This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer File: oyLyKe3C8xSi-l7w168d3bSZ6jE.cer (raw, json) Hash identifier: 3ZvrNQyJ4670NyFEkZBJTXdQNDSxA/5sl51lbWlJwE0= Subject key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8073F5A965A019F36DCB012FEA598B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8473 AS: 16261 AS: 21250 AS: 42309 IP: 5.150.192.0/18 IP: 37.123.128.0/18 IP: 46.59.0.0/17 IP: 62.63.192.0/18 IP: 77.240.208.0/20 IP: 79.136.0.0/17 IP: 81.170.128.0/17 IP: 82.196.96.0/19 IP: 85.24.128.0/17 IP: 91.132.176.0/22 IP: 94.254.0.0/17 IP: 98.128.0.0/16 IP: 109.228.128.0/18 IP: 176.10.128.0/17 IP: 178.174.128.0/17 IP: 185.9.60.0/22 IP: 185.57.4.0/22 IP: 185.90.176.0/22 IP: 195.178.160.0/19 IP: 212.85.64.0/19 IP: 212.116.64.0/19 IP: 213.80.96.0/19 IP: 213.136.32.0/19 IP: 213.164.192.0/19 IP: 217.27.160.0/19 IP: 217.31.160.0/19 IP: 2001:9b0::/29 IP: 2a02:508::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:73:f5:a9:65:a0:19:f3:6d:cb:01:2f:ea:59:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4a:cc:21:79:e1:b7:6c:ba:98:19:d0:e0:8f: bf:f9:2f:af:62:e6:f3:9e:ad:e6:c7:9a:83:c8:d3: ab:25:e8:a0:2e:17:50:3e:dd:8d:df:f1:0f:e6:bb: 2e:65:f3:4a:df:f6:1f:04:b1:b6:41:13:90:21:a7: 0d:c8:1f:6c:02:45:47:bf:24:2a:4c:d9:53:9b:60: 10:2b:de:48:a4:43:3e:59:09:d5:4a:97:96:43:8f: 51:2d:4c:ca:f9:d7:84:87:b3:0d:c1:95:3b:80:38: d8:6e:bd:e4:1a:01:b9:1f:01:d5:8c:9c:87:0e:24: a6:f6:bb:4f:a9:21:53:96:a9:8b:40:fa:4c:4b:47: 40:21:e6:6b:d0:8d:ce:b5:1d:b4:d7:f4:24:71:a9: 09:42:b3:1f:cd:64:c5:93:6c:f1:4a:4a:c5:25:f0: da:e6:2c:c6:15:1b:64:f2:9a:db:ec:bd:81:89:56: c5:e7:ae:51:82:d2:f2:b6:1f:bc:c4:07:2f:3b:37: 2c:c4:cf:5d:65:7a:0f:49:52:29:16:44:58:84:92: 92:ae:81:e9:d5:9c:94:56:8a:94:42:90:97:9d:e1: 44:20:18:cf:16:95:6d:3e:73:e6:5f:07:4f:c6:81: b0:ae:05:9e:c8:c7:74:bf:fb:ea:ac:ff:84:ab:de: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.192.0/18 37.123.128.0/18 46.59.0.0/17 62.63.192.0/18 77.240.208.0/20 79.136.0.0/17 81.170.128.0/17 82.196.96.0/19 85.24.128.0/17 91.132.176.0/22 94.254.0.0/17 98.128.0.0/16 109.228.128.0/18 176.10.128.0/17 178.174.128.0/17 185.9.60.0/22 185.57.4.0/22 185.90.176.0/22 195.178.160.0/19 212.85.64.0/19 212.116.64.0/19 213.80.96.0/19 213.136.32.0/19 213.164.192.0/19 217.27.160.0/19 217.31.160.0/19 IPv6: 2001:9b0::/29 2a02:508::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8473 16261 21250 42309 Signature Algorithm: sha256WithRSAEncryption 3f:c8:e6:23:00:8f:49:8a:3c:04:17:c5:5b:b7:df:8e:81:bf: