This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer File: 250Zf7vuKh3MtPVXIqghDTEFsEI.cer (raw, json) Hash identifier: Y9FeRap+LcalDi4O33MQRxQ7BjDPn9llT2m21TiO534= Subject key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBB0A1996D73BE4FBCA6FE7F386FAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8437 AS: 12635 AS: 15554 AS: 25255 AS: 213259 IP: 46.57.0.0/17 IP: 46.220.0.0/16 IP: 62.116.0.0/19 IP: 62.116.64.0/18 IP: 62.218.0.0/16 IP: 77.116.0.0/14 IP: 78.142.128.0/18 IP: 81.3.192.0/18 IP: 81.189.0.0/16 IP: 86.59.0.0/17 IP: 91.141.0.0/17 IP: 91.186.128.0/19 IP: 94.245.192.0/18 IP: 109.126.64.0/18 IP: 178.112.0.0/14 IP: 178.165.128.0/17 IP: 185.91.144.0/22 IP: 188.118.192.0/18 IP: 194.24.128.0/19 IP: 195.70.224.0/19 IP: 195.96.0.0/19 IP: 195.248.32.0/19 IP: 212.27.64.0/18 IP: 212.152.128.0/17 IP: 213.90.0.0/17 IP: 213.94.64.0/18 IP: 213.129.224.0/19 IP: 213.235.192.0/18 IP: 2001:858::/32 IP: 2001:938::/32 IP: 2001:4b68::/29 IP: 2a02:2860::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b0:a1:99:6d:73:be:4f:bc:a6:fe:7f:38:6f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:46:3c:9b:a2:b8:09:03:bb:c7:73:57:d6: b9:03:3d:8a:82:2e:70:6a:80:80:5c:d1:c3:90:e9: dd:58:07:8f:f3:02:d2:bd:80:70:32:c1:34:06:fe: 74:be:50:da:88:05:37:41:16:a3:b5:36:62:33:73: 48:73:d1:52:7a:4c:4e:a6:9d:2d:b6:40:a4:27:74: c5:ab:e9:2c:db:be:57:85:62:d7:52:a5:2c:61:c9: 89:6f:75:73:57:28:c0:a6:b1:28:be:29:9e:75:71: ef:d9:07:81:45:98:4c:d1:37:15:87:a8:9e:9c:3c: bb:f2:58:df:e6:1d:8c:4e:61:d4:94:ef:e8:f1:8e: aa:f2:e3:b6:13:1c:e5:b5:80:a2:40:98:e9:96:2c: 5e:6d:02:c0:a3:e5:c1:ba:d3:ef:34:78:9f:2b:74: 97:15:ae:d8:3c:64:ba:41:90:36:25:ff:59:42:0e: 90:ab:f6:3e:a9:b8:ab:56:1d:e5:16:0a:19:ac:40: ff:eb:3a:ab:ca:61:41:09:b8:1f:9f:d0:77:3d:4c: 5e:42:77:86:60:39:74:d9:52:71:17:be:51:db:ab: 83:9c:4d:0b:07:c1:fe:bc:56:39:05:af:79:f4:62: d3:87:ba:53:23:57:86:9c:20:36:0c:ba:a5:0c:80: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.57.0.0/17 46.220.0.0/16 62.116.0.0/19 62.116.64.0/18 62.218.0.0/16 77.116.0.0/14 78.142.128.0/18 81.3.192.0/18 81.189.0.0/16 86.59.0.0/17 91.141.0.0/17 91.186.128.0/19 94.245.192.0/18 109.126.64.0/18 178.112.0.0/14 178.165.128.0/17 185.91.144.0/22 188.118.192.0/18 194.24.128.0/19 195.70.224.0/19 195.96.0.0/19 195.248.32.0/19 212.27.64.0/18 212.152.128.0/17 213.90.0.0/17 213.94.64.0/18 213.129.224.0/19 213.235.192.0/18 IPv6: 2001:858::/32 2001:938::/32 2001:4b68::/29 2a02:2860::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8437 12635 15554 25255 213259 Signature Algorithm: sha256WithRSAEncryption 