This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.cer (raw, json) Hash identifier: S3zMU8rE16axHmL3EmwCTSIToT3hFJkyCR3dnll9Rug= Subject key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38CE7983551B8F77E841C6266F29F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59972 IP: 91.199.60.0/24 IP: 185.37.200.0/22 IP: 2a00:f020::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ce:79:83:55:1b:8f:77:e8:41:c6:26:6f:29:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32be982060a43734d0ad126ad46da2f395c9def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:57:f7:8e:d3:a9:7e:2a:83:da:2f:93:05: ef:d7:6e:d5:8e:ab:f5:00:42:9a:10:45:f8:bf:75: d5:12:6a:56:a7:a9:86:a0:ac:98:09:ba:ba:71:ca: 1e:d3:43:d8:68:85:4c:a9:db:d6:23:dc:6a:0b:8b: fc:9c:92:e4:4f:48:6c:e9:28:f5:4c:4a:2a:10:b5: 31:9a:e3:b5:85:da:66:2f:89:e2:cd:96:e6:32:39: bd:7b:47:56:d5:d8:08:fa:64:c9:1f:1b:4b:b5:24: 82:75:a2:cc:b3:81:13:13:8d:d6:b4:77:b1:24:70: 93:1c:5d:25:67:0e:c2:2c:09:59:4e:09:47:67:a2: 16:c2:ae:2a:65:0b:96:b1:a5:86:4d:6f:be:e4:e5: 12:11:a4:8c:bd:d5:37:8a:90:10:d4:9d:03:77:48: 61:17:a9:5a:e3:8a:0c:88:34:1d:a1:99:25:6a:42: 87:d7:2a:6f:55:bc:bc:15:3b:f9:16:69:cd:4c:ae: f2:34:d5:e1:c4:6f:20:75:02:78:5b:b8:7e:97:d7: 88:50:b1:53:b5:38:94:2e:1d:2b:8f:fa:ff:e9:29: 77:ed:e1:8b:84:f3:80:ec:ac:9c:e4:35:6f:87:8e: a6:bb:90:36:d8:e3:b0:5e:bf:1f:f1:e1:71:b5:24: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.60.0/24 185.37.200.0/22 IPv6: 2a00:f020::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59972 Signature Algorithm: sha256WithRSAEncryption 38:ee:09:a2:83:fd:f2:61:c6:11:20:78:5d:9f:97:09:07:cd: 26:66:48:3d:f5:d8:79:75:53:f8:b6:2b:ed:c3:e8:ad:e9:a0: 57:b5:dd:9b:f3:d4:1e:cc:06:58:97:96:6b:3e:d1:2c:19:79: e3:56:53:e5:23:e8:ea:a4:a9:33:b7:5b:3f:ce:56:bc:ab:3b: 40:d0:99:42:fd:45:fa:26:bd:62:87:34:45:e9:92:4d:ec:d6: 0d:08:81:3b:b8:65:c9:2f:ff:17:b4:5f:6b:46:eb:fa:81:c5: 12:2f:61:b2:d1:6c:a7:f0:c0:e4:d8:0a:ec:17:d2:d1:2d:6c: dd:58:44:2b:d3:94:24:54:bf:35:87:2a:1d:7a:4a:58:06:0b: f1:52:73:23:b5:11:2b:61:d7:67:14:7a:6b:e3:16:5d:b6:7a: 88:4c:4d:3a:ed:84:22:6d:23:a5:ba:ea:49:83:c6:63:9a:77: 19:14:3c:de:c1:88:24:5c:b1:ca:d8:d2:00:81:57:4d:a6:d9: 30:65:44:5f:0b:9e:9b:19:ca:77:47:9a:58:c1:29:b3:17:c0: 61:0f:e5:a3:77:d6:1b:10:59:0d:c1:11:e0:e7:10:8a:58:7c: c9:52:55:b2:13:cb:8f:be:83:e7:9b:e1:05:78:0d:2a:40:34: 1e:5f:22:d0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OM55g1Ubj3foQcYmbyn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzJiZTk4MjA2MGE0MzczNGQwYWQxMjZhZDQ2ZGEyZjM5NWM5ZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ZX947TqX4qg9ovkwXv127Vjqv1 AEKaEEX4v3XVEmpWp6mGoKyYCbq6ccoe00PYaIVMqdvWI9xqC4v8nJLkT0hs6Sj1 TEoqELUxmuO1hdpmL4nizZbmMjm9e0dW1dgI+mTJHxtLtSSCdaLMs4ETE43WtHex JHCTHF0lZw7CLAlZTglHZ6IWwq4qZQuWsaWGTW++5OUSEaSMvdU3ipAQ1J0Dd0hh F6la44oMiDQdoZklakKH1ypvVby8FTv5FmnNTK7yNNXhxG8gdQJ4W7h+l9eIULFT tTiULh0rj/r/6Sl37eGLhPOA7Kyc5DVvh46mu5A22OOwXr8f8eFxtSQixwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPMr6YIGCkNzTQrRJq1G2i85XJ3vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2RhM2Ix ZC03YWNmLTQ1MWYtYjY4Yi05OWJjYmU2ZDdmNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvZGEzYjFk LTdhY2YtNDUxZi1iNjhiLTk5YmNiZTZkN2Y2My8xLzh5dnBnZ1lLUTNOTkN0RW1y VWJhTHpsY25lOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW8c8AwQCuSXIMA0EAgACMAcDBQAqAPAgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDqRDANBgkqhkiG9w0BAQsFAAOCAQEAOO4J ooP98mHGESB4XZ+XCQfNJmZIPfXYeXVT+LYr7cPoremgV7Xdm/PUHswGWJeWaz7R LBl541ZT5SPo6qSpM7dbP85WvKs7QNCZQv1F+ia9Yoc0RemSTezWDQiBO7hlyS// F7Rfa0br+oHFEi9hstFsp/DA5NgK7BfS0S1s3VhEK9OUJFS/NYcqHXpKWAYL8VJz I7URK2HXZxR6a+MWXbZ6iExNOu2EIm0jpbrqSYPGY5p3GRQ83sGIJFyxytjSAIFX TabZMGVEXwuemxnKd0eaWMEpsxfAYQ/lo3fWGxBZDcER4OcQilh8yVJVshPLj76D 55vhBXgNKkA0Hl8i0A== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:57 2026 by rpki-client