This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer File: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer (raw, json) Hash identifier: 5gXUayAZn/CKLbxN5rRaNX5JR2J3K62DNz9iNHifRXk= Subject key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1E830D211A2875EC6D43D2B012C0156C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 13:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16247 AS: 42973 IP: 37.191.96.0 -- 37.191.126.255 IP: 45.146.144.0/22 IP: 51.179.128.0 -- 51.179.176.255 IP: 51.179.178.0 -- 51.179.191.255 IP: 77.75.184.0/21 IP: 81.92.208.0/21 IP: 85.199.216.0 -- 85.199.247.255 IP: 85.199.249.0 -- 85.199.254.255 IP: 92.42.144.0/21 IP: 109.111.192.0 -- 109.111.196.255 IP: 109.111.198.0 -- 109.111.223.255 IP: 148.252.192.0 -- 148.252.204.255 IP: 148.252.206.0 -- 148.252.250.255 IP: 148.252.252.0/22 IP: 164.39.0.0 -- 164.39.95.255 IP: 185.12.200.0/22 IP: 185.14.220.0/22 IP: 193.108.244.0/22 IP: 217.113.160.0 -- 217.113.170.255 IP: 217.113.172.0/22 IP: 217.138.8.0/23 IP: 217.138.12.0/23 IP: 217.138.15.0 -- 217.138.28.255 IP: 217.138.30.0 -- 217.138.52.255 IP: 217.138.54.0 -- 217.138.70.255 IP: 217.138.72.0/21 IP: 217.138.81.0 -- 217.138.83.255 IP: 217.138.85.0 -- 217.138.88.255 IP: 217.138.90.0 -- 217.138.93.255 IP: 217.138.95.0 -- 217.138.102.255 IP: 217.138.106.0 -- 217.138.110.255 IP: 217.138.112.0 -- 217.138.132.255 IP: 217.138.136.0/21 IP: 217.138.145.0 -- 217.138.154.255 IP: 217.138.156.0 -- 217.138.161.255 IP: 217.138.163.0 -- 217.138.191.255 IP: 217.138.224.0 -- 217.138.251.255 IP: 2a02:710::/32 IP: 2a0a:c200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:83:0d:21:1a:28:75:ec:6d:43:d2:b0:12:c0:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 13:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:1e:22:30:9b:6e:db:45:ec:27:1d:4d:43: 60:be:cf:1a:8f:49:75:9c:41:b9:9d:67:ee:86:55: 95:96:dd:61:fe:09:e8:e1:44:b5:98:ce:6a:ee:d7: 01:c3:b5:03:97:84:a7:f6:f1:ad:62:c8:d2:89:c1: 3a:13:4d:cc:47:79:ab:69:b8:a0:13:ce:85:9a:8b: b9:f9:7e:aa:b4:4f:62:bd:c5:89:2b:ea:7f:d1:83: 13:c0:ad:b2:04:03:7c:de:89:d5:68:c4:da:73:2b: 28:80:66:07:5e:90:dc:d1:4e:be:88:a0:6d:f5:08: 8c:b4:23:7a:a1:57:5a:dd:ef:cd:dc:09:1d:4b:47: 4e:f4:7a:59:2c:21:d9:d4:d8:75:31:4f:2c:9b:1c: 7f:b8:db:d0:e7:a8:0e:c8:2b:f4:c7:aa:71:f0:7a: df:e1:ae:b3:ef:4c:b6:ac:5b:56:41:7a:09:59:ae: 28:c6:80:58:e9:31:eb:c7:5f:8b:80:3e:c3:4d:44: 37:9f:30:78:4c:39:d3:26:fc:5e:0f:78:ba:71:66: d9:2c:4d:39:1b:28:3f:ae:f0:0b:9d:05:a1:f5:14: 09:7c:4a:87:e6:e5:8d:02:ea:b0:30:ba:74:ef:d1: f5:b3:c0:d8:f6:2d:ae:bf:51:ef:94:50:45:08:88: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.191.96.0-37.191.126.255 45.146.144.0/22 51.179.128.0-51.179.176.255 51.179.178.0-51.179.191.255 77.75.184.0/21 81.92.208.0/21 85.199.216.0-85.199.247.255 85.199.249.0-85.199.254.255 92.42.144.0/21 109.111.192.0-109.111.196.255 109.111.198.0-109.111.223.255 148.252.192.0-148.252.204.255 148.252.206.0-148.252.250.255 148.252.252.0/22 164.39.0.0-164.39.95.255 185.12.200.0/22 185.14.220.0/22 193.108.244.0/22 217.113.160.0-217.113.170.255 217.113.172.0/22 217.138.8.0/23 217.138.12.0/23 217.138.15.0-217.138.28.255 217.138.30.0-217.138.52.255 217.138.54.0-217.138.70.255 217.138.72.0/21 217.138.81.0-217.138.83.255 217.138.85.0-217.138.88.255 217.138.90.0-217.138.93.255 