This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer (raw, json) Hash identifier: GLICSrR2KPtA9yTosGyZxavD+DedsHfIZnAumBEKJdU= Subject key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B56074577BF9494FF4E4E2750E336 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3329 AS: 12361 IP: 5.54.0.0/15 IP: 31.14.168.0/21 IP: 31.14.208.0/21 IP: 31.14.240.0/21 IP: 37.153.144.0/21 IP: 37.153.160.0/21 IP: 46.103.0.0/16 IP: 46.176.0.0/15 IP: 46.198.128.0/17 IP: 62.38.0.0/16 IP: 62.74.0.0/16 IP: 77.69.0.0/17 IP: 78.87.0.0/16 IP: 79.166.0.0/15 IP: 85.204.64.0/22 IP: 86.104.68.0/22 IP: 86.104.120.0/22 IP: 86.105.188.0/22 IP: 86.105.200.0/22 IP: 86.105.248.0/22 IP: 89.32.208.0/21 IP: 89.43.56.0/22 IP: 89.43.184.0/22 IP: 89.44.72.0/22 IP: 89.44.92.0 -- 89.44.99.255 IP: 89.44.156.0/22 IP: 89.44.216.0/21 IP: 89.45.120.0/22 IP: 89.46.252.0/22 IP: 89.47.44.0/22 IP: 89.210.0.0/16 IP: 91.138.128.0/17 IP: 93.113.120.0/22 IP: 93.113.216.0/22 IP: 93.114.196.0/22 IP: 128.140.152.0/21 IP: 141.237.0.0/16 IP: 141.255.0.0/17 IP: 176.92.0.0 -- 176.92.199.255 IP: 178.59.0.0/16 IP: 185.145.164.0/22 IP: 185.158.220.0/22 IP: 194.30.192.0/18 IP: 195.46.0.0/19 IP: 195.97.0.0/17 IP: 213.249.0.0/18 IP: 2001:8f0::/30 IP: 2a02:858::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:56:07:45:77:bf:94:94:ff:4e:4e:27:50:e3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:5c:a7:41:bb:00:57:16:57:1d:01:94:63: 92:0d:58:42:96:9f:7e:96:b4:ad:6c:20:bb:1d:04: d4:78:45:e6:64:a0:bb:02:c4:77:c3:c3:24:d5:3f: 75:2e:d1:f3:f3:8d:67:c5:28:65:a7:89:2a:4c:68: 33:03:da:48:76:7e:a8:3a:e4:46:35:59:57:1d:5f: 9a:62:96:4c:4f:e4:70:3c:a8:de:16:62:da:33:ec: 16:a3:a8:ce:a0:be:a1:76:cb:cd:67:58:95:b5:a9: c1:e0:ef:a0:f2:0e:21:01:f9:2a:b9:ae:c3:aa:e8: cb:8c:48:ff:8f:73:da:ae:5a:ec:bd:3e:29:6c:05: 42:26:a3:70:a5:b9:eb:64:1a:28:55:37:ce:57:42: 2c:1e:44:5d:7e:81:a5:45:4c:cc:1a:c3:e2:ed:f6: ec:ca:c6:aa:fd:7a:3e:05:6e:34:4a:83:73:7c:3c: 67:a0:4f:65:05:07:67:aa:83:cd:c3:67:d6:85:43: db:45:e4:5d:c7:66:e7:02:ce:53:73:d4:3b:4e:6f: 70:e2:de:d5:06:4b:54:12:96:31:45:3e:ed:d4:1a: cb:54:14:6b:1b:89:d8:6d:c3:64:d7:7e:ab:9f:1d: 13:83:43:53:9c:17:e0:bf:48:85:9d:17:b7:59:37: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.54.0.0/15 31.14.168.0/21 31.14.208.0/21 31.14.240.0/21 37.153.144.0/21 37.153.160.0/21 46.103.0.0/16 46.176.0.0/15 46.198.128.0/17 62.38.0.0/16 62.74.0.0/16 77.69.0.0/17 78.87.0.0/16 79.166.0.0/15 85.204.64.0/22 86.104.68.0/22 86.104.120.0/22 86.105.188.0/22 86.105.200.0/22 86.105.248.0/22 89.32.208.0/21 89.43.56.0/22 89.43.184.0/22 89.44.72.0/22 89.44.92.0-89.44.99.255 89.44.156.0/22 89.44.216.0/21 89.45.120.0/22 89.46.252.0/22 89.47.44.0/22 89.210.0.0/16 91.138.128.0/17 93.113.120.0/22 93.113.216.0/22 93.114.196.0/22 128.140.152.0/21 141.237.0.0/16 141.255.0.0/17 176.92.0.0-176.92.199.255 178.59.0.0/16 185.145.164.0/22 185.158.220.0/22 