This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer File: p0xnBuP769_xRqihTsKjKEqSumI.cer (raw, json) Hash identifier: 0m48C5vidBZiOWdQ/Mm3Hr4O6t3xU7A7u7S3ACB3zSk= Subject key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73E615751C4F340677DE0C3F8704D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1836 IP: 80.86.192.0/20 IP: 80.253.80.0/21 IP: 80.254.160.0/19 IP: 81.6.0.0/19 IP: 81.6.48.0/20 IP: 81.221.0.0/16 IP: 82.195.224.0/19 IP: 146.228.0.0/16 IP: 193.72.0.0 -- 193.72.78.255 IP: 193.72.81.0 -- 193.72.143.255 IP: 193.72.148.0 -- 193.72.165.255 IP: 193.72.167.0 -- 193.72.185.255 IP: 193.72.187.0 -- 193.72.215.255 IP: 193.72.217.0 -- 193.73.105.255 IP: 193.73.108.0 -- 193.73.112.255 IP: 193.73.115.0 -- 193.73.121.255 IP: 193.73.123.0 -- 193.73.124.255 IP: 193.73.126.0 -- 193.73.207.255 IP: 193.73.209.0 -- 193.73.210.255 IP: 193.73.212.0 -- 193.73.237.255 IP: 193.73.239.0 -- 193.73.241.255 IP: 193.73.244.0 -- 193.73.249.255 IP: 193.73.252.0/22 IP: 193.193.128.0/19 IP: 194.191.0.0/16 IP: 195.48.0.0 -- 195.49.127.255 IP: 195.130.160.0/19 IP: 212.59.128.0/18 IP: 2001:1b50::/29 IP: 2a01:2a8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3e:61:57:51:c4:f3:40:67:7d:e0:c3:f8:70:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8c:ba:6a:bc:bf:98:d4:52:7b:56:d2:83:e2: 91:64:78:40:18:19:aa:d4:57:16:4e:6d:5e:f4:3f: 24:21:9a:d1:98:87:30:91:8b:4b:ba:0a:6d:4a:96: 3a:a9:ac:11:4e:0a:d9:c8:4a:d5:31:f9:bd:b2:02: 1a:f1:f2:d3:d9:5e:7f:07:9c:e9:ed:75:0e:c8:be: bd:3b:ca:f5:4e:f3:97:a8:20:ea:fb:bc:6b:1c:42: d8:51:a6:23:c3:b6:64:d0:22:27:4e:02:c2:85:88: fc:c7:de:8e:f7:c0:30:0a:d0:00:6a:96:37:97:ab: 63:70:f8:03:00:00:3f:bd:bc:25:a5:3b:e6:20:6a: ea:37:3d:68:4b:0b:53:e3:3d:5b:bf:ce:19:8b:e2: 36:7f:59:b6:ed:e9:17:5a:49:b4:02:d6:9c:7e:df: 16:f2:2d:c6:b6:11:a0:25:21:87:d7:59:b0:60:bc: 2f:33:53:30:fa:a6:e7:00:67:2c:cc:05:33:8b:3c: 33:50:59:14:20:b2:9c:4c:45:ed:7b:c7:3c:1a:7e: a2:96:53:45:b2:98:3d:df:6d:41:70:f2:0e:14:3f: c1:0b:ed:bb:34:cf:31:04:e6:36:07:8a:03:81:65: 08:1b:96:95:79:fd:33:17:13:21:31:bb:92:76:8c: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.192.0/20 80.253.80.0/21 80.254.160.0/19 81.6.0.0/19 81.6.48.0/20 81.221.0.0/16 82.195.224.0/19 146.228.0.0/16 193.72.0.0-193.72.78.255 193.72.81.0-193.72.143.255 193.72.148.0-193.72.165.255 193.72.167.0-193.72.185.255 193.72.187.0-193.72.215.255 193.72.217.0-193.73.105.255 193.73.108.0-193.73.112.255 193.73.115.0-193.73.121.255 193.73.123.0-193.73.124.255 193.73.126.0-193.73.207.255 193.73.209.0-193.73.210.255 193.73.212.0-193.73.237.255 193.73.239.0-193.73.241.255 193.73.244.0-193.73.249.255 193.73.252.0/22 193.193.128.0/19 194.191.0.0/16 195.48.0.0-195.49.127.255 195.130.160.0/19 212.59.128.0/18 IPv6: 2001:1b50::/29 