This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer File: 26EiB69NGGxE2iUzwLjx_R9V2Ns.cer (raw, json) Hash identifier: Hc80VfkriC4MAOoeEm476dKWWrJyyzfoVrV7WrMgd6Q= Subject key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2655E54E5A178C85B5188A75B5701FDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 08:45:22 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 8935 AS: 8954 AS: 41960 AS: 215834 IP: 2.56.216.0/22 IP: 5.183.132.0/22 IP: 37.148.184.0/21 IP: 45.10.124.0/22 IP: 45.95.252.0/22 IP: 45.140.156.0/22 IP: 45.151.116.0/22 IP: 77.73.224.0/21 IP: 85.184.8.0/21 IP: 91.211.162.0/23 IP: 93.188.64.0/22 IP: 94.142.253.0/24 IP: 171.22.176.0/22 IP: 185.116.12.0/22 IP: 185.234.152.0 -- 185.234.154.255 IP: 185.239.168.0 -- 185.239.170.255 IP: 185.249.136.0/22 IP: 185.251.152.0/22 IP: 185.253.48.0/22 IP: 193.105.183.0/24 IP: 194.61.84.0/24 IP: 194.61.86.0/24 IP: 195.184.86.0/23 IP: 195.184.90.0/23 IP: 195.238.86.0/23 IP: 212.19.192.0/19 IP: 212.26.192.0/19 IP: 212.57.48.0/20 IP: 213.156.0.0/20 IP: 213.173.56.0/22 IP: 217.8.96.0/20 IP: 2001:67c:21b4::/48 IP: 2001:6e0::/29 IP: 2a02:690::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:55:e5:4e:5a:17:8c:85:b5:18:8a:75:b5:70:1f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 08:45:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:d8:4c:84:01:43:bf:03:b8:7d:89:dc:63: 12:a1:e4:de:1e:04:c4:de:e6:33:4a:be:5c:2d:a4: 2f:a3:29:3c:34:f3:05:76:ea:3d:77:8f:3f:46:2e: c9:f2:3b:3f:54:1c:8f:28:ea:38:9c:1a:21:9e:b5: 5f:c4:da:f5:1f:bf:98:49:dd:13:3a:03:49:7f:b7: e3:b0:45:3f:d7:bf:5e:3b:09:b6:5f:7b:ea:e5:ee: 28:56:18:11:00:62:86:cd:42:50:73:c3:ee:51:51: 80:ba:64:9e:3b:70:e4:28:67:02:9e:f0:af:4d:b4: e9:a3:8b:e3:ea:36:b8:48:f1:49:af:ea:7f:fe:3c: 2e:dc:65:b4:17:e3:7b:b7:c4:e5:3c:10:51:fd:70: 1f:72:a0:2d:d6:86:f4:13:42:de:4f:31:e5:f7:29: 99:b3:56:71:6b:24:72:af:7b:db:f1:6c:ac:29:d8: 19:25:a1:1e:1b:2f:fd:a4:b4:be:e9:ef:54:dd:96: d9:b5:36:71:1f:7e:f0:64:fa:17:26:69:67:11:79: d8:f9:96:27:ac:69:d5:ad:11:0d:04:ac:43:94:9c: bf:e5:c9:ad:de:9e:2e:2f:5f:d0:75:b6:6b:63:c8: c4:59:83:5f:0f:f9:f0:bc:8a:49:89:79:a3:08:67: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.216.0/22 5.183.132.0/22 37.148.184.0/21 45.10.124.0/22 45.95.252.0/22 45.140.156.0/22 45.151.116.0/22 77.73.224.0/21 85.184.8.0/21 91.211.162.0/23 93.188.64.0/22 94.142.253.0/24 171.22.176.0/22 185.116.12.0/22 185.234.152.0-185.234.154.255 185.239.168.0-185.239.170.255 185.249.136.0/22 185.251.152.0/22 185.253.48.0/22 193.105.183.0/24 194.61.84.0/24 194.61.86.0/24 195.184.86.0/23 195.184.90.0/23 195.238.86.0/23 212.19.192.0/19 212.26.192.0/19 212.57.48.0/20 213.156.0.0/20 213.173.56.0/22 217.8.96.0/20 IPv6: 2001:67c:21b4::/48 2001:6e0::/29 2a02:690::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8935 