194.30.192.0/18 195.46.0.0/19 195.97.0.0/17 213.249.0.0/18 IPv6: 2001:8f0::/30 2a02:858::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3329 12361 Signature Algorithm: sha256WithRSAEncryption 50:14:bf:ec:0a:00:40:c4:4c:b3:2a:f7:12:45:07:e9:c5:d3: 33:a1:74:ac:65:62:bc:f0:1e:63:09:c1:75:14:da:6d:48:96: d5:cf:1c:40:4d:17:c4:0e:fd:17:37:fa:f0:8a:46:4c:db:d4: 70:6f:19:66:b7:29:20:70:24:8f:53:e1:68:5c:14:4e:6a:74: 08:4f:d6:ea:b4:99:aa:a2:fd:d3:23:5d:60:3b:ce:2b:d5:e6: 3e:1d:28:b2:8f:cb:de:f8:44:aa:68:c6:93:a1:5a:fe:ae:e0: e2:8f:b6:c8:3f:07:4b:c2:9f:8d:44:6e:f6:af:6e:66:8a:1d: 1c:68:b0:a5:a2:df:f6:de:33:36:19:4f:7c:b7:1c:57:73:ef: 1d:98:7d:b3:00:9d:38:01:29:22:6c:9f:05:f7:8a:4c:d2:cc: 6a:47:f9:cf:9b:74:69:13:25:50:0d:af:eb:61:8c:d4:99:3b: c6:2c:0c:67:98:f5:1b:8a:f9:86:d3:1a:07:3a:7d:62:d8:12: 9b:38:00:cb:84:1a:a6:96:96:5b:3c:e9:b0:b5:2a:f6:28:ab: 0c:42:4a:c8:c3:b7:6b:14:a2:02:71:b3:2d:dd:42:9c:d5:ed: 53:3a:9f:d4:7c:40:f2:bc:4b:6c:1a:85:6e:fa:8d:25:ae:61: ec:75:78:13 -----BEGIN CERTIFICATE----- MIIGyjCCBbKgAwIBAgISAZt6W1YHRXe/lJT/Tk4nUOM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTU1YzVhNzEzN2ViNWQ0N2VhMjRlMTdkMjdmYTkyZDBiNDJmYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVlcp0G7AFcWVx0BlGOSDVhClp9+ lrStbCC7HQTUeEXmZKC7AsR3w8Mk1T91LtHz841nxShlp4kqTGgzA9pIdn6oOuRG NVlXHV+aYpZMT+RwPKjeFmLaM+wWo6jOoL6hdsvNZ1iVtanB4O+g8g4hAfkqua7D qujLjEj/j3ParlrsvT4pbAVCJqNwpbnrZBooVTfOV0IsHkRdfoGlRUzMGsPi7fbs ysaq/Xo+BW40SoNzfDxnoE9lBQdnqoPNw2fWhUPbReRdx2bnAs5Tc9Q7Tm9w4t7V BktUEpYxRT7t1BrLVBRrG4nYbcNk136rnx0Tg0NTnBfgv0iFnRe3WTcqkQIDAQAB o4ID1jCCA9IwHQYDVR0OBBYEFJlVxacTfrXUfqJOF9J/qS0LQvvYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzk0NTNh MC1lNjU1LTQ4MGUtYjZhOS1lMzk1MjRlN2E2ZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvOTQ1M2Ew LWU2NTUtNDgwZS1iNmE5LWUzOTUyNGU3YTZlZC8xL21WWEZweE4tdGRSLW9rNFgw bi1wTFF0Qy05Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBUAYIKwYB BQUHAQcBAf8EggE/MIIBOzCCASEEAgABMIIBGQMDAQU2AwQDHw6oAwQDHw7QAwQD Hw7wAwQDJZmQAwQDJZmgAwMALmcDAwEusAMEBy7GgAMDAD4mAwMAPkoDBAdNRQAD AwBOVwMDAU+mAwQCVcxAAwQCVmhEAwQCVmh4AwQCVmm8AwQCVmnIAwQCVmn4AwQD WSDQAwQCWSs4AwQCWSu4AwQCWSxIMAwDBAJZLFwDBAJZLGADBAJZLJwDBANZLNgD BAJZLXgDBAJZLvwDBAJZLywDAwBZ0gMEB1uKgAMEAl1xeAMEAl1x2AMEAl1yxAME A4CMmAMDAI3tAwQHjf8AMAsDAwKwXAMEA7BcwAMDALI7AwQCuZGkAwQCuZ7cAwQG wh7AAwQFwy4AAwQHw2EAAwQG1fkAMBQEAgACMA4DBQIgAQjwAwUDKgIIWDAdBggr BgEFBQcBCAEB/wQOMAygCjAIAgINAQICMEkwDQYJKoZIhvcNAQELBQADggEBAFAU v+wKAEDETLMq9xJFB+nF0zOhdKxlYrzwHmMJwXUU2m1IltXPHEBNF8QO/Rc3+vCK Rkzb1HBvGWa3KSBwJI9T4WhcFE5qdAhP1uq0maqi/dMjXWA7zivV5j4dKLKPy974 RKpoxpOhWv6u4OKPtsg/B0vCn41EbvavbmaKHRxosKWi3/beMzYZT3y3HFdz7x2Y fbMAnTgBKSJsnwX3ikzSzGpH+c+bdGkTJVANr+thjNSZO8YsDGeY9RuK+YbTGgc6 fWLYEps4AMuEGqaWlls86bC1KvYoqwxCSsjDt2sUogJxsy3dQpzV7VM6n9R8QPK8 S2wahW76jSWuYex1eBM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:09 2026 by rpki-client