This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer File: pXbrLMRi5uS_Deabn2NIdd67quI.cer (raw, json) Hash identifier: Q+NoBUlKB61WThEoIW9zdA7ii/XmuI6XwQma1cOP6kY= Subject key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78343C87F6E1C24E1CBFF85DDFE7F5C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3214 AS: 35536 -- 35537 AS: 39220 AS: 41767 AS: 43959 AS: 43992 AS: 57969 AS: 205758 AS: 208982 IP: 2.58.244.0 -- 2.58.251.255 IP: 5.183.116.0 -- 5.183.123.255 IP: 5.253.16.0/22 IP: 45.8.32.0/22 IP: 45.8.112.0/22 IP: 45.8.220.0/22 IP: 45.11.44.0/22 IP: 45.13.196.0/22 IP: 45.14.64.0/21 IP: 45.14.104.0/22 IP: 45.66.128.0/22 IP: 45.66.216.0/22 IP: 45.80.188.0/22 IP: 45.82.76.0/22 IP: 45.87.92.0/22 IP: 45.87.164.0/22 IP: 45.89.216.0/22 IP: 45.89.232.0/22 IP: 45.90.208.0/22 IP: 45.92.156.0/22 IP: 45.94.40.0/22 IP: 45.128.208.0/22 IP: 45.129.8.0/22 IP: 45.130.20.0/22 IP: 45.130.180.0/22 IP: 45.131.152.0/22 IP: 45.134.168.0/22 IP: 45.135.40.0/22 IP: 45.136.176.0/22 IP: 45.136.184.0/22 IP: 45.139.192.0/22 IP: 45.141.44.0/22 IP: 45.142.124.0/22 IP: 45.143.128.0/22 IP: 45.143.232.0/22 IP: 45.147.48.0/22 IP: 45.149.156.0/22 IP: 45.153.244.0/22 IP: 45.159.48.0/22 IP: 62.3.15.0/24 IP: 62.106.70.0/24 IP: 62.106.75.0/24 IP: 62.133.32.0/22 IP: 77.75.225.0/24 IP: 78.142.192.0/22 IP: 78.142.228.0/22 IP: 79.110.231.0 -- 79.110.232.255 IP: 79.143.140.0/22 IP: 80.66.196.0/22 IP: 88.214.20.0/22 IP: 88.218.192.0/22 IP: 91.200.240.0/22 IP: 91.213.17.0/24 IP: 92.60.40.0/22 IP: 92.118.188.0/22 IP: 94.124.116.0/22 IP: 95.214.164.0/22 IP: 109.94.168.0/22 IP: 109.107.137.0/24 IP: 109.107.140.0/24 IP: 141.98.196.0/22 IP: 146.19.112.0/24 IP: 146.19.116.0/24 IP: 147.78.176.0/22 IP: 147.78.240.0/21 IP: 149.62.44.0/22 IP: 176.113.68.0/22 IP: 176.119.148.0/22 IP: 176.126.114.0/24 IP: 178.22.26.0/24 IP: 178.212.76.0/24 IP: 185.49.32.0/22 IP: 185.64.79.0/24 IP: 185.120.183.0/24 IP: 185.122.207.0/24 IP: 185.184.220.0/22 IP: 185.194.52.0/22 IP: 185.198.71.0/24 IP: 185.200.64.0/22 IP: 185.207.152.0/22 IP: 185.213.148.0/22 IP: 185.222.43.0/24 IP: 185.222.216.0/21 IP: 185.241.58.0/24 IP: 185.248.84.0/22 IP: 185.254.72.0/22 IP: 185.255.52.0/22 IP: 188.95.70.0/24 IP: 193.3.174.0/24 IP: 193.8.124.0/23 IP: 193.8.168.0/23 IP: 193.17.91.0/24 IP: 193.32.86.0/24 IP: 193.32.148.0/22 IP: 193.111.30.0/23 IP: 193.111.90.0/23 IP: 193.163.19.0/24 IP: 193.177.220.0/22 IP: 193.187.116.0/22 IP: 194.36.24.0/22 IP: 194.36.222.0/23 IP: 194.36.242.0/23 IP: 194.104.144.0/22 IP: 194.104.152.0/22 IP: 