This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer File: cFG0wveunvgLUwALMquPXS8vQVs.cer (raw, json) Hash identifier: zLLAiCrYoOc1bcCeezRtjrFb4mhtvIonfvWJ4Y/fBxE= Subject key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3439722C09CB633E724C3C0B8BBA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.133.100.0/22 IP: 5.133.124.0/22 IP: 31.40.196.0/22 IP: 31.40.204.0/22 IP: 37.221.76.0/22 IP: 62.182.32.0/22 IP: 77.241.72.0/22 IP: 81.90.176.0/22 IP: 83.171.244.0/22 IP: 84.54.0.0/22 IP: 85.8.144.0/22 IP: 85.8.156.0 -- 85.8.163.255 IP: 85.235.72.0/22 IP: 92.249.60.0/22 IP: 93.190.8.0/22 IP: 139.28.32.0/22 IP: 139.28.48.0/22 IP: 139.28.212.0/22 IP: 139.28.240.0/22 IP: 141.98.48.0/22 IP: 141.98.112.0/22 IP: 147.78.68.0/22 IP: 176.53.156.0/22 IP: 176.53.168.0/22 IP: 176.96.128.0/22 IP: 185.231.224.0/22 IP: 185.254.52.0/22 IP: 188.119.68.0/22 IP: 193.17.4.0/22 IP: 193.32.184.0/22 IP: 193.32.204.0/22 IP: 193.38.44.0/22 IP: 193.111.76.0/22 IP: 193.138.172.0/22 IP: 193.187.108.0/22 IP: 193.187.132.0/22 IP: 193.187.140.0/22 IP: 194.56.184.0/22 IP: 194.93.48.0/22 IP: 194.93.60.0/22 IP: 194.169.92.0/22 IP: 212.87.196.0/22 IP: 212.103.36.0/22 IP: 212.107.4.0/22 IP: 212.115.100.0/22 IP: 213.139.224.0/22 IP: 217.18.208.0/22 IP: 2a02:f240::/29 IP: 2a04:3e80::/29 IP: 2a05:13c0::/29 IP: 2a05:b480::/29 IP: 2a06:8240::/29 IP: 2a06:9ec0::/29 IP: 2a07:e800::/29 IP: 2a09:780::/29 IP: 2a09:c40::/29 IP: 2a09:fc0::/29 IP: 2a09:1e40::/29 IP: 2a09:2400::/29 IP: 2a09:2580::/29 IP: 2a09:2780::/29 IP: 2a09:3880::/29 IP: 2a09:3b80::/29 IP: 2a09:3d80::/29 IP: 2a09:4400::/29 IP: 2a09:7200::/29 IP: 2a09:7c00::/29 IP: 2a09:8200::/29 IP: 2a09:8a00::/29 IP: 2a09:9200::/29 IP: 2a09:d500::/29 IP: 2a09:df00::/29 IP: 2a09:e500::/29 IP: 2a09:e600::/29 IP: 2a09:e800::/29 IP: 2a09:f480::/29 IP: 2a09:fa80::/29 IP: 2a0c:47c0::/29 IP: 2a0c:7dc0::/29 IP: 2a0c:9ac0::/29 IP: 2a0c:d7c0::/29 IP: 2a0c:f9c0::/29 IP: 2a0d:50c0::/29 IP: 2a0d:6740::/29 IP: 2a0d:93c0::/29 IP: 2a0d:d540::/29 IP: 2a0d:f1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:97:22:c0:9c:b6:33:e7:24:c3:c0:b8:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:50:a5:e4:a9:63:99:9f:aa:52:a7:2e:8a: 78:38:6d:ba:5f:58:db:d6:4b:86:74:2c:42:b3:b3: bf:82:e4:19:98:4d:6c:f5:e3:11:e4:12:2b:94:d2: af:35:54:ff:8b:c5:c0:1e:6e:ef:1e:1a:63:aa:31: 77:57:ed:17:7f:ab:fc:1d:53:f5:09:71:ef:75:c4: 8b:bb:fa:75:9a:74:5e:7d:d1:4e:c8:65:f3:dd:5a: cf:3d:bc:33:22:24:29:dd:9d:d5:a9:f2:66:37:57: 