2a01:2a8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1836 Signature Algorithm: sha256WithRSAEncryption 8f:1b:d2:80:5b:99:9e:6e:8a:44:b9:7c:02:6d:d2:3e:2f:90: 50:d6:f2:12:00:d0:bb:96:7d:f6:cb:43:c4:72:d2:9b:f7:34: 7b:2f:83:86:7a:89:1c:88:b4:d0:5a:84:88:5b:d8:dd:0d:72: ae:ad:2c:12:64:1d:59:6b:23:b4:6e:0e:b1:78:38:37:3d:5b: 4b:fa:99:2a:f5:95:b2:ae:94:77:96:83:09:ed:70:0e:81:11: 1c:c9:b2:35:96:fd:4e:54:10:90:92:c9:4e:e1:6c:be:6e:ed: 73:8f:bb:16:95:3c:75:dd:d4:bd:e5:99:5e:6b:dd:ef:a0:a4: c1:0b:a9:e4:bd:e0:3f:78:ad:07:03:3d:f9:ff:a3:e8:61:0b: 2a:91:a1:0b:48:9f:8a:4f:dc:b2:1b:72:48:08:b8:67:66:94: 2d:75:2c:7e:1b:ac:e4:89:3f:cf:5d:ad:9a:c6:1f:25:df:73: d2:4e:03:aa:ed:19:7f:5d:dc:bb:69:3a:ce:42:e1:10:17:5d: 54:d8:61:6e:74:cb:d3:f5:18:95:e4:4a:71:4d:11:eb:84:b2: 5d:fc:ec:b1:84:85:18:32:71:2e:1a:40:7b:73:5b:c1:fb:eb: 2d:d1:9f:de:cf:56:3d:eb:cb:94:f7:c3:50:e6:f7:bf:79:4c: d7:bf:91:61 -----BEGIN CERTIFICATE----- MIIGyDCCBbCgAwIBAgISAZt3xz5hV1HE80BnfeDD+HBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzRjNjcwNmUzZmJlYmRmZjE0NmE4YTE0ZWMyYTMyODRhOTJiYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Yy6ary/mNRSe1bSg+KRZHhAGBmq 1FcWTm1e9D8kIZrRmIcwkYtLugptSpY6qawRTgrZyErVMfm9sgIa8fLT2V5/B5zp 7XUOyL69O8r1TvOXqCDq+7xrHELYUaYjw7Zk0CInTgLChYj8x96O98AwCtAAapY3 l6tjcPgDAAA/vbwlpTvmIGrqNz1oSwtT4z1bv84Zi+I2f1m27ekXWkm0Atacft8W 8i3GthGgJSGH11mwYLwvM1Mw+qbnAGcszAUzizwzUFkUILKcTEXte8c8Gn6illNF spg9321BcPIOFD/BC+27NM8xBOY2B4oDgWUIG5aVef0zFxMhMbuSdowwnQIDAQAB o4ID1DCCA9AwHQYDVR0OBBYEFKdMZwbj++vf8UaooU7CoyhKkrpiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2EwYzQ0 NC05Nzk2LTRmMDYtODNmMi1hYTc4OGE0MjBhZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYTBjNDQ0 LTk3OTYtNGYwNi04M2YyLWFhNzg4YTQyMGFlYy8xL3AweG5CdVA3NjlfeFJxaWhU c0tqS0VxU3VtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBUgYIKwYB BQUHAQcBAf8EggFBMIIBPTCCASMEAgABMIIBGwMEBFBWwAMEA1D9UAMEBVD+oAME BVEGAAMEBFEGMAMDAFHdAwQFUsPgAwMAkuQwCwMDA8FIAwQAwUhOMAwDBADBSFED BATBSIAwDAMEAsFIlAMEAcFIpDAMAwQAwUinAwQBwUi4MAwDBADBSLsDBAPBSNAw DAMEAMFI2QMEAcFJaDAMAwQCwUlsAwQAwUlwMAwDBADBSXMDBAHBSXgwDAMEAMFJ ewMEAMFJfDAMAwQBwUl+AwQEwUnAMAwDBADBSdEDBADBSdIwDAMEAsFJ1AMEAcFJ 7DAMAwQAwUnvAwQBwUnwMAwDBALBSfQDBAHBSfgDBALBSfwDBAXBwYADAwDCvzAL AwMEwzADBAfDMQADBAXDgqADBAbUO4AwFAQCAAIwDgMFAyABG1ADBQMqAQKoMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAgcsMA0GCSqGSIb3DQEBCwUAA4IBAQCPG9KA W5mebopEuXwCbdI+L5BQ1vISANC7ln32y0PEctKb9zR7L4OGeokciLTQWoSIW9jd DXKurSwSZB1ZayO0bg6xeDg3PVtL+pkq9ZWyrpR3loMJ7XAOgREcybI1lv1OVBCQ kslO4Wy+bu1zj7sWlTx13dS95Zlea93voKTBC6nkveA/eK0HAz35/6PoYQsqkaEL SJ+KT9yyG3JICLhnZpQtdSx+G6zkiT/PXa2axh8l33PSTgOq7Rl/Xdy7aTrOQuEQ F11U2GFudMvT9RiV5EpxTRHrhLJd/OyxhIUYMnEuGkB7c1vB++st0Z/ez1Y968uU 98NQ5ve/eUzXv5Fh -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:09 2026 by rpki-client