194.114.136.0/22 IP: 194.124.213.0/24 IP: 194.124.216.0/24 IP: 194.124.227.0 -- 194.124.228.255 IP: 194.169.54.0/23 IP: 194.169.180.0/23 IP: 195.245.219.0/24 IP: 195.245.229.0/24 IP: 195.245.241.0 -- 195.245.242.255 IP: 212.23.196.0/23 IP: 213.217.9.0/24 IP: 213.232.112.0/22 IP: 213.232.238.0/23 IP: 2a03:d9c0::/29 IP: 2a06:4fc0::/29 IP: 2a06:57c0::/29 IP: 2a07:46c0::/29 IP: 2a07:e900::/29 IP: 2a07:fa00::/29 IP: 2a07:fe00::/29 IP: 2a09::/29 IP: 2a0b:4080::/32 IP: 2a0b:89c0::/29 IP: 2a0c:59c0::/29 IP: 2a0c:ed40::/29 IP: 2a0d:1fc0::/29 IP: 2a0d:3640::/29 IP: 2a0d:4340::/29 IP: 2a0d:4bc0::/29 IP: 2a0d:7540::/29 IP: 2a0d:c7c0::/29 IP: 2a0d:de80::/29 IP: 2a0e:6200::/29 IP: 2a10:480::/29 IP: 2a10:2600::/29 IP: 2a12:9d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3c:87:f6:e1:c2:4e:1c:bf:f8:5d:df:e7:f5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:91:c4:d0:32:ab:4e:ae:bc:fb:7d:18:38: 81:13:06:ce:8d:4e:98:b4:a9:68:77:60:35:70:7b: 4b:2e:bb:df:fa:d9:69:a0:ab:bc:b4:cb:1a:6a:f7: 3c:67:61:d1:b5:07:e1:1f:ec:c9:3a:3d:bb:fa:da: bb:0a:e5:ca:93:c9:09:4f:05:f5:35:a7:3b:dd:b4: 20:84:e1:42:2e:20:bd:43:27:69:14:7f:9a:6f:6f: 14:05:72:9e:8f:1c:37:c6:7f:dc:0b:84:ff:7e:0a: d3:34:50:72:6a:0e:27:2a:c4:bb:12:c1:15:ce:36: fd:ae:5f:d2:93:e8:7e:9d:de:7e:04:f0:7a:f2:8a: 26:f3:97:8a:db:36:a1:17:e2:31:0f:f8:d1:98:5b: 3e:e2:8b:4c:44:77:9e:94:f8:dc:b3:09:05:a3:27: 10:d8:5c:48:c6:32:a4:a7:82:b8:72:09:db:05:1e: d7:20:78:f3:55:91:bc:ac:66:3f:4d:6b:94:99:1f: e2:94:06:c6:d9:ff:45:f4:5a:de:9c:c1:41:27:2e: 6e:ba:3f:24:16:a9:0c:69:b6:4f:84:d2:56:04:50: c0:a5:a6:22:2e:f4:ff:cd:b8:c2:d9:3c:48:8e:e0: 00:44:46:3a:b7:6f:55:6c:85:9a:8a:c7:fe:b8:96: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.244.0-2.58.251.255 5.183.116.0-5.183.123.255 5.253.16.0/22 45.8.32.0/22 45.8.112.0/22 45.8.220.0/22 45.11.44.0/22 45.13.196.0/22 45.14.64.0/21 45.14.104.0/22 45.66.128.0/22 45.66.216.0/22 45.80.188.0/22 45.82.76.0/22 45.87.92.0/22 45.87.164.0/22 45.89.216.0/22 45.89.232.0/22 45.90.208.0/22 45.92.156.0/22 45.94.40.0/22 45.128.208.0/22 45.129.8.0/22 45.130.20.0/22 45.130.180.0/22 45.131.152.0/22 45.134.168.0/22 45.135.40.0/22 45.136.176.0/22 45.136.184.0/22 45.139.192.0/22 45.141.44.0/22 45.142.124.0/22 45.143.128.0/22 45.143.232.0/22 45.147.48.0/22 45.149.156.0/22 45.153.244.0/22 45.159.48.0/22 62.3.15.0/24 62.106.70.0/24 62.106.75.0/24 62.133.32.0/22 77.75.225.0/24 78.142.192.0/22 78.142.228.0/22 79.110.231.0-79.110.232.255 79.143.140.0/22 80.66.196.0/22 88.214.20.0/22 88.218.192.0/22 91.200.240.0/22 