This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer File: VSrToLS3ToWvVPWK11owJrffcYE.cer (raw, json) Hash identifier: i7VnA/BeMoNtuv2HJpmNOCsdJzfZ9PDFa42rmGyTeb0= Subject key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A2E285340E006AE7D45C50DB8DE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15426 AS: 16131 AS: 39647 AS: 49713 AS: 56943 IP: 5.178.32.0/21 IP: 37.152.8.0/21 IP: 45.10.228.0/22 IP: 45.88.48.0/22 IP: 45.131.200.0/22 IP: 45.157.108.0/22 IP: 46.102.224.0/21 IP: 46.231.80.0/21 IP: 62.212.128.0/19 IP: 81.28.80.0/20 IP: 84.243.192.0/18 IP: 86.107.200.0/21 IP: 89.184.160.0/19 IP: 89.255.0.0/18 IP: 91.219.108.0/22 IP: 94.247.0.0/21 IP: 141.0.24.0/21 IP: 141.98.20.0/22 IP: 146.255.48.0/21 IP: 178.132.208.0/21 IP: 178.238.96.0/20 IP: 185.2.240.0/22 IP: 185.10.232.0/22 IP: 185.19.56.0/22 IP: 185.22.192.0/22 IP: 185.31.228.0/22 IP: 185.54.204.0/22 IP: 185.60.252.0/22 IP: 185.67.60.0/22 IP: 185.112.44.0/22 IP: 185.157.60.0/22 IP: 185.160.72.0/23 IP: 185.176.140.0/22 IP: 185.181.72.0/22 IP: 185.189.104.0/22 IP: 185.232.184.0/22 IP: 185.233.88.0/22 IP: 185.243.88.0/22 IP: 185.247.144.0/22 IP: 185.253.208.0/22 IP: 188.213.224.0/21 IP: 188.240.24.0/21 IP: 193.22.132.0/22 IP: 193.84.188.0/22 IP: 193.107.220.0/22 IP: 194.53.204.0/22 IP: 194.76.128.0/22 IP: 195.134.168.0/21 IP: 217.67.224.0/19 IP: 217.148.132.0/23 IP: 217.171.224.0/21 IP: 2001:1be8::/32 IP: 2a00:1950::/29 IP: 2a03:1a00::/32 IP: 2a07:a380::/29 IP: 2a0a:1880::/29 IP: 2a0a:c580::/29 IP: 2a0b:e280::/29 IP: 2a0c:bb00::/29 IP: 2a0c:bd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a2:e2:85:34:0e:00:6a:e7:d4:5c:50:db:8d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:c8:a5:44:69:9a:1e:60:ab:bb:4e:7f:73: a7:b0:71:62:a3:ad:4f:36:d7:0b:7e:d9:58:55:36: 0f:66:ba:2a:94:db:3a:27:4d:ee:b8:45:ad:83:43: 94:44:21:71:7b:a2:87:8d:96:18:51:b8:f1:be:d3: 00:9b:ba:3f:f6:38:2e:ca:4b:02:3e:31:1c:aa:c2: aa:7f:a0:bf:c9:9c:be:9d:1d:ce:e2:72:5f:6a:94: 12:d3:bf:46:4b:7b:b7:82:3f:60:22:31:23:63:68: e8:a8:e9:31:2f:3a:1b:0b:b4:94:40:9c:bb:33:60: b0:b8:a3:fa:6d:08:cd:c0:d4:79:37:bb:2b:3d:a5: 12:d2:4c:f3:2f:02:ec:1a:be:b6:be:95:99:e3:ad: 16:27:70:f5:d8:7e:fb:85:0d:2f:33:5c:c7:68:3a: a9:b8:33:4d:50:fc:2e:31:6d:31:09:39:6f:cc:a4: f4:f3:fd:01:7e:95:f4:7f:2e:c6:c0:70:d6:0c:5f: 65:41:2c:e4:a0:e2:78:37:5b:30:b2:ec:75:1f:5e: 18:eb:64:36:5f:a0:22:c1:fc:a9:10:cc:3d:de:6c: 27:87:06:f7:b4:73:e9:90:c0:2d:84:23:83:36:bd: 90:a4:65:e8:ea:9e:85:45:97:b1:6c:48:20:02:da: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.32.0/21 37.152.8.0/21 45.10.228.0/22 45.88.48.0/22 45.131.200.0/22 45.157.108.0/22 46.102.224.0/21 46.231.80.0/21 62.212.128.0/19 81.28.80.0/20 84.243.192.0/18 86.107.200.0/21 89.184.160.0/19 89.255.0.0/18 91.219.108.0/22 94.247.0.0/21 141.0.24.0/21 141.98.20.0/22 146.255.48.0/21 178.132.208.0/21 178.238.96.0/20 185.2.240.0/22 185.10.232.0/22 185.19.56.0/22 185.22.192.0/22 185.31.228.0/22 185.54.204.0/22 185.60.252.0/22 185.67.60.0/22 185.112.44.0/22 185.157.60.0/22 185.160.72.0/23 185.176.140.0/22 185.181.72.0/22 185.189.104.0/22 185.232.184.0/22 185.233.88.0/22 185.243.88.0/22 185.247.144.0/22 185.253.208.0/22 188.213.224.0/21 188.240.24.0/21 193.22.132.0/22 