This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer File: cJSkJVlekjxLU7nAAKqPGa2SPyA.cer (raw, json) Hash identifier: km8iHLJl13hKzhy+DlwS5vt4KTQV2DRNsfG1HVD9E/E= Subject key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83786085205F067BBE271ACFDACE92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3339 AS: 39339 AS: 60267 AS: 200738 AS: 205981 AS: 207050 AS: 212833 IP: 45.9.132.0/22 IP: 45.83.80.0/22 IP: 45.129.20.0/22 IP: 45.137.72.0/22 IP: 77.83.124.0/22 IP: 79.143.132.0/22 IP: 91.200.244.0/22 IP: 92.114.56.0/22 IP: 92.119.20.0/22 IP: 93.114.240.0/22 IP: 109.230.216.0/23 IP: 109.230.222.0/24 IP: 134.255.215.0/24 IP: 176.97.224.0/22 IP: 176.100.208.0/21 IP: 176.100.224.0/20 IP: 185.59.48.0/22 IP: 185.72.12.0/22 IP: 185.73.188.0/22 IP: 185.95.56.0/22 IP: 185.97.168.0/22 IP: 185.124.104.0/22 IP: 185.154.56.0/22 IP: 185.159.252.0/22 IP: 185.170.147.0/24 IP: 185.177.168.0/22 IP: 185.194.108.0/22 IP: 185.209.120.0/22 IP: 185.224.48.0/22 IP: 185.233.76.0/22 IP: 185.248.124.0/22 IP: 185.255.104.0/22 IP: 188.215.8.0/22 IP: 188.215.224.0/22 IP: 192.145.40.0/22 IP: 193.26.148.0/22 IP: 193.31.36.0/22 IP: 193.35.14.0/23 IP: 193.35.26.0/23 IP: 193.160.84.0/22 IP: 193.242.164.0/23 IP: 194.62.56.0/22 IP: 212.63.104.0/22 IP: 2001:67c:11b4::/48 IP: 2a03:3d20::/32 IP: 2a04:e2c0::/29 IP: 2a06:6c0::/29 IP: 2a07:8b40::/29 IP: 2a0a:4280::/29 IP: 2a0b:45c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:78:60:85:20:5f:06:7b:be:27:1a:cf:da:ce:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:e7:d6:7d:4d:ca:04:23:aa:2f:80:e9:46: 23:e6:42:52:7f:bd:39:11:5f:34:1a:ef:cf:df:8a: 44:50:1d:a8:cc:cf:e6:a6:64:06:3e:24:15:76:8d: a5:01:a9:c6:73:5e:9e:95:b8:12:00:be:9f:16:90: 1a:9f:c1:5b:8e:a7:46:17:bc:7d:c1:1f:98:5f:05: 8d:e5:83:55:25:36:55:03:f4:79:71:e1:a4:76:63: 2b:a2:e4:6b:ce:17:c1:2d:bf:ff:17:cf:f8:a0:6f: c9:f8:c1:89:8c:c7:d8:66:80:b5:97:7a:fb:2c:c0: 6c:b5:26:96:b8:fc:97:66:99:ee:f5:3a:a0:d2:57: 2d:c0:ed:e5:5e:a8:de:55:a6:63:72:73:20:59:59: d9:f6:7a:18:b6:18:df:f4:0d:81:ef:3a:9c:11:d7: 79:fc:f0:84:c8:2d:9f:8e:8e:82:08:85:ab:68:3d: a3:50:ec:48:ab:4d:0b:5e:df:42:1e:85:1f:ae:98: bc:e2:39:dc:ae:61:fb:15:4b:c5:03:13:f6:eb:e9: 78:84:b3:3c:fb:14:0d:58:d6:48:68:11:e1:ed:59: 21:f7:25:b5:c5:9c:ea:68:95:2f:5a:f3:6b:16:45: 85:59:a9:bb:11:c4:1c:a7:c1:ab:07:b0:6d:81:84: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.132.0/22 45.83.80.0/22 45.129.20.0/22 45.137.72.0/22 77.83.124.0/22 79.143.132.0/22 91.200.244.0/22 92.114.56.0/22 92.119.20.0/22 93.114.240.0/22 109.230.216.0/23 109.230.222.0/24 134.255.215.0/24 176.97.224.0/22 176.100.208.0/21 176.100.224.0/20 185.59.48.0/22 185.72.12.0/22 185.73.188.0/22 185.95.56.0/22 185.97.168.0/22 185.124.104.0/22 185.154.56.0/22 185.159.252.0/22 185.170.147.0/24 185.177.168.0/22 185.194.108.0/22 185.209.120.0/22 185.224.48.0/22 185.233.76.0/22 185.248.124.0/22 185.255.104.0/22 188.215.8.0/22 188.215.224.0/22 192.145.40.0/22 193.26.148.0/22 193.31.36.0/22 193.35.14.0/23 193.35.26.0/23 193.160.84.0/22 193.242.164.0/23 