This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer File: tVfM1Dr-gW5JUyKL8Up13CkBS40.cer (raw, json) Hash identifier: 6WkuO4hIhx2mtAhgPoj/lwvM37gJLXdQbBxZ419bWCM= Subject key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F843D3FDE18DE85017F05E37F7E1E67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205406 AS: 208258 IP: 45.128.156.0/22 IP: 45.130.52.0/22 IP: 45.135.96.0/22 IP: 45.136.64.0/22 IP: 45.140.8.0/22 IP: 45.141.16.0/22 IP: 45.141.60.0/22 IP: 45.141.124.0/22 IP: 45.141.204.0/22 IP: 45.144.244.0/22 IP: 45.148.50.0/23 IP: 45.149.88.0/22 IP: 45.151.112.0/22 IP: 45.151.156.0/22 IP: 45.152.8.0/22 IP: 45.152.36.0/22 IP: 45.154.236.0/22 IP: 45.157.32.0/22 IP: 45.157.200.0/22 IP: 45.159.192.0/22 IP: 46.161.208.0/20 IP: 80.64.216.0/22 IP: 91.244.204.0/22 IP: 109.206.248.0/22 IP: 185.208.208.0/22 IP: 185.222.32.0/22 IP: 185.227.80.0/22 IP: 185.228.80.0/22 IP: 185.232.84.0/22 IP: 185.243.112.0/22 IP: 193.56.238.0/23 IP: 193.57.8.0/23 IP: 193.109.136.0/23 IP: 193.110.4.0/23 IP: 193.151.184.0/22 IP: 194.39.216.0/23 IP: 194.40.246.0/23 IP: 194.146.44.0/23 IP: 194.146.48.0/23 IP: 194.156.176.0/22 IP: 195.22.156.0/23 IP: 195.26.6.0/23 IP: 195.60.176.0/23 IP: 195.62.22.0/23 IP: 195.88.190.0/23 IP: 195.88.210.0/23 IP: 195.88.226.0/23 IP: 213.185.86.0 -- 213.185.95.255 IP: 2a0b:3c40::/29 IP: 2a0c:9e00::/29 IP: 2a0c:fe00::/29 IP: 2a0e:5540::/29 IP: 2a0e:a940::/29 IP: 2a0e:cac0::/29 IP: 2a0e:cbc0::/29 IP: 2a0e:eb40::/29 IP: 2a0f:40::/29 IP: 2a0f:3b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3d:3f:de:18:de:85:01:7f:05:e3:7f:7e:1e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:67:dd:3b:98:0e:97:cc:24:66:4b:b8:b7: 50:96:36:ba:3b:25:b5:89:ce:68:13:6b:15:18:bc: 3f:dc:4b:6f:61:0c:d3:5a:e3:6a:80:3f:3c:8c:25: e8:b3:7e:f7:09:41:b9:59:1a:49:e1:ba:f7:b4:49: 01:54:24:15:39:e3:46:16:39:89:55:0a:b5:b8:3e: 1e:f5:e2:46:8d:97:40:16:e0:a8:97:a5:fd:e4:b1: 87:78:26:d3:c7:f9:a8:00:94:3a:03:f5:a5:f9:da: 82:3d:19:e2:bf:97:02:86:4b:f7:1c:1b:62:6c:40: 9e:14:42:3c:37:3b:3a:02:57:63:35:3d:09:9e:77: 78:1b:c6:51:c8:30:19:ca:a4:98:d0:9b:d5:22:38: 93:2d:8b:84:e9:7b:db:b2:a0:94:cb:ae:de:13:4d: d8:1b:8a:8d:08:47:3b:67:62:26:c3:72:33:5c:ea: 63:33:10:20:4b:dc:d6:49:7f:cc:3b:60:1b:de:7c: cd:b9:8a:23:ed:1f:1e:23:15:44:94:54:e8:f0:38: cf:f4:6d:ea:a7:d6:dd:00:82:9c:88:85:f2:89:9a: 79:5e:1c:c6:17:8f:b8:79:aa:fc:73:09:cd:be:84: c5:89:df:82:d9:67:52:2a:a1:13:6d:b8:16:af:88: 6a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.156.0/22 45.130.52.0/22 45.135.96.0/22 45.136.64.0/22 45.140.8.0/22 45.141.16.0/22 45.141.60.0/22 45.141.124.0/22 45.141.204.0/22 45.144.244.0/22 45.148.50.0/23 45.149.88.0/22 45.151.112.0/22 45.151.156.0/22 45.152.8.0/22 45.152.36.0/22 45.154.236.0/22 45.157.32.0/22 45.157.200.0/22 45.159.192.0/22 46.161.208.0/20 80.64.216.0/22 91.244.204.0/22 109.206.248.0/22 185.208.208.0/22 185.222.32.0/22 185.227.80.0/22 185.228.80.0/22 185.232.84.0/22 185.243.112.0/22 193.56.238.0/23 193.57.8.0/23 193.109.136.0/23 193.110.4.0/23 193.151.184.0/22 194.39.216.0/23 194.40.246.0/23 194.146.44.0/23 194.146.48.0/23 194.156.176.0/22 195.22.156.0/23 195.26.6.0/23 195.60.176.0/23 