8954 41960 215834 Signature Algorithm: sha256WithRSAEncryption 2c:2c:af:b8:0c:94:bf:6e:93:48:0a:d5:2c:43:89:78:6b:74: 59:fb:07:41:cf:39:64:6c:71:f4:23:25:39:5c:19:6d:e0:38: 0f:4d:23:e6:f8:e6:08:e8:18:9f:08:8d:77:17:cd:ef:9b:bb: e2:e5:ce:3d:6b:9c:86:26:30:15:1e:54:3a:18:01:a4:55:77: 33:a5:f6:30:7e:62:55:c6:21:f4:74:a8:75:3e:cf:09:dd:b4: 4e:b0:47:2e:c0:0c:9d:2e:d1:db:82:d7:fc:9a:20:03:ee:1a: 2a:25:e1:84:8a:38:de:4d:00:63:cc:85:0c:3d:19:d6:fd:ca: fa:72:80:c1:cf:0b:8c:2a:78:00:92:3d:fd:e2:66:99:50:a2: af:32:3f:fd:89:d9:ed:6c:eb:d1:2e:93:52:47:c2:78:ec:8c: 89:74:7b:81:f5:3a:ed:38:be:40:78:96:0d:cf:f7:b6:8a:9f: 63:8a:7b:8b:c7:ad:1b:d1:97:3b:8f:d0:d7:f5:01:81:c9:a8: fd:96:76:d9:a3:35:c5:e2:ff:75:39:d4:e0:1f:19:0d:ef:56: f0:f6:f9:f0:17:d6:a3:93:0a:37:b0:6f:3a:4e:ef:45:18:7c: 17:46:43:87:69:10:df:5f:fd:68:33:9b:37:79:24:bb:6d:3c: 3b:2c:3d:d1 -----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgISAZsmVeVOWheMhbUYinW1cB/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MDg0NTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmExMjIwN2FmNGQxODZjNDRkYTI1MzNjMGI4ZjFmZDFmNTVkOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5XYTIQBQ78DuH2J3GMSoeTeHgTE 3uYzSr5cLaQvoyk8NPMFduo9d48/Ri7J8js/VByPKOo4nBohnrVfxNr1H7+YSd0T OgNJf7fjsEU/179eOwm2X3vq5e4oVhgRAGKGzUJQc8PuUVGAumSeO3DkKGcCnvCv TbTpo4vj6ja4SPFJr+p//jwu3GW0F+N7t8TlPBBR/XAfcqAt1ob0E0LeTzHl9ymZ s1ZxayRyr3vb8WysKdgZJaEeGy/9pLS+6e9U3ZbZtTZxH37wZPoXJmlnEXnY+ZYn rGnVrRENBKxDlJy/5cmt3p4uL1/QdbZrY8jEWYNfD/nwvIpJiXmjCGfz0QIDAQAB o4IDljCCA5IwHQYDVR0OBBYEFNuhIgevTRhsRNolM8C48f0fVdjbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2M4MDEw ZS0zMjg5LTRhMzYtYTJiOC0xMmIyYmM1ODA1M2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYzgwMTBl LTMyODktNGEzNi1hMmI4LTEyYjJiYzU4MDUzYS8xLzI2RWlCNjlOR0d4RTJpVXp3 TGp4X1I5VjJOcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBBgYIKwYB BQUHAQcBAf8EgfYwgfMwgdEEAgABMIHKAwQCAjjYAwQCBbeEAwQDJZS4AwQCLQp8 AwQCLV/8AwQCLYycAwQCLZd0AwQDTUngAwQDVbgIAwQBW9OiAwQCXbxAAwQAXo79 AwQCqxawAwQCuXQMMAwDBAO56pgDBAC56powDAMEA7nvqAMEALnvqgMEArn5iAME Arn7mAMEArn9MAMEAMFptwMEAMI9VAMEAMI9VgMEAcO4VgMEAcO4WgMEAcPuVgME BdQTwAMEBdQawAMEBNQ5MAMEBNWcAAMEAtWtOAMEBNkIYDAdBAIAAjAXAwcAIAEG fCG0AwUDIAEG4AMFAyoCBpAwJwYIKwYBBQUHAQgBAf8EGDAWoBQwEgICIucCAiL6 AgMAo+gCAwNLGjANBgkqhkiG9w0BAQsFAAOCAQEALCyvuAyUv26TSArVLEOJeGt0 WfsHQc85ZGxx9CMlOVwZbeA4D00j5vjmCOgYnwiNdxfN75u74uXOPWuchiYwFR5U OhgBpFV3M6X2MH5iVcYh9HSodT7PCd20TrBHLsAMnS7R24LX/JogA+4aKiXhhIo4 3k0AY8yFDD0Z1v3K+nKAwc8LjCp4AJI9/eJmmVCirzI//YnZ7Wzr0S6TUkfCeOyM iXR7gfU67Ti+QHiWDc/3toqfY4p7i8etG9GXO4/Q1/UBgcmo/ZZ22aM1xeL/dTnU 4B8ZDe9W8Pb58BfWo5MKN7BvOk7vRRh8F0ZDh2kQ31/9aDObN3kku208Oyw90Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:47 2025 by rpki-client