This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer File: faXTLVsJyTwbXj_Foqog10b8_tE.cer (raw, json) Hash identifier: ajYtcdnc7tjRAjgLADmSslmf1ZEwMLs2Pn3yKaI2BBY= Subject key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DDA0BA47FEDD1C017ACE62E594243 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216070 IP: 2.57.240.0/22 IP: 31.14.10.0/24 IP: 37.140.247.0/24 IP: 37.153.158.0/24 IP: 37.156.5.0/24 IP: 45.87.120.0/23 IP: 45.88.12.0/22 IP: 45.135.180.0/22 IP: 45.144.172.0/22 IP: 46.102.237.0/24 IP: 62.192.152.0/24 IP: 77.81.65.0/24 IP: 77.81.88.0/24 IP: 77.81.100.0/23 IP: 77.81.182.0/24 IP: 79.110.227.0/24 IP: 85.204.18.0/24 IP: 85.204.22.0/24 IP: 86.105.4.0/24 IP: 86.107.50.0/23 IP: 86.107.100.0/23 IP: 86.107.168.0/24 IP: 89.34.106.0/24 IP: 89.34.202.0/24 IP: 89.34.219.0/24 IP: 89.35.73.0/24 IP: 89.35.119.0/24 IP: 89.35.129.0 -- 89.35.131.255 IP: 89.36.137.0/24 IP: 89.36.140.0/24 IP: 89.37.185.0/24 IP: 89.37.192.0/22 IP: 89.39.120.0/23 IP: 89.39.125.0/24 IP: 89.40.36.0/24 IP: 89.40.70.0/24 IP: 89.40.215.0/24 IP: 89.43.62.0/24 IP: 89.44.76.0/24 IP: 89.45.35.0/24 IP: 89.45.44.0/23 IP: 89.45.162.0/24 IP: 89.46.42.0/24 IP: 89.47.36.0/24 IP: 89.47.55.0/24 IP: 89.125.0.0/16 IP: 91.132.48.0/22 IP: 91.208.61.0/24 IP: 91.209.228.0/24 IP: 91.216.185.0/24 IP: 92.114.32.0/24 IP: 92.114.54.0/24 IP: 92.114.93.0/24 IP: 93.90.74.0/23 IP: 93.113.57.0/24 IP: 93.113.171.0/24 IP: 93.113.255.0/24 IP: 93.114.183.0/24 IP: 93.114.244.0/24 IP: 93.115.104.0/22 IP: 93.115.172.0/23 IP: 93.115.175.0/24 IP: 93.115.203.0/24 IP: 93.118.36.0/24 IP: 93.119.154.0/24 IP: 93.119.195.0/24 IP: 94.176.214.0/23 IP: 94.177.13.0/24 IP: 94.177.51.0/24 IP: 94.177.106.0/24 IP: 94.177.145.0/24 IP: 94.177.147.0/24 IP: 94.177.150.0/24 IP: 94.198.171.0/24 IP: 103.56.84.0/24 IP: 103.73.34.0/23 IP: 103.110.39.0/24 IP: 103.245.228.0/22 IP: 128.0.1.0/24 IP: 128.0.41.0/24 IP: 140.225.192.0/19 IP: 167.17.32.0/19 IP: 167.17.176.0/20 IP: 176.126.174.0/24 IP: 176.223.66.0/24 IP: 176.223.188.0/24 IP: 185.34.101.0/24 IP: 185.72.8.0/23 IP: 185.112.249.0/24 IP: 185.141.216.0/22 IP: 185.193.100.0/22 IP: 185.198.233.0 -- 185.198.235.255 IP: 185.212.119.0/24 IP: 185.254.66.0/23 IP: 188.64.142.0/24 IP: 188.208.103.0/24 IP: 188.208.110.0/24 IP: 188.212.121.0/24 IP: 188.213.0.0/24 IP: 188.213.216.0/24 IP: 188.214.107.0/24 IP: 188.215.31.0/24 IP: 188.240.81.0/24 IP: 188.240.213.0/24 IP: 188.241.136.0/23 