This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer File: CvYXmN0YllwCevp_k64DD_Xh124.cer (raw, json) Hash identifier: kkI6uZu/8cRg5lnm+OVk0HhjZkbAF/z603+kYno1p5o= Subject key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F948178648A7684737E21E62EA023 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5606 AS: 20606 AS: 20877 AS: 58153 IP: 5.35.208.0/21 IP: 37.156.182.0/23 IP: 77.81.2.0/24 IP: 84.247.28.0/24 IP: 85.9.0.0/18 IP: 85.204.75.0/24 IP: 85.204.108.0/24 IP: 86.104.3.0/24 IP: 86.104.17.0/24 IP: 86.106.159.0/24 IP: 87.237.104.0/21 IP: 89.37.143.0/24 IP: 89.38.59.0/24 IP: 89.38.231.0/24 IP: 89.38.241.0/24 IP: 89.39.68.0/24 IP: 89.40.132.0/24 IP: 89.41.31.0/24 IP: 89.44.121.0/24 IP: 89.44.200.0/24 IP: 91.194.235.0/24 IP: 93.113.30.0/24 IP: 93.113.58.0/23 IP: 94.176.190.0/24 IP: 109.205.88.0/21 IP: 128.140.224.0/21 IP: 176.223.110.0/24 IP: 185.8.152.0/22 IP: 188.211.236.0/24 IP: 188.212.37.0/24 IP: 188.212.152.0/24 IP: 188.213.17.0/24 IP: 188.213.33.0/24 IP: 188.213.132.0/23 IP: 188.241.222.0/24 IP: 193.41.251.0/24 IP: 193.226.128.0/18 IP: 194.105.1.0/24 IP: 212.146.64.0/18 IP: 2001:4d80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:94:81:78:64:8a:76:84:73:7e:21:e6:2e:a0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:2c:d2:75:e9:e5:63:fd:2b:ee:65:6a:11: 36:e7:b9:26:6a:03:52:10:15:b2:7f:58:e4:76:b9: 72:46:7f:f4:b4:25:ba:2c:ca:19:4f:91:6e:50:73: 3a:5b:37:15:96:31:af:2a:dd:63:ae:8b:53:10:d0: 74:ba:05:58:0a:88:5c:e8:59:14:e6:41:6b:e8:94: d6:95:5a:af:6a:c4:9f:a2:74:97:df:e0:f6:8f:2e: 3e:a7:32:46:68:04:db:18:86:c1:86:0b:d7:de:d4: eb:4d:fa:9f:ac:95:06:1b:25:43:c6:c2:15:0d:34: e1:ab:c3:d5:26:a1:ee:58:72:a1:98:17:b6:c3:2d: 94:33:a1:cd:ae:4b:51:66:67:59:da:a4:51:a0:b1: 94:59:e3:1e:a2:64:56:c9:17:22:76:e0:c8:58:9f: 0a:63:84:28:f4:25:f3:68:dc:5f:42:b9:bd:ec:7d: 31:32:aa:87:fa:43:1c:42:dc:20:c3:8f:0c:8b:8c: cf:7f:6a:a4:0e:8a:d8:34:2b:69:e9:6d:5b:98:17: 15:f9:9e:30:52:3a:6b:2c:65:4a:78:d2:fc:b6:67: 57:8b:8d:8b:fe:ee:39:ba:28:63:c7:e6:0e:aa:0b: d6:5e:1f:50:43:15:a7:8a:b7:f0:3f:23:a7:86:12: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.208.0/21 37.156.182.0/23 77.81.2.0/24 84.247.28.0/24 85.9.0.0/18 85.204.75.0/24 85.204.108.0/24 86.104.3.0/24 86.104.17.0/24 86.106.159.0/24 87.237.104.0/21 89.37.143.0/24 89.38.59.0/24 89.38.231.0/24 89.38.241.0/24 89.39.68.0/24 89.40.132.0/24 89.41.31.0/24 89.44.121.0/24 89.44.200.0/24 91.194.235.0/24 93.113.30.0/24 93.113.58.0/23 94.176.190.0/24 109.205.88.0/21 128.140.224.0/21 176.223.110.0/24 185.8.152.0/22 188.211.236.0/24 188.212.37.0/24 188.212.152.0/24 188.213.17.0/24 188.213.33.0/24 188.213.132.0/23 188.241.222.0/24 193.41.251.0/24 193.226.128.0/18 194.105.1.0/24 212.146.64.0/18 IPv6: 