This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer File: F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer (raw, json) Hash identifier: z5xO3sEIkZBQH59eEpa+h15w4OmOdrm+C23oUw2WMeA= Subject key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7DE3809571AF896D4A17679B9C86B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1101 -- 1103 AS: 1105 -- 1108 AS: 1125 AS: 1127 -- 1133 AS: 1138 -- 1139 AS: 1141 -- 1196 AS: 1198 -- 1199 AS: 196613 IP: 145.0.0.0/16 IP: 145.2.0.0 -- 145.4.255.255 IP: 145.6.0.0/16 IP: 145.9.0.0 -- 145.10.255.255 IP: 145.15.0.0 -- 145.16.255.255 IP: 145.18.0.0 -- 145.21.255.255 IP: 145.23.0.0 -- 145.26.255.255 IP: 145.28.0.0 -- 145.30.255.255 IP: 145.33.0.0/16 IP: 145.37.0.0 -- 145.39.255.255 IP: 145.41.0.0 -- 145.42.255.255 IP: 145.44.0.0/16 IP: 145.47.0.0 -- 145.49.255.255 IP: 145.51.0.0 -- 145.52.255.255 IP: 145.56.0.0/14 IP: 145.61.0.0 -- 145.62.255.255 IP: 145.65.0.0/16 IP: 145.67.0.0/16 IP: 145.71.0.0/16 IP: 145.73.0.0 -- 145.76.255.255 IP: 145.78.0.0/16 IP: 145.81.0.0/16 IP: 145.85.0.0/16 IP: 145.88.0.0 -- 145.118.255.255 IP: 145.120.0.0/13 IP: 145.134.0.0 -- 145.175.255.255 IP: 145.192.0.0 -- 145.217.255.255 IP: 145.220.0.0/16 IP: 192.87.0.0/16 IP: 194.104.0.0/24 IP: 194.171.0.0/16 IP: 195.169.0.0/16 IP: 2001:610::/29 IP: 2001:678:230::/48 IP: 2001:67c:6ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:de:38:09:57:1a:f8:96:d4:a1:76:79:b9:c8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:a6:ca:73:9b:f1:b6:60:3f:59:c0:63:ee: 27:82:e1:b5:e1:71:4b:0e:72:16:91:47:0a:50:8d: 75:24:a3:1f:cd:3f:fc:a1:54:70:dc:08:20:fa:ad: ed:ac:eb:b1:19:56:01:e6:1b:a8:1a:01:6d:8d:07: ed:5d:c0:27:bf:ec:a6:47:64:b8:20:38:12:97:54: 88:9a:d9:1a:98:00:47:93:65:2f:b5:55:e9:9b:18: 75:e3:4a:0b:3d:f2:10:07:cf:6d:3c:74:18:a5:66: b4:1d:8c:06:e3:9b:c5:cf:60:1d:a7:6f:8a:6a:ac: 5c:44:1c:eb:b2:81:b8:79:4e:15:b7:5e:03:72:e4: 27:9c:05:5e:20:c6:58:ac:6a:3d:41:ff:82:43:03: cb:79:7a:98:29:4b:34:0b:8a:be:74:41:89:19:8e: df:6f:fa:3b:dd:59:56:41:ea:c8:4c:86:07:fc:1b: dd:db:c7:c3:39:23:d9:38:15:56:20:21:80:2a:f1: 82:01:42:00:f0:4f:b8:6f:3d:82:20:60:cc:e4:a8: 85:51:d3:1b:a4:f2:e9:ff:90:18:65:ee:6c:32:ca: d8:3a:18:62:a5:88:bc:c6:bc:6e:8e:1c:9a:25:69: 3d:87:a6:c4:c9:3f:0d:41:b5:67:a9:5b:7b:e9:84: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.0.0.0/16 145.2.0.0-145.4.255.255 145.6.0.0/16 145.9.0.0-145.10.255.255 145.15.0.0-145.16.255.255 145.18.0.0-145.21.255.255 145.23.0.0-145.26.255.255 145.28.0.0-145.30.255.255 145.33.0.0/16 145.37.0.0-145.39.255.255 145.41.0.0-145.42.255.255 145.44.0.0/16 145.47.0.0-145.49.255.255 145.51.0.0-145.52.255.255 145.56.0.0/14 145.61.0.0-145.62.255.255 145.65.0.0/16 145.67.0.0/16 145.71.0.0/16 145.73.0.0-145.76.255.255 145.78.0.0/16 145.81.0.0/16 145.85.0.0/16 145.88.0.0-145.118.255.255 145.120.0.0/13 145.134.0.0-145.175.255.255 145.192.0.0-145.217.255.255 145.220.0.0/16 192.87.0.0/16 194.104.0.0/24 194.171.0.0/16 195.169.0.0/16 IPv6: 2001:610::/29 