This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer (raw, json) Hash identifier: eduXe7iyGv10EylVJXrQB7SkKBzfJu7rMbe8jsvqLA8= Subject key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA584484E8455293A0C0DF2428B0248 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47343 AS: 206892 IP: 45.95.44.0/22 IP: 94.199.178.0/23 IP: 95.140.32.0/23 IP: 95.140.38.0/23 IP: 185.90.236.0/22 IP: 185.161.72.0/22 IP: 185.199.28.0/22 IP: 185.234.180.0/22 IP: 194.39.44.0/22 IP: 195.200.232.0/23 IP: 2a07:c280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:84:48:4e:84:55:29:3a:0c:0d:f2:42:8b:02:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:55:70:10:91:15:9a:70:7b:a7:3d:4d:3d:fc: ae:f2:2a:cb:71:0f:5e:0b:46:70:bf:05:b1:00:2a: 45:47:95:dd:96:7e:38:df:17:25:95:9c:ef:97:06: ef:73:d4:c6:36:79:96:96:07:da:b6:a7:03:17:ae: 6d:d7:6e:09:86:93:cb:de:76:a7:aa:e2:3c:57:73: c2:94:e8:34:1c:a3:99:c2:87:fe:5f:cd:a8:a2:1c: 2b:6c:75:7e:0c:98:45:6c:66:7e:01:bf:2d:8d:99: c1:8a:99:5b:ab:2e:be:2d:5a:84:93:eb:67:5d:19: 63:9e:f0:48:e1:76:7f:cc:24:bc:f3:a4:da:62:0a: 4b:45:71:b2:3e:ba:b5:b8:df:47:0e:a0:db:22:20: ec:68:6c:de:93:96:8f:62:e1:f0:c2:60:e0:59:32: 78:5c:36:4e:1d:ac:e0:3d:9d:ff:5e:e3:f0:f4:ac: 99:3a:64:58:04:95:3d:df:e0:4b:4e:93:0b:9d:6e: a6:0c:67:85:51:78:88:e8:d5:e9:07:eb:58:97:39: 31:37:df:30:30:a9:b9:bd:36:cd:99:13:06:d5:4f: 2a:12:86:bd:bb:8f:f3:bc:3a:5d:d4:6b:a4:ca:b3: d4:ee:fd:e0:b4:5d:e8:d4:76:c1:7b:92:09:49:0a: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.44.0/22 94.199.178.0/23 95.140.32.0/23 95.140.38.0/23 185.90.236.0/22 185.161.72.0/22 185.199.28.0/22 185.234.180.0/22 194.39.44.0/22 195.200.232.0/23 IPv6: 2a07:c280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47343 206892 Signature Algorithm: sha256WithRSAEncryption 14:fa:9a:a5:24:d3:71:d1:b4:05:e6:e2:03:24:b7:1b:f7:4d: 9e:b8:58:e6:c1:d1:8c:99:15:57:01:97:53:b1:81:59:68:a7: 3c:43:54:14:c0:9e:4e:5e:ce:72:87:70:d2:f8:4e:8b:e9:7e: b7:e8:54:9e:99:32:a8:a6:4f:90:b9:ca:02:d1:3a:e9:9d:56: 56:4a:85:0c:cc:85:18:b3:e1:23:9f:36:0a:05:9c:4a:b7:4f: 8e:c8:35:8e:9a:53:fb:df:39:98:1e:f4:c5:c1:96:14:b0:d6: e2:8a:a0:22:c4:9f:3b:b9:f3:bb:d1:80:6c:b0:06:fe:0a:c7: dd:ac:5c:23:2c:94:66:b5:56:34:6c:db:ec:b3:6a:01:9d:17: ac:b0:46:e1:02:bf:61:dd:ad:90:13:52:c2:81:8a:43:ab:27: 99:63:a2:f7:bf:32:54:54:e8:7c:2c:ac:bc:fc:52:de:54:da: ec:36:d9:25:df:37:08:eb:e5:26:ad:db:a7:d7:d9:89:82:7d: de:bf:13:86:b2:07:3f:77:59:8c:91:ab:7b:9f:87:67:89:f5: 78:78:cc:03:b9:d7:59:90:61:94:fe:04:af:fd:85:c3:9f:99: 43:4a:e6:82:1d:76:26:45:1a:22:79:73:68:f1:98:c7:4f:80: 93:a7:fc:8a -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt+pYRIToRVKToMDfJCiwJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzIyYWVhMGVmNGMwNjY3ZGI4MTlmNWQ1YTNkYWVhNjM5OWYwMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lVwEJEVmnB7pz1NPfyu8irLcQ9e C0ZwvwWxACpFR5Xdln443xcllZzvlwbvc9TGNnmWlgfatqcDF65t124JhpPL3nan quI8V3PClOg0HKOZwof+X82oohwrbHV+DJhFbGZ+Ab8tjZnBiplbqy6+LVqEk+tn XRljnvBI4XZ/zCS886TaYgpLRXGyPrq1uN9HDqDbIiDsaGzek5aPYuHwwmDgWTJ4 XDZOHazgPZ3/XuPw9KyZOmRYBJU93+BLTpMLnW6mDGeFUXiI6NXpB+tYlzkxN98w MKm5vTbNmRMG1U8qEoa9u4/zvDpd1GukyrPU7v3gtF3o1HbBe5IJSQrEOwIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFEcirqDvTAZn24GfXVo9rqY5nwOMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzgwYzM4 Ny1iMjBiLTQzMGEtYTVlNi02ZTMwNzRjNmM2NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvODBjMzg3 LWIyMGItNDMwYS1hNWU2LTZlMzA3NGM2YzY2My8xL1J5S3VvTzlNQm1mYmdaOWRX ajJ1cGptZkE0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQCLV8sAwQBXseyAwQBX4wgAwQBX4wmAwQCuVrs AwQCuaFIAwQCucccAwQCueq0AwQCwicsAwQBw8joMA0EAgACMAcDBQMqB8KAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC47wIDAygsMA0GCSqGSIb3DQEBCwUAA4IB AQAU+pqlJNNx0bQF5uIDJLcb902euFjmwdGMmRVXAZdTsYFZaKc8Q1QUwJ5OXs5y h3DS+E6L6X636FSemTKopk+QucoC0TrpnVZWSoUMzIUYs+EjnzYKBZxKt0+OyDWO mlP73zmYHvTFwZYUsNbiiqAixJ87ufO70YBssAb+CsfdrFwjLJRmtVY0bNvss2oB nRessEbhAr9h3a2QE1LCgYpDqyeZY6L3vzJUVOh8LKy8/FLeVNrsNtkl3zcI6+Um rdun19mJgn3evxOGsgc/d1mMkat7n4dnifV4eMwDuddZkGGU/gSv/YXDn5lDSuaC HXYmRRoieXNo8ZjHT4CTp/yK -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:46 2026 by rpki-client