fa:00:71:c6:87:be:77:ec:c3:c7:49:da:3d:45:de:39:94:c9: d9:da:a1:03:e8:e2:42:df:b6:64:59:e1:05:12:76:02:ba:dc: b9:39:6e:8d:39:64:28:55:43:f0:23:5b:f7:9b:2e:4d:a9:d2: 77:84:01:33:f7:53:3d:6a:37:7e:f8:ec:67:66:86:40:8d:4b: bd:19:1d:86:14:71:b4:69:ac:32:e5:2f:ae:83:02:62:4c:00: 1e:45:3f:15:ba:29:0a:27:b9:50:12:c5:50:5d:77:e8:3b:b4: e9:be:5b:c1:4e:13:e5:6a:01:fa:eb:ca:99:e1:72:aa:04:58: 82:05:11:39:56:8e:5a:be:20:47:d4:7f:71:ff:c5:3e:19:ff: 77:37:e5:72:ea:a3:e1:b8:b7:aa:ce:0c:44:8d:fa:34:4a:b4: 89:9c:84:9d:10:d7:03:f1:10:81:f8:99:4a:16:95:52:60:9a: a2:e8:31:fc:34:9f:e0:4f:a3:57:96:ca:ab:3a:65:70:47:58: 68:94:9c:f8:99:56:03:5d:0f:cf:5f:ef:de:29:1b:11:d8:fd: 6e:14:8f:fa:d8:a8:66:82:01:66:c4:fa:56:73:4f:65:bf:6c: c9:74:4b:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISAZt8gHP1qWWgGfNtywEv6lmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzIyZjIyOWVkYzJmMzE0YTJmYTVlZjBkN2FmMWRkZGI0OTllYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UrMIXnht2y6mBnQ4I+/+S+vYubz nq3mx5qDyNOrJeigLhdQPt2N3/EP5rsuZfNK3/YfBLG2QROQIacNyB9sAkVHvyQq TNlTm2AQK95IpEM+WQnVSpeWQ49RLUzK+deEh7MNwZU7gDjYbr3kGgG5HwHVjJyH DiSm9rtPqSFTlqmLQPpMS0dAIeZr0I3OtR201/QkcakJQrMfzWTFk2zxSkrFJfDa 5izGFRtk8prb7L2BiVbF565RgtLyth+8xAcvOzcsxM9dZXoPSVIpFkRYhJKSroHp 1ZyUVoqUQpCXneFEIBjPFpVtPnPmXwdPxoGwrgWeyMd0v/vqrP+Eq94s1wIDAQAB o4IDXDCCA1gwHQYDVR0OBBYEFKMi8intwvMUovpe8NevHd20meoxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2VkZmZi Yi0xMDgyLTQ0ODItOGEwOC02NWY4MjQ3ZmZhOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWRmZmJi LTEwODItNDQ4Mi04YTA4LTY1ZjgyNDdmZmE5MS8xL295THlLZTNDOHhTaS1sN3cx NjhkM2JTWjZqRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHOBggrBgEF BQcBBwEB/wSBvjCBuzCBogQCAAEwgZsDBAYFlsADBAYle4ADBAcuOwADBAY+P8AD BARN8NADBAdPiAADBAdRqoADBAVSxGADBAdVGIADBAJbhLADBAde/gADAwBigAME Bm3kgAMEB7AKgAMEB7KugAMEArkJPAMEArk5BAMEArlasAMEBcOyoAMEBdRVQAME BdR0QAMEBdVQYAMEBdWIIAMEBdWkwAMEBdkboAMEBdkfoDAUBAIAAjAOAwUDIAEJ sAMFAyoCBQgwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQICIRkCAj+FAgJTAgIDAKVF MA0GCSqGSIb3DQEBCwUAA4IBAQA/yOYjAI9JijwEF8Vbt9+Ogb/6AHHGh7537MPH Sdo9Rd45lMnZ2qED6OJC37ZkWeEFEnYCuty5OW6NOWQoVUPwI1v3my5NqdJ3hAEz 91M9ajd++OxnZoZAjUu9GR2GFHG0aawy5S+ugwJiTAAeRT8VuikKJ7lQEsVQXXfo O7TpvlvBThPlagH668qZ4XKqBFiCBRE5Vo5aviBH1H9x/8U+Gf93N+Vy6qPhuLeq zgxEjfo0SrSJnISdENcD8RCB+JlKFpVSYJqi6DH8NJ/gT6NXlsqrOmVwR1holJz4 mVYDXQ/PX+/eKRsR2P1uFI/62KhmggFmxPpWc09lv2zJdEuA -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:41 2026 by rpki-client