This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer File: JY8HU8Azwa8JGGbQlCZFEmlspos.cer (raw, json) Hash identifier: xR45BpYDINOPoAQgs4vmmYC4TIhz661WFy5+P7e3iko= Subject key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6E27522437949555D86D57637D5B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41006 IP: 89.234.192.0/20 IP: 89.234.232.0 -- 89.234.247.255 IP: 2a11:480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e2:75:22:43:79:49:55:5d:86:d5:76:37:d5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=258f0753c033c1af091866d094264512696ca68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:60:08:67:91:1b:a3:a5:17:a8:53:f0:7d: cc:e0:1d:8c:00:3a:52:87:ef:26:25:25:e1:3b:ce: 9e:74:40:92:38:61:79:c7:7b:a1:98:0c:9f:f7:17: 23:49:5b:59:9a:23:be:e7:54:1d:a1:60:10:72:d0: 0b:e3:f8:47:b9:c3:47:b0:7f:d7:fb:07:d7:5f:bc: 94:39:ad:90:3e:a2:9e:f2:d8:3d:53:4a:ad:13:c1: 06:ff:f1:6d:15:e8:75:82:76:7b:f3:39:4a:d1:f2: 59:b6:a4:48:85:30:d9:f3:da:b8:81:7d:b7:c0:a4: 57:2c:82:82:be:76:02:18:2f:cb:2c:8a:e6:f1:e8: ad:ee:44:ca:14:99:5c:f8:1a:0b:7e:71:ae:c8:7b: 3b:1f:79:50:34:3a:ee:15:fb:0b:87:9b:28:9e:33: 1a:e9:9c:22:7e:68:f5:4a:56:22:e3:00:e6:01:41: f1:a1:27:25:af:6f:35:c9:8c:75:5d:12:85:ba:47: 33:a2:f5:0d:e8:53:c5:c7:1f:59:66:81:2e:08:e5: 34:cb:0e:1a:d2:8f:8a:98:49:cb:e7:c1:ea:e2:b0: 22:a1:89:ae:26:cc:ad:18:39:a0:ff:26:be:44:7b: 18:35:4e:db:49:39:ea:ef:15:b4:aa:aa:e9:e1:9c: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.192.0/20 89.234.232.0-89.234.247.255 IPv6: 2a11:480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41006 Signature Algorithm: sha256WithRSAEncryption 1c:d7:e7:ae:6d:5a:0e:8c:d9:09:ed:87:ce:6f:00:e3:8f:07: e2:c3:d3:dc:14:73:c6:10:50:ab:04:fc:60:c9:8b:66:ef:68: bd:9d:3d:ef:19:62:a0:9a:26:49:84:77:22:53:78:40:da:a9: 9c:46:62:c0:aa:21:b1:03:b1:c1:fb:2c:66:49:41:4d:5a:01: 53:2c:ed:e2:91:cf:8d:95:3d:e8:25:1e:1c:bb:4f:d5:b0:8a: 4b:06:e0:ed:bb:fa:a1:ca:97:8d:f9:84:e0:2f:ed:94:32:5e: c8:72:db:15:5c:15:1c:68:bc:60:dd:e8:c8:79:9c:28:55:d6: 66:3c:5f:7d:de:f8:67:24:74:b7:fa:87:5d:65:cb:1a:45:a5: d9:d6:61:2f:3e:0c:64:89:68:dd:56:bd:09:10:6b:b6:4e:17: 45:50:f6:8b:86:ba:f4:1e:45:f6:6f:43:37:b3:39:df:bd:32: cf:aa:2a:20:e9:6c:b6:50:cb:f3:c2:71:6e:e6:3f:e6:a1:f9: c6:9e:b2:a6:cd:b2:79:c8:17:c1:40:4d:a0:8c:29:e5:74:d5: 8d:5b:26:54:4b:3f:a4:72:08:a8:2d:4c:7e:f3:d0:b1:36:b9: 4f:1d:19:c6:4e:f7:2e:72:29:a4:04:54:8e:1f:c9:23:58:6a: 96:03:38:8d -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt+puJ1IkN5SVVdhtV2N9WwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNThmMDc1M2MwMzNjMWFmMDkxODY2ZDA5NDI2NDUxMjY5NmNhNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma1gCGeRG6OlF6hT8H3M4B2MADpS h+8mJSXhO86edECSOGF5x3uhmAyf9xcjSVtZmiO+51QdoWAQctAL4/hHucNHsH/X +wfXX7yUOa2QPqKe8tg9U0qtE8EG//FtFeh1gnZ78zlK0fJZtqRIhTDZ89q4gX23 wKRXLIKCvnYCGC/LLIrm8eit7kTKFJlc+BoLfnGuyHs7H3lQNDruFfsLh5sonjMa 6Zwifmj1SlYi4wDmAUHxoSclr281yYx1XRKFukczovUN6FPFxx9ZZoEuCOU0yw4a 0o+KmEnL58Hq4rAioYmuJsytGDmg/ya+RHsYNU7bSTnq7xW0qqrp4ZwWFQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFCWPB1PAM8GvCRhm0JQmRRJpbKaLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzNiYWU4 Ny04MmViLTQ1MWYtODA0NC0yYzJmMGQyNGY5MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2JhZTg3 LTgyZWItNDUxZi04MDQ0LTJjMmYwZDI0ZjkzNi8xL0pZOEhVOEF6d2E4SkdHYlFs Q1pGRW1sc3Bvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQEWerAMAwDBANZ6ugDBANZ6vAwDQQCAAIwBwMF AyoRBIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKAuMA0GCSqGSIb3DQEBCwUA A4IBAQAc1+eubVoOjNkJ7YfObwDjjwfiw9PcFHPGEFCrBPxgyYtm72i9nT3vGWKg miZJhHciU3hA2qmcRmLAqiGxA7HB+yxmSUFNWgFTLO3ikc+NlT3oJR4cu0/VsIpL BuDtu/qhypeN+YTgL+2UMl7IctsVXBUcaLxg3ejIeZwoVdZmPF993vhnJHS3+odd ZcsaRaXZ1mEvPgxkiWjdVr0JEGu2ThdFUPaLhrr0HkX2b0M3sznfvTLPqiog6Wy2 UMvzwnFu5j/mofnGnrKmzbJ5yBfBQE2gjCnldNWNWyZUSz+kcgioLUx+89CxNrlP HRnGTvcucimkBFSOH8kjWGqWAziN -----END CERTIFICATE-----Generated at Mon Jan 26 13:02:16 2026 by rpki-client