This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer File: mYS56xIiNxEcH4yldwfscwcpHug.cer (raw, json) Hash identifier: b3SINlH7pe/VDygLVsXGPpoV+8lSCr+4EVpKczobCAg= Subject key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759339EB80E4BEECF54F93B056998FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15372 IP: 91.90.167.0/24 IP: 188.239.190.0/24 IP: 193.36.120.0/22 IP: 193.176.146.0/24 IP: 195.248.83.0/24 IP: 212.111.224.0/19 IP: 2a01:7700::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:9e:b8:0e:4b:ee:cf:54:f9:3b:05:69:98:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:6b:9d:aa:8e:cf:e4:1e:ae:d2:71:9b:4e: 29:89:c6:4a:dd:f9:a7:43:b4:40:ad:5a:73:0e:e2: d5:d7:34:14:73:17:8c:82:df:01:c4:17:40:18:b8: 52:12:ec:69:19:1e:df:1c:92:a1:d2:2b:09:a6:d8: 5c:c1:a7:42:21:c6:6f:87:a8:a5:c6:86:46:cc:f9: 3e:af:cc:f3:eb:c6:59:9a:95:df:7e:5b:bd:4e:24: 4f:38:05:4e:ba:0a:59:c2:b9:d1:77:4a:1e:74:de: d5:6e:cb:31:0f:0d:39:5f:66:11:68:b2:3b:f2:23: 32:5d:0b:b5:ac:42:c4:57:c2:13:26:42:ae:e0:61: 99:89:21:3a:51:63:cc:70:39:b7:42:2d:41:34:f8: 18:c0:36:46:7b:de:25:f0:bc:51:d8:93:56:97:6c: 14:0e:2b:eb:7e:b2:c6:26:79:55:3f:e0:52:35:31: 94:99:ac:d0:aa:8b:48:79:de:fa:b4:d1:70:7c:58: 65:a3:47:95:a5:6f:4f:ee:02:01:e1:46:12:d3:31: fd:40:37:be:80:14:77:dd:39:25:7e:70:26:bf:8c: f9:2d:2e:3c:9a:01:73:b2:e9:7b:6c:dc:be:d3:e3: 89:0d:12:74:e8:7a:1b:06:24:ca:d8:9d:c7:0d:a1: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.167.0/24 188.239.190.0/24 193.36.120.0/22 193.176.146.0/24 195.248.83.0/24 212.111.224.0/19 IPv6: 2a01:7700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15372 Signature Algorithm: sha256WithRSAEncryption 78:79:f5:78:0b:ca:69:50:fd:73:6f:2e:ad:74:86:ee:20:80: 50:e4:f4:9e:89:a6:2e:69:31:4e:b0:49:bc:5a:55:43:a5:40: 9f:c4:de:86:f6:38:65:16:45:81:98:e6:f3:74:ca:b9:af:32: 24:93:52:97:bc:a3:d8:e1:e3:03:66:0c:d8:18:7f:cc:12:68: 3a:c5:5b:dc:ba:b8:1a:36:e4:ea:c9:40:13:3a:1e:40:bc:9b: 05:5c:ae:8e:2b:a3:54:d5:f9:42:b4:9e:33:3b:5d:33:58:a7: 8c:81:c5:43:a7:f3:95:f1:ea:70:22:e0:82:be:7c:c0:ba:80: fd:d3:11:4e:c8:77:b3:57:7c:9d:8c:ab:17:9a:61:05:4e:2b: 4f:08:30:eb:f7:a5:d7:41:82:50:a6:64:c2:27:85:ec:1f:f2: 8e:6b:fb:51:45:e9:b9:39:22:9f:79:18:0a:f2:b6:69:1b:b9: f1:04:8a:1a:09:fa:df:e2:91:bb:18:ac:ca:10:29:bc:b7:38: 34:d5:16:95:39:59:c4:78:26:d6:15:53:5c:e7:8e:6e:8f:95: ef:32:19:4c:d0:4f:9b:6d:e1:ab:d9:59:be:18:58:d6:03:5f: 99:d7:77:bf:3c:d3:63:f9:f1:19:32:ed:5e:84:8b:f0:c9:d0: 0f:9a:b0:e5 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt3WTOeuA5L7s9U+TsFaZj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTg0YjllYjEyMjIzNzExMWMxZjhjYTU3NzA3ZWM3MzA3MjkxZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MdrnaqOz+QertJxm04picZK3fmn Q7RArVpzDuLV1zQUcxeMgt8BxBdAGLhSEuxpGR7fHJKh0isJpthcwadCIcZvh6il xoZGzPk+r8zz68ZZmpXfflu9TiRPOAVOugpZwrnRd0oedN7VbssxDw05X2YRaLI7 8iMyXQu1rELEV8ITJkKu4GGZiSE6UWPMcDm3Qi1BNPgYwDZGe94l8LxR2JNWl2wU DivrfrLGJnlVP+BSNTGUmazQqotIed76tNFwfFhlo0eVpW9P7gIB4UYS0zH9QDe+ gBR33TklfnAmv4z5LS48mgFzsul7bNy+0+OJDRJ06HobBiTK2J3HDaHZhwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFJmEuesSIjcRHB+MpXcH7HMHKR7oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2I5YzFk Ny0yYWVkLTQ2OTYtODBhNy1kNWFiZjUwMzFkMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYjljMWQ3 LTJhZWQtNDY5Ni04MGE3LWQ1YWJmNTAzMWQyMS8xL21ZUzU2eElpTnhFY0g0eWxk d2ZzY3djcEh1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAW1qnAwQAvO++AwQCwSR4AwQAwbCSAwQAw/hT AwQF1G/gMA0EAgACMAcDBQAqAXcAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjwM MA0GCSqGSIb3DQEBCwUAA4IBAQB4efV4C8ppUP1zby6tdIbuIIBQ5PSeiaYuaTFO sEm8WlVDpUCfxN6G9jhlFkWBmObzdMq5rzIkk1KXvKPY4eMDZgzYGH/MEmg6xVvc urgaNuTqyUATOh5AvJsFXK6OK6NU1flCtJ4zO10zWKeMgcVDp/OV8epwIuCCvnzA uoD90xFOyHezV3ydjKsXmmEFTitPCDDr96XXQYJQpmTCJ4XsH/KOa/tRRem5OSKf eRgK8rZpG7nxBIoaCfrf4pG7GKzKECm8tzg01RaVOVnEeCbWFVNc545uj5XvMhlM 0E+bbeGr2Vm+GFjWA1+Z13e/PNNj+fEZMu1ehIvwydAPmrDl -----END CERTIFICATE-----Generated at Mon Jan 26 09:44:52 2026 by rpki-client