This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer File: Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer (raw, json) Hash identifier: fQbtD+NObYT3EtHs65ATYXVqj40F6qr84xjyPdnOyQo= Subject key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C881204E46476CCE28A8D1CF46403 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34800 AS: 44393 AS: 47422 AS: 48795 AS: 56755 AS: 56950 AS: 58057 AS: 60371 AS: 60474 IP: 45.12.68.0/22 IP: 45.12.252.0/24 IP: 45.131.184.0/22 IP: 45.136.136.0/22 IP: 45.148.116.0/22 IP: 77.81.50.0/23 IP: 85.202.203.0/24 IP: 93.88.200.0/21 IP: 94.177.122.0/24 IP: 109.61.104.0/21 IP: 139.28.96.0/22 IP: 146.19.102.0/24 IP: 146.19.139.0/24 IP: 185.0.31.0/24 IP: 185.1.135.0/24 IP: 185.1.154.0/24 IP: 185.1.216.0/24 IP: 185.102.84.0/24 IP: 185.232.117.0/24 IP: 185.238.188.0/22 IP: 185.248.132.0/24 IP: 193.33.94.0/23 IP: 193.58.239.0/24 IP: 193.163.85.0 -- 193.163.86.255 IP: 194.50.92.0/24 IP: 194.50.94.0/24 IP: 194.50.99.0/24 IP: 194.50.111.0/24 IP: 2001:7f8:d9::/48 IP: 2001:7f8:e7::/48 IP: 2001:7f8:119::/48 IP: 2001:7f8:14a::/48 IP: 2a01:e500::/29 IP: 2a04:ccc0::/29 IP: 2a06:de00::/29 IP: 2a09:4c0::/29 IP: 2a0c:3b80::/29 IP: 2a0e:97c0::/29 IP: 2a0e:b100::/29 IP: 2a0f:b9c0::/29 IP: 2a0f:e400::/29 IP: 2a10:2f00::/29 IP: 2a10:cc40::/29 IP: 2a10:ccc0::/29 IP: 2a10:d380::/29 IP: 2a12:87c0::/29 IP: 2a13:1bc0::/29 IP: 2a13:8380::/29 IP: 2a13:aa00::/29 IP: 2a14:3800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:88:12:04:e4:64:76:cc:e2:8a:8d:1c:f4:64:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:89:25:2a:60:70:13:16:2c:ea:c2:96:c7: 94:5e:55:2f:e3:15:63:cc:a0:ee:e2:83:ac:95:7d: 53:e2:b9:8e:06:04:57:f6:34:9b:a7:44:33:3c:80: ad:da:8f:6a:fd:c2:9f:28:69:2c:fd:26:19:50:2e: 16:a0:5e:df:2d:d6:79:da:e6:7f:30:d9:b5:74:fd: ff:46:37:3c:7c:d4:c8:f1:29:1e:b4:f5:7c:25:ed: 9a:74:ba:18:b3:39:ad:4d:55:8d:bd:46:24:13:71: 6e:2c:81:0d:0e:46:b1:9a:89:6d:a1:e6:41:98:a6: 20:e8:4f:33:ca:db:c7:77:d1:62:96:d1:38:83:70: fe:27:d6:c8:0f:37:fd:a4:9b:ef:86:ca:f0:f6:bb: 45:fd:31:86:d7:02:df:2f:72:d5:8f:a4:af:de:19: bd:7b:47:d7:81:98:9e:0e:55:ec:75:e9:13:b4:84: fc:b1:dc:24:31:4d:62:23:36:17:49:86:fa:4d:79: e6:a9:e7:16:80:e6:54:8f:f0:21:b5:36:78:96:06: 42:af:38:53:c4:03:a6:c4:17:43:26:43:39:c5:8a: 78:89:31:04:96:5e:6a:52:fe:33:1f:83:b4:cd:30: 87:d5:22:1b:4e:3c:21:12:ba:a8:1a:e0:ff:bf:c0: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.68.0/22 45.12.252.0/24 45.131.184.0/22 45.136.136.0/22 45.148.116.0/22 77.81.50.0/23 85.202.203.0/24 93.88.200.0/21 94.177.122.0/24 109.61.104.0/21 139.28.96.0/22 146.19.102.0/24 146.19.139.0/24 185.0.31.0/24 185.1.135.0/24 185.1.154.0/24 185.1.216.0/24 185.102.84.0/24 185.232.117.0/24 185.238.188.0/22 185.248.132.0/24 193.33.94.0/23 193.58.239.0/24 193.163.85.0-193.163.86.255 194.50.92.0/24 194.50.94.0/24 194.50.99.0/24 194.50.111.0/24 IPv6: 2001:7f8:d9::/48 2001:7f8:e7::/48 2001:7f8:119::/48 2001:7f8:14a::/48 2a01:e500::/29 2a04:ccc0::/29 2a06:de00::/29 2a09:4c0::/29 2a0c:3b80::/29 2a0e:97c0::/29 