2001:4d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5606 20606 20877 58153 Signature Algorithm: sha256WithRSAEncryption 7c:32:f9:ec:34:2d:66:fd:0d:d6:fc:b3:3d:64:de:b0:29:bf: fc:90:74:f7:cb:7b:5e:5e:e5:03:3b:ab:9a:df:64:d3:ce:78: 11:24:db:77:dc:e8:5e:ef:a1:f5:1c:47:17:14:3e:24:84:56: b6:1a:42:f9:83:80:ea:4d:74:66:0b:52:ce:0a:dd:0d:f2:ce: 7c:76:5a:3b:a0:53:5f:4e:59:3b:30:e2:b1:13:51:10:69:54: f2:22:3a:ab:65:7e:06:c3:34:60:ba:c3:4f:06:f5:01:f0:4c: af:e1:12:ac:9f:e8:31:8a:4a:a8:97:73:ed:92:05:fb:ed:e8: dc:d6:25:f4:34:7d:7a:3b:97:8c:7a:d3:b8:f3:7f:ab:26:a9: 05:80:cd:a7:d5:10:52:f0:f5:28:ae:f2:92:75:90:41:7d:70: fa:c8:08:18:99:ad:6f:34:64:c6:cd:da:da:4e:61:48:ee:a3: aa:65:40:6b:aa:cc:50:1c:1a:71:e4:2f:53:23:00:b8:a7:b7: f8:45:90:69:00:33:f5:14:54:ec:8d:a1:ad:d8:56:62:56:a4: fc:fb:8d:30:15:94:a8:2b:a9:6b:3f:67:55:89:a7:ea:8b:b7: 19:28:de:ac:04:77:1e:eb:09:ad:10:6d:4f:09:5b:89:cc:ef: 0f:0a:0e:48 -----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgISAZt8f5SBeGSKdoRzfiHmLqAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWY2MTc5OGRkMTg5NjVjMDI3YWZhN2Y5M2FlMDMwZmY1ZTFkNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNos0nXp5WP9K+5lahE257kmagNS EBWyf1jkdrlyRn/0tCW6LMoZT5FuUHM6WzcVljGvKt1jrotTENB0ugVYCohc6FkU 5kFr6JTWlVqvasSfonSX3+D2jy4+pzJGaATbGIbBhgvX3tTrTfqfrJUGGyVDxsIV DTThq8PVJqHuWHKhmBe2wy2UM6HNrktRZmdZ2qRRoLGUWeMeomRWyRciduDIWJ8K Y4Qo9CXzaNxfQrm97H0xMqqH+kMcQtwgw48Mi4zPf2qkDorYNCtp6W1bmBcV+Z4w UjprLGVKeNL8tmdXi42L/u45uihjx+YOqgvWXh9QQxWnirfwPyOnhhKUvQIDAQAB o4IDpzCCA6MwHQYDVR0OBBYEFAr2F5jdGJZcAnr6f5OuAw/14dduMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzYxNTE2 NC02ZDk2LTQ4OGEtOTZiYS1kNmUxZTM0N2Y5YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNjE1MTY0 LTZkOTYtNDg4YS05NmJhLWQ2ZTFlMzQ3ZjljNy8xL0N2WVhtTjBZbGx3Q2V2cF9r NjRERF9YaDEyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGAYIKwYB BQUHAQcBAf8EggEHMIIBAzCB8QQCAAEwgeoDBAMFI9ADBAElnLYDBABNUQIDBABU 9xwDBAZVCQADBABVzEsDBABVzGwDBABWaAMDBABWaBEDBABWap8DBANX7WgDBABZ JY8DBABZJjsDBABZJucDBABZJvEDBABZJ0QDBABZKIQDBABZKR8DBABZLHkDBABZ LMgDBABbwusDBABdcR4DBAFdcToDBABesL4DBANtzVgDBAOAjOADBACw324DBAK5 CJgDBAC80+wDBAC81CUDBAC81JgDBAC81REDBAC81SEDBAG81YQDBAC88d4DBADB KfsDBAbB4oADBADCaQEDBAbUkkAwDQQCAAIwBwMFACABTYAwJgYIKwYBBQUHAQgB Af8EFzAVoBMwEQICFeYCAlB+AgJRjQIDAOMpMA0GCSqGSIb3DQEBCwUAA4IBAQB8 MvnsNC1m/Q3W/LM9ZN6wKb/8kHT3y3teXuUDO6ua32TTzngRJNt33Ohe76H1HEcX FD4khFa2GkL5g4DqTXRmC1LOCt0N8s58dlo7oFNfTlk7MOKxE1EQaVTyIjqrZX4G wzRgusNPBvUB8Eyv4RKsn+gxikqol3PtkgX77ejc1iX0NH16O5eMetO483+rJqkF gM2n1RBS8PUorvKSdZBBfXD6yAgYma1vNGTGzdraTmFI7qOqZUBrqsxQHBpx5C9T IwC4p7f4RZBpADP1FFTsjaGt2FZiVqT8+40wFZSoK6lrP2dViafqi7cZKN6sBHce 6wmtEG1PCVuJzO8PCg5I -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:03 2026 by rpki-client