This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer File: 08tc7MITufhtu6UYUh6FRuyThhw.cer (raw, json) Hash identifier: cfM63RFvvSW7JIO/3mv2Og7yTM5IHqnI7ZECDZkWxqg= Subject key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77595BEC3CA97204AEC54A978B150BE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31034 AS: 199653 AS: 199883 AS: 200185 AS: 202242 AS: 202613 AS: 205727 AS: 213224 IP: 5.249.128.0/19 IP: 31.11.32.0/21 IP: 31.14.128.0/20 IP: 46.37.0.0/19 IP: 62.149.128.0/17 IP: 66.71.128.0/18 IP: 77.81.224.0/20 IP: 80.73.224.0/20 IP: 80.88.80.0/20 IP: 80.211.0.0/16 IP: 82.192.128.0/19 IP: 85.235.128.0/19 IP: 86.105.48.0/21 IP: 89.36.208.0/20 IP: 89.38.144.0/21 IP: 89.40.112.0/20 IP: 89.46.64.0/20 IP: 89.46.104.0/21 IP: 89.46.192.0/21 IP: 93.186.240.0/20 IP: 94.177.160.0 -- 94.177.255.255 IP: 95.110.128.0/17 IP: 109.70.240.0/21 IP: 176.107.128.0/19 IP: 185.8.48.0/22 IP: 185.12.176.0/22 IP: 185.35.64.0/22 IP: 185.43.208.0/22 IP: 185.56.8.0/22 IP: 185.58.116.0 -- 185.58.123.255 IP: 185.58.192.0/22 IP: 185.58.224.0/22 IP: 188.213.160.0/20 IP: 193.254.240.0/23 IP: 194.182.64.0/19 IP: 194.182.104.0/22 IP: 194.182.110.0/23 IP: 195.128.234.0/23 IP: 195.225.168.0/22 IP: 195.231.0.0/17 IP: 195.234.171.0/24 IP: 195.250.34.0/24 IP: 209.227.192.0/18 IP: 212.237.0.0/18 IP: 217.61.0.0/18 IP: 217.61.96.0/19 IP: 217.73.224.0/20 IP: 217.198.128.0/20 IP: 2a00:6d40::/29 IP: 2a01:6e60::/32 IP: 2a03:2c40::/32 IP: 2a03:a140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5b:ec:3c:a9:72:04:ae:c5:4a:97:8b:15:0b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:8f:95:77:4f:02:f9:75:6d:4d:97:56:ef: 68:ce:50:bd:e3:fa:d3:e3:db:70:be:03:97:f7:5b: 0f:e7:73:6d:0a:80:c2:9e:2f:63:dd:07:76:b9:2d: ee:50:7c:12:21:24:77:ce:30:8b:dd:e8:6f:5f:af: ad:58:37:2b:44:ff:ea:9f:74:07:18:40:15:66:61: 63:f7:a7:23:ae:4e:a4:e0:ef:83:e5:9d:8f:b3:4a: 83:0e:0b:26:5a:7e:f9:32:ef:7e:65:6a:f8:70:a0: e0:76:52:32:0f:89:4e:46:71:e5:4d:b2:a7:43:f6: b2:42:bf:5e:62:5a:a9:fa:95:fc:a0:b3:bf:89:bd: 77:4f:0e:19:87:b7:49:f4:5c:68:87:0a:a5:38:b2: 67:49:a8:f2:6e:74:73:43:13:b4:a5:6f:65:04:81: 35:d6:1b:29:e9:4c:37:9b:ad:60:17:a1:46:8e:ad: be:ad:e1:a3:47:ad:f6:dc:de:79:4b:89:f0:c1:c0: 6e:49:f3:be:ff:4c:c2:77:87:3b:db:63:0d:4f:37: d3:8a:70:5a:35:2f:a7:b5:b4:35:10:50:03:3f:79: db:e1:f0:1c:7f:91:06:a6:55:24:fe:86:1c:28:91: 3f:be:bd:2b:05:ee:da:d6:69:dd:1f:b4:45:87:3c: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.128.0/19 31.11.32.0/21 31.14.128.0/20 46.37.0.0/19 62.149.128.0/17 66.71.128.0/18 77.81.224.0/20 80.73.224.0/20 80.88.80.0/20 80.211.0.0/16 82.192.128.0/19 85.235.128.0/19 86.105.48.0/21 89.36.208.0/20 89.38.144.0/21 89.40.112.0/20 89.46.64.0/20 89.46.104.0/21 89.46.192.0/21 93.186.240.0/20 94.177.160.0-94.177.255.255 95.110.128.0/17 109.70.240.0/21 176.107.128.0/19 185.8.48.0/22 185.12.176.0/22 185.35.64.0/22 185.43.208.0/22 185.56.8.0/22 185.58.116.0-185.58.123.255 185.58.192.0/22 185.58.224.0/22 188.213.160.0/20 193.254.240.0/23 194.182.64.0/19 194.182.104.0/22 194.182.110.0/23 195.128.234.0/23 195.225.168.0/22 195.231.0.0/17 195.234.171.0/24 