26:2e:47:e5:e8:8e:c9:99:a8:7c:63:b5:d0:ff:28: 9c:56:12:99:4e:b2:67:4f:13:22:c3:c0:f6:ab:3f: b0:66:8b:66:df:04:c4:94:e1:15:73:b7:ab:e6:2d: 4a:49:96:79:b7:2a:01:e6:e9:85:86:83:77:77:9a: 2d:4b:9e:1f:a9:d0:f4:7b:58:f7:50:9e:2a:28:3f: 7a:f4:36:ba:d6:f9:08:55:7b:20:ac:dc:0c:11:d3: 13:16:45:8e:a9:cb:85:1c:19:ec:28:5a:2f:49:66: 06:c4:0f:67:2e:48:f3:c5:42:f4:cf:21:37:e5:6f: 0f:a1:ec:d7:60:a5:a2:31:70:09:08:52:c6:cb:cb: 12:ad:10:b4:1d:a1:a2:c4:74:a6:48:ac:c6:c4:e2: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.100.0/22 5.133.124.0/22 31.40.196.0/22 31.40.204.0/22 37.221.76.0/22 62.182.32.0/22 77.241.72.0/22 81.90.176.0/22 83.171.244.0/22 84.54.0.0/22 85.8.144.0/22 85.8.156.0-85.8.163.255 85.235.72.0/22 92.249.60.0/22 93.190.8.0/22 139.28.32.0/22 139.28.48.0/22 139.28.212.0/22 139.28.240.0/22 141.98.48.0/22 141.98.112.0/22 147.78.68.0/22 176.53.156.0/22 176.53.168.0/22 176.96.128.0/22 185.231.224.0/22 185.254.52.0/22 188.119.68.0/22 193.17.4.0/22 193.32.184.0/22 193.32.204.0/22 193.38.44.0/22 193.111.76.0/22 193.138.172.0/22 193.187.108.0/22 193.187.132.0/22 193.187.140.0/22 194.56.184.0/22 194.93.48.0/22 194.93.60.0/22 194.169.92.0/22 212.87.196.0/22 212.103.36.0/22 212.107.4.0/22 212.115.100.0/22 213.139.224.0/22 217.18.208.0/22 IPv6: 2a02:f240::/29 2a04:3e80::/29 2a05:13c0::/29 2a05:b480::/29 2a06:8240::/29 2a06:9ec0::/29 2a07:e800::/29 2a09:780::/29 2a09:c40::/29 2a09:fc0::/29 2a09:1e40::/29 2a09:2400::/29 2a09:2580::/29 2a09:2780::/29 2a09:3880::/29 2a09:3b80::/29 2a09:3d80::/29 2a09:4400::/29 2a09:7200::/29 2a09:7c00::/29 2a09:8200::/29 2a09:8a00::/29 2a09:9200::/29 2a09:d500::/29 2a09:df00::/29 2a09:e500::/29 2a09:e600::/29 2a09:e800::/29 2a09:f480::/29 2a09:fa80::/29 2a0c:47c0::/29 2a0c:7dc0::/29 2a0c:9ac0::/29 2a0c:d7c0::/29 2a0c:f9c0::/29 2a0d:50c0::/29 2a0d:6740::/29 2a0d:93c0::/29 2a0d:d540::/29 2a0d:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 36:50:77:b7:da:4e:26:ff:f5:fc:4e:b1:ab:0f:a0:20:bf:4b: 8e:ed:5d:75:d9:b7:5a:05:64:f5:17:3d:a6:3c:2f:6b:af:a0: e1:2c:62:27:9b:81:78:ff:4c:c7:5d:1f:c2:53:7a:b5:d9:2b: 44:00:19:9c:b9:60:fe:59:05:0b:70:c9:43:92:16:3a:da:d2: 3b:ed:81:6b:fa:2b:4b:2d:87:12:43:2f:da:32:e6:36:ba:96: 22:71:d3:44:00:5f:48:85:ac:4f:8c:55:64:a5:c7:b7:34:00: 7c:27:f0:d7:a4:f8:7c:84:22:0c:69:87:77:b6:a3:e2:a3:b9: ba:26:96:1b:f1:67:a6:35:30:00:ed:b1:69:46:3f:2a:5a:68: 6c:96:5a:c7:97:be:d8:45:5e:12:cb:6b:d5:3b:b0:54:ec:d7: ca:c1:ce:97:bc:8f:85:31:33:da:3b:3e:4b:3f:df:52:36:cb: