This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer (raw, json) Hash identifier: bbIY7IwT+gvSUsVwdNyLLPrum/LcdbcB6IFBqge7BCQ= Subject key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8E948B1383DD9655D8F190F1E3E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16010 AS: 25249 IP: 5.178.128.0/17 IP: 46.49.0.0/17 IP: 62.168.160.0/19 IP: 77.74.40.0/21 IP: 80.241.240.0/22 IP: 80.241.248.0/22 IP: 80.241.253.0 -- 80.241.255.255 IP: 81.95.160.0/20 IP: 82.211.128.0/18 IP: 85.114.224.0/19 IP: 89.232.32.0/19 IP: 93.177.128.0/18 IP: 94.100.224.0/20 IP: 94.137.160.0/19 IP: 94.240.192.0/18 IP: 95.104.0.0/17 IP: 109.172.128.0/17 IP: 134.19.224.0/19 IP: 185.115.4.0/22 IP: 188.121.192.0/19 IP: 188.129.128.0/17 IP: 212.58.96.0/19 IP: 212.72.128.0/23 IP: 212.72.131.0 -- 212.72.154.255 IP: 212.72.156.0/22 IP: 213.157.192.0/19 IP: 213.200.0.0/19 IP: 2a0b:6200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8e:94:8b:13:83:dd:96:55:d8:f1:90:f1:e3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:e8:16:c3:98:19:f6:60:55:29:79:3c:5b: 56:a4:fb:fd:9f:5e:38:82:a8:66:db:fe:75:53:1f: da:f0:74:a1:7f:88:e3:b0:1b:7c:be:81:99:01:25: ec:3a:56:c7:53:52:9c:6f:95:d5:e7:28:c6:db:05: 7d:f0:1d:7a:a9:9c:c8:dc:5d:8d:67:88:82:96:9c: a8:e8:42:a2:12:46:4c:84:aa:8f:2b:6c:96:71:1d: c2:53:e2:1e:17:9d:98:3e:22:00:af:25:02:7e:98: 83:51:8f:10:6a:61:a2:12:55:ca:de:58:d0:46:85: 83:34:d9:aa:e0:cb:53:d3:79:a2:99:f4:9f:8e:15: fc:10:0c:56:be:7f:7c:c1:ac:71:fa:46:1e:b7:33: 73:55:f3:15:38:33:ce:eb:82:20:a2:81:dc:8c:7f: de:96:96:91:52:f0:bf:48:09:bd:ee:b1:5a:ff:57: 0a:e7:ca:8c:47:c8:97:25:58:cc:d0:d6:56:da:03: 15:99:dd:f3:17:f6:8c:f8:c8:3b:9f:38:6a:69:77: 8d:3d:8d:70:8f:e1:06:e5:2b:0d:6d:e9:e1:d9:c8: 36:c2:29:0a:a8:c8:65:0f:46:cb:fa:11:5d:56:34: ed:29:df:aa:d9:44:59:5d:13:5b:4a:08:c9:5f:9b: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.128.0/17 46.49.0.0/17 62.168.160.0/19 77.74.40.0/21 80.241.240.0/22 80.241.248.0/22 80.241.253.0-80.241.255.255 81.95.160.0/20 82.211.128.0/18 85.114.224.0/19 89.232.32.0/19 93.177.128.0/18 94.100.224.0/20 94.137.160.0/19 94.240.192.0/18 95.104.0.0/17 109.172.128.0/17 134.19.224.0/19 185.115.4.0/22 188.121.192.0/19 188.129.128.0/17 212.58.96.0/19 212.72.128.0/23 212.72.131.0-212.72.154.255 212.72.156.0/22 213.157.192.0/19 213.200.0.0/19 IPv6: 2a0b:6200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16010 25249 Signature Algorithm: sha256WithRSAEncryption 1d:6b:53:3d:f2:61:35:bb:fb:66:17:3a:78:37:2e:6b:fe:83: ed:83:9d:fb:08:4f:fe:f7:97:39:db:9e:ed:a3:fd:d1:ce:2c: da:6e:d9:84:01:ce:3a:ff:c5:26:90:43:0f:ff:85:5d:89:5d: 55:62:80:9d:4f:c0:39:fc:63:cb:b3:18:77:87:a6:90:d3:0d: 92:37:36:52:cf:f9:ca:f5:4b:02:27:12:78:cf:d1:ab:ce:cf: b0:ad:2f:c1:9e:03:cb:52:1b:98:d0:85:b1:72:ae:8c:ce:a1: fa:be:74:1e:9b:71:88:9b:fd:45:20:76:3d:f5:9d:20:b8:b6: ef:f3:d2:67:05:07:9c:62:a1:46:dd:39:8d:e0:68:63:a8:87: 01:83:34:f1:46:23:bd:22:20:ba:d4:57:1d:52:12:4f:da:e9: 3a:f5:b1:cb:c0:0a:09:0c:15:4c:18:01:e9:d5:0d:fe:c8:31: 1a:66:48:a3:3a:f8:da:40:4b:e0:d0:ae:44:1a:78:f7:24:ac: ec:83:68:38:e4:d8:fc:96:57:32:ae:11:6e:50:c8:3f:a5:a4: b2:e6:b5:a0:95:52:38:27:25:04:8a:34:3c:44:55:05:28:19: 94:87:24:8f:0e:f7:e5:d6:35:85:63:57:e7:23:f4:1d:4f:38: 15:a0:1a:db -----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISAZt6W46UixOD3ZZV2PGQ8ePhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQyYjM2MjA2NDM5YmJjZTE1YjM2M2YwOWVlZmYxZDczOGNlY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvzoFsOYGfZgVSl5PFtWpPv9n144 gqhm2/51Ux/a8HShf4jjsBt8voGZASXsOlbHU1Kcb5XV5yjG2wV98B16qZzI3F2N Z4iClpyo6EKiEkZMhKqPK2yWcR3CU+IeF52YPiIAryUCfpiDUY8QamGiElXK3ljQ RoWDNNmq4MtT03mimfSfjhX8EAxWvn98waxx+kYetzNzVfMVODPO64IgooHcjH/e lpaRUvC/SAm97rFa/1cK58qMR8iXJVjM0NZW2gMVmd3zF/aM+Mg7nzhqaXeNPY1w j+EG5SsNbenh2cg2wikKqMhlD0bL+hFdVjTtKd+q2URZXRNbSgjJX5uQMwIDAQAB o4IDYjCCA14wHQYDVR0OBBYEFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzYyYjkw OS0xZTNlLTRhMWItOWUyNC1iMDFlMDI5N2IwNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvNjJiOTA5 LTFlM2UtNGExYi05ZTI0LWIwMWUwMjk3YjA3MC8xL19kS3pZZ1pEbTd6aFd6WV9D ZTdfSFhPTTdNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHdBggrBgEF BQcBBwEB/wSBzTCByjCBuAQCAAEwgbEDBAcFsoADBAcuMQADBAU+qKADBANNSigD BAJQ8fADBAJQ8fgwCwMEAFDx/QMDAVDwAwQEUV+gAwQGUtOAAwQFVXLgAwQFWegg AwQGXbGAAwQEXmTgAwQFXomgAwQGXvDAAwQHX2gAAwQHbayAAwQFhhPgAwQCuXME AwQFvHnAAwQHvIGAAwQF1DpgAwQB1EiAMAwDBADUSIMDBADUSJoDBALUSJwDBAXV ncADBAXVyAAwDQQCAAIwBwMFAyoLYgAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC PooCAmKhMA0GCSqGSIb3DQEBCwUAA4IBAQAda1M98mE1u/tmFzp4Ny5r/oPtg537 CE/+95c5257to/3RzizabtmEAc46/8UmkEMP/4VdiV1VYoCdT8A5/GPLsxh3h6aQ 0w2SNzZSz/nK9UsCJxJ4z9Grzs+wrS/BngPLUhuY0IWxcq6MzqH6vnQem3GIm/1F IHY99Z0guLbv89JnBQecYqFG3TmN4GhjqIcBgzTxRiO9IiC61FcdUhJP2uk69bHL wAoJDBVMGAHp1Q3+yDEaZkijOvjaQEvg0K5EGnj3JKzsg2g45Nj8llcyrhFuUMg/ paSy5rWglVI4JyUEijQ8RFUFKBmUhySPDvfl1jWFY1fnI/QdTzgVoBrb -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:45 2026 by rpki-client