This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer File: HY6rk1MM_VDaf7faXroKpEDJ7ww.cer (raw, json) Hash identifier: DlikG2iKpSS4RXqYgT5T1sJdQzqYBkz8FPgAWGmIJSU= Subject key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D266366E9A104B2217A0436DE0AC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209956 IP: 194.48.95.0/24 IP: 217.119.134.0/24 IP: 2a12:75c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:26:63:66:e9:a1:04:b2:21:7a:04:36:de:0a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:6f:d6:e9:08:6d:c9:9e:54:f5:ac:91:4d: 93:c6:f8:c5:a3:91:52:cc:9b:d0:e9:7d:f6:25:fd: 96:76:2f:cc:80:8a:34:ac:b8:1a:e1:ab:3c:a8:70: b8:a5:5e:21:08:af:6a:14:71:62:ab:39:21:6b:d8: 7a:72:e5:9e:df:cf:e8:a2:5e:6d:b9:10:78:05:d5: fd:89:53:54:81:50:c7:3b:fc:23:b8:fa:26:0e:5d: c7:f5:75:2c:6a:aa:16:b8:31:f8:54:e7:d7:04:e8: 4d:03:25:03:57:99:e7:3f:b2:93:b8:f7:54:8d:97: aa:90:67:9a:f3:d2:a3:f7:de:95:5c:60:73:4d:a3: 3a:e3:b9:fa:03:41:58:a4:df:97:3a:bf:dd:4f:c4: a6:9a:45:6a:6c:74:9a:40:49:0b:1a:79:36:71:7e: 60:ff:0b:99:1c:5a:a2:91:13:a7:50:1f:07:da:79: 95:7d:84:24:9c:db:96:c7:04:93:1c:ab:7b:51:8f: 62:f2:1e:b2:0c:09:58:65:50:2d:0d:d1:1a:c8:78: 46:af:fb:91:83:d1:1d:b8:c1:c6:6e:c7:e8:5f:ed: 31:2d:d6:cd:95:e2:ef:87:6c:da:34:f4:3f:cf:1f: 6d:6d:a7:23:52:86:a7:5f:0c:76:6a:d0:70:86:43: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.95.0/24 217.119.134.0/24 IPv6: 2a12:75c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209956 Signature Algorithm: sha256WithRSAEncryption 38:62:ba:a5:6b:cc:9c:52:37:30:63:6b:20:48:c4:29:d2:bc: e7:36:af:7b:ed:04:eb:79:bc:58:a8:8e:01:be:c0:16:41:dd: 1d:56:41:71:5a:2c:f3:9b:72:34:0a:9d:04:87:a4:2d:7f:67: 1a:aa:02:9a:1f:82:9d:ce:57:3b:22:43:b4:1a:52:7c:69:7e: 78:8e:d4:7f:ab:bb:40:65:96:7e:d8:38:70:80:56:7c:7b:c8: f7:8e:cc:ff:21:4b:a8:cd:f4:f7:46:90:2e:07:09:fe:82:dd: a7:14:12:c4:ac:73:bb:ba:f7:55:9c:52:83:a5:2e:3f:fb:d6: 5b:28:05:6a:ae:ad:87:c6:4d:42:10:7a:c6:31:b0:85:69:59: f9:1b:14:06:72:f2:2b:22:8c:fe:06:92:2c:b8:9d:05:af:02: 94:e5:10:d8:f6:2e:97:78:24:0f:78:b7:22:67:9e:1b:36:15: 6d:f5:ef:71:b1:d6:fc:5f:8e:40:28:4b:04:b4:e2:31:70:87: 4e:05:17:37:4b:3b:c0:8c:c6:33:94:f4:7e:4f:b6:62:14:25: 75:9b:2b:0d:3a:91:cd:5a:c8:5f:19:13:43:cb:82:20:72:ad: 27:31:82:ae:c8:56:a8:d8:8d:7e:e2:cd:aa:e9:90:fb:cb:18: 3e:7b:4e:47 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XSZjZumhBLIhegQ23grFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDhlYWI5MzUzMGNmZDUwZGE3ZmI3ZGE1ZWJhMGFhNDQwYzllZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJNv1ukIbcmeVPWskU2TxvjFo5FS zJvQ6X32Jf2Wdi/MgIo0rLga4as8qHC4pV4hCK9qFHFiqzkha9h6cuWe38/ool5t uRB4BdX9iVNUgVDHO/wjuPomDl3H9XUsaqoWuDH4VOfXBOhNAyUDV5nnP7KTuPdU jZeqkGea89Kj996VXGBzTaM647n6A0FYpN+XOr/dT8SmmkVqbHSaQEkLGnk2cX5g /wuZHFqikROnUB8H2nmVfYQknNuWxwSTHKt7UY9i8h6yDAlYZVAtDdEayHhGr/uR g9EduMHGbsfoX+0xLdbNleLvh2zaNPQ/zx9tbacjUoanXwx2atBwhkP0TQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB2Oq5NTDP1Q2n+32l66CqRAye8MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2ViYjgz YS0wMTI2LTQzYzAtYjllYS0zMmRkNTM2NDBiOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZWJiODNh LTAxMjYtNDNjMC1iOWVhLTMyZGQ1MzY0MGI5Yy8xL0hZNnJrMU1NX1ZEYWY3ZmFY cm9LcEVESjd3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwjBfAwQA2XeGMA0EAgACMAcDBQMqEnXAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0JDANBgkqhkiG9w0BAQsFAAOCAQEAOGK6 pWvMnFI3MGNrIEjEKdK85zave+0E63m8WKiOAb7AFkHdHVZBcVos85tyNAqdBIek LX9nGqoCmh+Cnc5XOyJDtBpSfGl+eI7Uf6u7QGWWftg4cIBWfHvI947M/yFLqM30 90aQLgcJ/oLdpxQSxKxzu7r3VZxSg6UuP/vWWygFaq6th8ZNQhB6xjGwhWlZ+RsU BnLyKyKM/gaSLLidBa8ClOUQ2PYul3gkD3i3ImeeGzYVbfXvcbHW/F+OQChLBLTi MXCHTgUXN0s7wIzGM5T0fk+2YhQldZsrDTqRzVrIXxkTQ8uCIHKtJzGCrshWqNiN fuLNqumQ+8sYPntORw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:40 2026 by rpki-client