This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer File: w16sZOpIAuaCRob3wNIB8shcsqo.cer (raw, json) Hash identifier: yRpXMp+8JifP3Mbmgx17+UiA63fe3Om/CO8XCMAb5kQ= Subject key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AFEE4F758F09F54B7E061FF7242D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8877 IP: 5.104.160.0/19 IP: 46.253.134.0/24 IP: 62.68.70.0/24 IP: 77.76.0.0/20 IP: 78.128.0.0/19 IP: 78.128.36.0 -- 78.128.43.255 IP: 78.128.52.0 -- 78.128.63.255 IP: 78.128.66.0/23 IP: 78.128.72.0 -- 78.128.127.255 IP: 78.142.0.0/18 IP: 79.124.0.0 -- 79.124.84.255 IP: 79.124.86.0 -- 79.124.95.255 IP: 80.72.78.0/24 IP: 80.72.81.0/24 IP: 80.72.84.0 -- 80.72.91.255 IP: 82.118.224.0/19 IP: 83.222.184.0/21 IP: 84.201.224.0/20 IP: 87.246.2.0/23 IP: 87.246.24.0/24 IP: 91.92.59.0/24 IP: 91.148.128.0/18 IP: 91.191.209.0/24 IP: 91.191.215.0 -- 91.191.217.255 IP: 91.191.219.0 -- 91.191.223.255 IP: 93.92.16.0/24 IP: 94.72.136.0 -- 94.72.159.255 IP: 130.185.192.0 -- 130.185.251.255 IP: 130.185.253.0 -- 130.185.255.255 IP: 176.241.176.0/21 IP: 178.132.80.0/21 IP: 185.43.56.0/23 IP: 185.81.120.0/22 IP: 185.148.160.0/22 IP: 185.197.152.0/22 IP: 185.232.156.0/22 IP: 193.24.240.0/22 IP: 193.200.14.0/23 IP: 212.5.32.0/21 IP: 217.174.144.0/20 IP: 2a01:8740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fe:e4:f7:58:f0:9f:54:b7:e0:61:ff:72:42:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:0f:fa:81:72:4b:06:e2:6d:ba:6b:ca:2e: a3:48:62:37:0a:1d:56:29:e7:2b:fd:6d:4c:58:81: 09:04:ae:a9:eb:36:5c:aa:a8:de:49:d0:32:10:1d: f0:6a:bc:6b:64:d1:e3:c3:b8:63:2a:e4:06:2e:4b: 6e:bf:ed:b4:4f:c3:85:47:70:40:bb:61:ae:e5:f6: 50:6c:75:2b:cd:0e:dc:1d:f2:cb:10:8a:dc:e2:a6: a5:da:fa:ad:12:4a:9e:42:f3:29:1d:41:51:6b:ea: 96:6e:63:18:5d:47:4a:96:da:69:31:6b:1e:93:b3: fb:39:c6:62:fe:ab:7e:d0:d9:10:ce:aa:ec:78:2c: bb:f2:9a:ee:33:81:7e:8d:a3:65:01:da:c8:ac:df: 1c:79:df:cb:bf:94:eb:48:6b:9d:78:5d:e5:4d:a8: 77:74:62:7c:45:a2:82:21:ac:35:30:76:b4:e2:04: 32:20:f3:1b:65:ba:96:6b:6e:c6:d5:03:6b:4b:ff: d7:7b:6f:fe:a8:a8:b8:ae:68:56:c0:79:75:45:26: 02:17:2a:0d:64:44:bf:88:60:83:11:8c:28:c8:6c: 3a:e9:ad:05:8e:b9:dd:b1:32:ea:04:39:6e:67:bd: f3:ed:14:c1:e6:1c:2a:70:10:19:d6:d6:17:82:ce: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.160.0/19 46.253.134.0/24 62.68.70.0/24 77.76.0.0/20 78.128.0.0/19 78.128.36.0-78.128.43.255 78.128.52.0-78.128.63.255 78.128.66.0/23 78.128.72.0-78.128.127.255 78.142.0.0/18 79.124.0.0-79.124.84.255 79.124.86.0-79.124.95.255 80.72.78.0/24 80.72.81.0/24 80.72.84.0-80.72.91.255 82.118.224.0/19 83.222.184.0/21 84.201.224.0/20 87.246.2.0/23 87.246.24.0/24 91.92.59.0/24 91.148.128.0/18 91.191.209.0/24 91.191.215.0-91.191.217.255 91.191.219.0-91.191.223.255 93.92.16.0/24 94.72.136.0-94.72.159.255 130.185.192.0-130.185.251.255 130.185.253.0-130.185.255.255 176.241.176.0/21 178.132.80.0/21 185.43.56.0/23 185.81.120.0/22 185.148.160.0/22 185.197.152.0/22 185.232.156.0/22 