91.213.17.0/24 92.60.40.0/22 92.118.188.0/22 94.124.116.0/22 95.214.164.0/22 109.94.168.0/22 109.107.137.0/24 109.107.140.0/24 141.98.196.0/22 146.19.112.0/24 146.19.116.0/24 147.78.176.0/22 147.78.240.0/21 149.62.44.0/22 176.113.68.0/22 176.119.148.0/22 176.126.114.0/24 178.22.26.0/24 178.212.76.0/24 185.49.32.0/22 185.64.79.0/24 185.120.183.0/24 185.122.207.0/24 185.184.220.0/22 185.194.52.0/22 185.198.71.0/24 185.200.64.0/22 185.207.152.0/22 185.213.148.0/22 185.222.43.0/24 185.222.216.0/21 185.241.58.0/24 185.248.84.0/22 185.254.72.0/22 185.255.52.0/22 188.95.70.0/24 193.3.174.0/24 193.8.124.0/23 193.8.168.0/23 193.17.91.0/24 193.32.86.0/24 193.32.148.0/22 193.111.30.0/23 193.111.90.0/23 193.163.19.0/24 193.177.220.0/22 193.187.116.0/22 194.36.24.0/22 194.36.222.0/23 194.36.242.0/23 194.104.144.0/22 194.104.152.0/22 194.114.136.0/22 194.124.213.0/24 194.124.216.0/24 194.124.227.0-194.124.228.255 194.169.54.0/23 194.169.180.0/23 195.245.219.0/24 195.245.229.0/24 195.245.241.0-195.245.242.255 212.23.196.0/23 213.217.9.0/24 213.232.112.0/22 213.232.238.0/23 IPv6: 2a03:d9c0::/29 2a06:4fc0::/29 2a06:57c0::/29 2a07:46c0::/29 2a07:e900::/29 2a07:fa00::/29 2a07:fe00::/29 2a09::/29 2a0b:4080::/32 2a0b:89c0::/29 2a0c:59c0::/29 2a0c:ed40::/29 2a0d:1fc0::/29 2a0d:3640::/29 2a0d:4340::/29 2a0d:4bc0::/29 2a0d:7540::/29 2a0d:c7c0::/29 2a0d:de80::/29 2a0e:6200::/29 2a10:480::/29 2a10:2600::/29 2a12:9d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3214 35536-35537 39220 41767 43959 43992 57969 205758 208982 Signature Algorithm: sha256WithRSAEncryption 73:c5:f4:fe:1a:cb:35:e9:b7:d3:c6:4c:05:0d:fc:c1:ef:e1: 5e:c3:69:d6:4d:a3:ee:4d:cc:f0:49:11:b7:b6:54:11:ee:ff: f1:0d:1c:65:e5:6e:88:34:eb:e9:d8:53:2d:99:6d:cf:e8:46: 78:5a:ca:95:52:d3:7d:db:b4:fa:ff:5d:9e:1a:18:73:4f:ac: 70:c4:48:93:82:2b:a3:21:20:ed:68:91:a2:68:c5:55:49:14: 5b:8d:a7:13:ea:e1:a2:77:7a:7e:a9:5b:10:fc:84:37:72:df: 9d:28:1d:47:3f:e6:71:c2:97:b3:59:13:9f:06:a2:0c:f6:e4: 83:c3:73:60:84:fe:ec:7d:a4:2e:a6:ab:f5:9d:ac:32:35:96: ef:59:cf:af:33:94:fa:a8:6e:1b:18:12:dd:92:04:a5:fb:10: f7:13:d4:89:7a:af:b6:48:1b:06:77:ad:7b:e3:da:ac:51:a4: 6d:6f:51:40:9f:65:6b:da:a4:c8:70:32:b1:ff:22:28:ba:67: 89:97:ae:63:56:c1:bb:0d:49:b1:eb:d3:96:38:ec:2f:2c:74: a0:b5:c6:c5:c2:90:ef:2c:39:a0:b1:6f:66:30:09:a1:81:bc: 9e:88:06:f8:81:43:a4:89:db:99:94:48:bf:ac:ae:2d:b0:d8: db:11:80:58 -----BEGIN CERTIFICATE----- MIIJVzCCCD+gAwIBAgISAZt4NDyH9uHCThy/+F3f5/XBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPyRxNAyq06uvPt9GDiBEwbOjU6Y