85:8a:48:68:e2:5e:48:77:97:72:bd:aa:21:75:7c:55:79:d1: 85:64:81:94:18:28:75:11:e9:bf:7e:6a:6f:fe:74:48:81:9b: bf:aa:8e:24:80:c4:a0:8c:7b:07:d8:a8:67:4c:a0:bc:22:8b: 9d:6e:a7:ca:2b:9b:56:f1:92:b2:48:15:50:da:1a:b2:8f:1f: e0:81:58:b4:6c:53:24:5e:b1:55:b3:56:35:78:20:56:43:b3: 51:56:d6:c9:af:78:f2:de:b6:a5:ea:2d:03:c2:c3:02:ee:2a: 19:38:dc:21:1e:12:2e:54:be:4c:41:80:d3:dc:3c:4f:47:6a: 95:10:04:26:ee:fd:9d:50:4d:c6:6d:78:7b:ef:91:d9:37:5a: 3e:ae:d8:c3:e5:76:b8:5d:11:8d:c6:e2:a1:e9:3b:8f:80:8a: b3:41:5c:fc:3b:10:6d:f9:87:37:e6:e2:c7:b2:ea:37:35:09: b9:4a:c0:64:78:e7:0b:a3:51:f2:48:e7:06:9d:b1:31:7a:94: 4d:5c:19:5c:54:21:10:49:23:0a:19:eb:75:c9:e0:1f:6a:76: 9d:08:44:e2:98:f1:9d:4c:d4:85:e2:0a:0d:a1:6e:bc:07:21: 53:44:2c:93:a1:e9:4e:39:10:3d:ff:d3:b4:52:78:23:d0:ac: 0c:89:89:68 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgISAZt567ChmW1zvk+8pv5/OG+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjlkMTk3ZmJiZWUyYTFkY2NiNGY1NTcyMmE4MjEwZDMxMDViMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZGPJuiuAkDu8dzV9a5Az2Kgi5w aoCAXNHDkOndWAeP8wLSvYBwMsE0Bv50vlDaiAU3QRajtTZiM3NIc9FSekxOpp0t tkCkJ3TFq+ks275XhWLXUqUsYcmJb3VzVyjAprEovimedXHv2QeBRZhM0TcVh6ie nDy78ljf5h2MTmHUlO/o8Y6q8uO2ExzltYCiQJjplixebQLAo+XButPvNHifK3SX Fa7YPGS6QZA2Jf9ZQg6Qq/Y+qbirVh3lFgoZrED/6zqrymFBCbgfn9B3PUxeQneG YDl02VJxF75R26uDnE0LB8H+vFY5Ba959GLTh7pTI1eGnCA2DLqlDIAGewIDAQAB o4IDdjCCA3IwHQYDVR0OBBYEFNudGX+77iodzLT1VyKoIQ0xBbBCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzA5ZDEz Ny00NzdiLTRlZmUtYTNkMy00YjIzOTU2ZmJkODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMDlkMTM3 LTQ3N2ItNGVmZS1hM2QzLTRiMjM5NTZmYmQ4Ni8xLzI1MFpmN3Z1S2gzTXRQVlhJ cWdoRFRFRnNFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHkBggrBgEF BQcBBwEB/wSB1DCB0TCBqgQCAAEwgaMDBAcuOQADAwAu3AMEBT50AAMEBj50QAMD AD7aAwMCTXQDBAZOjoADBAZRA8ADAwBRvQMEB1Y7AAMEB1uNAAMEBVu6gAMEBl71 wAMEBm1+QAMDArJwAwQHsqWAAwQCuVuQAwQGvHbAAwQFwhiAAwQFw0bgAwQFw2AA AwQFw/ggAwQG1BtAAwQH1JiAAwQH1VoAAwQG1V5AAwQF1YHgAwQG1evAMCIEAgAC MBwDBQAgAQhYAwUAIAEJOAMFAyABS2gDBQMqAihgMCoGCCsGAQUFBwEIAQH/BBsw GaAXMBUCAiD1AgIxWwICPMICAmKnAgMDQQswDQYJKoZIhvcNAQELBQADggEBAIWK SGjiXkh3l3K9qiF1fFV50YVkgZQYKHUR6b9+am/+dEiBm7+qjiSAxKCMewfYqGdM oLwii51up8orm1bxkrJIFVDaGrKPH+CBWLRsUyResVWzVjV4IFZDs1FW1smvePLe tqXqLQPCwwLuKhk43CEeEi5UvkxBgNPcPE9HapUQBCbu/Z1QTcZteHvvkdk3Wj6u 2MPldrhdEY3G4qHpO4+AirNBXPw7EG35hzfm4sey6jc1CblKwGR45wujUfJI5wad sTF6lE1cGVxUIRBJIwoZ63XJ4B9qdp0IROKY8Z1M1IXiCg2hbrwHIVNELJOh6U45 ED3/07RSeCPQrAyJiWg= -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:32 2026 by rpki-client