195.250.34.0/24 209.227.192.0/18 212.237.0.0/18 217.61.0.0/18 217.61.96.0/19 217.73.224.0/20 217.198.128.0/20 IPv6: 2a00:6d40::/29 2a01:6e60::/32 2a03:2c40::/32 2a03:a140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31034 199653 199883 200185 202242 202613 205727 213224 Signature Algorithm: sha256WithRSAEncryption 6c:23:83:3e:30:e9:b2:da:3f:89:8c:46:5c:49:73:b6:86:1c: 84:d6:d7:d9:42:62:3c:5d:fe:da:02:ff:95:70:b9:86:b5:db: 57:0d:90:e7:7b:98:9a:0a:23:0a:9d:b3:4a:a5:40:0a:ca:23: 9a:91:10:58:72:5e:42:53:43:cb:37:fa:be:f1:1c:9a:e9:74: 70:f4:59:53:3d:b1:b8:ca:66:ab:cd:9f:7d:1b:7a:7f:5b:bf: 3c:d4:19:3a:02:42:6d:cc:be:17:ce:20:69:26:56:1d:e5:d0: cb:90:eb:93:3e:0a:85:1e:7b:00:b5:d6:66:d1:ef:f2:c7:68: b9:60:a4:7a:df:75:68:a5:28:64:ee:8a:be:08:52:e1:c6:2d: 6e:42:eb:8c:7a:74:b0:58:75:93:0b:04:8d:82:97:ba:99:58: 49:4c:88:e2:ad:6c:cd:23:18:c0:09:31:29:2f:1b:b1:62:e6: 49:46:b3:24:f3:70:6f:4b:36:f5:08:12:f1:be:91:64:77:54: 2f:96:76:be:4b:d9:4d:89:ba:a9:fe:cf:5b:4b:35:2a:02:51: a9:34:a1:88:b5:23:74:55:8b:a8:b5:9b:58:d4:2d:50:3f:95: 34:e5:4a:ea:5c:d4:e3:c2:43:29:8f:ae:87:e8:fd:cf:f7:45: 0f:2a:f4:d2 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgISAZt3WVvsPKlyBK7FSpeLFQvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2NiNWNlY2MyMTNiOWY4NmRiYmE1MTg1MjFlODU0NmVjOTM4NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/6PlXdPAvl1bU2XVu9ozlC94/rT 49twvgOX91sP53NtCoDCni9j3Qd2uS3uUHwSISR3zjCL3ehvX6+tWDcrRP/qn3QH GEAVZmFj96cjrk6k4O+D5Z2Ps0qDDgsmWn75Mu9+ZWr4cKDgdlIyD4lORnHlTbKn Q/ayQr9eYlqp+pX8oLO/ib13Tw4Zh7dJ9FxohwqlOLJnSajybnRzQxO0pW9lBIE1 1hsp6Uw3m61gF6FGjq2+reGjR6323N55S4nwwcBuSfO+/0zCd4c722MNTzfTinBa NS+ntbQ1EFADP3nb4fAcf5EGplUk/oYcKJE/vr0rBe7a1mndH7RFhzxlSQIDAQAB o4IEGDCCBBQwHQYDVR0OBBYEFNPLXOzCE7n4bbulGFIehUbsk4YcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2UxMTdm ZS1jOWU3LTRkNDEtOTRkZi04NDI2OTQxMmQ1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvZTExN2Zl LWM5ZTctNGQ0MS05NGRmLTg0MjY5NDEyZDU2MS8xLzA4dGM3TUlUdWZodHU2VVlV aDZGUnV5VGhody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBcwYIKwYB BQUHAQcBAf8EggFiMIIBXjCCATYEAgABMIIBLgMEBQX5gAMEAx8LIAMEBB8OgAME BS4lAAMEBz6VgAMEBkJHgAMEBE1R4AMEBFBJ4AMEBFBYUAMDAFDTAwQFUsCAAwQF VeuAAwQDVmkwAwQEWSTQAwQDWSaQAwQEWShwAwQEWS5AAwQDWS5oAwQDWS7AAwQE XbrwMAsDBAVesaADAwFesAMEB19ugAMEA21G8AMEBbBrgAMEArkIMAMEArkMsAME ArkjQAMEArkr0AMEArk4CDAMAwQCuTp0AwQCuTp4AwQCuTrAAwQCuTrgAwQEvNWg AwQBwf7wAwQFwrZAAwQCwrZoAwQBwrZuAwQBw4DqAwQCw+GoAwQHw+cAAwQAw+qr AwQAw/oiAwQG0ePAAwQG1O0AAwQG2T0AAwQF2T1gAwQE2UngAwQE2caAMCIEAgAC MBwDBQMqAG1AAwUAKgFuYAMFACoDLEADBQAqA6FAMDwGCCsGAQUFBwEIAQH/BC0w K6ApMCcCAnk6AgMDC+UCAwMMywIDAw35AgMDFgICAwMXdQIDAyOfAgMDQOgwDQYJ KoZIhvcNAQELBQADggEBAGwjgz4w6bLaP4mMRlxJc7aGHITW19lCYjxd/toC/5Vw uYa121cNkOd7mJoKIwqds0qlQArKI5qREFhyXkJTQ8s3+r7xHJrpdHD0WVM9sbjK ZqvNn30ben9bvzzUGToCQm3MvhfOIGkmVh3l0MuQ65M+CoUeewC11mbR7/LHaLlg pHrfdWilKGTuir4IUuHGLW5C64x6dLBYdZMLBI2Cl7qZWElMiOKtbM0jGMAJMSkv G7Fi5klGsyTzcG9LNvUIEvG+kWR3VC+Wdr5L2U2Juqn+z1tLNSoCUak0oYi1I3RV i6i1m1jULVA/lTTlSupc1OPCQymProfo/c/3RQ8q9NI= -----END CERTIFICATE-----Generated at Sun Jan 11 20:09:49 2026 by rpki-client