tKlod2A1cHtLLrvf+tlpoKu8tMsaavc8Z2HRtQfhH+zJOj27+tq7CuXKk8kJTwX1 Nac73bQghOFCLiC9QydpFH+ab28UBXKejxw3xn/cC4T/fgrTNFByag4nKsS7EsEV zjb9rl/Sk+h+nd5+BPB68oom85eK2zahF+IxD/jRmFs+4otMRHeelPjcswkFoycQ 2FxIxjKkp4K4cgnbBR7XIHjzVZG8rGY/TWuUmR/ilAbG2f9F9FrenMFBJy5uuj8k FqkMabZPhNJWBFDApaYiLvT/zbjC2TxIjuAAREY6t29VbIWaisf+uJY8IwIDAQAB o4IGYzCCBl8wHQYDVR0OBBYEFKV26yzEYubkvw3mm59jSHXeu6riMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzkzMTky Ny05ZjM4LTQxYjYtODdmYS0yNTRhY2Q5MmI0ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvOTMxOTI3 LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVTX0RlYWJu Mk5JZGQ2N3F1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDsgYIKwYB BQUHAQcBAf8EggOhMIIDnTCCAu4EAgABMIIC5jAMAwQCAjr0AwQCAjr4MAwDBAIF t3QDBAIFt3gDBAIF/RADBAItCCADBAItCHADBAItCNwDBAItCywDBAItDcQDBAMt DkADBAItDmgDBAItQoADBAItQtgDBAItULwDBAItUkwDBAItV1wDBAItV6QDBAIt WdgDBAItWegDBAItWtADBAItXJwDBAItXigDBAItgNADBAItgQgDBAItghQDBAIt grQDBAItg5gDBAIthqgDBAIthygDBAItiLADBAItiLgDBAIti8ADBAItjSwDBAIt jnwDBAItj4ADBAItj+gDBAItkzADBAItlZwDBAItmfQDBAItnzADBAA+Aw8DBAA+ akYDBAA+aksDBAI+hSADBABNS+EDBAJOjsADBAJOjuQwDAMEAE9u5wMEAE9u6AME Ak+PjAMEAlBCxAMEAljWFAMEAljawAMEAlvI8AMEAFvVEQMEAlw8KAMEAlx2vAME Al58dAMEAl/WpAMEAm1eqAMEAG1riQMEAG1rjAMEAo1ixAMEAJITcAMEAJITdAME ApNOsAMEA5NO8AMEApU+LAMEArBxRAMEArB3lAMEALB+cgMEALIWGgMEALLUTAME ArkxIAMEALlATwMEALl4twMEALl6zwMEArm43AMEArnCNAMEALnGRwMEArnIQAME ArnPmAMEArnVlAMEALneKwMEA7ne2AMEALnxOgMEArn4VAMEArn+SAMEArn/NAME ALxfRgMEAMEDrgMEAcEIfAMEAcEIqAMEAMERWwMEAMEgVgMEAsEglAMEAcFvHgME AcFvWgMEAMGjEwMEAsGx3AMEAsG7dAMEAsIkGAMEAcIk3gMEAcIk8gMEAsJokAME AsJomAMEAsJyiAMEAMJ81QMEAMJ82DAMAwQAwnzjAwQAwnzkAwQBwqk2AwQBwqm0 AwQAw/XbAwQAw/XlMAwDBADD9fEDBADD9fIDBAHUF8QDBADV2QkDBALV6HADBAHV 6O4wgagEAgACMIGhAwUDKgPZwAMFAyoGT8ADBQMqBlfAAwUDKgdGwAMFAyoH6QAD BQMqB/oAAwUDKgf+AAMFAyoJAAADBQAqC0CAAwUDKguJwAMFAyoMWcADBQMqDO1A AwUDKg0fwAMFAyoNNkADBQMqDUNAAwUDKg1LwAMFAyoNdUADBQMqDcfAAwUDKg3e gAMFAyoOYgADBQMqEASAAwUDKhAmAAMFAyoSnQAwSAYIKwYBBQUHAQgBAf8EOTA3 oDUwMwICDI4wCgIDAIrQAgMAitECAwCZNAIDAKMnAgMAq7cCAwCr2AIDAOJxAgMD I74CAwMwVjANBgkqhkiG9w0BAQsFAAOCAQEAc8X0/hrLNem308ZMBQ38we/hXsNp 1k2j7k3M8EkRt7ZUEe7/8Q0cZeVuiDTr6dhTLZltz+hGeFrKlVLTfdu0+v9dnhoY c0+scMRIk4IroyEg7WiRomjFVUkUW42nE+rhond6fqlbEPyEN3LfnSgdRz/mccKX s1kTnwaiDPbkg8NzYIT+7H2kLqar9Z2sMjWW71nPrzOU+qhuGxgS3ZIEpfsQ9xPU iXqvtkgbBnete+ParFGkbW9RQJ9la9qkyHAysf8iKLpniZeuY1bBuw1JsevTljjs Lyx0oLXGxcKQ7yw5oLFvZjAJoYG8nogG+IFDpInbmZRIv6yuLbDY2xGAWA== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:04 2026 by rpki-client