This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer File: qYB_bVDZfZcdzy4uUGTpuQets-w.cer (raw, json) Hash identifier: 3mIE8hBeKyjcL2PRhJelNKNflXW0exFz+t75feDc2tI= Subject key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B35E47F7224A69FE17CF034FA2EEA18EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 09:15:25 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 5604 AS: 6728 AS: 9105 AS: 12708 AS: 13285 AS: 25346 AS: 31487 AS: 60257 AS: 199164 AS: 203056 IP: 2.96.0.0/13 IP: 62.3.192.0/18 IP: 62.24.128.0/17 IP: 62.241.160.0/19 IP: 78.144.0.0/13 IP: 79.77.0.0 -- 79.79.255.255 IP: 80.40.0.0/13 IP: 81.1.64.0/18 IP: 81.6.192.0/18 IP: 81.86.0.0/16 IP: 81.170.0.0/17 IP: 81.178.0.0/15 IP: 82.133.0.0/17 IP: 83.67.0.0/16 IP: 84.43.0.0/17 IP: 87.242.128.0/17 IP: 89.168.128.0/17 IP: 89.240.0.0/14 IP: 91.146.112.0/21 IP: 92.10.0.0/15 IP: 92.16.0.0/12 IP: 145.255.240.0/21 IP: 185.24.12.0/22 IP: 185.112.212.0/22 IP: 185.173.116.0 -- 185.173.123.255 IP: 185.175.48.0/22 IP: 185.175.144.0/22 IP: 193.218.99.0/24 IP: 194.106.32.0/19 IP: 194.247.224.0/19 IP: 195.112.0.0/18 IP: 195.137.0.0/17 IP: 195.149.0.0/18 IP: 212.1.128.0/19 IP: 212.67.96.0/19 IP: 212.74.96.0/19 IP: 212.139.0.0/16 IP: 212.159.128.0/18 IP: 213.78.0.0/16 IP: 217.8.0.0/19 IP: 217.68.128.0/20 IP: 2001:7e0::/32 IP: 2001:4a00::/27 IP: 2a00:4340::/32 IP: 2a0b:db00::/29 IP: 2a0b:e900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:e4:7f:72:24:a6:9f:e1:7c:f0:34:fa:2e:ea:18:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 09:15:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:4c:4c:e7:d0:b1:cd:a2:e0:bd:ef:40:90: be:fb:ce:9a:32:62:ae:2f:c1:74:fa:e3:1a:5d:78: a9:14:cd:e1:54:0f:9e:66:0d:19:45:4d:ca:80:d4: 69:2c:ed:c8:10:0d:89:a2:ea:00:4f:ef:bb:21:ec: cd:73:10:25:1a:19:4f:a9:97:6c:8c:4e:a5:46:21: 1c:3d:7b:d8:2d:90:9c:fc:ac:b1:23:62:67:fe:51: b2:d2:56:17:d4:79:3f:5e:f2:6c:dc:cc:21:c7:60: ad:33:7a:ae:ae:37:8a:c9:82:b8:91:b2:71:69:c0: d7:4f:f0:ff:08:18:e0:54:6e:12:c0:8e:65:8c:5e: d2:c3:81:bf:37:44:b6:b4:6a:fc:9f:d8:93:a7:4b: d6:57:f5:65:3b:7a:00:a3:a8:84:02:2f:f6:95:62: 09:82:ce:11:5c:95:ed:21:37:8d:2a:40:09:72:3a: 1c:84:54:46:79:e1:07:18:1b:c1:3b:46:ef:34:bf: fd:92:81:40:c2:7a:2f:50:38:96:0e:4e:0f:e4:99: ff:97:ad:20:8c:dd:d9:ad:61:ed:94:bd:15:80:60: 11:ae:94:50:2a:83:e5:93:34:4e:8d:9a:81:e2:ce: 99:f4:4c:e7:57:27:bf:e4:b9:9f:88:1f:c0:6d:04: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.3.192.0/18 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.6.192.0/18 81.86.0.0/16 81.170.0.0/17 81.178.0.0/15 82.133.0.0/17 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 91.146.112.0/21 92.10.0.0/15 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.112.212.0/22 185.173.116.0-185.173.123.255 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 217.8.0.0/19 217.68.128.0/20 IPv6: 2001:7e0::/32 2001:4a00::/27 2a00:4340::/32 2a0b:db00::/29 