This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer File: CyR-czkeydaipG8ssLAvyZQojxM.cer (raw, json) Hash identifier: 47iyPFa+9KX7UFHxGQoFgVJeLqaPvduYhzLNZGpkSSI= Subject key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8067474FEF69F595CAA2EC895886D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.56.148.0/22 IP: 5.181.4.0/22 IP: 5.183.176.0/22 IP: 5.252.196.0/22 IP: 45.12.204.0/22 IP: 45.66.132.0/22 IP: 45.67.52.0/22 IP: 45.82.164.0/22 IP: 45.85.0.0/22 IP: 45.90.140.0/22 IP: 45.93.216.0/22 IP: 45.128.152.0/22 IP: 45.134.16.0/22 IP: 45.144.240.0/22 IP: 81.90.188.0/22 IP: 89.31.124.0/22 IP: 91.217.120.0/23 IP: 91.220.202.0/23 IP: 92.118.184.0/22 IP: 147.78.12.0/22 IP: 152.89.208.0/22 IP: 185.105.188.0/22 IP: 185.120.16.0/22 IP: 185.126.68.0/22 IP: 185.126.116.0/22 IP: 185.126.136.0/22 IP: 185.126.148.0/22 IP: 185.126.224.0/22 IP: 185.159.68.0/22 IP: 185.160.24.0/22 IP: 185.167.116.0/22 IP: 185.168.20.0/22 IP: 185.171.120.0/22 IP: 185.172.112.0/22 IP: 185.175.140.0/22 IP: 185.187.236.0/22 IP: 188.119.100.0/22 IP: 192.54.56.0/22 IP: 193.37.56.0/22 IP: 193.38.136.0/22 IP: 194.124.32.0/22 IP: 194.156.228.0/22 IP: 217.197.160.0/22 IP: 2a09:9bc0::/29 IP: 2a0c:8a40::/29 IP: 2a0e:7a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:47:4f:ef:69:f5:95:ca:a2:ec:89:58:86:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:dc:37:fd:30:44:56:56:69:ec:8f:2c:9b: e2:1e:6a:83:11:6b:40:b3:7f:70:ba:75:21:d6:6c: 37:43:1d:92:5c:98:1a:3f:dc:e8:da:2d:90:99:be: 62:b7:52:18:eb:92:45:77:06:c5:af:3f:d1:e0:05: e1:6a:04:83:d4:df:cb:4b:ce:2d:de:15:3a:ac:11: 6e:cb:09:20:f3:ed:0a:9b:24:bd:65:ca:4c:64:8e: 32:7b:f8:e1:15:da:13:35:9a:b1:12:de:2f:f1:87: be:3a:bd:90:b3:11:39:f4:1b:f3:b9:0c:97:0f:10: ec:03:7d:27:a3:38:32:71:35:52:75:44:d3:9c:63: 11:6e:27:d7:43:71:f0:a3:8a:10:8f:fc:f0:e4:9d: ff:c3:2a:4f:7d:08:ad:df:48:9f:ce:c8:f2:29:30: 1d:a7:e6:3f:9b:b4:71:39:a8:86:b7:02:d1:37:06: 22:c0:69:c0:31:fd:62:fc:87:db:96:c1:07:b2:0c: e9:f8:d6:a9:73:4f:eb:dd:d0:3a:e7:6b:ff:7a:99: d3:5a:1c:90:df:b2:62:ad:dc:9b:df:04:df:21:64: 90:13:9c:90:27:a3:12:b8:df:56:4f:12:e7:95:fb: 70:2e:d6:a1:e1:69:2a:64:e2:92:bb:2b:e6:8e:45: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.148.0/22 5.181.4.0/22 5.183.176.0/22 5.252.196.0/22 45.12.204.0/22 45.66.132.0/22 45.67.52.0/22 45.82.164.0/22 45.85.0.0/22 45.90.140.0/22 45.93.216.0/22 45.128.152.0/22 45.134.16.0/22 45.144.240.0/22 81.90.188.0/22 89.31.124.0/22 91.217.120.0/23 91.220.202.0/23 92.118.184.0/22 147.78.12.0/22 152.89.208.0/22 185.105.188.0/22 185.120.16.0/22 185.126.68.0/22 185.126.116.0/22 185.126.136.0/22 185.126.148.0/22 185.126.224.0/22 185.159.68.0/22 185.160.24.0/22 185.167.116.0/22 185.168.20.0/22 185.171.120.0/22 185.172.112.0/22 185.175.140.0/22 185.187.236.0/22 188.119.100.0/22 192.54.56.0/22 193.37.56.0/22 