This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer (raw, json) Hash identifier: gKm7GB7r5o37zmuM8hT2NgPhBlAQM1SKth5dhJO7CTs= Subject key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE18BBB1ED63E749127BA1C6357A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6686 AS: 6688 AS: 12980 AS: 15840 AS: 21302 AS: 21326 AS: 21443 AS: 25497 AS: 44940 AS: 57515 AS: 210389 IP: 62.184.0.0/14 IP: 62.200.0.0/16 IP: 139.92.0.0/16 IP: 193.22.102.0/24 IP: 193.27.74.0/23 IP: 193.27.226.0/23 IP: 193.28.42.0/24 IP: 193.41.104.0/21 IP: 193.108.64.0/21 IP: 193.111.81.0/24 IP: 193.149.192.0 -- 193.149.216.255 IP: 193.149.218.0 -- 193.149.224.255 IP: 193.149.226.0 -- 193.149.239.255 IP: 194.10.0.0/16 IP: 194.29.66.0/24 IP: 194.29.72.0/24 IP: 194.29.76.0/23 IP: 194.29.81.0 -- 194.29.96.255 IP: 194.29.102.0 -- 194.29.113.255 IP: 194.29.115.0 -- 194.29.117.255 IP: 194.29.121.0 -- 194.29.127.255 IP: 194.42.49.0/24 IP: 194.42.163.0 -- 194.42.175.255 IP: 194.61.240.0 -- 194.61.246.255 IP: 194.61.252.0/22 IP: 194.69.32.0/22 IP: 194.69.38.0 -- 194.69.41.255 IP: 194.69.44.0 -- 194.69.59.255 IP: 194.69.144.0/20 IP: 194.69.168.0 -- 194.69.176.255 IP: 194.69.178.0 -- 194.69.180.255 IP: 194.69.182.0/24 IP: 194.161.0.0/16 IP: 194.169.124.0/24 IP: 194.194.0.0/16 IP: 194.196.0.0/16 IP: 194.253.0.0/16 IP: 195.51.0.0/16 IP: 195.75.0.0/16 IP: 195.79.0.0/16 IP: 195.118.0.0/16 IP: 195.128.236.0/23 IP: 195.183.0.0/16 IP: 195.212.0.0/16 IP: 195.225.192.0/22 IP: 213.62.0.0/16 IP: 2001:67c:364::/48 IP: 2a02:948::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e1:8b:bb:1e:d6:3e:74:91:27:ba:1c:63:57:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42490e6980b79fa4ab17e5f657371da66c36af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:35:89:6c:42:4f:d1:c9:50:c2:84:c2:d4:c3: 91:74:cb:53:40:da:35:03:8c:a2:14:dc:99:46:cd: ee:6b:fe:3a:41:c4:23:fb:38:1a:cf:45:05:1e:13: 58:e6:b2:22:7a:cd:7f:23:ac:ae:ad:31:23:9f:2b: de:d3:96:c4:32:0d:a4:75:95:24:33:1c:6c:70:79: 67:d3:8b:5f:c1:a1:48:22:72:92:a6:de:4b:24:76: ee:4c:38:2a:1b:46:bd:45:a8:88:71:96:25:0c:9e: c9:ff:28:8f:f2:e0:36:48:a4:67:8a:7d:1f:cb:e6: 3f:89:1b:4a:e1:00:ce:41:29:aa:5c:f3:e3:50:04: f5:71:dc:0b:67:38:f0:84:ef:ea:69:df:cf:e2:8b: a0:b6:9b:f4:e7:29:7d:89:d9:66:cf:29:2d:8b:6f: aa:09:56:f2:af:f6:4e:67:27:1f:8a:40:a8:89:36: 7f:8a:66:b5:58:64:a4:5a:cd:df:92:aa:11:10:d9: 1b:29:9f:7e:68:e6:76:25:de:b0:17:97:96:b0:e2: d8:ae:bb:68:47:69:a3:bb:87:28:2b:bf:91:73:1f: 9f:27:23:ba:ba:b0:bd:4d:b6:04:b0:44:3b:93:be: b7:9f:73:08:67:d4:12:bf:36:6a:1e:71:43:35:14: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.184.0.0/14 62.200.0.0/16 139.92.0.0/16 193.22.102.0/24 193.27.74.0/23 193.27.226.0/23 193.28.42.0/24 193.41.104.0/21 193.108.64.0/21 193.111.81.0/24 193.149.192.0-193.149.216.255 193.149.218.0-193.149.224.255 193.149.226.0-193.149.239.255 194.10.0.0/16 194.29.66.0/24 194.29.72.0/24 194.29.76.0/23 194.29.81.0-194.29.96.255 194.29.102.0-194.29.113.255 194.29.115.0-194.29.117.255 194.29.121.0-194.29.127.255 194.42.49.0/24 194.42.163.0-194.42.175.255 194.61.240.0-194.61.246.255 194.61.252.0/22 194.69.32.0/22 194.69.38.0-194.69.41.255 194.69.44.0-194.69.59.255 194.69.144.0/20 194.69.168.0-194.69.176.255 194.69.178.0-194.69.180.255 194.69.182.0/24 194.161.0.0/16 