This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer File: y9_OOlNV-GH9xIwyASx4ydr5paQ.cer (raw, json) Hash identifier: cb6WxT35DGwm6PTWfL8yQ5vpqMteaT1CC/d6wG9g5EY= Subject key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79111133331820830D46003891D70111 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31655 AS: 204193 AS: 216167 IP: 5.2.96.0/19 IP: 5.144.156.0/22 IP: 62.222.0.0/15 IP: 80.252.64.0/20 IP: 88.215.0.0/18 IP: 89.213.8.0 -- 89.213.39.255 IP: 185.4.196.0/22 IP: 185.21.208.0/22 IP: 185.110.180.0 -- 185.110.182.255 IP: 188.66.64.0/18 IP: 195.162.96.0/19 IP: 213.218.192.0/20 IP: 2a02:c1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:11:33:33:18:20:83:0d:46:00:38:91:d7:01:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:1b:e2:98:2b:0f:1b:c6:ea:d2:5f:e8:8d: a5:b7:97:4b:da:ee:38:e3:6c:3c:45:f9:c4:38:8a: 87:02:ae:31:6b:b1:09:02:3b:10:47:29:64:ce:ab: d9:9e:a5:34:bd:12:58:6d:df:94:d1:f8:a5:19:8d: 2e:58:f6:02:73:62:83:eb:fb:07:5b:d3:ea:12:cd: 54:86:3e:9f:ec:14:93:51:9d:80:02:6b:3c:a9:b7: e0:b9:a8:45:3a:81:63:bc:95:dc:7a:58:d1:f0:b8: 51:d8:88:f0:de:90:bc:18:6c:80:d3:e0:a3:45:fb: 87:e1:54:7c:43:47:c0:8c:15:9e:d3:30:b3:65:89: a0:93:3e:ce:5c:63:e3:89:f0:06:7f:25:e9:f7:11: c7:b6:3c:94:1f:ef:b5:39:df:30:e7:98:8a:29:2e: 8f:62:16:16:b3:14:8d:73:6b:02:7d:5e:ba:cf:60: 7a:55:16:73:9e:38:78:e3:d3:7c:49:aa:6b:8c:8c: 32:03:eb:73:ad:cb:d4:23:24:94:aa:05:8a:04:eb: 59:38:da:ad:cf:98:16:ac:0b:48:fd:9c:9b:85:3e: 94:1a:88:64:b5:ba:d1:bb:39:10:b7:b4:a9:29:79: fd:c1:87:03:82:28:95:10:2c:52:9d:a4:61:01:10: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.96.0/19 5.144.156.0/22 62.222.0.0/15 80.252.64.0/20 88.215.0.0/18 89.213.8.0-89.213.39.255 185.4.196.0/22 185.21.208.0/22 185.110.180.0-185.110.182.255 188.66.64.0/18 195.162.96.0/19 213.218.192.0/20 IPv6: 2a02:c1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31655 204193 216167 Signature Algorithm: sha256WithRSAEncryption 90:fc:6f:77:f6:32:e1:83:4b:08:56:b9:c4:2f:d7:64:cc:86: 1f:a3:39:87:67:b1:a9:79:48:32:86:d1:98:69:30:c2:59:34: 56:2c:52:44:93:fd:8e:be:9d:5b:3a:d9:96:91:76:2d:02:9f: ff:44:3d:b2:04:23:a9:0d:b1:f2:d3:0d:4d:0d:ae:00:5e:2c: 28:d2:6e:a5:f6:d4:49:68:c9:9a:cc:b7:b9:b8:55:cd:97:bc: 98:e0:7d:82:96:eb:09:4d:a1:b2:76:6e:18:d5:85:b3:cb:c2: cd:e4:5c:69:c5:06:01:95:ab:aa:a1:e4:50:f9:1a:b9:98:85: 7a:bb:53:04:94:9a:bb:e4:1c:23:1a:7b:14:86:71:9e:6d:82: ed:81:74:e8:6b:28:96:17:cd:e0:a5:3b:de:07:e3:da:0d:f3: 55:6b:d3:55:63:58:cc:6c:c3:37:ec:12:cf:bb:34:19:34:9a: f9:25:a2:3d:34:1a:4a:91:90:f2:c0:c0:36:cb:1e:41:ac:d9: 7c:8d:a9:b5:6c:69:4e:0d:de:7f:8f:cc:6e:e0:d0:23:39:2b: b5:a2:ad:61:f9:e6:b0:14:1e:af:70:9c:3d:9e:12:33:a5:20: e5:5b:b7:ee:11:e9:79:b9:fa:60:60:12:ef:77:90:83:ac:4e: 16:c2:0e:a1 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt5EREzMxgggw1GADiR1wERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmRmY2UzYTUzNTVmODYxZmRjNDhjMzIwMTJjNzhjOWRhZjlhNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFUb4pgrDxvG6tJf6I2lt5dL2u44 42w8RfnEOIqHAq4xa7EJAjsQRylkzqvZnqU0vRJYbd+U0filGY0uWPYCc2KD6/sH W9PqEs1Uhj6f7BSTUZ2AAms8qbfguahFOoFjvJXceljR8LhR2Ijw3pC8GGyA0+Cj RfuH4VR8Q0fAjBWe0zCzZYmgkz7OXGPjifAGfyXp9xHHtjyUH++1Od8w55iKKS6P YhYWsxSNc2sCfV66z2B6VRZznjh449N8SaprjIwyA+tzrcvUIySUqgWKBOtZONqt z5gWrAtI/ZybhT6UGohktbrRuzkQt7SpKXn9wYcDgiiVECxSnaRhARDvFQIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFMvfzjpTVfhh/cSMMgEseMna+aWkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzc0YTFi NS0zYzJlLTQ4ZTItOTBmZC1iNDlkODllMzBkZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNzRhMWI1 LTNjMmUtNDhlMi05MGZkLWI0OWQ4OWUzMGRkZC8xL3k5X09PbE5WLUdIOXhJd3lB U3g0eWRyNXBhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBdBAIAATBXAwQFBQJgAwQCBZCcAwMBPt4DBARQ/EADBAZY1wAw DAMEA1nVCAMEA1nVIAMEArkExAMEArkV0DAMAwQCuW60AwQAuW62AwQGvEJAAwQF w6JgAwQE1drAMA0EAgACMAcDBQMqAsHAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4C AnunAgMDHaECAwNMZzANBgkqhkiG9w0BAQsFAAOCAQEAkPxvd/Yy4YNLCFa5xC/X ZMyGH6M5h2exqXlIMobRmGkwwlk0VixSRJP9jr6dWzrZlpF2LQKf/0Q9sgQjqQ2x 8tMNTQ2uAF4sKNJupfbUSWjJmsy3ubhVzZe8mOB9gpbrCU2hsnZuGNWFs8vCzeRc acUGAZWrqqHkUPkauZiFertTBJSau+QcIxp7FIZxnm2C7YF06GsolhfN4KU73gfj 2g3zVWvTVWNYzGzDN+wSz7s0GTSa+SWiPTQaSpGQ8sDANsseQazZfI2ptWxpTg3e f4/MbuDQIzkrtaKtYfnmsBQer3CcPZ4SM6Ug5Vu37hHpebn6YGAS73eQg6xOFsIO oQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:29 2026 by rpki-client