193.38.136.0/22 194.124.32.0/22 194.156.228.0/22 217.197.160.0/22 IPv6: 2a09:9bc0::/29 2a0c:8a40::/29 2a0e:7a80::/29 Signature Algorithm: sha256WithRSAEncryption 49:63:88:71:10:8a:20:22:5d:eb:fa:13:40:06:df:aa:ea:e1: 82:52:68:b1:24:09:15:74:0d:a5:e6:dc:17:23:e4:57:3f:dd: 25:6a:49:2b:e1:31:29:2c:6a:fb:4a:a4:83:65:3d:3a:a9:d9: c2:56:28:fb:f3:df:3f:3c:57:7c:d7:4f:51:55:ac:ee:aa:39: 8b:2a:b8:97:4b:05:61:e9:b4:db:ed:70:c0:f6:5f:63:1f:7f: 9e:40:ff:45:05:7c:1e:6b:8e:aa:6b:b8:aa:0f:d0:89:1e:2e: 34:f0:a0:49:34:2a:9f:60:d6:e6:73:6c:7f:9f:53:33:65:f5: da:52:65:e2:70:dc:ae:04:c6:37:87:f7:71:88:e3:11:0e:a2: 7d:41:5a:41:85:32:ba:21:45:2f:d7:30:7c:5c:68:96:58:c5: 75:7b:55:6d:e9:a2:05:70:c8:dd:cf:12:78:64:78:d3:67:d9: ee:22:81:3c:2f:ba:b3:83:f0:92:aa:14:ed:9a:55:1b:05:40: 7f:3f:3c:c8:ec:01:b6:a9:f1:37:54:39:a9:78:4f:ad:2a:de: 6c:51:71:f2:0b:bb:d9:a4:e0:d5:16:3e:68:0c:22:0e:23:df: 1c:5a:49:a3:1e:78:9e:08:7d:66:16:05:70:6d:8f:b9:d0:5e: 5a:47:a3:1b -----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgISAZt8gGdHT+9p9ZXKouyJWIbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjI0N2U3MzM5MWVjOWQ2YTJhNDZmMmNiMGIwMmZjOTk0Mjg4ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YjcN/0wRFZWaeyPLJviHmqDEWtA s39wunUh1mw3Qx2SXJgaP9zo2i2Qmb5it1IY65JFdwbFrz/R4AXhagSD1N/LS84t 3hU6rBFuywkg8+0KmyS9ZcpMZI4ye/jhFdoTNZqxEt4v8Ye+Or2QsxE59BvzuQyX DxDsA30nozgycTVSdUTTnGMRbifXQ3Hwo4oQj/zw5J3/wypPfQit30ifzsjyKTAd p+Y/m7RxOaiGtwLRNwYiwGnAMf1i/IfblsEHsgzp+Napc0/r3dA652v/epnTWhyQ 37Jirdyb3wTfIWSQE5yQJ6MSuN9WTxLnlftwLtah4WkqZOKSuyvmjkV4oQIDAQAB o4IDpzCCA6MwHQYDVR0OBBYEFAskfnM5HsnWoqRvLLCwL8mUKI8TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2IzZmQ0 MC1iMTI1LTQyODItYjg4My03MzY3ODllZTZmZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvYjNmZDQw LWIxMjUtNDI4Mi1iODgzLTczNjc4OWVlNmZkMC8xL0N5Ui1jemtleWRhaXBHOHNz TEF2eVpRb2p4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBQAYIKwYB BQUHAQcBAf8EggEvMIIBKzCCAQoEAgABMIIBAgMEAgI4lAMEAgW1BAMEAgW3sAME AgX8xAMEAi0MzAMEAi1ChAMEAi1DNAMEAi1SpAMEAi1VAAMEAi1ajAMEAi1d2AME Ai2AmAMEAi2GEAMEAi2Q8AMEAlFavAMEAlkffAMEAVvZeAMEAVvcygMEAlx2uAME ApNODAMEAphZ0AMEArlpvAMEArl4EAMEArl+RAMEArl+dAMEArl+iAMEArl+lAME Arl+4AMEArmfRAMEArmgGAMEArmndAMEArmoFAMEArmreAMEArmscAMEArmvjAME Arm77AMEArx3ZAMEAsA2OAMEAsElOAMEAsEmiAMEAsJ8IAMEAsKc5AMEAtnFoDAb BAIAAjAVAwUDKgmbwAMFAyoMikADBQMqDnqAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ Y4hxEIogIl3r+hNABt+q6uGCUmixJAkVdA2l5twXI+RXP90lakkr4TEpLGr7SqSD ZT06qdnCVij7898/PFd8109RVazuqjmLKriXSwVh6bTb7XDA9l9jH3+eQP9FBXwe a46qa7iqD9CJHi408KBJNCqfYNbmc2x/n1MzZfXaUmXicNyuBMY3h/dxiOMRDqJ9 QVpBhTK6IUUv1zB8XGiWWMV1e1Vt6aIFcMjdzxJ4ZHjTZ9nuIoE8L7qzg/CSqhTt mlUbBUB/PzzI7AG2qfE3VDmpeE+tKt5sUXHyC7vZpODVFj5oDCIOI98cWkmjHnie CH1mFgVwbY+50F5aR6Mb -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:37 2026 by rpki-client