This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer File: y__HcfLtWPwoIe50zahT_S42xCg.cer (raw, json) Hash identifier: s9rhFKnmf2Px1fY9qZgNKDs2apYQ9Ze7j+bRRTggD0c= Subject key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD91B06492F88C762B27EC9667107 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25516 IP: 185.49.16.0/22 IP: 195.43.52.0/22 IP: 2001:67c:14e0::/45 IP: 2a04:a540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d9:1b:06:49:2f:88:c7:62:b2:7e:c9:66:71:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:15:a3:26:c6:1c:43:9d:8b:ac:00:c9:b7: d6:2e:90:b5:cd:80:8e:7e:9f:f2:a0:37:7e:9c:6f: c9:0f:3b:b0:c3:2f:1d:41:87:55:b7:50:04:dd:72: e2:9a:c7:08:63:54:49:41:fd:d6:bd:b4:4e:2c:f6: f5:da:c0:bc:2c:80:b6:b0:1b:38:b5:55:f0:84:56: 3f:11:04:63:ad:00:82:fa:77:26:40:05:82:a6:53: 9d:79:80:13:ad:47:12:8a:87:8b:9b:04:71:7c:8f: ca:2e:c3:ee:05:f1:c1:a6:5c:ca:f6:2c:a0:c5:16: 72:40:f2:ea:68:7b:ee:3e:53:86:ac:c5:08:0a:d7: 17:3b:6e:51:12:77:0d:47:1a:87:06:c7:90:de:ce: d7:a7:06:f0:d6:2a:e7:4e:9b:fd:63:f6:bf:d0:5d: 0f:4c:7a:b0:70:26:b2:08:be:7c:41:df:b6:04:6b: ba:00:a4:3a:ba:d8:a6:a3:90:7c:e4:95:8b:19:82: ea:83:a6:22:aa:dd:70:2a:b8:53:a7:90:81:48:f2: 90:ca:ad:9e:c3:e1:d1:82:84:83:0a:86:c4:37:c8: 4c:5b:83:e1:38:eb:e3:ae:b9:1a:78:ba:c5:91:f7: c1:f2:ba:d1:3c:07:d0:2a:f4:ab:46:16:2b:c0:3b: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.16.0/22 195.43.52.0/22 IPv6: 2001:67c:14e0::/45 2a04:a540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25516 Signature Algorithm: sha256WithRSAEncryption 29:01:3c:2e:48:0f:66:46:45:b0:a3:3f:e3:8b:60:cb:92:d3: c6:ba:75:dc:c2:0e:e0:8c:39:ca:90:e1:1b:21:46:b3:d7:03: 61:03:72:a6:48:63:22:5f:24:24:f9:4c:df:06:55:3d:69:22: 6a:9b:06:b2:47:79:de:87:95:8a:35:8a:3f:57:bc:d8:eb:a1: cd:60:5d:12:1c:53:a2:0e:6f:ce:18:ac:43:00:81:32:99:e6: 56:3b:d1:4e:9d:bc:cd:bc:7b:24:72:4a:3d:a1:ca:75:7e:5f: 0b:21:c4:b1:d8:01:51:1a:8a:0a:a8:ca:44:79:6d:9e:57:73: 6c:5e:c0:bb:4b:57:ce:15:1a:1b:df:00:7a:67:33:29:d9:f8: c0:25:4b:83:cb:9d:4b:6a:b1:f4:28:f6:19:bd:e0:58:64:4c: 0f:bf:fd:ad:20:30:42:9f:9e:1b:04:13:b5:c3:8c:47:0d:fb: 7e:db:cf:7c:f7:3a:20:a3:37:70:44:81:b0:2e:9c:e5:6c:8d: 19:ac:7e:41:da:e1:7c:1c:22:69:f2:f7:07:57:63:28:43:79: 7a:f7:3b:f6:93:6d:07:c0:82:5e:ce:1c:f7:75:3d:b0:02:6b: 50:ce:68:61:ca:c1:64:8a:96:1f:6c:e4:d9:9b:55:be:7b:8c: 83:9d:97:61 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt8f9kbBkkviMdisn7JZnEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmZmYzc3MWYyZWQ1OGZjMjgyMWVlNzRjZGE4NTNmZDJlMzZjNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsYVoybGHEOdi6wAybfWLpC1zYCO fp/yoDd+nG/JDzuwwy8dQYdVt1AE3XLimscIY1RJQf3WvbROLPb12sC8LIC2sBs4 tVXwhFY/EQRjrQCC+ncmQAWCplOdeYATrUcSioeLmwRxfI/KLsPuBfHBplzK9iyg xRZyQPLqaHvuPlOGrMUICtcXO25REncNRxqHBseQ3s7Xpwbw1irnTpv9Y/a/0F0P THqwcCayCL58Qd+2BGu6AKQ6utimo5B85JWLGYLqg6Yiqt1wKrhTp5CBSPKQyq2e w+HRgoSDCobEN8hMW4PhOOvjrrkaeLrFkffB8rrRPAfQKvSrRhYrwDvZwQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2U1MmUx NC03YWFkLTQzZTQtODhjNC03YTQwNTQ1NTFmZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZTUyZTE0 LTdhYWQtNDNlNC04OGM0LTdhNDA1NDU1MWZkNC8xL3lfX0hjZkx0V1B3b0llNTB6 YWhUX1M0MnhDZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCuTEQAwQCwys0MBYEAgACMBADBwMgAQZ8FOAD BQMqBKVAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmOsMA0GCSqGSIb3DQEBCwUA A4IBAQApATwuSA9mRkWwoz/ji2DLktPGunXcwg7gjDnKkOEbIUaz1wNhA3KmSGMi XyQk+UzfBlU9aSJqmwayR3neh5WKNYo/V7zY66HNYF0SHFOiDm/OGKxDAIEymeZW O9FOnbzNvHskcko9ocp1fl8LIcSx2AFRGooKqMpEeW2eV3NsXsC7S1fOFRob3wB6 ZzMp2fjAJUuDy51LarH0KPYZveBYZEwPv/2tIDBCn54bBBO1w4xHDft+28989zog ozdwRIGwLpzlbI0ZrH5B2uF8HCJp8vcHV2MoQ3l69zv2k20HwIJezhz3dT2wAmtQ zmhhysFkipYfbOTZm1W+e4yDnZdh -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:51 2026 by rpki-client