c1:c5:4b:1c:13:fc:58:a2:3d:e6:cc:e9:77:88:b9:54:42:39: 53:df:51:9d:c3:5a:ee:24:24:6d:fd:8a:19:b2:a1:1d:38:04: 75:00:fc:ba:84:bc:04:fc:66:4b:66:02:f6:86:b6:2d:cb:36: b8:a8:f7:c2:0f:d3:eb:20:6d:56:9f:fa:4f:98:51:a4:5e:b7: f2:b2:5a:21 -----BEGIN CERTIFICATE----- MIIH3jCCBsagAwIBAgISAZt4o0OXIsCctjPnJMPAuLugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDUxYjRjMmY3YWU5ZWY4MGI1MzAwMGIzMmFiOGY1ZDJmMmY0MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXJQpeSpY5mfqlKnLop4OG26X1jb 1kuGdCxCs7O/guQZmE1s9eMR5BIrlNKvNVT/i8XAHm7vHhpjqjF3V+0Xf6v8HVP1 CXHvdcSLu/p1mnRefdFOyGXz3VrPPbwzIiQp3Z3VqfJmN1cmLkfl6I7Jmah8Y7XQ /yicVhKZTrJnTxMiw8D2qz+wZotm3wTElOEVc7er5i1KSZZ5tyoB5umFhoN3d5ot S54fqdD0e1j3UJ4qKD969Da61vkIVXsgrNwMEdMTFkWOqcuFHBnsKFovSWYGxA9n LkjzxUL0zyE35W8PoezXYKWiMXAJCFLGy8sSrRC0HaGixHSmSKzGxOK5KQIDAQAB o4IE6jCCBOYwHQYDVR0OBBYEFHBRtML3rp74C1MACzKrj10vL0FbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNl OWZhLTlhNmYtNGUwYy05ODA5LTdhNDc4ODc0NDg5My8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWM1 Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0ODkzLzAvNzA1MUI0QzJGN0FF OUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjCCAmcGCCsGAQUFBwEHAQH/BIICVjCCAlIwggEq BAIAATCCASIDBAIFhWQDBAIFhXwDBAIfKMQDBAIfKMwDBAIl3UwDBAI+tiADBAJN 8UgDBAJRWrADBAJTq/QDBAJUNgADBAJVCJAwDAMEAlUInAMEAlUIoAMEAlXrSAME Alz5PAMEAl2+CAMEAoscIAMEAoscMAMEAosc1AMEAosc8AMEAo1iMAMEAo1icAME ApNORAMEArA1nAMEArA1qAMEArBggAMEArnn4AMEArn+NAMEArx3RAMEAsERBAME AsEguAMEAsEgzAMEAsEmLAMEAsFvTAMEAsGKrAMEAsG7bAMEAsG7hAMEAsG7jAME AsI4uAMEAsJdMAMEAsJdPAMEAsKpXAMEAtRXxAMEAtRnJAMEAtRrBAMEAtRzZAME AtWL4AMEAtkS0DCCASAEAgACMIIBGAMFAyoC8kADBQMqBD6AAwUDKgUTwAMFAyoF tIADBQMqBoJAAwUDKgaewAMFAyoH6AADBQMqCQeAAwUDKgkMQAMFAyoJD8ADBQMq CR5AAwUDKgkkAAMFAyoJJYADBQMqCSeAAwUDKgk4gAMFAyoJO4ADBQMqCT2AAwUD KglEAAMFAyoJcgADBQMqCXwAAwUDKgmCAAMFAyoJigADBQMqCZIAAwUDKgnVAAMF AyoJ3wADBQMqCeUAAwUDKgnmAAMFAyoJ6AADBQMqCfSAAwUDKgn6gAMFAyoMR8AD BQMqDH3AAwUDKgyawAMFAyoM18ADBQMqDPnAAwUDKg1QwAMFAyoNZ0ADBQMqDZPA AwUDKg3VQAMFAyoN8cAwDQYJKoZIhvcNAQELBQADggEBADZQd7faTib/9fxOsasP oCC/S47tXXXZt1oFZPUXPaY8L2uvoOEsYiebgXj/TMddH8JTerXZK0QAGZy5YP5Z BQtwyUOSFjra0jvtgWv6K0sthxJDL9oy5ja6liJx00QAX0iFrE+MVWSlx7c0AHwn 8Nek+HyEIgxph3e2o+KjubomlhvxZ6Y1MADtsWlGPypaaGyWWseXvthFXhLLa9U7 sFTs18rBzpe8j4UxM9o7Pks/31I2y8HFSxwT/FiiPebM6XeIuVRCOVPfUZ3DWu4k JG39ihmyoR04BHUA/LqEvAT8ZktmAvaGti3LNrio98IP0+sgbVaf+k+YUaRet/Ky WiE= -----END CERTIFICATE-----Generated at Mon Jan 19 13:05:30 2026 by rpki-client