194.62.56.0/22 212.63.104.0/22 IPv6: 2001:67c:11b4::/48 2a03:3d20::/32 2a04:e2c0::/29 2a06:6c0::/29 2a07:8b40::/29 2a0a:4280::/29 2a0b:45c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3339 39339 60267 200738 205981 207050 212833 Signature Algorithm: sha256WithRSAEncryption 8f:2e:ec:f0:d8:df:d3:c9:4e:23:29:7e:a4:e7:36:c7:f9:81: 44:b6:c6:74:9f:ae:bc:da:2b:cc:89:aa:eb:2c:21:d0:0f:40: 3c:e4:df:80:1c:0c:13:f0:63:0e:f4:bf:fe:c2:de:42:77:e8: 3e:d0:a6:96:70:55:59:0e:fa:dc:ac:a7:d8:7a:e4:87:36:2e: 6b:96:12:6c:f9:85:29:f9:34:fd:d7:84:79:fa:5c:16:d0:ad: 78:c0:0e:48:ff:11:bb:76:f2:f2:5b:16:81:e6:0b:50:32:01: 7c:4e:12:42:f9:55:74:57:67:34:0a:8d:d5:1d:eb:c3:8c:4b: f9:f5:e6:f1:a9:81:0b:b4:c3:47:e3:86:05:00:61:f9:47:76: 6c:3d:c4:b2:98:c0:a7:98:97:6d:e6:b2:d3:39:10:ca:87:18: 49:ca:b3:d0:17:bd:36:1e:e1:b7:47:0b:06:4d:db:d2:90:98: d6:e6:19:83:07:6e:5b:dd:25:4b:4d:e2:4c:52:c2:2c:84:ae: 9d:10:be:58:6f:f9:27:5e:b8:fd:b8:af:e2:82:c8:93:9f:ae: ba:95:ce:07:c5:18:83:5a:a7:bf:06:28:d8:20:c6:b8:c3:f1: b2:be:1e:f6:75:3a:36:fc:da:8e:dd:94:78:fa:73:83:64:f9: 42:fd:c9:f4 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgISAZt/g3hghSBfBnu+JxrP2s6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk0YTQyNTU5NWU5MjNjNGI1M2I5YzAwMGFhOGYxOWFkOTIzZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIfn1n1NygQjqi+A6UYj5kJSf705 EV80Gu/P34pEUB2ozM/mpmQGPiQVdo2lAanGc16elbgSAL6fFpAan8FbjqdGF7x9 wR+YXwWN5YNVJTZVA/R5ceGkdmMrouRrzhfBLb//F8/4oG/J+MGJjMfYZoC1l3r7 LMBstSaWuPyXZpnu9Tqg0lctwO3lXqjeVaZjcnMgWVnZ9noYthjf9A2B7zqcEdd5 /PCEyC2fjo6CCIWraD2jUOxIq00LXt9CHoUfrpi84jncrmH7FUvFAxP26+l4hLM8 +xQNWNZIaBHh7Vkh9yW1xZzqaJUvWvNrFkWFWam7EcQcp8GrB7BtgYQ9dQIDAQAB o4ID/jCCA/owHQYDVR0OBBYEFHCUpCVZXpI8S1O5wACqjxmtkj8gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzk2MzE3 MC01OGJlLTQ2YmItYTVkZS03NzczNzNlNjA1NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvOTYzMTcw LTU4YmUtNDZiYi1hNWRlLTc3NzM3M2U2MDU1ZS8xL2NKU2tKVmxla2p4TFU3bkFB S3FQR2EyU1B5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBXgYIKwYB BQUHAQcBAf8EggFNMIIBSTCCAQoEAgABMIIBAgMEAi0JhAMEAi1TUAMEAi2BFAME Ai2JSAMEAk1TfAMEAk+PhAMEAlvI9AMEAlxyOAMEAlx3FAMEAl1y8AMEAW3m2AME AG3m3gMEAIb/1wMEArBh4AMEA7Bk0AMEBLBk4AMEArk7MAMEArlIDAMEArlJvAME ArlfOAMEArlhqAMEArl8aAMEArmaOAMEArmf/AMEALmqkwMEArmxqAMEArnCbAME ArnReAMEArngMAMEArnpTAMEArn4fAMEArn/aAMEArzXCAMEArzX4AMEAsCRKAME AsEalAMEAsEfJAMEAcEjDgMEAcEjGgMEAsGgVAMEAcHypAMEAsI+OAMEAtQ/aDA5 BAIAAjAzAwcAIAEGfBG0AwUAKgM9IAMFAyoE4sADBQMqBgbAAwUDKgeLQAMFAyoK QoADBQMqC0XAMDcGCCsGAQUFBwEIAQH/BCgwJqAkMCICAg0LAgMAmasCAwDrawID AxAiAgMDJJ0CAwMoygIDAz9hMA0GCSqGSIb3DQEBCwUAA4IBAQCPLuzw2N/TyU4j KX6k5zbH+YFEtsZ0n6682ivMiarrLCHQD0A85N+AHAwT8GMO9L/+wt5Cd+g+0KaW cFVZDvrcrKfYeuSHNi5rlhJs+YUp+TT914R5+lwW0K14wA5I/xG7dvLyWxaB5gtQ MgF8ThJC+VV0V2c0Co3VHevDjEv59ebxqYELtMNH44YFAGH5R3ZsPcSymMCnmJdt 5rLTORDKhxhJyrPQF702HuG3RwsGTdvSkJjW5hmDB25b3SVLTeJMUsIshK6dEL5Y b/knXrj9uK/igsiTn666lc4HxRiDWqe/BijYIMa4w/Gyvh72dTo2/NqO3ZR4+nOD ZPlC/cn0 -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:17 2026 by rpki-client