195.62.22.0/23 195.88.190.0/23 195.88.210.0/23 195.88.226.0/23 213.185.86.0-213.185.95.255 IPv6: 2a0b:3c40::/29 2a0c:9e00::/29 2a0c:fe00::/29 2a0e:5540::/29 2a0e:a940::/29 2a0e:cac0::/29 2a0e:cbc0::/29 2a0e:eb40::/29 2a0f:40::/29 2a0f:3b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205406 208258 Signature Algorithm: sha256WithRSAEncryption 40:25:4a:4b:23:2a:51:d4:84:3a:25:53:b0:cd:35:b9:47:af: 34:d3:2e:da:2a:d7:65:93:fe:25:69:e7:3f:2c:8c:eb:58:69: 0f:97:7a:cd:f5:e9:97:41:e8:54:ba:56:96:27:1f:72:2a:e4: f2:0d:cd:1e:12:00:56:c5:61:b5:cf:ce:39:76:16:30:29:ef: 43:f4:01:9c:79:54:be:7a:f5:7d:24:62:06:cc:6e:03:44:04: 99:ca:84:36:ba:3d:ff:04:c9:a1:a8:71:18:1f:77:47:76:78: 30:4f:08:cb:fe:a3:9b:d8:e4:e3:53:fd:cd:1e:ad:21:0f:27: ef:d4:54:70:e0:41:ef:ce:51:ce:a0:fd:46:5a:64:f9:b6:00: ae:ef:95:2d:8c:8a:b8:9a:e4:f4:5e:ce:5f:cf:c7:6e:d5:ea: 85:8e:62:bf:b6:5f:a1:88:9b:ea:7b:ea:c4:4b:e2:21:14:6e: 6b:bc:4f:3a:90:50:61:d6:a3:28:00:41:3b:b0:ea:c4:ba:88: 3b:e4:54:41:59:3c:03:16:45:59:84:8c:34:fa:30:b3:cc:ea: 21:f2:43:ca:1f:2c:fe:16:06:70:21:d2:d8:38:d5:db:11:38: 3a:8c:92:87:26:be:46:23:97:3a:e2:80:d6:d4:ef:f7:18:e0: 14:56:50:5e -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgISAZt/hD0/3hjehQF/BeN/fh5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTU3Y2NkNDNhZmU4MTZlNDk1MzIyOGJmMTRhNzVkYzI5MDE0YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFZn3TuYDpfMJGZLuLdQlja6OyW1 ic5oE2sVGLw/3EtvYQzTWuNqgD88jCXos373CUG5WRpJ4br3tEkBVCQVOeNGFjmJ VQq1uD4e9eJGjZdAFuCol6X95LGHeCbTx/moAJQ6A/Wl+dqCPRniv5cChkv3HBti bECeFEI8Nzs6AldjNT0Jnnd4G8ZRyDAZyqSY0JvVIjiTLYuE6XvbsqCUy67eE03Y G4qNCEc7Z2Imw3IzXOpjMxAgS9zWSX/MO2Ab3nzNuYoj7R8eIxVElFTo8DjP9G3q p9bdAIKciIXyiZp5XhzGF4+4ear8cwnNvoTFid+C2WdSKqETbbgWr4hq1QIDAQAB o4IEHzCCBBswHQYDVR0OBBYEFLVXzNQ6/oFuSVMii/FKddwpAUuNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzE5MDg0 My0xODAzLTQ0NjItYTc5NS02YmM3NTU3OGI0YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvMTkwODQz LTE4MDMtNDQ2Mi1hNzk1LTZiYzc1NTc4YjRjMy8xL3RWZk0xRHItZ1c1SlV5S0w4 VXAxM0NrQlM0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBlwYIKwYB BQUHAQcBAf8EggGGMIIBgjCCATAEAgABMIIBKAMEAi2AnAMEAi2CNAMEAi2HYAME Ai2IQAMEAi2MCAMEAi2NEAMEAi2NPAMEAi2NfAMEAi2NzAMEAi2Q9AMEAS2UMgME Ai2VWAMEAi2XcAMEAi2XnAMEAi2YCAMEAi2YJAMEAi2a7AMEAi2dIAMEAi2dyAME Ai2fwAMEBC6h0AMEAlBA2AMEAlv0zAMEAm3O+AMEArnQ0AMEArneIAMEArnjUAME ArnkUAMEArnoVAMEArnzcAMEAcE47gMEAcE5CAMEAcFtiAMEAcFuBAMEAsGXuAME AcIn2AMEAcIo9gMEAcKSLAMEAcKSMAMEAsKcsAMEAcMWnAMEAcMaBgMEAcM8sAME AcM+FgMEAcNYvgMEAcNY0gMEAcNY4jAMAwQB1blWAwQF1blAMEwEAgACMEYDBQMq CzxAAwUDKgyeAAMFAyoM/gADBQMqDlVAAwUDKg6pQAMFAyoOysADBQMqDsvAAwUD Kg7rQAMFAyoPAEADBQMqDzuAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMiXgID Ay2CMA0GCSqGSIb3DQEBCwUAA4IBAQBAJUpLIypR1IQ6JVOwzTW5R6800y7aKtdl k/4laec/LIzrWGkPl3rN9emXQehUulaWJx9yKuTyDc0eEgBWxWG1z845dhYwKe9D 9AGceVS+evV9JGIGzG4DRASZyoQ2uj3/BMmhqHEYH3dHdngwTwjL/qOb2OTjU/3N Hq0hDyfv1FRw4EHvzlHOoP1GWmT5tgCu75UtjIq4muT0Xs5fz8du1eqFjmK/tl+h iJvqe+rES+IhFG5rvE86kFBh1qMoAEE7sOrEuog75FRBWTwDFkVZhIw0+jCzzOoh 8kPKHyz+FgZwIdLYONXbETg6jJKHJr5GI5c64oDW1O/3GOAUVlBe -----END CERTIFICATE-----Generated at Wed Jan 21 15:08:54 2026 by rpki-client