217.138.95.0-217.138.102.255 217.138.106.0-217.138.110.255 217.138.112.0-217.138.132.255 217.138.136.0/21 217.138.145.0-217.138.154.255 217.138.156.0-217.138.161.255 217.138.163.0-217.138.191.255 217.138.224.0-217.138.251.255 IPv6: 2a02:710::/32 2a0a:c200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16247 42973 Signature Algorithm: sha256WithRSAEncryption 30:fb:ac:69:4f:de:48:06:69:e3:77:24:b6:81:19:03:e3:d5: 83:10:c8:29:5e:84:ab:34:d3:ea:15:7e:fd:11:96:6c:77:1c: 21:0c:98:d4:8e:06:c6:a8:43:a0:87:d1:4a:ee:08:3a:8e:62: b2:67:20:e6:1a:27:9a:f0:69:80:d4:b9:54:10:5c:89:37:4d: bc:66:17:d7:a7:d6:1e:12:c4:e4:10:81:ca:00:09:30:23:53: f0:5d:91:b2:68:2c:03:22:36:ff:d2:73:81:24:56:4b:a4:50: 90:8a:71:60:e2:a0:de:4d:46:de:15:be:6d:50:58:97:97:a4: 94:3b:87:34:1b:0c:1b:f9:5e:3c:5c:e0:f0:70:9f:fe:0c:ee: 8c:04:b0:4e:f3:7d:9b:fb:96:de:94:56:a5:24:96:b0:40:80: d9:34:16:29:51:62:40:bd:3e:a3:7f:66:a3:1e:d0:1c:fc:34: 10:a4:71:2f:f7:79:a5:2d:cb:f0:9c:47:4e:34:0d:5c:7d:35: 78:36:d2:2c:b7:ab:19:71:83:59:a2:80:f6:61:96:22:49:f5: a9:3b:de:89:9e:70:67:97:6e:44:1a:77:fb:32:07:06:68:25: 36:34:6c:04:86:81:09:0d:e8:28:84:cd:7c:55:ee:74:40:2c: b1:66:01:be -----BEGIN CERTIFICATE----- MIIHTzCCBjegAwIBAgISAZwegw0hGih17G1D0rASwBVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTMyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGNmOTZhYTVlYjA3NzRmMGQ3YjQyNmIzMjc0MzVhODc4OGViMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEgeIjCbbttF7CcdTUNgvs8aj0l1 nEG5nWfuhlWVlt1h/gno4US1mM5q7tcBw7UDl4Sn9vGtYsjSicE6E03MR3mrabig E86Fmou5+X6qtE9ivcWJK+p/0YMTwK2yBAN83onVaMTacysogGYHXpDc0U6+iKBt 9QiMtCN6oVda3e/N3AkdS0dO9HpZLCHZ1Nh1MU8smxx/uNvQ56gOyCv0x6px8Hrf 4a6z70y2rFtWQXoJWa4oxoBY6THrx1+LgD7DTUQ3nzB4TDnTJvxeD3i6cWbZLE05 Gyg/rvALnQWh9RQJfEqH5uWNAuqwMLp079H1s8DY9i2uv1HvlFBFCIgQRwIDAQAB o4IEWzCCBFcwHQYDVR0OBBYEFEjPlqpesHdPDXtCazJ0Nah4jrGJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2E2MmYw Ni1kMTZkLTRlYjktYjVjZi00MGE0Y2ZjOTYyMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvYTYyZjA2 LWQxNmQtNGViOS1iNWNmLTQwYTRjZmM5NjIyYy8xL1NNLVdxbDZ3ZDA4TmUwSnJN blExcUhpT3NZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB1AYIKwYB BQUHAQcBAf8EggHDMIIBvzCCAaUEAgABMIIBnTAMAwQFJb9gAwQAJb9+AwQCLZKQ MAwDBAczs4ADBAAzs7AwDAMEATOzsgMEBjOzgAMEA01LuAMEA1Fc0DAMAwQDVcfY AwQDVcfwMAwDBABVx/kDBABVx/4DBANcKpAwDAMEBm1vwAMEAG1vxDAMAwQBbW/G AwQFbW/AMAwDBAaU/MADBACU/MwwDAMEAZT8zgMEAJT8+gMEApT8/DALAwMApCcD BAWkJ0ADBAK5DMgDBAK5DtwDBALBbPQwDAMEBdlxoAMEANlxqgMEAtlxrAMEAdmK CAMEAdmKDDAMAwQA2YoPAwQA2YocMAwDBAHZih4DBADZijQwDAMEAdmKNgMEANmK RgMEA9mKSDAMAwQA2YpRAwQC2YpQMAwDBADZilUDBADZilgwDAMEAdmKWgMEAdmK XDAMAwQA2YpfAwQA2YpmMAwDBAHZimoDBADZim4wDAMEBNmKcAMEANmKhAMEA9mK iDAMAwQA2YqRAwQA2YqaMAwDBALZipwDBAHZiqAwDAMEANmKowMEBtmKgDAMAwQF 2YrgAwQC2Yr4MBQEAgACMA4DBQAqAgcQAwUDKgrCADAeBggrBgEFBQcBCAEB/wQP MA2gCzAJAgI/dwIDAKfdMA0GCSqGSIb3DQEBCwUAA4IBAQAw+6xpT95IBmnjdyS2 gRkD49WDEMgpXoSrNNPqFX79EZZsdxwhDJjUjgbGqEOgh9FK7gg6jmKyZyDmGiea 8GmA1LlUEFyJN028ZhfXp9YeEsTkEIHKAAkwI1PwXZGyaCwDIjb/0nOBJFZLpFCQ inFg4qDeTUbeFb5tUFiXl6SUO4c0Gwwb+V48XODwcJ/+DO6MBLBO832b+5belFal JJawQIDZNBYpUWJAvT6jf2ajHtAc/DQQpHEv93mlLcvwnEdONA1cfTV4NtIst6sZ cYNZooD2YZYiSfWpO96JnnBnl25EGnf7MgcGaCU2NGwEhoEJDegohM18Ve50QCyx ZgG+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:03 2026 by rpki-client