This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer File: ffEy3xPkvlPYJQyMSEICZO72wUw.cer (raw, json) Hash identifier: PkMtu9jvKrKJyOPzlTTg47tK3gq3/xoTSVE6z5ZtzP0= Subject key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF97F6961BA8073F50898EE0747514AD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 08:50:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31362 AS: 50667 IP: 31.14.16.0/24 IP: 31.14.20.0/24 IP: 31.14.43.0/24 IP: 31.14.53.0 -- 31.14.55.255 IP: 31.14.100.0/23 IP: 37.156.7.0/24 IP: 37.156.245.0/24 IP: 77.81.178.0/23 IP: 77.81.190.0/24 IP: 84.247.29.0/24 IP: 84.247.55.0 -- 84.247.56.255 IP: 85.204.23.0/24 IP: 85.204.41.0/24 IP: 85.204.68.0/24 IP: 85.204.116.0/24 IP: 85.204.138.0/24 IP: 86.104.9.0 -- 86.104.10.255 IP: 86.104.124.0/24 IP: 86.104.194.0/24 IP: 86.105.170.0/24 IP: 86.106.99.0/24 IP: 86.106.129.0 -- 86.106.130.255 IP: 86.106.134.0/24 IP: 86.106.156.0/24 IP: 86.106.168.0/24 IP: 86.106.170.0/23 IP: 86.107.20.0/24 IP: 86.107.30.0/23 IP: 86.107.52.0/24 IP: 86.107.54.0/24 IP: 86.107.76.0/24 IP: 86.107.181.0 -- 86.107.182.255 IP: 89.32.41.0/24 IP: 89.32.185.0/24 IP: 89.32.191.0/24 IP: 89.32.216.0/21 IP: 89.33.45.0/24 IP: 89.33.86.0/24 IP: 89.33.119.0/24 IP: 89.33.196.0/24 IP: 89.33.238.0/23 IP: 89.33.243.0 -- 89.33.244.255 IP: 89.34.1.0/24 IP: 89.34.5.0/24 IP: 89.34.93.0/24 IP: 89.34.173.0/24 IP: 89.35.55.0/24 IP: 89.35.77.0/24 IP: 89.35.115.0 -- 89.35.117.255 IP: 89.36.19.0/24 IP: 89.36.88.0/24 IP: 89.36.92.0/24 IP: 89.36.148.0/23 IP: 89.36.192.0/24 IP: 89.36.196.0/24 IP: 89.37.108.0/22 IP: 89.37.158.0/23 IP: 89.38.27.0/24 IP: 89.38.137.0 -- 89.38.139.255 IP: 89.38.208.0/22 IP: 89.39.93.0/24 IP: 89.39.126.0/23 IP: 89.39.148.0/24 IP: 89.40.73.0/24 IP: 89.40.77.0/24 IP: 89.40.88.0/23 IP: 89.40.136.0/23 IP: 89.41.63.0/24 IP: 89.42.9.0/24 IP: 89.42.14.0/24 IP: 89.42.35.0/24 IP: 89.42.156.0/23 IP: 89.42.214.0/24 IP: 89.43.38.0/24 IP: 89.43.54.0/24 IP: 89.43.61.0/24 IP: 89.44.88.0/22 IP: 89.44.104.0/24 IP: 89.44.123.0/24 IP: 89.44.125.0/24 IP: 89.44.140.0/23 IP: 89.44.236.0/24 IP: 89.45.46.0/23 IP: 89.47.3.0/24 IP: 89.47.10.0/24 IP: 89.47.42.0/24 IP: 89.47.88.0/24 IP: 89.47.255.0/24 IP: 91.250.247.0/24 IP: 92.114.39.0/24 IP: 92.114.52.0/24 IP: 92.114.108.0/24 IP: 93.113.28.0/24 IP: 93.113.34.0/24 IP: 93.114.96.0/23 IP: 93.115.40.0/21 IP: 93.115.246.0/24 IP: 93.118.39.0/24 IP: 93.119.114.0 -- 93.119.117.255 IP: 93.119.171.0/24 IP: 94.176.128.0/24 IP: 94.176.130.0/24 IP: 94.176.166.0/23 IP: 