193.84.188.0/22 193.107.220.0/22 194.53.204.0/22 194.76.128.0/22 195.134.168.0/21 217.67.224.0/19 217.148.132.0/23 217.171.224.0/21 IPv6: 2001:1be8::/32 2a00:1950::/29 2a03:1a00::/32 2a07:a380::/29 2a0a:1880::/29 2a0a:c580::/29 2a0b:e280::/29 2a0c:bb00::/29 2a0c:bd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15426 16131 39647 49713 56943 Signature Algorithm: sha256WithRSAEncryption 18:a9:a6:8f:36:15:04:93:8f:28:3f:75:e3:57:ea:dc:ab:44: 94:5f:b5:4f:f6:71:04:7e:7b:28:1f:2b:37:ab:aa:dc:fb:17: fa:5c:72:6c:bc:48:fa:b8:3b:ba:1b:bd:39:f9:b0:f8:27:bf: 1f:05:eb:0c:56:7b:bb:cc:0d:5f:28:17:44:75:77:31:25:08: 9d:8b:eb:e3:a7:64:76:ef:fa:e5:e4:d9:d3:4b:74:12:ac:2f: 2c:ca:b4:6e:02:82:9f:dc:6a:f0:2e:40:12:c8:ff:b1:2e:9f: 5a:c8:ad:ee:f8:e1:1e:b2:64:51:af:27:0f:94:fd:6b:d9:d6: d5:d7:51:f5:9c:6b:08:63:11:21:63:0e:ef:61:97:3d:dc:8d: c2:70:24:ac:bd:cf:cf:2c:56:6f:3a:1d:12:82:1d:41:77:5e: e7:16:e0:5b:8b:38:96:9c:07:0e:7c:83:ff:3d:48:00:0b:39: 3e:3e:96:41:7c:bc:d8:5e:61:60:fe:73:ab:b1:f6:a4:08:8f: ac:82:e9:b9:0a:7b:5e:45:d0:0b:dd:ae:3e:04:92:3d:26:71: 38:8b:49:d1:af:92:d9:fe:32:04:c9:7f:3d:ae:8c:8a:88:de: 36:5a:09:f9:ee:d5:86:2a:28:bb:2b:d6:a2:ee:49:14:ca:7f: 1d:6c:19:e9 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgISAZt3xqLihTQOAGrn1FxQ243pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTJhZDNhMGI0Yjc0ZTg1YWY1NGY1OGFkNzVhMzAyNmI3ZGY3MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHfIpURpmh5gq7tOf3OnsHFio61P NtcLftlYVTYPZroqlNs6J03uuEWtg0OURCFxe6KHjZYYUbjxvtMAm7o/9jguyksC PjEcqsKqf6C/yZy+nR3O4nJfapQS079GS3u3gj9gIjEjY2joqOkxLzobC7SUQJy7 M2CwuKP6bQjNwNR5N7srPaUS0kzzLwLsGr62vpWZ460WJ3D12H77hQ0vM1zHaDqp uDNNUPwuMW0xCTlvzKT08/0BfpX0fy7GwHDWDF9lQSzkoOJ4N1swsux1H14Y62Q2 X6AiwfypEMw93mwnhwb3tHPpkMAthCODNr2QpGXo6p6FRZexbEggAtoz3wIDAQAB o4IELzCCBCswHQYDVR0OBBYEFFUq06C0t06Fr1T1itdaMCa333GBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzE2ZmNm MS02NDEyLTRkYjItYjNhZS00OWEzYzQ5ZjM5M2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMTZmY2Yx LTY0MTItNGRiMi1iM2FlLTQ5YTNjNDlmMzkzYy8xL1ZTclRvTFMzVG9XdlZQV0sx MW93SnJmZmNZRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBmgYIKwYB BQUHAQcBAf8EggGJMIIBhTCCAToEAgABMIIBMgMEAwWyIAMEAyWYCAMEAi0K5AME Ai1YMAMEAi2DyAMEAi2dbAMEAy5m4AMEAy7nUAMEBT7UgAMEBFEcUAMEBlTzwAME A1ZryAMEBVm4oAMEBln/AAMEAlvbbAMEA173AAMEA40AGAMEAo1iFAMEA5L/MAME A7KE0AMEBLLuYAMEArkC8AMEArkK6AMEArkTOAMEArkWwAMEArkf5AMEArk2zAME Ark8/AMEArlDPAMEArlwLAMEArmdPAMEAbmgSAMEArmwjAMEArm1SAMEArm9aAME ArnouAMEArnpWAMEArnzWAMEArn3kAMEArn90AMEA7zV4AMEA7zwGAMEAsEWhAME AsFUvAMEAsFr3AMEAsI1zAMEAsJMgAMEA8OGqAMEBdlD4AMEAdmUhAMEA9mr4DBF BAIAAjA/AwUAIAEb6AMFAyoAGVADBQAqAxoAAwUDKgejgAMFAyoKGIADBQMqCsWA AwUDKgvigAMFAyoMuwADBQMqDL0AMCwGCCsGAQUFBwEIAQH/BB0wG6AZMBcCAjxC AgI/AwIDAJrfAgMAwjECAwDebzANBgkqhkiG9w0BAQsFAAOCAQEAGKmmjzYVBJOP KD9141fq3KtElF+1T/ZxBH57KB8rN6uq3PsX+lxybLxI+rg7uhu9Ofmw+Ce/HwXr DFZ7u8wNXygXRHV3MSUInYvr46dkdu/65eTZ00t0EqwvLMq0bgKCn9xq8C5AEsj/ sS6fWsit7vjhHrJkUa8nD5T9a9nW1ddR9ZxrCGMRIWMO72GXPdyNwnAkrL3PzyxW bzodEoIdQXde5xbgW4s4lpwHDnyD/z1IAAs5Pj6WQXy82F5hYP5zq7H2pAiPrILp uQp7XkXQC92uPgSSPSZxOItJ0a+S2f4yBMl/Pa6MiojeNloJ+e7VhioouyvWou5J FMp/HWwZ6Q== -----END CERTIFICATE-----Generated at Tue Jan 27 12:11:46 2026 by rpki-client