IP: 188.241.221.0/24 IP: 193.124.36.0/24 IP: 193.124.49.0/24 IP: 193.124.80.0/24 IP: 193.124.224.0/23 IP: 193.178.134.0/24 IP: 193.228.139.0/24 IP: 194.58.33.0 -- 194.58.34.255 IP: 194.58.44.0/22 IP: 194.85.248.0/22 IP: 194.135.18.0/24 IP: 194.135.30.0/24 IP: 194.135.46.0/24 IP: 194.135.119.0/24 IP: 194.135.124.0/24 IP: 195.88.89.0/24 IP: 195.133.192.0/23 IP: 202.71.12.0/22 IP: 204.77.0.0/22 IP: 206.245.128.0/19 IP: 208.123.184.0/21 IP: 212.192.0.0/19 IP: 212.192.208.0/23 IP: 212.192.212.0/22 IP: 212.192.218.0/23 IP: 213.134.11.0/24 IP: 217.19.4.0/24 IP: 2a13:4980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 03:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:da:0b:a4:7f:ed:d1:c0:17:ac:e6:2e:59:42:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:39:65:09:6c:a2:7a:ce:93:51:42:36:e7: 19:64:10:98:9d:8f:f1:c0:45:c7:57:f3:a4:be:b5: 7c:19:31:cc:07:ab:c4:55:63:90:71:96:67:e3:d3: 6f:6c:08:20:72:2a:4a:4f:66:21:d8:c4:e9:01:af: ed:e8:ae:42:3e:5d:f3:5a:45:c0:f2:74:a8:f3:75: 8e:67:c0:6d:96:d0:39:e0:e2:18:8a:00:05:1c:79: 03:52:d7:d6:ad:1e:a4:46:eb:55:55:78:a6:a3:fa: d2:27:89:88:b0:13:a9:13:22:5b:a9:00:f7:b9:f6: 31:c9:e5:55:55:fd:81:ff:29:9e:2c:05:59:c7:c7: e7:8c:10:f3:9c:be:73:26:53:3a:91:28:fe:93:35: 26:c1:5f:34:d1:e9:15:7c:46:f0:4b:c8:4e:de:98: 57:5c:4d:8c:99:30:44:a9:30:d4:f5:9b:ec:c6:53: 78:d3:78:6d:87:f4:3b:13:99:38:e1:93:69:af:4c: de:ca:1b:34:32:03:03:b3:e9:91:9c:41:81:8d:8a: 95:26:b3:45:e3:a9:ee:b9:a4:6b:4e:33:f0:df:8e: ec:78:48:13:2b:b7:52:e9:84:1e:a0:dc:b9:ae:bb: 7d:c2:dd:02:70:df:c4:44:7f:b5:e1:90:f4:e6:d7: f9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.240.0/22 31.14.10.0/24 37.140.247.0/24 37.153.158.0/24 37.156.5.0/24 45.87.120.0/23 45.88.12.0/22 45.135.180.0/22 45.144.172.0/22 46.102.237.0/24 62.192.152.0/24 77.81.65.0/24 77.81.88.0/24 77.81.100.0/23 77.81.182.0/24 79.110.227.0/24 85.204.18.0/24 85.204.22.0/24 86.105.4.0/24 86.107.50.0/23 86.107.100.0/23 86.107.168.0/24 89.34.106.0/24 89.34.202.0/24 89.34.219.0/24 89.35.73.0/24 89.35.119.0/24 89.35.129.0-89.35.131.255 89.36.137.0/24 89.36.140.0/24 89.37.185.0/24 89.37.192.0/22 89.39.120.0/23 89.39.125.0/24 89.40.36.0/24 89.40.70.0/24 89.40.215.0/24 89.43.62.0/24 89.44.76.0/24 89.45.35.0/24 89.45.44.0/23 89.45.162.0/24 89.46.42.0/24 89.47.36.0/24 89.47.55.0/24 89.125.0.0/16 91.132.48.0/22 91.208.61.0/24 91.209.228.0/24 91.216.185.0/24 92.114.32.0/24 92.114.54.0/24 92.114.93.0/24 