2001:678:230::/48 2001:67c:6ec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1101-1103 1105-1108 1125 1127-1133 1138-1139 1141-1196 1198-1199 196613 Signature Algorithm: sha256WithRSAEncryption 14:53:4c:d2:d9:1c:89:48:fa:d0:a2:c7:bf:ca:3f:f6:ba:47: 9c:db:d1:fe:6c:5d:6e:be:e2:56:56:74:9c:f4:79:6f:93:4e: 88:28:b1:2e:9d:0a:ce:eb:64:d8:93:d6:44:8d:af:c2:c7:6d: 60:fa:15:f1:64:32:6b:9b:f3:c6:42:bf:78:0b:39:29:dc:f8: c2:5e:d8:5e:25:ae:e7:4d:bb:0f:41:5c:d9:4d:c4:8d:9e:00: b2:c6:b7:5d:47:40:8d:56:46:76:19:4b:c6:3a:bc:60:fa:b0: a4:46:db:18:bb:a6:ca:70:7b:9b:5a:f4:f7:d7:d0:f5:16:8e: 20:49:f1:b5:0c:ee:11:10:86:21:01:4c:42:95:36:3f:c3:5b: 73:7c:9d:01:37:12:04:fd:09:83:18:a0:39:7d:8e:25:78:21: 4c:93:d6:69:53:9f:45:72:ee:ad:99:74:bb:1b:32:b6:9a:26: 42:8e:aa:48:eb:84:a8:0a:1b:a1:c2:91:fd:1e:6f:c5:e4:e6: b6:b5:a9:7c:80:9d:26:6c:02:09:dc:cc:eb:54:ed:71:5e:fe: ea:03:9a:54:43:18:12:9d:d4:1f:4f:50:ed:b7:c7:c2:36:9e: c5:46:be:ae:31:f5:b4:85:24:18:f7:d3:86:b2:d3:a9:42:56: 15:cd:41:9c -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgISAZt6x944CVca+JbUoXZ5uchrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzczZGIxNzc5NWQyYmYxYjRiNTM0NWM1YjI5MzkwZGJhZjQ1MjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOOmynOb8bZgP1nAY+4nguG14XFL DnIWkUcKUI11JKMfzT/8oVRw3Agg+q3trOuxGVYB5huoGgFtjQftXcAnv+ymR2S4 IDgSl1SImtkamABHk2UvtVXpmxh140oLPfIQB89tPHQYpWa0HYwG45vFz2Adp2+K aqxcRBzrsoG4eU4Vt14DcuQnnAVeIMZYrGo9Qf+CQwPLeXqYKUs0C4q+dEGJGY7f b/o73VlWQerITIYH/Bvd28fDOSPZOBVWICGAKvGCAUIA8E+4bz2CIGDM5KiFUdMb pPLp/5AYZe5sMsrYOhhipYi8xrxujhyaJWk9h6bEyT8NQbVnqVt76YTb/QIDAQAB o4IEDzCCBAswHQYDVR0OBBYEFBdz2xd5XSvxtLU0XFspOQ269FI+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2Y3N2Ni ZC04OTNiLTQ2MTYtOWQ3Ni01NDg2MWYyMzI0OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZjc3Y2Jk LTg5M2ItNDYxNi05ZDc2LTU0ODYxZjIzMjQ5ZC8xL0YzUGJGM2xkS19HMHRUUmNX eWs1RGJyMFVqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBTAYIKwYB BQUHAQcBAf8EggE7MIIBNzCCARIEAgABMIIBCgMDAJEAMAoDAwGRAgMDAJEEAwMA kQYwCgMDAJEJAwMAkQowCgMDAJEPAwMAkRAwCgMDAZESAwMBkRQwCgMDAJEXAwMA kRowCgMDApEcAwMAkR4DAwCRITAKAwMAkSUDAwORIDAKAwMAkSkDAwCRKgMDAJEs MAoDAwCRLwMDAZEwMAoDAwCRMwMDAJE0AwMCkTgwCgMDAJE9AwMAkT4DAwCRQQMD AJFDAwMAkUcwCgMDAJFJAwMAkUwDAwCRTgMDAJFRAwMAkVUwCgMDA5FYAwMAkXYD AwOReDAKAwMBkYYDAwSRoDAKAwMGkcADAwGR2AMDAJHcAwMAwFcDBADCaAADAwDC qwMDAMOpMB8EAgACMBkDBQMgAQYQAwcAIAEGeAIwAwcAIAEGfAbsMFoGCCsGAQUF BwEIAQH/BEswSaBHMEUwCAICBE0CAgRPMAgCAgRRAgIEVAICBGUwCAICBGcCAgRt MAgCAgRyAgIEczAIAgIEdQICBKwwCAICBK4CAgSvAgMDAAUwDQYJKoZIhvcNAQEL BQADggEBABRTTNLZHIlI+tCix7/KP/a6R5zb0f5sXW6+4lZWdJz0eW+TTogosS6d Cs7rZNiT1kSNr8LHbWD6FfFkMmub88ZCv3gLOSnc+MJe2F4lrudNuw9BXNlNxI2e ALLGt11HQI1WRnYZS8Y6vGD6sKRG2xi7pspwe5ta9PfX0PUWjiBJ8bUM7hEQhiEB TEKVNj/DW3N8nQE3EgT9CYMYoDl9jiV4IUyT1mlTn0Vy7q2ZdLsbMraaJkKOqkjr hKgKG6HCkf0eb8Xk5ra1qXyAnSZsAgnczOtU7XFe/uoDmlRDGBKd1B9PUO23x8I2 nsVGvq4x9bSFJBj304ay06lCVhXNQZw= -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:04 2026 by rpki-client