193.24.240.0/22 193.200.14.0/23 212.5.32.0/21 217.174.144.0/20 IPv6: 2a01:8740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8877 Signature Algorithm: sha256WithRSAEncryption 65:a1:94:9f:b5:ae:6a:3a:0a:43:1b:1a:08:bd:64:0f:40:42: 4b:fe:27:5f:26:69:25:d8:d8:87:18:87:c2:6f:69:e3:73:6f: 58:8f:55:b1:5d:10:36:47:5a:86:17:b4:de:6c:55:ad:51:93: 4e:13:df:70:4f:d9:6b:81:a7:36:dc:8f:e3:6e:ad:f4:6b:9b: e5:9c:67:ec:29:f9:b4:90:d8:81:00:f8:57:c9:16:8a:9a:83: cf:0c:52:b5:15:de:36:17:54:a0:45:30:da:c4:ee:a1:36:46: 21:65:fa:87:04:db:b8:74:e8:33:1c:03:ca:a5:ad:48:2c:9b: 2d:11:97:96:67:62:5a:3d:70:37:d3:7c:d5:bd:44:f4:51:37: 06:81:3e:8c:09:bb:e5:95:0c:a1:c8:16:ff:a5:31:1b:80:ee: 09:8e:d9:05:fb:6a:20:90:67:35:05:cd:14:c0:43:6c:64:f8: c1:1d:be:4d:c0:e6:8c:02:19:35:72:c1:35:9e:95:c9:77:cc: 4e:6d:94:9f:8b:18:eb:78:c3:0c:9e:47:94:5e:a5:e7:55:1d: 98:cf:ae:65:2a:29:18:a2:af:23:2d:85:b8:ce:ec:83:b4:d3: 18:2d:05:df:2f:fa:5a:05:c0:7f:49:82:53:48:9b:a4:cb:f4: 21:1c:0e:07 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgISAZt9Wv7k91jwn1S34GH/ckLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVlYWM2NGVhNDgwMmU2ODI0Njg2ZjdjMGQyMDFmMmM4NWNiMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz8P+oFySwbibbpryi6jSGI3Ch1W Kecr/W1MWIEJBK6p6zZcqqjeSdAyEB3warxrZNHjw7hjKuQGLktuv+20T8OFR3BA u2Gu5fZQbHUrzQ7cHfLLEIrc4qal2vqtEkqeQvMpHUFRa+qWbmMYXUdKltppMWse k7P7OcZi/qt+0NkQzqrseCy78pruM4F+jaNlAdrIrN8ced/Lv5TrSGudeF3lTah3 dGJ8RaKCIaw1MHa04gQyIPMbZbqWa27G1QNrS//Xe2/+qKi4rmhWwHl1RSYCFyoN ZES/iGCDEYwoyGw66a0FjrndsTLqBDluZ73z7RTB5hwqcBAZ1tYXgs4SKwIDAQAB o4ID+DCCA/QwHQYDVR0OBBYEFMNerGTqSALmgkaG98DSAfLIXLKqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2NjZGQ4 Yi03NzIwLTRkZTAtOGM0My1kYWNiNWYzNTZlYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvY2NkZDhi LTc3MjAtNGRlMC04YzQzLWRhY2I1ZjM1NmVhMy8xL3cxNnNaT3BJQXVhQ1JvYjN3 TklCOHNoY3Nxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBdgYIKwYB BQUHAQcBAf8EggFlMIIBYTCCAU4EAgABMIIBRgMEBQVooAMEAC79hgMEAD5ERgME BE1MAAMEBU6AADAMAwQCToAkAwQCToAoMAwDBAJOgDQDBAZOgAADBAFOgEIwDAME A06ASAMEB06AAAMEBk6OADALAwMCT3wDBABPfFQwDAMEAU98VgMEBU98QAMEAFBI TgMEAFBIUTAMAwQCUEhUAwQCUEhYAwQFUnbgAwQDU964AwQEVMngAwQBV/YCAwQA V/YYAwQAW1w7AwQGW5SAAwQAW7/RMAwDBABbv9cDBAFbv9gwDAMEAFu/2wMEBVu/ wAMEAF1cEDAMAwQDXkiIAwQFXkiAMAwDBAaCucADBAKCufgwCwMEAIK5/QMDAYK4 AwQDsPGwAwQDsoRQAwQBuSs4AwQCuVF4AwQCuZSgAwQCucWYAwQCueicAwQCwRjw AwQBwcgOAwQD1AUgAwQE2a6QMA0EAgACMAcDBQAqAYdAMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAiKtMA0GCSqGSIb3DQEBCwUAA4IBAQBloZSfta5qOgpDGxoIvWQP QEJL/idfJmkl2NiHGIfCb2njc29Yj1WxXRA2R1qGF7TebFWtUZNOE99wT9lrgac2 3I/jbq30a5vlnGfsKfm0kNiBAPhXyRaKmoPPDFK1Fd42F1SgRTDaxO6hNkYhZfqH BNu4dOgzHAPKpa1ILJstEZeWZ2JaPXA303zVvUT0UTcGgT6MCbvllQyhyBb/pTEb gO4JjtkF+2ogkGc1Bc0UwENsZPjBHb5NwOaMAhk1csE1npXJd8xObZSfixjreMMM nkeUXqXnVR2Yz65lKikYoq8jLYW4zuyDtNMYLQXfL/paBcB/SYJTSJuky/QhHA4H -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:07 2026 by rpki-client