This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer (raw, json) Hash identifier: wmQScp0V2nl8p57HrqJYyECi4ksvxriV5hh54XlmtCA= Subject key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0C26FDF0BBE10AF6C5881AEF7C88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44704 IP: 195.42.96.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0c:26:fd:f0:bb:e1:0a:f6:c5:88:1a:ef:7c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:a2:11:ec:e1:f7:86:66:1c:52:ba:a8:f5: 35:09:00:f9:c6:34:b0:7c:31:c6:0b:f9:d8:ed:0d: 8d:21:57:9c:6c:15:f3:71:d8:97:8b:85:ad:4b:f8: 91:48:45:59:fc:1e:9c:81:d6:fa:e5:d2:81:63:f1: f6:44:6f:26:20:ba:19:d4:c9:c5:f0:9e:d2:a1:cb: 72:05:7d:b6:d1:14:51:34:8e:88:4e:54:69:d2:1a: 78:30:45:86:09:29:27:0a:a9:11:3d:45:91:c1:64: e5:b4:8b:3d:fe:89:fc:e3:dd:14:a1:a5:ef:3b:31: c3:bf:2f:6c:d5:50:a9:90:9f:2a:a7:cd:e1:c7:37: e5:6a:5c:43:a5:d4:15:ec:c7:39:b0:da:e7:8d:86: 0e:31:6b:22:88:3a:76:cf:92:e5:d8:9c:18:89:8f: 58:2f:38:5f:c9:d8:46:9d:78:dd:fe:1b:9c:88:32: d6:11:87:dd:64:84:b6:f6:94:4f:9f:23:0b:84:25: dc:27:38:fc:41:52:9d:a3:2a:da:68:c1:64:4b:90: 0a:db:74:8e:8b:0f:43:27:f8:af:8d:3a:1c:a7:08: 8c:ad:13:03:16:a1:95:20:72:c1:b5:11:e5:d8:26: 98:09:31:81:9c:8a:d2:7a:72:b1:e5:3c:8d:47:f6: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.96.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44704 Signature Algorithm: sha256WithRSAEncryption a4:21:75:e2:cb:ad:52:38:f7:4a:2e:5f:37:d9:49:57:c0:2b: ec:e0:f1:4e:92:d1:95:7d:eb:17:0c:f8:95:18:78:b1:10:8a: 4f:fb:8f:00:03:1d:8c:0a:80:16:dd:42:25:c1:95:af:5b:2f: e8:55:6d:f1:f8:8d:b4:e0:f5:4c:87:b0:19:05:3a:23:17:0b: d8:d1:f3:ef:4f:31:0e:4a:a3:98:83:64:f1:52:1f:15:78:7b: e5:55:4e:cb:f0:81:23:48:6a:48:cb:3e:22:9e:a4:1a:2f:25: 00:39:66:91:0d:19:ab:0a:f8:e5:49:f3:2a:e9:52:90:83:6c: d9:01:ce:ec:2e:aa:d5:4f:da:ba:ab:2d:41:2b:8a:cd:a8:7b: bc:1e:45:f2:41:19:9e:09:c8:4d:88:86:10:b9:fb:75:a8:f2: f2:55:8b:08:9b:8d:0b:41:32:d3:30:8d:3d:6c:ee:dc:45:b8: bd:8d:48:af:f8:84:67:38:5e:54:75:54:ab:f0:27:c6:c5:43: bf:2f:98:18:6c:48:c1:a9:b1:b3:4f:5c:14:2f:47:23:b8:c0: 49:dd:ad:8b:4e:7c:ff:7a:84:25:ad:af:85:bc:8d:de:01:0c: 89:03:22:fd:eb:93:82:c5:15:0b:1a:2f:ca:48:dc:5d:3c:9d: fb:67:79:ee -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fwwm/fC74Qr2xYga73yIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDg2MTc4Mjk3M2MzODJjYzFjZTY3MGY1YWQ1MGRmOGZiNTNjODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5GiEezh94ZmHFK6qPU1CQD5xjSw fDHGC/nY7Q2NIVecbBXzcdiXi4WtS/iRSEVZ/B6cgdb65dKBY/H2RG8mILoZ1MnF 8J7SoctyBX220RRRNI6ITlRp0hp4MEWGCSknCqkRPUWRwWTltIs9/on8490UoaXv OzHDvy9s1VCpkJ8qp83hxzflalxDpdQV7Mc5sNrnjYYOMWsiiDp2z5Ll2JwYiY9Y LzhfydhGnXjd/huciDLWEYfdZIS29pRPnyMLhCXcJzj8QVKdoyraaMFkS5AK23SO iw9DJ/ivjTocpwiMrRMDFqGVIHLBtRHl2CaYCTGBnIrSenKx5TyNR/bXbwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFB2GF4KXPDgswc5nD1rVDfj7U8guMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2NjZWFm Mi03NTYxLTQyYTctOGQxMi04ZTA2MGNhOTZmYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvY2NlYWYy LTc1NjEtNDJhNy04ZDEyLThlMDYwY2E5NmZhYy8xL0hZWVhncGM4T0N6QnptY1BX dFVOLVB0VHlDNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwypgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCuoDANBgkqhkiG9w0BAQsFAAOCAQEApCF14sutUjj3Si5fN9lJV8Ar7ODxTpLR lX3rFwz4lRh4sRCKT/uPAAMdjAqAFt1CJcGVr1sv6FVt8fiNtOD1TIewGQU6IxcL 2NHz708xDkqjmINk8VIfFXh75VVOy/CBI0hqSMs+Ip6kGi8lADlmkQ0Zqwr45Unz KulSkINs2QHO7C6q1U/auqstQSuKzah7vB5F8kEZngnITYiGELn7dajy8lWLCJuN C0Ey0zCNPWzu3EW4vY1Ir/iEZzheVHVUq/AnxsVDvy+YGGxIwamxs09cFC9HI7jA Sd2ti058/3qEJa2vhbyN3gEMiQMi/euTgsUVCxovykjcXTyd+2d57g== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:35 2026 by rpki-client