This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer (raw, json) Hash identifier: LVRaABigHRcLwqbY170tDhs/+o1sT7QehjSW7Ij88Dg= Subject key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1363353BC0C4F22FBC51636C9F3B3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62163 IP: 5.157.64.0/21 IP: 185.113.68.0/22 IP: 185.113.80.0/22 IP: 185.249.212.0/22 IP: 193.37.80.0/22 IP: 2a06:3f00::/29 IP: 2a07:fdc0::/29 IP: 2a0a:8100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:63:35:3b:c0:c4:f2:2f:bc:51:63:6c:9f:3b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:2e:c9:1e:23:1e:c4:a9:5e:a0:a2:85:7f: 8d:8c:a2:48:66:91:66:7d:e8:14:7b:c3:95:e9:98: 95:de:c3:4e:c3:e6:2c:64:75:72:e6:a7:65:17:85: 74:11:43:22:71:04:b1:e7:6c:3f:8d:99:a6:b8:72: 0b:7f:a0:64:37:d9:32:da:71:7e:ed:59:b3:97:7e: 25:b3:0d:3b:3e:e7:db:7c:3c:f8:ed:c3:3b:2f:b7: 95:5c:71:6d:ad:d3:30:ca:0b:fb:a6:ce:3f:79:a1: 07:8d:23:c8:fa:c4:6b:70:cc:95:f8:f6:ac:f1:d4: 95:a4:17:c3:e5:10:4a:14:2e:f3:26:ab:76:ae:83: aa:a4:72:78:50:d6:05:2b:35:6e:d9:c9:39:ca:7a: ea:41:d4:2a:d8:97:40:9a:3c:1f:b9:96:d7:0f:2a: 0a:81:95:fd:72:31:f7:f9:41:2f:0d:94:bc:91:14: 93:fb:94:47:37:68:5f:26:77:33:a3:3a:9b:c0:e5: c8:c8:2c:30:8b:84:7a:94:ee:9d:90:f4:21:6d:4c: b4:12:b7:ab:d5:49:a7:d2:72:8c:f6:86:d3:30:46: 65:5f:c4:a2:1f:2f:da:e3:31:3b:dc:b1:a8:50:0b: e6:7c:d2:07:89:55:b5:03:7f:61:4a:16:02:3a:3b: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.64.0/21 185.113.68.0/22 185.113.80.0/22 185.249.212.0/22 193.37.80.0/22 IPv6: 2a06:3f00::/29 2a07:fdc0::/29 2a0a:8100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62163 Signature Algorithm: sha256WithRSAEncryption 7f:2a:5d:84:b8:50:bc:34:07:5e:aa:6b:16:24:f0:f6:eb:19: 4f:35:c0:cf:fb:45:be:0a:d4:a5:25:25:0c:aa:02:73:6d:5d: c0:10:71:f7:77:fb:9d:61:32:f3:9a:73:1e:8e:a7:87:8c:0c: 5f:8f:fb:11:8e:e8:bf:91:9c:c7:3b:0a:c2:ca:e6:31:61:06: d7:86:9d:bb:3b:68:78:8d:80:79:42:37:cf:38:60:c4:d7:bc: df:f9:f5:93:77:fe:71:29:90:d5:07:5f:b1:ac:f1:43:18:e9: 0b:ce:91:2f:cf:4c:37:91:15:43:97:a7:d3:aa:53:48:08:95: 32:ef:bf:04:2f:df:ae:66:85:4d:0b:17:94:fc:e4:58:cf:5d: 38:b2:b2:44:20:86:1b:4b:59:2a:91:83:5e:f2:37:59:10:be: 81:9d:d5:51:29:8d:a3:be:f2:53:d2:e2:8b:07:46:22:d3:91: ef:ab:b6:47:45:6b:bf:da:37:ef:d4:10:30:a0:5d:ac:5d:ac: c6:f9:36:eb:ee:90:21:d2:29:14:4f:cc:3d:ec:d4:e5:13:4f: 61:3c:1f:1f:1d:42:d2:c5:b1:19:92:10:db:00:83:06:2d:77: b9:f1:cb:0a:bb:87:94:d2:b7:0a:25:cb:7a:22:94:78:c6:cb: e0:b2:17:89 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt/E2M1O8DE8i+8UWNsnzs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjRmYmEwOTE5MGI3Njg0OWZmZjNkMjZkNTgwNzkwZTU0ZmFjMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HAuyR4jHsSpXqCihX+NjKJIZpFm fegUe8OV6ZiV3sNOw+YsZHVy5qdlF4V0EUMicQSx52w/jZmmuHILf6BkN9ky2nF+ 7Vmzl34lsw07PufbfDz47cM7L7eVXHFtrdMwygv7ps4/eaEHjSPI+sRrcMyV+Pas 8dSVpBfD5RBKFC7zJqt2roOqpHJ4UNYFKzVu2ck5ynrqQdQq2JdAmjwfuZbXDyoK gZX9cjH3+UEvDZS8kRST+5RHN2hfJnczozqbwOXIyCwwi4R6lO6dkPQhbUy0Erer 1Umn0nKM9obTMEZlX8SiHy/a4zE73LGoUAvmfNIHiVW1A39hShYCOjt4kQIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFMtPugkZC3aEn/89JtWAeQ5U+sLjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2RhZGI0 Yi0xNGYzLTQyZmEtOTViNy1mODVjYzU3NDdmYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvZGFkYjRi LTE0ZjMtNDJmYS05NWI3LWY4NWNjNTc0N2ZiZi8xL3kwLTZDUmtMZG9TZl96MG0x WUI1RGxUNnd1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQDBZ1AAwQCuXFEAwQCuXFQAwQCufnUAwQCwSVQ MBsEAgACMBUDBQMqBj8AAwUDKgf9wAMFAyoKgQAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPLTMA0GCSqGSIb3DQEBCwUAA4IBAQB/Kl2EuFC8NAdeqmsWJPD26xlP NcDP+0W+CtSlJSUMqgJzbV3AEHH3d/udYTLzmnMejqeHjAxfj/sRjui/kZzHOwrC yuYxYQbXhp27O2h4jYB5QjfPOGDE17zf+fWTd/5xKZDVB1+xrPFDGOkLzpEvz0w3 kRVDl6fTqlNICJUy778EL9+uZoVNCxeU/ORYz104srJEIIYbS1kqkYNe8jdZEL6B ndVRKY2jvvJT0uKLB0Yi05Hvq7ZHRWu/2jfv1BAwoF2sXazG+Tbr7pAh0ikUT8w9 7NTlE09hPB8fHULSxbEZkhDbAIMGLXe58csKu4eU0rcKJct6IpR4xsvgsheJ -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:05 2026 by rpki-client