94.177.30.0/23 IP: 176.126.175.0/24 IP: 176.223.96.0/22 IP: 185.99.88.0/22 IP: 188.208.31.0/24 IP: 188.209.212.0/24 IP: 188.210.89.0/24 IP: 188.210.224.0/21 IP: 188.211.27.0/24 IP: 188.211.30.0/23 IP: 188.211.224.0/22 IP: 188.212.111.0/24 IP: 188.213.32.0/24 IP: 188.213.48.0/24 IP: 188.213.134.0/24 IP: 188.214.141.0/24 IP: 188.214.156.0/24 IP: 188.214.226.0/24 IP: 188.215.70.0/23 IP: 188.215.246.0/24 IP: 188.240.12.0/24 IP: 188.240.198.0/23 IP: 188.240.202.0/23 IP: 188.240.208.0/24 IP: 188.241.104.0/23 IP: 188.241.108.0/24 IP: 188.241.134.0/23 IP: 188.241.184.0/23 IP: 188.241.188.0/23 IP: 217.19.9.0/24 IP: 2a04:fee0::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:7f:69:61:ba:80:73:f5:08:98:ee:07:47:51:4a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 08:50:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df132df13e4be53d8250c8c48420264eef6c14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:08:3e:9b:97:a0:64:6a:d2:e3:2f:c0:c3: ab:60:3b:75:66:3b:80:7f:29:fe:bf:06:e3:1f:f2: 08:e5:f3:89:0d:c3:f7:a2:be:71:fa:8c:4a:97:da: e2:7c:83:81:6e:c2:a1:ae:0d:25:05:2b:54:33:45: a3:df:bf:d1:71:26:ee:e5:0a:f0:a7:74:90:2b:d5: bd:48:6e:56:7b:9e:39:59:a8:d7:e6:26:12:bb:ad: 16:db:51:9a:ea:83:ea:77:41:a4:b5:4b:38:0e:20: fb:fd:f2:18:91:1c:3e:00:d5:6f:9b:6b:f8:f1:f3: 68:dd:22:98:d9:5f:de:56:39:d9:40:de:b5:19:79: 46:e8:a8:f2:31:47:aa:a0:8f:84:ac:60:ba:38:ea: 9a:9e:fb:c3:61:76:34:61:8a:8f:4b:45:62:18:0e: f0:bd:8b:d1:00:0f:06:0f:4c:91:9d:7f:c8:ac:0c: f9:38:16:6e:92:ff:15:86:4a:8d:15:41:69:3c:4f: a7:87:d9:7d:63:2d:29:01:88:6f:c5:bf:a1:9a:c2: a4:ac:02:b4:13:f1:45:b5:c3:0e:cb:0a:52:25:60: 34:92:79:6f:bf:f3:69:2d:a6:3e:74:c1:fb:f5:95: 64:7a:ee:02:98:64:05:4a:80:00:33:b7:5a:f5:d7: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.16.0/24 31.14.20.0/24 31.14.43.0/24 31.14.53.0-31.14.55.255 31.14.100.0/23 37.156.7.0/24 37.156.245.0/24 77.81.178.0/23 77.81.190.0/24 84.247.29.0/24 84.247.55.0-84.247.56.255 85.204.23.0/24 85.204.41.0/24 85.204.68.0/24 85.204.116.0/24 85.204.138.0/24 86.104.9.0-86.104.10.255 86.104.124.0/24 86.104.194.0/24 86.105.170.0/24 86.106.99.0/24 86.106.129.0-86.106.130.255 86.106.134.0/24 86.106.156.0/24 86.106.168.0/24 86.106.170.0/23 86.107.20.0/24 86.107.30.0/23 86.107.52.0/24 86.107.54.0/24 86.107.76.0/24 86.107.181.0-86.107.182.255 89.32.41.0/24 89.32.185.0/24 89.32.191.0/24 89.32.216.0/21 89.33.45.0/24 89.33.86.0/24 89.33.119.0/24 89.33.196.0/24 89.33.238.0/23 89.33.243.0-89.33.244.255 89.34.1.0/24 89.34.5.0/24 