This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer (raw, json) Hash identifier: TpKizxpoixqH/zOV5voCSJXUMNu84VtrYZ5DKEjHaHI= Subject key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834583718EF0E6A64C552460F464E0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12321 AS: 15616 AS: 15704 IP: 31.222.80.0/20 IP: 46.102.103.0/24 IP: 66.81.160.0/19 IP: 67.218.224.0/19 IP: 77.241.48.0/20 IP: 78.30.0.0/18 IP: 81.0.0.0/18 IP: 82.213.192.0/18 IP: 83.138.40.0/21 IP: 84.39.176.0/21 IP: 85.31.128.0/21 IP: 85.187.52.0/22 IP: 85.235.68.0/22 IP: 85.239.128.0/20 IP: 87.124.128.0/18 IP: 89.35.62.0/23 IP: 89.39.32.0/19 IP: 91.106.16.0/21 IP: 91.194.62.0/23 IP: 91.242.152.0/21 IP: 92.114.6.0/24 IP: 93.115.37.0/24 IP: 93.115.128.0/21 IP: 93.115.152.0/24 IP: 93.115.202.0/24 IP: 93.115.242.0/24 IP: 93.176.128.0/18 IP: 93.177.120.0/22 IP: 94.73.32.0/19 IP: 119.12.224.0/19 IP: 137.59.58.0/24 IP: 170.253.0.0/18 IP: 176.222.64.0/19 IP: 178.218.194.0/24 IP: 181.41.128.0/21 IP: 185.79.20.0/22 IP: 185.145.64.0/22 IP: 185.146.56.0/22 IP: 185.153.164.0/22 IP: 185.176.4.0/22 IP: 185.197.240.0/22 IP: 185.227.212.0/22 IP: 185.228.152.0/22 IP: 185.252.12.0/22 IP: 188.65.88.0/21 IP: 188.208.219.0/24 IP: 188.212.23.0/24 IP: 193.17.66.0/24 IP: 193.53.160.0/22 IP: 193.177.208.0/22 IP: 195.160.224.0/22 IP: 202.4.187.0/24 IP: 206.204.128.0/19 IP: 207.188.128.0/18 IP: 212.7.32.0/19 IP: 212.14.96.0/19 IP: 212.166.64.0/19 IP: 212.230.0.0/15 IP: 213.94.0.0/18 IP: 213.129.160.0/19 IP: 213.177.192.0/19 IP: 217.113.240.0/20 IP: 2a00:d100::/29 IP: 2a01:8480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:58:37:18:ef:0e:6a:64:c5:52:46:0f:46:4e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d0e763f935c171694f172056eb44209db2e2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:67:85:3a:02:9a:55:0a:a2:23:ef:71:aa: 10:86:36:f2:d8:1c:fb:9c:44:03:e8:a8:51:b7:4f: 43:13:93:e8:78:04:79:76:cb:2f:40:5b:44:b1:34: f1:55:2b:99:e9:15:45:ed:c7:05:35:fc:66:5a:b5: 9c:0e:84:9f:0c:18:8b:0c:6b:4f:4a:4d:ff:1e:da: 16:0d:ac:fe:ab:01:0d:06:e5:32:e1:5d:a5:32:d5: bb:6b:9d:68:7c:f7:5d:d3:6d:82:63:93:85:4e:01: 52:ef:ef:88:50:62:9f:ff:7e:46:71:9f:58:ed:e9: 