This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer File: dqdYJumRIlpCn_ih5__cgEZkIN8.cer (raw, json) Hash identifier: eMStj+E8trCYTnAid5WWhWMBEvuPZ26Wz/pC4SffAME= Subject key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37EFC4E18E1426EC3EB1F969E0F7F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5501 AS: 9020 AS: 28714 AS: 60824 AS: 200943 IP: 84.246.64.0/21 IP: 129.26.0.0/16 IP: 129.233.0.0/16 IP: 137.251.0.0/16 IP: 153.96.0.0/15 IP: 192.35.149.0 -- 192.35.153.255 IP: 192.41.227.0/24 IP: 192.42.63.0 -- 192.42.64.255 IP: 192.44.0.0 -- 192.44.40.255 IP: 192.54.34.0/23 IP: 192.67.200.0/21 IP: 192.76.148.0/24 IP: 192.76.241.0/24 IP: 192.76.245.0 -- 192.76.248.255 IP: 192.88.97.0 -- 192.88.98.255 IP: 192.88.108.0/24 IP: 192.102.146.0 -- 192.102.177.255 IP: 192.107.235.0 -- 192.107.236.255 IP: 192.109.177.0/24 IP: 194.113.96.0/22 IP: 212.44.192.0/19 IP: 2001:67c:61c::/48 IP: 2a03:db80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ef:c4:e1:8e:14:26:ec:3e:b1:f9:69:e0:f7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76a75826e991225a429ff8a1e7ffdc80466420df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:d1:d8:7c:ba:25:82:a1:7a:cc:1e:c9:8d: dd:91:d9:03:0f:ba:99:77:d1:31:ea:1f:4d:a2:30: 50:c2:d3:0c:72:6c:4d:6f:3e:24:68:05:15:f3:4a: c4:a2:92:08:12:da:02:b0:d5:e0:f2:10:92:21:4a: ba:12:ac:29:70:bb:63:ca:ad:ec:cf:8b:2c:92:ff: 5d:68:b8:eb:22:b5:2c:6a:a8:d3:e5:09:b9:78:40: b4:10:7a:0d:c5:cf:23:13:f4:7a:60:cd:95:f1:7c: 32:ed:5d:5a:37:cb:4c:15:bb:22:43:2f:65:75:d3: cf:74:e7:d1:0d:58:60:d0:17:07:82:a5:ea:af:23: b9:3f:dc:65:a6:54:0c:1c:9d:be:6e:1e:17:45:c1: 95:49:d8:5f:d2:2c:86:04:32:18:ef:f9:77:b8:57: e5:15:1d:03:71:e0:bf:e3:e6:9d:21:76:2a:4e:64: 12:c1:97:62:c7:8e:5a:67:8f:85:4c:c7:18:1a:57: 94:66:32:a6:ae:79:75:45:59:67:91:a1:75:71:a4: 97:63:d9:0e:76:b3:42:2d:6d:ec:d7:3f:65:b5:6b: c2:14:b6:62:5c:4c:8e:39:21:40:e2:79:f0:2e:c4: e8:ae:81:d5:f7:be:cc:0b:7d:12:bd:d8:0a:20:d3: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.64.0/21 129.26.0.0/16 129.233.0.0/16 137.251.0.0/16 153.96.0.0/15 192.35.149.0-192.35.153.255 192.41.227.0/24 192.42.63.0-192.42.64.255 192.44.0.0-192.44.40.255 192.54.34.0/23 192.67.200.0/21 192.76.148.0/24 192.76.241.0/24 192.76.245.0-192.76.248.255 192.88.97.0-192.88.98.255 192.88.108.0/24 192.102.146.0-192.102.177.255 192.107.235.0-192.107.236.255 192.109.177.0/24 194.113.96.0/22 212.44.192.0/19 IPv6: 2001:67c:61c::/48 2a03:db80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5501 9020 28714 60824 200943 Signature Algorithm: sha256WithRSAEncryption 