89.34.93.0/24 89.34.173.0/24 89.35.55.0/24 89.35.77.0/24 89.35.115.0-89.35.117.255 89.36.19.0/24 89.36.88.0/24 89.36.92.0/24 89.36.148.0/23 89.36.192.0/24 89.36.196.0/24 89.37.108.0/22 89.37.158.0/23 89.38.27.0/24 89.38.137.0-89.38.139.255 89.38.208.0/22 89.39.93.0/24 89.39.126.0/23 89.39.148.0/24 89.40.73.0/24 89.40.77.0/24 89.40.88.0/23 89.40.136.0/23 89.41.63.0/24 89.42.9.0/24 89.42.14.0/24 89.42.35.0/24 89.42.156.0/23 89.42.214.0/24 89.43.38.0/24 89.43.54.0/24 89.43.61.0/24 89.44.88.0/22 89.44.104.0/24 89.44.123.0/24 89.44.125.0/24 89.44.140.0/23 89.44.236.0/24 89.45.46.0/23 89.47.3.0/24 89.47.10.0/24 89.47.42.0/24 89.47.88.0/24 89.47.255.0/24 91.250.247.0/24 92.114.39.0/24 92.114.52.0/24 92.114.108.0/24 93.113.28.0/24 93.113.34.0/24 93.114.96.0/23 93.115.40.0/21 93.115.246.0/24 93.118.39.0/24 93.119.114.0-93.119.117.255 93.119.171.0/24 94.176.128.0/24 94.176.130.0/24 94.176.166.0/23 94.177.30.0/23 176.126.175.0/24 176.223.96.0/22 185.99.88.0/22 188.208.31.0/24 188.209.212.0/24 188.210.89.0/24 188.210.224.0/21 188.211.27.0/24 188.211.30.0/23 188.211.224.0/22 188.212.111.0/24 188.213.32.0/24 188.213.48.0/24 188.213.134.0/24 188.214.141.0/24 188.214.156.0/24 188.214.226.0/24 188.215.70.0/23 188.215.246.0/24 188.240.12.0/24 188.240.198.0/23 188.240.202.0/23 188.240.208.0/24 188.241.104.0/23 188.241.108.0/24 188.241.134.0/23 188.241.184.0/23 188.241.188.0/23 217.19.9.0/24 IPv6: 2a04:fee0::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31362 50667 Signature Algorithm: sha256WithRSAEncryption 4d:9e:17:cf:88:1e:d8:fd:5d:06:10:d3:08:f9:2a:43:a3:80: 97:74:1e:0b:e0:bd:ae:e5:3b:16:57:a7:55:27:6a:5d:8a:08: 0d:11:e1:71:7f:91:ba:93:d3:cc:7f:9b:3e:bf:d2:3c:64:df: cf:84:db:0a:bc:92:1e:23:82:1f:bf:35:24:5a:95:66:7a:8f: 9a:9e:be:bb:ab:4e:94:71:cf:95:43:02:2f:ec:76:f5:37:7b: 81:0c:21:cd:01:03:25:96:19:0c:cb:e8:c1:8b:53:07:62:e0: 00:ec:64:cb:01:e0:a2:72:56:7c:52:d2:63:18:93:b1:8b:4e: 1e:27:f3:31:9c:cc:d6:9c:41:62:07:9f:d3:0c:c6:1f:44:b7: a6:d4:de:88:49:1e:36:95:93:a3:19:18:60:90:f5:15:58:7d: b6:cf:9d:d9:3a:2a:45:e8:48:ce:c4:c0:1f:b7:88:e9:3a:16: 03:41:37:6b:2e:fc:5e:a9:f1:e4:c0:bd:b5:f8:25:91:a4:72: 75:7e:5f:f2:1d:db:96:32:8b:74:2e:0c:88:32:cb:08:b3:e9: a4:aa:c4:ee:41:e3:a7:3c:11:fd:db:bf:a3:7d:77:55:ef:01: 6e:4f:81:d4:81:a6:8d:c8:3c:37:2e:2f:08:39:fc:26:e7:68: 4c:29:2f:c9 -----BEGIN CERTIFICATE----- MIIJETCCB/mgAwIBAgISAZv5f2lhuoBz9QiY7gdHUUrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MDg1MDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvcIPpuXoGRq0uMvwMOrYDt1ZjuA