This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer File: _Y7_IBIYpagjy-hTNoU-PbTdFus.cer (raw, json) Hash identifier: aXDvJoBmmYvimxMftGg4sMXmwXulVI0XBwVBfbWe3UM= Subject key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F234270BC5ECACAF4FC0CC5F093B591 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:36:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60631 IP: 45.149.76.0/22 IP: 130.185.72.0/21 IP: 158.255.74.0/24 IP: 171.22.24.0/22 IP: 176.97.218.0/24 IP: 178.211.145.0/24 IP: 185.8.172.0/22 IP: 185.190.39.0/24 IP: 185.204.197.0/24 IP: 185.208.174.0/23 IP: 185.252.86.0/24 IP: 193.105.234.0/24 IP: 193.242.125.0/24 IP: 194.5.175.0/24 IP: 194.5.188.0/24 IP: 194.5.195.0/24 IP: 194.5.205.0/24 IP: 194.62.43.0/24 IP: 195.88.208.0/24 IP: 195.177.255.0/24 IP: 212.23.201.0/24 IP: 2a03:2dc0::/32 IP: 2a0e:b080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:23:42:70:bc:5e:ca:ca:f4:fc:0c:c5:f0:93:b5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:36:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:7d:d6:7c:a4:3e:dc:1d:32:7f:cc:b9:0f: c7:c3:ae:7a:b1:01:fe:8f:85:fc:f3:57:a2:4a:71: 28:5a:7e:d3:da:1d:d5:94:48:64:96:24:45:e1:2f: 10:0d:d1:34:e8:36:15:b6:3f:65:02:d1:30:d9:98: f8:45:12:9f:89:2c:76:1b:5b:3f:13:ee:57:4c:1a: e5:a5:0a:56:19:e8:90:db:c7:41:2e:14:ce:ea:e6: ef:e8:cd:1f:42:5c:23:27:79:c7:b1:1a:2a:c7:84: cf:6c:3c:d6:6b:a1:b3:a2:ee:94:b6:06:76:5a:79: 77:2f:09:b8:b5:1f:32:8a:70:a1:e9:36:fb:31:2f: 28:2b:c4:e8:d5:43:67:e4:d4:8c:0c:1c:f3:b0:6c: 9d:88:b7:8d:0a:8b:73:62:f0:32:32:f7:aa:f4:88: 24:65:0d:26:9b:b8:ba:ec:6d:33:ec:a8:b0:55:53: cb:7b:b4:96:eb:89:7f:bf:81:e1:29:70:aa:c2:32: 4b:ba:20:ed:49:52:4c:48:00:b4:6a:99:a6:77:32: 4d:95:67:3c:c4:2c:8a:55:6c:2b:75:54:94:bb:14: 00:fb:25:06:3b:56:8f:3b:3f:dd:59:61:10:db:74: f0:51:f9:5f:63:f1:3e:06:09:94:29:bd:fc:5e:96: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.76.0/22 130.185.72.0/21 158.255.74.0/24 171.22.24.0/22 176.97.218.0/24 178.211.145.0/24 185.8.172.0/22 185.190.39.0/24 185.204.197.0/24 185.208.174.0/23 185.252.86.0/24 193.105.234.0/24 193.242.125.0/24 194.5.175.0/24 194.5.188.0/24 194.5.195.0/24 194.5.205.0/24 194.62.43.0/24 195.88.208.0/24 195.177.255.0/24 212.23.201.0/24 IPv6: 2a03:2dc0::/32 2a0e:b080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60631 Signature Algorithm: sha256WithRSAEncryption 83:7b:ad:4f:6d:c9:cb:0d:a2:b2:bb:ac:02:dc:34:32:d2:c4: a5:1e:c4:72:94:63:f3:ec:34:ff:10:d1:25:39:41:fc:bd:ec: f8:37:35:a8:41:0d:bf:ca:a8:ef:20:42:46:8d:c2:e4:aa:a1: 68:ff:74:e7:36:67:84:e1:1f:3f:39:d6:43:d3:ea:4d:3f:df: 56:31:eb:0d:42:44:86:fd:d5:a0:df:2c:b8:d6:d5:87:06:19: c0:60:77:ee:c4:b8:d2:09:8f:f4:66:51:75:12:ff:69:4c:7a: a8:42:60:5a:70:51:20:e6:bf:e4:10:0d:f9:9d:89:26:2c:b0: f3:26:ba:65:6f:4f:07:5c:5a:13:a0:ac:c8:6e:7e:4c:7c:40: 83:40:95:1f:c4:6f:a0:f0:6d:bc:39:57:7e:dc:2b:ae:03:a2: ba:5d:38:e6:e4:d9:d3:b4:e3:bf:31:4d:aa:89:c6:b5:97:43: b2:f0:ba:04:b5:90:e5:73:f6:e1:df:99:a7:82:fa:59:30:b6: 24:46:68:c6:89:80:22:27:cd:05:30:de:fc:0c:c1:66:ee:69: 4f:a9:8e:b2:5a:58:3d:9c:d1:82:54:22:2e:2b:a8:af:e9:6d: bb:78:86:f6:70:a5:7a:e6:63:e5:85:8c:a3:c4:8d:c4:5b:43: 31:ec:c9:1b -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgISAZt/I0JwvF7KyvT8DMXwk7WRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQzNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDhlZmYyMDEyMThhNWE4MjNjYmU4NTMzNjg1M2UzZGI0ZGQxNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1h91nykPtwdMn/MuQ/Hw656sQH+ j4X881eiSnEoWn7T2h3VlEhkliRF4S8QDdE06DYVtj9lAtEw2Zj4RRKfiSx2G1s/ E+5XTBrlpQpWGeiQ28dBLhTO6ubv6M0fQlwjJ3nHsRoqx4TPbDzWa6Gzou6UtgZ2 Wnl3Lwm4tR8yinCh6Tb7MS8oK8To1UNn5NSMDBzzsGydiLeNCotzYvAyMveq9Igk ZQ0mm7i67G0z7KiwVVPLe7SW64l/v4HhKXCqwjJLuiDtSVJMSAC0apmmdzJNlWc8 xCyKVWwrdVSUuxQA+yUGO1aPOz/dWWEQ23TwUflfY/E+BgmUKb38Xpb8awIDAQAB o4IDMjCCAy4wHQYDVR0OBBYEFP2O/yASGKWoI8voUzaFPj203RbrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzk5ZmQ0 MS03ZWQ4LTRiMjUtOGQ1Ni1jN2FjMjZiY2MyZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOTlmZDQx LTdlZDgtNGIyNS04ZDU2LWM3YWMyNmJjYzJkYS8xL19ZN19JQklZcGFnanktaFRO b1UtUGJUZEZ1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF BQcBBwEB/wSBoDCBnTCBhAQCAAEwfgMEAi2VTAMEA4K5SAMEAJ7/SgMEAqsWGAME ALBh2gMEALLTkQMEArkIrAMEALm+JwMEALnMxQMEAbnQrgMEALn8VgMEAMFp6gME AMHyfQMEAMIFrwMEAMIFvAMEAMIFwwMEAMIFzQMEAMI+KwMEAMNY0AMEAMOx/wME ANQXyTAUBAIAAjAOAwUAKgMtwAMFAyoOsIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAOzXMA0GCSqGSIb3DQEBCwUAA4IBAQCDe61PbcnLDaKyu6wC3DQy0sSlHsRy lGPz7DT/ENElOUH8vez4NzWoQQ2/yqjvIEJGjcLkqqFo/3TnNmeE4R8/OdZD0+pN P99WMesNQkSG/dWg3yy41tWHBhnAYHfuxLjSCY/0ZlF1Ev9pTHqoQmBacFEg5r/k EA35nYkmLLDzJrplb08HXFoToKzIbn5MfECDQJUfxG+g8G28OVd+3CuuA6K6XTjm 5NnTtOO/MU2qica1l0Oy8LoEtZDlc/bh35mngvpZMLYkRmjGiYAiJ80FMN78DMFm 7mlPqY6yWlg9nNGCVCIuK6iv6W27eIb2cKV65mPlhYyjxI3EW0Mx7Mkb -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:44 2026 by rpki-client