57:db:ca:5e:3d:22:86:3c:4c:11:26:58: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.0.0/24 2.59.160.0/22 2.59.216.0/22 5.1.41.0/24 5.182.36.0/22 31.222.241.0/24 45.8.144.0/22 45.10.216.0/22 45.66.12.0/22 45.67.32.0/22 45.84.0.0/22 45.87.152.0/22 45.89.52.0/22 45.93.8.0/22 45.130.168.0/22 45.148.244.0/22 45.159.248.0/22 46.16.34.0/24 62.3.63.0/24 62.133.60.0/22 62.233.39.0/24 78.40.116.0/22 80.71.156.0/24 81.177.212.0/22 91.132.188.0/22 91.197.0.0/22 91.207.183.0/24 91.231.180.0/24 92.118.88.0/22 92.119.200.0/22 93.157.106.0/24 93.185.164.0/22 94.103.188.0/24 94.231.221.0-94.231.223.255 94.247.137.0/24 141.98.168.0/22 146.19.78.0/24 146.19.124.0/24 146.19.209.0/24 171.22.180.0/22 176.116.0.0/24 176.125.240.0/22 185.103.164.0/22 185.139.212.0/22 185.144.114.0/24 185.212.117.0/24 185.231.204.0/22 185.234.9.0/24 188.119.120.0/21 193.3.179.0/24 193.27.90.0/24 193.35.227.0/24 193.43.146.0/23 193.46.56.0/23 193.57.136.0/22 193.178.210.0/24 194.4.48.0/22 194.26.209.0/24 194.31.109.0/24 194.48.94.0/24 194.55.164.0/22 194.116.172.0/23 194.116.190.0/23 194.156.100.0/22 195.95.133.0/24 213.109.203.0/24 213.232.235.0/24 IPv6: 2a00:9680::/29 2a03:f500::/29 2a07:400::/29 2a07:640::/29 2a07:c80::/29 2a07:1840::/29 2a07:6c00::/29 2a09:280::/29 2a0b:44c0::/29 2a0b:5c00::/29 2a0b:6600::/29 2a0b:7840::/29 2a0b:9a00::/29 2a0c:7b00::/29 2a0c:7d00::/29 2a0e:5ec0::/29 2a0e:cfc0::/29 2a10:4280::/29 2a10:4380::/29 2a10:4b80::/29 2a10:4f80::/29 2a10:5080::/29 2a10:5180::/29 2a10:6d80::/29 2a10:6e80::/29 2a10:6f80::/29 2a10:7380::/29 2a10:7480::/29 2a10:7580::/29 2a10:7e80::/29 2a10:9940::/29 2a10:99c0::/29 2a10:9bc0::/29 2a10:9c40::/29 2a10:9cc0::/29 2a10:ad00::/29 2a10:af00::/29 2a10:b100::/29 2a11:1a40::/29 2a11:1c00::/29 2a11:2400::/29 2a11:2700::/29 2a11:3ec0::/29 2a11:7140::/29 2a11:8100::/29 2a11:f680::/29 2a11:f800::/29 2a12:4800::/29 2a14:1280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42007 44676 48430 51298 52107 Signature Algorithm: sha256WithRSAEncryption a7:6a:b4:19:71:ed:b2:20:7c:06:4b:2c:7c:24:06:12:70:8c: c7:2e:06:9a:43:8a:b3:78:20:1e:e5:fb:fa:b7:24:f6:62:63: 1f:92:e3:b6:4b:cb:a6:76:52:3e:2f:68:70:78:8a:9f:78:f9: c0:91:cb:4a:b4:08:2b:e0:19:ef:67:08:63:08:5c:30:65:09: 68:16:75:8b:7d:6b:24:d3:23:c4:81:c1:4a:22:60:5b:1f:93: 9e:c8:37:2e:da:bd:3d:a0:26:24:9d:f3:61:a2:21:0a:9e:3b: 42:50:d9:8d:bb:e1:e0:0f:24:28:fe:37:b2:87:92:59:a8:9b: f0:61:48:52:8d:8c:b8:f9:3a:dd:a9:c2:53:e0:81:2d:7c:78: 28:ed:7c:ef:9e:5e:2a:e3:57:b4:d4:e4:60:e8:63:8a:a9:7a: 61:d3:2b:c4:00:f1:75:92:20:3d:cf:a7:54:02:05:41:df:4d: 39:d1:af:97:2a:8c:2c:9d:bf:4b:c9:ab:e1:fb:65:e8:f2:eb: 52:62:c1:b7:a8:8e:a8:19:85:0d:69:c3:cc:a1:13:6f:ca:fc: 