fyn+vwbjH/II5fOJDcP3or5x+oxKl9rifIOBbsKhrg0lBStUM0Wj37/RcSbu5Qrw p3SQK9W9SG5We545WajX5iYSu60W21Ga6oPqd0GktUs4DiD7/fIYkRw+ANVvm2v4 8fNo3SKY2V/eVjnZQN61GXlG6KjyMUeqoI+ErGC6OOqanvvDYXY0YYqPS0ViGA7w vYvRAA8GD0yRnX/IrAz5OBZukv8VhkqNFUFpPE+nh9l9Yy0pAYhvxb+hmsKkrAK0 E/FFtcMOywpSJWA0knlvv/NpLaY+dMH79ZVkeu4CmGQFSoAAM7da9de7NwIDAQAB o4IGHTCCBhkwHQYDVR0OBBYEFH3xMt8T5L5T2CUMjEhCAmTu9sFMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2MzNzQ5 Ny02Mzc2LTQ2MWUtOTNjNi05Nzc4Njc0ZWRjOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYzM3NDk3 LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQWUpReU1T RUlDWk83MndVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDlgYIKwYB BQUHAQcBAf8EggOFMIIDgTCCA24EAgABMIIDZgMEAB8OEAMEAB8OFAMEAB8OKzAM AwQAHw41AwQDHw4wAwQBHw5kAwQAJZwHAwQAJZz1AwQBTVGyAwQATVG+AwQAVPcd MAwDBABU9zcDBABU9zgDBABVzBcDBABVzCkDBABVzEQDBABVzHQDBABVzIowDAME AFZoCQMEAFZoCgMEAFZofAMEAFZowgMEAFZpqgMEAFZqYzAMAwQAVmqBAwQAVmqC AwQAVmqGAwQAVmqcAwQAVmqoAwQBVmqqAwQAVmsUAwQBVmseAwQAVms0AwQAVms2 AwQAVmtMMAwDBABWa7UDBABWa7YDBABZICkDBABZILkDBABZIL8DBANZINgDBABZ IS0DBABZIVYDBABZIXcDBABZIcQDBAFZIe4wDAMEAFkh8wMEAFkh9AMEAFkiAQME AFkiBQMEAFkiXQMEAFkirQMEAFkjNwMEAFkjTTAMAwQAWSNzAwQBWSN0AwQAWSQT AwQAWSRYAwQAWSRcAwQBWSSUAwQAWSTAAwQAWSTEAwQCWSVsAwQBWSWeAwQAWSYb MAwDBABZJokDBAJZJogDBAJZJtADBABZJ10DBAFZJ34DBABZJ5QDBABZKEkDBABZ KE0DBAFZKFgDBAFZKIgDBABZKT8DBABZKgkDBABZKg4DBABZKiMDBAFZKpwDBABZ KtYDBABZKyYDBABZKzYDBABZKz0DBAJZLFgDBABZLGgDBABZLHsDBABZLH0DBAFZ LIwDBABZLOwDBAFZLS4DBABZLwMDBABZLwoDBABZLyoDBABZL1gDBABZL/8DBABb +vcDBABccicDBABccjQDBABccmwDBABdcRwDBABdcSIDBAFdcmADBANdcygDBABd c/YDBABddicwDAMEAV13cgMEAV13dAMEAF13qwMEAF6wgAMEAF6wggMEAV6wpgME AV6xHgMEALB+rwMEArDfYAMEArljWAMEALzQHwMEALzR1AMEALzSWQMEA7zS4AME ALzTGwMEAbzTHgMEArzT4AMEALzUbwMEALzVIAMEALzVMAMEALzVhgMEALzWjQME ALzWnAMEALzW4gMEAbzXRgMEALzX9gMEALzwDAMEAbzwxgMEAbzwygMEALzw0AME AbzxaAMEALzxbAMEAbzxhgMEAbzxuAMEAbzxvAMEANkTCTANBAIAAjAHAwUCKgT+ 4DAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJ6ggIDAMXrMA0GCSqGSIb3DQEBCwUA A4IBAQBNnhfPiB7Y/V0GENMI+SpDo4CXdB4L4L2u5TsWV6dVJ2pdiggNEeFxf5G6 k9PMf5s+v9I8ZN/PhNsKvJIeI4IfvzUkWpVmeo+anr67q06Ucc+VQwIv7Hb1N3uB DCHNAQMllhkMy+jBi1MHYuAA7GTLAeCiclZ8UtJjGJOxi04eJ/MxnMzWnEFiB5/T DMYfRLem1N6ISR42lZOjGRhgkPUVWH22z53ZOipF6EjOxMAft4jpOhYDQTdrLvxe qfHkwL21+CWRpHJ1fl/yHduWMot0LgyIMssIs+mkqsTuQeOnPBH927+jfXdV7wFu T4HUgaaNyDw3Li8IOfwm52hMKS/J -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:26 2026 by rpki-client