This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer File: rYg6hugtDZEPz1n4_5978aZxSHA.cer (raw, json) Hash identifier: ivUhw31VC3jg8aRkwLgGw+dS0rFV7bHKlzsn2B8CZ48= Subject key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910BB28BF24831A59A700345DC6A9F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48894 IP: 91.223.182.0/24 IP: 91.226.99.0/24 IP: 91.240.216.0/24 IP: 193.9.21.0/24 IP: 193.104.240.0/24 IP: 195.206.228.0/23 IP: 2001:67c:2468::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bb:28:bf:24:83:1a:59:a7:00:34:5d:c6:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:12:16:37:7a:60:6f:dd:7a:c8:21:ef:a8: c8:2d:a7:62:f2:f7:a4:98:fe:b4:75:b7:a9:56:91: 43:d6:fe:5f:2e:e3:dc:ec:f3:01:70:55:36:f6:02: 6a:af:23:ad:a3:4a:00:8c:67:57:95:24:a9:a1:f8: 38:03:bd:28:19:b0:de:32:5c:5e:84:91:55:e3:b2: 36:01:24:36:ce:ce:36:10:ba:49:65:78:79:9e:50: db:39:23:82:84:9e:b0:5c:ec:df:43:b1:98:46:9c: f6:e4:f4:3c:99:68:00:a1:53:72:82:7d:a7:f3:f6: f1:50:28:ab:b6:80:dd:dc:00:cf:63:dd:85:4b:d7: 2d:93:78:23:dc:75:6a:a1:d0:07:b0:83:d8:bf:ec: 7e:88:b7:fe:3d:f4:0d:86:db:46:53:67:b3:93:4e: 43:8a:b3:89:08:be:c1:73:d6:5a:7d:4e:51:f1:ea: 45:47:b2:97:c6:96:e4:53:81:aa:ef:f7:68:eb:84: b6:6c:87:92:a9:ae:4c:8f:4f:3f:97:45:97:f4:9a: 52:6b:a0:6c:ff:c3:ae:9e:f0:0a:7c:fe:81:43:b7: 8e:51:aa:52:7d:9f:85:9d:a3:c8:06:70:8a:77:6e: 35:6f:73:29:81:3d:f3:70:6c:54:72:9f:68:a0:fa: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.182.0/24 91.226.99.0/24 91.240.216.0/24 193.9.21.0/24 193.104.240.0/24 195.206.228.0/23 IPv6: 2001:67c:2468::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48894 Signature Algorithm: sha256WithRSAEncryption 62:1c:b3:f6:e3:65:81:91:21:39:e3:82:8b:d8:0e:2b:5e:6c: e1:36:ca:e8:31:91:9f:b5:75:8d:af:44:6d:1d:a2:ef:50:f6: 62:67:ed:d2:7a:3b:10:c3:0d:dd:cc:b8:20:69:d5:fe:0f:23: c2:8c:92:5e:84:a0:96:33:e9:51:ec:72:6e:c0:ab:b7:73:53: 43:eb:39:c6:ce:4b:a7:9c:4e:d3:c5:5d:46:6f:27:b2:d4:ac: df:ad:9a:37:20:1d:2a:66:9a:4f:8c:f2:78:37:1e:f7:0f:da: dd:d6:e7:f3:a3:37:e0:d4:5d:60:a8:71:45:6f:ae:74:40:37: 4e:a9:70:6b:03:92:f7:a4:49:9a:49:fa:93:61:3a:91:fb:62: e2:f5:63:d5:a4:08:fd:46:16:60:12:72:a4:86:de:61:37:41: ab:76:4f:af:64:32:1f:d7:91:e6:79:63:da:e3:29:3e:30:0e: db:71:15:e0:08:7d:1b:4c:a3:11:2b:87:d2:e5:db:fc:d6:35: 17:64:e4:0b:22:0a:82:69:f6:27:9e:17:ae:49:21:c7:98:79: b9:c9:b4:a7:1b:a1:56:ba:e3:d0:76:31:c9:0d:cf:d4:60:81: 9b:9e:71:ce:27:97:c6:71:ab:7b:7b:97:4d:df:3a:bb:00:45: e6:f0:74:5d -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt5ELsovySDGlmnADRdxqn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDg4M2E4NmU4MmQwZDkxMGZjZjU5ZjhmZjlmN2JmMWE2NzE0ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rQSFjd6YG/desgh76jILadi8vek mP60dbepVpFD1v5fLuPc7PMBcFU29gJqryOto0oAjGdXlSSpofg4A70oGbDeMlxe hJFV47I2ASQ2zs42ELpJZXh5nlDbOSOChJ6wXOzfQ7GYRpz25PQ8mWgAoVNygn2n 8/bxUCirtoDd3ADPY92FS9ctk3gj3HVqodAHsIPYv+x+iLf+PfQNhttGU2ezk05D irOJCL7Bc9ZafU5R8epFR7KXxpbkU4Gq7/do64S2bIeSqa5Mj08/l0WX9JpSa6Bs /8OunvAKfP6BQ7eOUapSfZ+FnaPIBnCKd241b3MpgT3zcGxUcp9ooPpwowIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFK2IOoboLQ2RD89Z+P+fe/GmcUhwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzdiMDU2 ZC0wOWY3LTRmMTItYjFhMi1hNTZiZjBjZjRjYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvN2IwNTZk LTA5ZjctNGYxMi1iMWEyLWE1NmJmMGNmNGNiZS8xL3JZZzZodWd0RFpFUHoxbjRf NTk3OGFaeFNIQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAqBAIAATAkAwQAW9+2AwQAW+JjAwQAW/DYAwQAwQkVAwQAwWjw AwQBw87kMA8EAgACMAkDBwAgAQZ8JGgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AL7+MA0GCSqGSIb3DQEBCwUAA4IBAQBiHLP242WBkSE544KL2A4rXmzhNsroMZGf tXWNr0RtHaLvUPZiZ+3SejsQww3dzLggadX+DyPCjJJehKCWM+lR7HJuwKu3c1ND 6znGzkunnE7TxV1Gbyey1KzfrZo3IB0qZppPjPJ4Nx73D9rd1ufzozfg1F1gqHFF b650QDdOqXBrA5L3pEmaSfqTYTqR+2Li9WPVpAj9RhZgEnKkht5hN0Grdk+vZDIf 15HmeWPa4yk+MA7bcRXgCH0bTKMRK4fS5dv81jUXZOQLIgqCafYnnheuSSHHmHm5 ybSnG6FWuuPQdjHJDc/UYIGbnnHOJ5fGcat7e5dN3zq7AEXm8HRd -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:54 2026 by rpki-client