194.169.124.0/24 194.194.0.0/16 194.196.0.0/16 194.253.0.0/16 195.51.0.0/16 195.75.0.0/16 195.79.0.0/16 195.118.0.0/16 195.128.236.0/23 195.183.0.0/16 195.212.0.0/16 195.225.192.0/22 213.62.0.0/16 IPv6: 2001:67c:364::/48 2a02:948::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6686 6688 12980 15840 21302 21326 21443 25497 44940 57515 210389 Signature Algorithm: sha256WithRSAEncryption 43:64:74:26:91:fa:12:6e:a5:0b:0d:28:16:e3:73:b0:02:da: 8d:d1:35:ea:f0:71:bc:4c:01:c7:fa:0e:4a:8f:d9:42:00:7e: 17:8c:58:86:b3:7a:52:10:d1:65:ca:a8:1d:66:2f:ae:cc:2f: 60:72:34:e1:0c:fd:37:dc:bd:dc:89:ff:89:c0:e9:03:11:a5: 82:ef:21:a6:b2:c8:9c:37:69:d7:3b:de:4a:e3:f4:80:e3:9a: fb:7a:40:aa:57:9e:08:f4:a3:e9:c9:d4:e7:6a:79:0d:b8:0b: a4:28:ca:75:7a:4e:8f:9b:e7:1e:80:e0:e1:23:c3:a0:25:a0: 01:27:2b:37:05:64:34:45:30:47:18:a5:e2:74:67:ea:14:53: 14:3c:93:c5:45:22:b4:09:b4:9d:d9:bd:a5:c1:d4:94:b6:d5: 88:a3:32:99:84:ec:7b:62:ef:30:e2:1e:c5:c3:42:4d:00:84: 03:35:77:9a:2a:de:94:0b:eb:fa:c1:0a:82:45:dd:9b:a1:91: f5:0a:d6:87:2b:14:aa:63:59:17:a6:13:e1:3d:47:a8:36:5b: 6b:b6:ca:fe:fb:fb:5c:bc:d9:95:8a:0f:9d:f8:3a:88:78:9f: a5:ad:d5:0c:e1:50:9b:01:e3:93:af:e6:f6:3e:9e:e8:70:01: 73:ae:71:3d -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgISAZt6WuGLux7WPnSRJ7ocY1eoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDI0OTBlNjk4MGI3OWZhNGFiMTdlNWY2NTczNzFkYTY2YzM2YWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DWJbEJP0clQwoTC1MORdMtTQNo1 A4yiFNyZRs3ua/46QcQj+zgaz0UFHhNY5rIies1/I6yurTEjnyve05bEMg2kdZUk MxxscHln04tfwaFIInKSpt5LJHbuTDgqG0a9RaiIcZYlDJ7J/yiP8uA2SKRnin0f y+Y/iRtK4QDOQSmqXPPjUAT1cdwLZzjwhO/qad/P4ougtpv05yl9idlmzykti2+q CVbyr/ZOZycfikCoiTZ/ima1WGSkWs3fkqoRENkbKZ9+aOZ2Jd6wF5eWsOLYrrto R2mju4coK7+Rcx+fJyO6urC9TbYEsEQ7k763n3MIZ9QSvzZqHnFDNRTzAQIDAQAB o4IEUzCCBE8wHQYDVR0OBBYEFMQkkOaYC3n6SrF+X2Vzcdpmw2r0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2Lzc5OGRh OC1hMGJhLTQ4OGMtOTE4NC01OGMxODljNmVmZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNzk4ZGE4 LWEwYmEtNDg4Yy05MTg0LTU4YzE4OWM2ZWZlZC8xL3hDU1E1cGdMZWZwS3NYNWZa WE54Mm1iRGF2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBpgYIKwYB BQUHAQcBAf8EggGVMIIBkTCCAXUEAgABMIIBbQMDAj64AwMAPsgDAwCLXAMEAMEW ZgMEAcEbSgMEAcEb4gMEAMEcKgMEA8EpaAMEA8FsQAMEAMFvUTAMAwQGwZXAAwQA wZXYMAwDBAHBldoDBADBleAwDAMEAcGV4gMEBMGV4AMDAMIKAwQAwh1CAwQAwh1I AwQBwh1MMAwDBADCHVEDBADCHWAwDAMEAcIdZgMEAcIdcDAMAwQAwh1zAwQBwh10 MAwDBADCHXkDBAfCHQADBADCKjEwDAMEAMIqowMEBMIqoDAMAwQEwj3wAwQAwj32 AwQCwj38AwQCwkUgMAwDBAHCRSYDBAHCRSgwDAMEAsJFLAMEAsJFOAMEBMJFkDAM AwQDwkWoAwQAwkWwMAwDBAHCRbIDBADCRbQDBADCRbYDAwDCoQMEAMKpfAMDAMLC AwMAwsQDAwDC/QMDAMMzAwMAw0sDAwDDTwMDAMN2AwQBw4DsAwMAw7cDAwDD1AME AsPhwAMDANU+MBYEAgACMBADBwAgAQZ8A2QDBQAqAglIMEQGCCsGAQUFBwEIAQH/ BDUwM6AxMC8CAhoeAgIaIAICMrQCAj3gAgJTNgICU04CAlPDAgJjmQIDAK+MAgMA 4KsCAwM11TANBgkqhkiG9w0BAQsFAAOCAQEAQ2R0JpH6Em6lCw0oFuNzsALajdE1 6vBxvEwBx/oOSo/ZQgB+F4xYhrN6UhDRZcqoHWYvrswvYHI04Qz9N9y93In/icDp AxGlgu8hprLInDdp1zveSuP0gOOa+3pAqleeCPSj6cnU52p5DbgLpCjKdXpOj5vn HoDg4SPDoCWgAScrNwVkNEUwRxil4nRn6hRTFDyTxUUitAm0ndm9pcHUlLbViKMy mYTse2LvMOIexcNCTQCEAzV3mirelAvr+sEKgkXdm6GR9QrWhysUqmNZF6YT4T1H qDZba7bK/vv7XLzZlYoPnfg6iHifpa3VDOFQmwHjk6/m9j6e6HABc65xPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:00 2026 by rpki-client