93.90.74.0/23 93.113.57.0/24 93.113.171.0/24 93.113.255.0/24 93.114.183.0/24 93.114.244.0/24 93.115.104.0/22 93.115.172.0/23 93.115.175.0/24 93.115.203.0/24 93.118.36.0/24 93.119.154.0/24 93.119.195.0/24 94.176.214.0/23 94.177.13.0/24 94.177.51.0/24 94.177.106.0/24 94.177.145.0/24 94.177.147.0/24 94.177.150.0/24 94.198.171.0/24 103.56.84.0/24 103.73.34.0/23 103.110.39.0/24 103.245.228.0/22 128.0.1.0/24 128.0.41.0/24 140.225.192.0/19 167.17.32.0/19 167.17.176.0/20 176.126.174.0/24 176.223.66.0/24 176.223.188.0/24 185.34.101.0/24 185.72.8.0/23 185.112.249.0/24 185.141.216.0/22 185.193.100.0/22 185.198.233.0-185.198.235.255 185.212.119.0/24 185.254.66.0/23 188.64.142.0/24 188.208.103.0/24 188.208.110.0/24 188.212.121.0/24 188.213.0.0/24 188.213.216.0/24 188.214.107.0/24 188.215.31.0/24 188.240.81.0/24 188.240.213.0/24 188.241.136.0/23 188.241.221.0/24 193.124.36.0/24 193.124.49.0/24 193.124.80.0/24 193.124.224.0/23 193.178.134.0/24 193.228.139.0/24 194.58.33.0-194.58.34.255 194.58.44.0/22 194.85.248.0/22 194.135.18.0/24 194.135.30.0/24 194.135.46.0/24 194.135.119.0/24 194.135.124.0/24 195.88.89.0/24 195.133.192.0/23 202.71.12.0/22 204.77.0.0/22 206.245.128.0/19 208.123.184.0/21 212.192.0.0/19 212.192.208.0/23 212.192.212.0/22 212.192.218.0/23 213.134.11.0/24 217.19.4.0/24 IPv6: 2a13:4980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216070 Signature Algorithm: sha256WithRSAEncryption a8:68:b4:54:24:d9:57:8c:54:3b:cb:3d:cb:f4:da:55:f5:9f: 77:53:b8:fc:23:7f:df:26:aa:01:b9:71:7d:8b:70:20:dd:80: 03:15:9e:6a:c2:6b:5d:2f:4b:0a:c8:19:3a:65:4e:92:29:5c: 31:6f:bf:4c:ac:f6:48:a9:19:26:39:d2:d8:c4:a2:d8:42:a2: 16:96:06:4c:21:92:f0:4d:9d:71:e1:dd:b5:bb:6d:4a:09:fa: 87:f1:ce:2d:43:c5:1f:01:db:59:f3:24:2d:7e:50:5b:ee:bb: 10:87:9c:e8:2f:d8:ba:62:8e:bb:50:66:5e:b8:81:5e:fa:af: 54:c1:1b:b5:15:a0:ca:0d:99:04:46:0e:23:80:52:3b:73:cd: 9e:ef:12:06:4b:05:09:55:e6:56:35:79:29:38:c5:02:f0:64: 7b:b8:51:65:cc:27:8f:a3:9a:6a:ba:9e:35:9a:a6:cf:f1:b8: f0:f6:d3:7a:47:e4:fe:d8:11:40:ef:91:e1:c3:78:a1:2a:f4: f0:e3:fe:23:08:3b:2d:22:d0:4c:2e:6c:32:3c:e8:d8:d8:95: 49:fa:06:90:d9:e5:37:e0:bd:74:33:a5:da:96:ed:27:5b:d2: f9:74:36:5b:5f:0b:ec:f5:8e:81:17:4d:ec:93:91:b5:21:41: cf:a3:b6:4e -----BEGIN CERTIFICATE----- MIII1jCCB76gAwIBAgISAZt5fdoLpH/t0cAXrOYuWUJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGE1ZDMyZDViMDljOTNjMWI1ZTNmYzVhMmFhMjBkNzQ2ZmNmZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg05ZQlsonrOk1FCNucZZBCYnY/x