30:bd:00:e4:b6:b8:0b:32:13:52:86:8d:32:5d:c1:ec:e2:57: 7c:91:61:a8:8b:1d:9f:17:12:f0:66:ac:85:1b:27:9e:24:0d: 2e:08:19:0d -----BEGIN CERTIFICATE----- MIIIqTCCB5GgAwIBAgISAZt9XRbbhJ3oPOTyty75bgnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWEwMTBmODdhMDQ5YjZlMjFhYmVkOWI0MDk4M2IwNGYzZjFjN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w4mo73gI25XWhuAU6KI5TNI2zLa oIQtDEo8ZVajCRb7wplQ1o28bUhPq5nc9ZuqR4RBSzfGQQbpJjVEh1rbeqBWQiPE YPBntDMPGq58vfZcZATXsT9qR8Qw4NpEQ78NC5tg/aorcUo1hqXZillusjd5VgUZ 84AjO6F258I+WDmBCArPG/Sh/tTkV38XkZY0FIVQ//mjghg2NKq0eOsGCYVmvEqF YxAxe3TctzzNzLi6N4fuQQ7fKjrpbFY4EwEx6BY65epe3ltSyWacWiBtqPBKRWZ0 NU6NXIaTmiaOJP/8EBWHIRBs758AEI+CtnVkO/pX28pePSKGPEwRJli/UQIDAQAB o4IFtTCCBbEwHQYDVR0OBBYEFBGgEPh6BJtuIavtm0CYOwTz8cfoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2YyNWQ3 Yy02Njc3LTRmZGItODk4ZS1lZTc0NjU3NTRmZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZjI1ZDdj LTY2NzctNGZkYi04OThlLWVlNzQ2NTc1NGZmNi8xL0VhQVEtSG9FbTI0aHEtMmJR Smc3QlBQeHgtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDHgYIKwYB BQUHAQcBAf8EggMNMIIDCTCCAaIEAgABMIIBmgMEAAI5AAMEAgI7oAMEAgI72AME AAUBKQMEAgW2JAMEAB/e8QMEAi0IkAMEAi0K2AMEAi1CDAMEAi1DIAMEAi1UAAME Ai1XmAMEAi1ZNAMEAi1dCAMEAi2CqAMEAi2U9AMEAi2f+AMEAC4QIgMEAD4DPwME Aj6FPAMEAD7pJwMEAk4odAMEAFBHnAMEAlGx1AMEAluEvAMEAlvFAAMEAFvPtwME AFvntAMEAlx2WAMEAlx3yAMEAF2dagMEAl25pAMEAF5nvDAMAwQAXufdAwQFXufA AwQAXveJAwQCjWKoAwQAkhNOAwQAkhN8AwQAkhPRAwQCqxa0AwQAsHQAAwQCsH3w AwQCuWekAwQCuYvUAwQAuZByAwQAudR1AwQCuefMAwQAueoJAwQDvHd4AwQAwQOz AwQAwRtaAwQAwSPjAwQBwSuSAwQBwS44AwQCwTmIAwQAwbLSAwQCwgQwAwQAwhrR AwQAwh9tAwQAwjBeAwQCwjekAwQBwnSsAwQBwnS+AwQCwpxkAwQAw1+FAwQA1W3L AwQA1ejrMIIBXwQCAAIwggFXAwUDKgCWgAMFAyoD9QADBQMqBwQAAwUDKgcGQAMF AyoHDIADBQMqBxhAAwUDKgdsAAMFAyoJAoADBQMqC0TAAwUDKgtcAAMFAyoLZgAD BQMqC3hAAwUDKguaAAMFAyoMewADBQMqDH0AAwUDKg5ewAMFAyoOz8ADBQMqEEKA AwUDKhBDgAMFAyoQS4ADBQMqEE+AAwUDKhBQgAMFAyoQUYADBQMqEG2AAwUDKhBu gAMFAyoQb4ADBQMqEHOAAwUDKhB0gAMFAyoQdYADBQMqEH6AAwUDKhCZQAMFAyoQ mcADBQMqEJvAAwUDKhCcQAMFAyoQnMADBQMqEK0AAwUDKhCvAAMFAyoQsQADBQMq ERpAAwUDKhEcAAMFAyoRJAADBQMqEScAAwUDKhE+wAMFAyoRcUADBQMqEYEAAwUD KhH2gAMFAyoR+AADBQMqEkgAAwUDKhQSgDAuBggrBgEFBQcBCAEB/wQfMB2gGzAZ AgMApBcCAwCuhAIDAL0uAgMAyGICAwDLizANBgkqhkiG9w0BAQsFAAOCAQEAp2q0 GXHtsiB8BkssfCQGEnCMxy4GmkOKs3ggHuX7+rck9mJjH5LjtkvLpnZSPi9ocHiK n3j5wJHLSrQIK+AZ72cIYwhcMGUJaBZ1i31rJNMjxIHBSiJgWx+Tnsg3Ltq9PaAm JJ3zYaIhCp47QlDZjbvh4A8kKP43soeSWaib8GFIUo2MuPk63anCU+CBLXx4KO18 755eKuNXtNTkYOhjiql6YdMrxADxdZIgPc+nVAIFQd9NOdGvlyqMLJ2/S8mr4ftl 6PLrUmLBt6iOqBmFDWnDzKETb8r8ML0A5La4CzITUoaNMl3B7OJXfJFhqIsdnxcS 8GashRsnniQNLggZDQ== -----END CERTIFICATE-----Generated at Wed Jan 21 11:25:59 2026 by rpki-client