2a0b:e900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5604 6728 9105 12708 13285 25346 31487 60257 199164 203056 Signature Algorithm: sha256WithRSAEncryption 97:4f:fa:ae:a7:1b:62:c9:92:50:ed:d9:81:2a:52:1b:46:7f: ef:53:82:bb:e9:e2:59:9f:e5:da:96:fe:0c:0a:83:5f:04:1e: ef:75:af:50:16:f2:df:0d:f9:f3:ac:85:28:2d:02:54:e9:07: 2d:fc:fc:a2:09:29:a3:68:d8:13:41:e9:3b:dc:71:ec:cb:06: 2e:91:e3:3c:bf:47:3b:2c:47:3a:5c:a9:b1:d7:0e:90:b9:0d: 3f:99:f3:32:5d:a0:fa:82:32:6b:f6:75:52:a7:a2:db:b7:a6: 12:cf:b1:af:13:07:ee:a3:f1:b4:ff:ad:f2:e3:2d:64:07:a2: 20:38:9f:d7:c9:b4:b8:d8:a7:84:49:64:6a:59:8e:8a:11:e4: 95:7d:f4:99:e6:27:95:20:d2:2e:3f:cc:f0:c0:2a:fa:4a:bf: 15:79:c6:f6:54:b5:c6:de:3b:1d:f1:a4:fe:70:93:18:4b:7b: df:08:fa:f9:df:e2:12:28:d1:55:8c:6c:e8:41:18:21:f4:45: cc:35:83:70:9c:8a:3a:1e:8c:5c:d1:76:39:30:87:76:05:a7: 68:0a:1f:bd:a3:5b:f6:46:d7:c7:cf:d0:8a:e5:f5:9f:70:69: b0:9c:f8:81:43:e9:93:b0:7a:2e:61:e9:e5:78:43:63:7b:57: b9:7c:29:ff -----BEGIN CERTIFICATE----- MIIG4TCCBcmgAwIBAgISAZs15H9yJKaf4XzwNPou6hjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MDkxNTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTgwN2Y2ZDUwZDk3ZDk3MWRjZjJlMmU1MDY0ZTliOTA3YWRiM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cBMTOfQsc2i4L3vQJC++86aMmKu L8F0+uMaXXipFM3hVA+eZg0ZRU3KgNRpLO3IEA2JouoAT++7IezNcxAlGhlPqZds jE6lRiEcPXvYLZCc/KyxI2Jn/lGy0lYX1Hk/XvJs3Mwhx2CtM3qurjeKyYK4kbJx acDXT/D/CBjgVG4SwI5ljF7Sw4G/N0S2tGr8n9iTp0vWV/VlO3oAo6iEAi/2lWIJ gs4RXJXtITeNKkAJcjochFRGeeEHGBvBO0bvNL/9koFAwnovUDiWDk4P5Jn/l60g jN3ZrWHtlL0VgGARrpRQKoPlkzROjZqB4s6Z9EznVye/5LmfiB/AbQT8NQIDAQAB o4ID7TCCA+kwHQYDVR0OBBYEFKmAf21Q2X2XHc8uLlBk6bkHrbPsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2NhOWRi ZS0wMDk1LTQwZjMtYjkzMi0wZDhmN2RkOGNjZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvY2E5ZGJl LTAwOTUtNDBmMy1iOTMyLTBkOGY3ZGQ4Y2NlNi8xL3FZQl9iVkRaZlpjZHp5NHVV R1RwdVFldHMtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBRAYIKwYB BQUHAQcBAf8EggEzMIIBLzCCAQAEAgABMIH5AwMDAmADBAY+A8ADBAc+GIADBAU+ 8aADAwNOkDAKAwMAT00DAwRPQAMDA1AoAwQGUQFAAwQGUQbAAwMAUVYDBAdRqgAD AwFRsgMEB1KFAAMDAFNDAwQHVCsAAwQHV/KAAwQHWaiAAwMCWfADBANbknADAwFc CgMDBFwQAwQDkf/wAwQCuRgMAwQCuXDUMAwDBAK5rXQDBAK5rXgDBAK5rzADBAK5 r5ADBADB2mMDBAXCaiADBAXC9+ADBAbDcAADBAfDiQADBAbDlQADBAXUAYADBAXU Q2ADBAXUSmADAwDUiwMEBtSfgAMDANVOAwQF2QgAAwQE2USAMCkEAgACMCMDBQAg AQfgAwUFIAFKAAMFACoAQ0ADBQMqC9sAAwUDKgvpADBABggrBgEFBQcBCAEB/wQx MC+gLTArAgIV5AICGkgCAiORAgIxpAICM+UCAmMCAgJ6/wIDAOthAgMDCfwCAwMZ MDANBgkqhkiG9w0BAQsFAAOCAQEAl0/6rqcbYsmSUO3ZgSpSG0Z/71OCu+niWZ/l 2pb+DAqDXwQe73WvUBby3w3586yFKC0CVOkHLfz8ogkpo2jYE0HpO9xx7MsGLpHj PL9HOyxHOlypsdcOkLkNP5nzMl2g+oIya/Z1Uqei27emEs+xrxMH7qPxtP+t8uMt ZAeiIDif18m0uNinhElkalmOihHklX30meYnlSDSLj/M8MAq+kq/FXnG9lS1xt47 HfGk/nCTGEt73wj6+d/iEijRVYxs6EEYIfRFzDWDcJyKOh6MXNF2OTCHdgWnaAof vaNb9kbXx8/QiuX1n3BpsJz4gUPpk7B6LmHp5XhDY3tXuXwp/w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:57:34 2025 by rpki-client