6c:e3:05:3e:1d:e6:cc:c6:db:75:01:e7:72:1b:d6: 5c:56:0f:b5:4d:5f:02:9a:e0:f0:b6:35:7d:ef:16: 62:15:11:31:1d:f4:c4:61:57:bb:c8:6a:63:78:ae: 8a:23:28:08:a7:03:6d:60:1c:19:27:8d:61:9b:73: fb:29:9c:18:a0:95:32:19:c3:f5:bf:ba:b6:03:77: a7:4c:91:ab:47:f5:b0:79:44:02:cb:4c:d3:45:6d: 98:2a:4c:7e:26:e8:a8:da:99:52:f5:73:60:e8:28: 0f:ca:2b:52:dd:6a:f3:e1:52:38:68:ac:b1:57:f2: b4:c1:ba:8f:07:7f:18:0b:5a:b0:ea:ce:6f:99:fb: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.80.0/20 46.102.103.0/24 66.81.160.0/19 67.218.224.0/19 77.241.48.0/20 78.30.0.0/18 81.0.0.0/18 82.213.192.0/18 83.138.40.0/21 84.39.176.0/21 85.31.128.0/21 85.187.52.0/22 85.235.68.0/22 85.239.128.0/20 87.124.128.0/18 89.35.62.0/23 89.39.32.0/19 91.106.16.0/21 91.194.62.0/23 91.242.152.0/21 92.114.6.0/24 93.115.37.0/24 93.115.128.0/21 93.115.152.0/24 93.115.202.0/24 93.115.242.0/24 93.176.128.0/18 93.177.120.0/22 94.73.32.0/19 119.12.224.0/19 137.59.58.0/24 170.253.0.0/18 176.222.64.0/19 178.218.194.0/24 181.41.128.0/21 185.79.20.0/22 185.145.64.0/22 185.146.56.0/22 185.153.164.0/22 185.176.4.0/22 185.197.240.0/22 185.227.212.0/22 185.228.152.0/22 185.252.12.0/22 188.65.88.0/21 188.208.219.0/24 188.212.23.0/24 193.17.66.0/24 193.53.160.0/22 193.177.208.0/22 195.160.224.0/22 202.4.187.0/24 206.204.128.0/19 207.188.128.0/18 212.7.32.0/19 212.14.96.0/19 212.166.64.0/19 212.230.0.0/15 213.94.0.0/18 213.129.160.0/19 213.177.192.0/19 217.113.240.0/20 IPv6: 2a00:d100::/29 2a01:8480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12321 15616 15704 Signature Algorithm: sha256WithRSAEncryption 42:7b:80:95:f8:fc:45:1c:a5:f0:32:79:d6:e9:5f:4e:25:1a: 95:76:57:2e:56:21:a4:84:ed:2c:9a:b8:27:e5:9f:da:c1:13: f1:65:cd:0d:4d:46:72:d5:bc:18:43:dd:38:f2:de:bf:b1:33: 5d:6b:42:04:66:6e:1a:27:07:fc:9c:6f:99:27:98:79:f6:a4: 3d:04:b0:7a:c1:3f:da:13:8f:52:ec:a8:17:a0:c3:62:65:6c: 4a:58:6a:b2:dd:a7:3b:fc:25:b9:9c:a3:e5:d8:5b:3a:bc:03: d3:c5:05:c0:0a:8b:8b:5f:b9:98:e7:25:f6:9b:a4:fc:04:fc: da:1c:d9:71:e7:48:42:66:5f:cf:c2:f8:2d:48:96:a9:5c:50: 59:85:71:eb:ee:99:9e:ee:6e:9b:28:13:10:63:19:77:ad:b8: d3:1f:86:84:8c:be:11:3c:c8:11:8e:86:35:46:59:66:43:99: d3:a2:1b:ea:33:9c:04:1d:64:fc:b9:b7:f8:b2:cb:0d:cc:a4: f1:3b:75:8a:84:58:03:33:d0:19:77:20:86:96:3a:e4:2b:35: 4e:e1:35:3f:f0:1a:db:f1:5d:3b:a0:d8:96:6a:aa:f7:69:1f: 56:ef:c8:ef:c6:b2:97:2a:b3:89:34:ba:49:e4:f8:15:de:05: 52:d6:af:0c -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgISAZt4NFg3GO8OamTFUkYPRk4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQwZTc2M2Y5MzVjMTcxNjk0ZjE3MjA1NmViNDQyMDlkYjJlMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUNnhToCmlUKoiPvcaoQhjby2Bz7 nEQD6KhRt09DE5PoeAR5dssvQFtEsTTxVSuZ6RVF7ccFNfxmWrWcDoSfDBiLDGtP Sk3/HtoWDaz+qwENBuUy4V2lMtW7a51ofPdd022CY5OFTgFS7++IUGKf/35GcZ9Y 7els4wU+HebMxtt1AedyG9ZcVg+1TV8CmuDwtjV97xZiFRExHfTEYVe7yGpjeK6K IygIpwNtYBwZJ41hm3P7KZwYoJUyGcP1v7q2A3enTJGrR/WweUQCy0zTRW2YKkx+ Juio2plS9XNg6CgPyitS3Wrz4VI4aKyxV/K0wbqPB38YC1qw6s5vmfsCOQIDAQAB o4IENDCCBDAwHQYDVR0OBBYEFIXQ52P5NcFxaU8XIFbrRCCdsuLNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzc0NjQx MC0wMjZiLTQ1YzktODFjZC1mMTI4MzVmMDI0N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNzQ2NDEw LTAyNmItNDVjOS04MWNkLWYxMjgzNWYwMjQ3Yi8xL2hkRG5ZX2sxd1hGcFR4Y2dW dXRFSUoyeTRzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBqgYIKwYB BQUHAQcBAf8EggGZMIIBlTCCAXsEAgABMIIBcwMEBB/eUAMEAC5mZwMEBUJRoAME BUPa4AMEBE3xMAMEBk4eAAMEBlEAAAMEBlLVwAMEA1OKKAMEA1QnsAMEA1UfgAME AlW7NAMEAlXrRAMEBFXvgAMEBld8gAMEAVkjPgMEBVknIAMEA1tqEAMEAVvCPgME A1vymAMEAFxyBgMEAF1zJQMEA11zgAMEAF1zmAMEAF1zygMEAF1z8gMEBl2wgAME Al2xeAMEBV5JIAMEBXcM4AMEAIk7OgMEBqr9AAMEBbDeQAMEALLawgMEA7UpgAME ArlPFAMEArmRQAMEArmSOAMEArmZpAMEArmwBAMEArnF8AMEArnj1AMEArnkmAME Arn8DAMEA7xBWAMEALzQ2wMEALzUFwMEAMERQgMEAsE1oAMEAsGx0AMEAsOg4AME AMoEuwMEBc7MgAMEBs+8gAMEBdQHIAMEBdQOYAMEBdSmQAMDAdTmAwQG1V4AAwQF 1YGgAwQF1bHAAwQE2XHwMBQEAgACMA4DBQMqANEAAwUDKgGEgDAhBggrBgEFBQcB CAEB/wQSMBCgDjAMAgIwIQICPQACAj1YMA0GCSqGSIb3DQEBCwUAA4IBAQBCe4CV +PxFHKXwMnnW6V9OJRqVdlcuViGkhO0smrgn5Z/awRPxZc0NTUZy1bwYQ9048t6/ sTNda0IEZm4aJwf8nG+ZJ5h59qQ9BLB6wT/aE49S7KgXoMNiZWxKWGqy3ac7/CW5 nKPl2Fs6vAPTxQXACouLX7mY5yX2m6T8BPzaHNlx50hCZl/PwvgtSJapXFBZhXHr 7pme7m6bKBMQYxl3rbjTH4aEjL4RPMgRjoY1RllmQ5nTohvqM5wEHWT8ubf4sssN zKTxO3WKhFgDM9AZdyCGljrkKzVO4TU/8Brb8V07oNiWaqr3aR9W78jvxrKXKrOJ NLpJ5PgV3gVS1q8M -----END CERTIFICATE-----Generated at Mon Jan 12 05:35:47 2026 by rpki-client