wEXHV/OkvrV8GTHMB6vEVWOQcZZn49NvbAggcipKT2Yh2MTpAa/t6K5CPl3zWkXA 8nSo83WOZ8BtltA54OIYigAFHHkDUtfWrR6kRutVVXimo/rSJ4mIsBOpEyJbqQD3 ufYxyeVVVf2B/ymeLAVZx8fnjBDznL5zJlM6kSj+kzUmwV800ekVfEbwS8hO3phX XE2MmTBEqTDU9ZvsxlN403hth/Q7E5k44ZNpr0zeyhs0MgMDs+mRnEGBjYqVJrNF 46nuuaRrTjPw347seEgTK7dS6YQeoNy5rrt9wt0CcN/ERH+14ZD05tf5mQIDAQAB o4IF4jCCBd4wHQYDVR0OBBYEFH2l0y1bCck8G14/xaKqINdG/P7RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzRiMThm Yi1kM2VkLTRiMjctOWJkMC1lNTgzOWY0M2U1ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNGIxOGZi LWQzZWQtNGIyNy05YmQwLWU1ODM5ZjQzZTU4My8xL2ZhWFRMVnNKeVR3YlhqX0Zv cW9nMTBiOF90RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDXwYIKwYB BQUHAQcBAf8EggNOMIIDSjCCAzcEAgABMIIDLwMEAgI58AMEAB8OCgMEACWM9wME ACWZngMEACWcBQMEAS1XeAMEAi1YDAMEAi2HtAMEAi2QrAMEAC5m7QMEAD7AmAME AE1RQQMEAE1RWAMEAU1RZAMEAE1RtgMEAE9u4wMEAFXMEgMEAFXMFgMEAFZpBAME AVZrMgMEAVZrZAMEAFZrqAMEAFkiagMEAFkiygMEAFki2wMEAFkjSQMEAFkjdzAM AwQAWSOBAwQCWSOAAwQAWSSJAwQAWSSMAwQAWSW5AwQCWSXAAwQBWSd4AwQAWSd9 AwQAWSgkAwQAWShGAwQAWSjXAwQAWSs+AwQAWSxMAwQAWS0jAwQBWS0sAwQAWS2i AwQAWS4qAwQAWS8kAwQAWS83AwMAWX0DBAJbhDADBABb0D0DBABb0eQDBABb2LkD BABcciADBABccjYDBABccl0DBAFdWkoDBABdcTkDBABdcasDBABdcf8DBABdcrcD BABdcvQDBAJdc2gDBAFdc6wDBABdc68DBABdc8sDBABddiQDBABdd5oDBABdd8MD BAFesNYDBABesQ0DBABesTMDBABesWoDBABesZEDBABesZMDBABesZYDBABexqsD BABnOFQDBAFnSSIDBABnbicDBAJn9eQDBACAAAEDBACAACkDBAWM4cADBAWnESAD BASnEbADBACwfq4DBACw30IDBACw37wDBAC5ImUDBAG5SAgDBAC5cPkDBAK5jdgD BAK5wWQwDAMEALnG6QMEArnG6AMEALnUdwMEAbn+QgMEALxAjgMEALzQZwMEALzQ bgMEALzUeQMEALzVAAMEALzV2AMEALzWawMEALzXHwMEALzwUQMEALzw1QMEAbzx iAMEALzx3QMEAMF8JAMEAMF8MQMEAMF8UAMEAcF84AMEAMGyhgMEAMHkizAMAwQA wjohAwQAwjoiAwQCwjosAwQCwlX4AwQAwocSAwQAwoceAwQAwocuAwQAwod3AwQA wod8AwQAw1hZAwQBw4XAAwQCykcMAwQCzE0AAwQFzvWAAwQD0Hu4AwQF1MAAAwQB 1MDQAwQC1MDUAwQB1MDaAwQA1YYLAwQA2RMEMA0EAgACMAcDBQMqE0mAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwNMBjANBgkqhkiG9w0BAQsFAAOCAQEAqGi0VCTZ V4xUO8s9y/TaVfWfd1O4/CN/3yaqAblxfYtwIN2AAxWeasJrXS9LCsgZOmVOkilc MW+/TKz2SKkZJjnS2MSi2EKiFpYGTCGS8E2dceHdtbttSgn6h/HOLUPFHwHbWfMk LX5QW+67EIec6C/YumKOu1BmXriBXvqvVMEbtRWgyg2ZBEYOI4BSO3PNnu8SBksF CVXmVjV5KTjFAvBke7hRZcwnj6OaarqeNZqmz/G48PbTekfk/tgRQO+R4cN4oSr0 8OP+Iwg7LSLQTC5sMjzo2NiVSfoGkNnlN+C9dDOl2pbtJ1vS+XQ2W18L7PWOgRdN 7JORtSFBz6O2Tg== -----END CERTIFICATE-----Generated at Sat Jan 17 11:43:03 2026 by rpki-client