82:a0:cc:33:59:8b:3c:78:1f:2c:cd:e6:87:9f:56:e5:41:43: ca:96:7b:e7:c6:02:39:5d:ae:6e:f2:8a:bf:61:ed:9d:01:0d: c5:34:5d:8b:be:da:22:3a:bd:9b:5c:03:9e:cc:8a:cf:5d:86: ff:66:7a:bf:78:d7:8d:7c:8d:b1:1b:f7:af:83:e8:d3:36:e1: 31:64:ce:3c:6f:a9:7b:2f:70:4e:d5:77:35:22:ca:7e:e0:e7: 29:ba:c6:9c:b5:43:74:f6:45:42:e5:67:2f:2d:1d:d4:d3:cc: 0a:98:2c:75:15:32:1e:0d:68:98:71:f9:1d:aa:14:0d:31:ab: 93:a3:5d:74:c1:3c:4d:a9:55:40:85:41:b8:05:55:6b:86:e1: 60:a3:7d:e4:13:76:f0:d3:b5:c1:89:7e:32:ca:7e:da:7a:13: 96:d5:29:aa:a8:9e:5b:b2:cf:63:38:de:26:72:22:ea:20:4f: 70:44:67:74:be:59:3f:c4:8a:0c:3b:d7:79:f4:02:18:9a:f1: fd:61:7f:cd:59:d6:f7:8b:70:32:2b:96:1f:8f:40:e1:7f:af: d6:21:d9:d9:9c:7d:c9:36:25:3c:fa:85:ee:8b:ef:b3:ad:b9: d6:62:b8:39:fd:39:c5:38:6e:5a:80:61:15:6a:ec:02:e2:81: 13:e4:e4:5c -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISAZt+N+/E4Y4UJuw+sflp4PfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmE3NTgyNmU5OTEyMjVhNDI5ZmY4YTFlN2ZmZGM4MDQ2NjQyMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEPR2Hy6JYKhesweyY3dkdkDD7qZ d9Ex6h9NojBQwtMMcmxNbz4kaAUV80rEopIIEtoCsNXg8hCSIUq6EqwpcLtjyq3s z4sskv9daLjrIrUsaqjT5Qm5eEC0EHoNxc8jE/R6YM2V8Xwy7V1aN8tMFbsiQy9l ddPPdOfRDVhg0BcHgqXqryO5P9xlplQMHJ2+bh4XRcGVSdhf0iyGBDIY7/l3uFfl FR0DceC/4+adIXYqTmQSwZdix45aZ4+FTMcYGleUZjKmrnl1RVlnkaF1caSXY9kO drNCLW3s1z9ltWvCFLZiXEyOOSFA4nnwLsToroHV977MC30SvdgKINN2BQIDAQAB o4IDeTCCA3UwHQYDVR0OBBYEFHanWCbpkSJaQp/4oef/3IBGZCDfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzFkMzNj YS04ZDFjLTQ5YzAtYmU5Ny1hZDhmYmVhYThkZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMWQzM2Nh LThkMWMtNDljMC1iZTk3LWFkOGZiZWFhOGRkOS8xL2RxZFlKdW1SSWxwQ25faWg1 X19jZ0Vaa0lOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHmBggrBgEF BQcBBwEB/wSB1jCB0zCBuAQCAAEwgbEDBANU9kADAwCBGgMDAIHpAwMAifsDAwGZ YDAMAwQAwCOVAwQBwCOYAwQAwCnjMAwDBADAKj8DBADAKkAwCwMDAsAsAwQAwCwo AwQBwDYiAwQDwEPIAwQAwEyUAwQAwEzxMAwDBADATPUDBADATPgwDAMEAMBYYQME AMBYYgMEAMBYbDAMAwQBwGaSAwQBwGawMAwDBADAa+sDBADAa+wDBADAbbEDBALC cWADBAXULMAwFgQCAAIwEAMHACABBnwGHAMFACoD24AwKwYIKwYBBQUHAQgBAf8E HDAaoBgwFgICFX0CAiM8AgJwKgIDAO2YAgMDEO8wDQYJKoZIhvcNAQELBQADggEB AIKgzDNZizx4HyzN5oefVuVBQ8qWe+fGAjldrm7yir9h7Z0BDcU0XYu+2iI6vZtc A57Mis9dhv9mer941418jbEb96+D6NM24TFkzjxvqXsvcE7VdzUiyn7g5ym6xpy1 Q3T2RULlZy8tHdTTzAqYLHUVMh4NaJhx+R2qFA0xq5OjXXTBPE2pVUCFQbgFVWuG 4WCjfeQTdvDTtcGJfjLKftp6E5bVKaqonluyz2M43iZyIuogT3BEZ3S+WT/Eigw7 13n0Ahia8f1hf81Z1veLcDIrlh+PQOF/r9Yh2dmcfck2JTz6he6L77OtudZiuDn9 OcU4blqAYRVq7ALigRPk5Fw= -----END CERTIFICATE-----Generated at Mon Jan 12 05:35:55 2026 by rpki-client