2a0e:b100::/29 2a0f:b9c0::/29 2a0f:e400::/29 2a10:2f00::/29 2a10:cc40::/29 2a10:ccc0::/29 2a10:d380::/29 2a12:87c0::/29 2a13:1bc0::/29 2a13:8380::/29 2a13:aa00::/29 2a14:3800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34800 44393 47422 48795 56755 56950 58057 60371 60474 Signature Algorithm: sha256WithRSAEncryption 09:13:2b:71:42:26:5f:8a:e6:39:65:d3:41:88:8f:03:43:63: a3:19:ba:7f:ec:ca:a3:b0:cc:e4:ba:56:72:c2:4a:a7:23:f0: 93:00:1e:bc:b7:43:0a:4d:49:73:9e:9f:46:73:d1:0f:6e:ad: a6:dc:1a:28:24:6e:15:68:dd:16:bf:c4:e4:51:cf:bd:14:57: 9c:10:af:81:9f:24:dd:9a:68:de:e6:63:0f:90:56:4d:1d:0e: 59:28:48:aa:f7:03:81:5c:b7:0f:0f:af:c6:05:62:08:91:14: e4:9c:71:09:00:be:2d:f8:61:1a:fb:0c:1b:ac:6e:f3:17:e8: ac:b0:54:a4:fa:ad:8e:44:a6:28:69:cb:a4:27:44:6e:c4:42: 54:88:96:5d:9a:67:47:61:40:31:40:2e:2f:f4:a3:13:45:53: aa:8e:cd:82:88:f2:31:c3:1c:55:09:53:7c:a7:ef:22:30:2c: 72:6d:09:3f:9a:fe:23:3f:ae:b8:c7:5f:a5:2b:9f:51:f9:ce: c1:46:af:2d:76:68:ea:cd:f1:d6:79:7a:4f:78:16:1d:63:f9: a2:67:96:8f:32:bb:0a:6f:79:3d:fb:6f:f8:71:cd:bc:0f:55: a9:ad:68:8b:af:ce:22:9c:f1:e6:e6:98:24:3a:c0:a5:7a:09: aa:36:a4:4d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgISAZt9XIgSBORkdsziio0c9GQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcqJJSpgcBMWLOrClseUXlUv4xVj zKDu4oOslX1T4rmOBgRX9jSbp0QzPICt2o9q/cKfKGks/SYZUC4WoF7fLdZ52uZ/ MNm1dP3/Rjc8fNTI8SketPV8Je2adLoYszmtTVWNvUYkE3FuLIENDkaxmoltoeZB mKYg6E8zytvHd9FiltE4g3D+J9bIDzf9pJvvhsrw9rtF/TGG1wLfL3LVj6Sv3hm9 e0fXgZieDlXsdekTtIT8sdwkMU1iIzYXSYb6TXnmqecWgOZUj/AhtTZ4lgZCrzhT xAOmxBdDJkM5xYp4iTEEll5qUv4zH4O0zTCH1SIbTjwhErqoGuD/v8AThQIDAQAB o4IEJjCCBCIwHQYDVR0OBBYEFGPpFnF6sRzM8R7x+1wS7kGVD62bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzQ5NTdh NC1jZTU5LTQzMTUtOTk3Ni1kYzVlYzc0OGY2YTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNDk1N2E0 LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16eEh2SDdY Qkx1UVpVUHJacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBewYIKwYB BQUHAQcBAf8EggFqMIIBZjCBtwQCAAEwgbADBAItDEQDBAAtDPwDBAItg7gDBAIt iIgDBAItlHQDBAFNUTIDBABVyssDBANdWMgDBABesXoDBANtPWgDBAKLHGADBACS E2YDBACSE4sDBAC5AB8DBAC5AYcDBAC5AZoDBAC5AdgDBAC5ZlQDBAC56HUDBAK5 7rwDBAC5+IQDBAHBIV4DBADBOu8wDAMEAMGjVQMEAMGjVgMEAMIyXAMEAMIyXgME AMIyYwMEAMIybzCBqQQCAAIwgaIDBwAgAQf4ANkDBwAgAQf4AOcDBwAgAQf4ARkD BwAgAQf4AUoDBQMqAeUAAwUDKgTMwAMFAyoG3gADBQMqCQTAAwUDKgw7gAMFAyoO l8ADBQMqDrEAAwUDKg+5wAMFAyoP5AADBQMqEC8AAwUDKhDMQAMFAyoQzMADBQMq ENOAAwUDKhKHwAMFAyoTG8ADBQMqE4OAAwUDKhOqAAMFAyoUOAAwQgYIKwYBBQUH AQgBAf8EMzAxoC8wLQIDAIfwAgMArWkCAwC5PgIDAL6bAgMA3bMCAwDedgIDAOLJ AgMA69MCAwDsOjANBgkqhkiG9w0BAQsFAAOCAQEACRMrcUImX4rmOWXTQYiPA0Nj oxm6f+zKo7DM5LpWcsJKpyPwkwAevLdDCk1Jc56fRnPRD26tptwaKCRuFWjdFr/E 5FHPvRRXnBCvgZ8k3Zpo3uZjD5BWTR0OWShIqvcDgVy3Dw+vxgViCJEU5JxxCQC+ LfhhGvsMG6xu8xforLBUpPqtjkSmKGnLpCdEbsRCVIiWXZpnR2FAMUAuL/SjE0VT qo7NgojyMcMcVQlTfKfvIjAscm0JP5r+Iz+uuMdfpSufUfnOwUavLXZo6s3x1nl6 T3gWHWP5omeWjzK7Cm95Pftv+HHNvA9Vqa1oi6/OIpzx5uaYJDrApXoJqjakTQ== -----END CERTIFICATE-----Generated at Mon Jan 12 07:34:37 2026 by rpki-client