This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer File: yhx1cVluREqjI3HLq3JNRtPDxSw.cer (raw, json) Hash identifier: Qu4RgFxtx1hv35pDnkcmOh1OSqJgorZKwcjwNan2ulU= Subject key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910DDAAA9238702D1319170F6729957 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12695 AS: 201186 AS: 203747 IP: 79.137.128.0/22 IP: 79.137.133.0 -- 79.137.138.255 IP: 79.137.140.0 -- 79.137.163.255 IP: 79.137.165.0 -- 79.137.166.255 IP: 79.137.168.0/23 IP: 79.137.172.0/23 IP: 79.137.181.0 -- 79.137.239.255 IP: 79.137.248.0/21 IP: 85.192.0.0/19 IP: 85.192.36.0 -- 85.192.63.255 IP: 89.208.8.0 -- 89.208.51.255 IP: 89.208.64.0 -- 89.208.83.255 IP: 89.208.88.0 -- 89.208.122.255 IP: 89.208.124.0/22 IP: 89.208.136.0 -- 89.208.179.255 IP: 89.208.184.0 -- 89.208.195.255 IP: 89.208.200.0/21 IP: 89.208.212.0/22 IP: 89.208.224.0/22 IP: 89.208.232.0/21 IP: 92.38.192.0/20 IP: 92.38.212.0 -- 92.38.255.255 IP: 95.163.0.0/19 IP: 95.163.64.0 -- 95.163.144.255 IP: 95.163.146.0/23 IP: 95.163.152.0/21 IP: 95.163.176.0/22 IP: 95.163.184.0/21 IP: 185.125.100.0/22 IP: 185.146.116.0/22 IP: 213.219.192.0 -- 213.219.211.255 IP: 213.219.216.0 -- 213.219.251.255 IP: 213.248.0.0/18 IP: 2a00:1c48::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dd:aa:a9:23:87:02:d1:31:91:70:f6:72:99:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:23:ed:62:fe:5c:42:4d:ae:fb:54:ec:d7:18: b8:c7:97:43:b4:39:92:92:15:05:2a:9c:e6:89:38: 56:dc:57:9b:18:94:88:41:51:a4:0b:ba:c2:92:05: e8:98:3e:6a:ce:79:f8:9f:51:76:e0:97:b4:0e:6e: b6:a7:26:06:bb:29:78:33:9b:76:73:69:27:d3:f1: d8:11:a3:c4:fb:aa:7a:71:09:33:c9:93:c9:2e:79: 62:e4:23:3d:6c:09:7f:da:f4:3b:36:8a:af:f5:f0: b9:2c:fb:7b:13:55:55:e8:60:a7:86:2f:0f:d3:f8: 71:bb:9d:ba:42:49:4c:e8:a9:85:56:29:69:c9:53: 43:a2:2c:e4:fa:fc:0d:46:74:0a:5b:40:7e:b6:bd: a4:1a:e7:fd:11:1c:ff:1e:ab:ba:5e:b7:6d:05:76: 11:79:c6:dc:a4:70:c6:8c:54:41:cc:d1:70:2e:e9: c7:a4:b8:98:18:07:67:45:e8:9b:51:b9:df:78:39: cf:08:0b:4f:2e:c3:90:d1:c1:bd:d7:08:b2:ff:35: 4c:2e:58:5c:48:16:c1:b8:13:34:22:86:22:a3:79: 20:ab:d9:53:ba:8e:07:90:d2:0f:7c:d0:84:13:42: 6f:66:3b:24:f5:b5:19:23:54:a7:ac:9e:d8:e0:d9: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.137.128.0/22 79.137.133.0-79.137.138.255 79.137.140.0-79.137.163.255 79.137.165.0-79.137.166.255 79.137.168.0/23 79.137.172.0/23 79.137.181.0-79.137.239.255 79.137.248.0/21 85.192.0.0/19 85.192.36.0-85.192.63.255 89.208.8.0-89.208.51.255 89.208.64.0-89.208.83.255 89.208.88.0-89.208.122.255 89.208.124.0/22 89.208.136.0-89.208.179.255 89.208.184.0-89.208.195.255 89.208.200.0/21 89.208.212.0/22 89.208.224.0/22 89.208.232.0/21 92.38.192.0/20 92.38.212.0-92.38.255.255 95.163.0.0/19 95.163.64.0-95.163.144.255 95.163.146.0/23 95.163.152.0/21 95.163.176.0/22 95.163.184.0/21 185.125.100.0/22 185.146.116.0/22 213.219.192.0-213.219.211.255 213.219.216.0-213.219.251.255 213.248.0.0/18 IPv6: 2a00:1c48::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12695 201186 203747 Signature Algorithm: sha256WithRSAEncryption 76:47:d7:b5:49:b1:4a:a1:15:6a:5d:7a:3a:ff:67:21:06:d7: c1:e8:0b:17:37:6d:aa:e0:bb:a7:d5:96:03:1d:ce:36:84:9e: 42:63:9c:66:cd:a9:fc:34:42:ac:5c:49:ab:0d:3a:e9:d2:a3: ab:26:9e:5c:7b:5b:8f:e5:15:20:2f:0b:0d:49:78:df:6e:1d: 04:0c:aa:99:4c:2b:12:7c:26:b9:5e:63:47:ec:ff:a6:4c:09: 10:b0:ed:22:bb:e6:3a:77:16:e0:03:29:b0:95:d6:4e:09:46: e1:fb:34:d2:fd:67:6d:dd:47:71:c7:43:0f:0f:6c:11:28:bb: 57:62:fb:b1:22:59:2b:b1:4a:fd:b5:f1:74:f6:f7:ec:7d:02: 41:f0:30:c7:19:a6:54:61:f3:5b:04:2b:14:05:77:14:16:0e: d4:b6:51:dc:0b:17:98:9d:aa:71:ea:8e:e8:4f:e1:94:33:c0: 1e:b9:1f:2c:64:16:25:b0:91:20:1a:9b:42:c4:32:a8:42:78: e5:ed:f2:28:2c:92:4c:83:30:b0:ca:0f:58:2b:a0:79:6d:db: 88:42:bf:02:bd:eb:92:34:dd:23:db:97:ec:cb:66:f8:18:b3: a6:4a:22:b4:bc:7e:69:e4:7b:72:79:03:4d:19:1d:f4:58:c1: 29:6f:c5:e4 -----BEGIN CERTIFICATE----- MIIG5TCCBc2gAwIBAgISAZt5EN2qqSOHAtExkXD2cplXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFjNzU3MTU5NmU0NDRhYTMyMzcxY2JhYjcyNGQ0NmQzYzNjNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iPtYv5cQk2u+1Ts1xi4x5dDtDmS khUFKpzmiThW3FebGJSIQVGkC7rCkgXomD5qznn4n1F24Je0Dm62pyYGuyl4M5t2 c2kn0/HYEaPE+6p6cQkzyZPJLnli5CM9bAl/2vQ7Noqv9fC5LPt7E1VV6GCnhi8P 0/hxu526QklM6KmFVilpyVNDoizk+vwNRnQKW0B+tr2kGuf9ERz/Hqu6XrdtBXYR ecbcpHDGjFRBzNFwLunHpLiYGAdnReibUbnfeDnPCAtPLsOQ0cG91wiy/zVMLlhc SBbBuBM0IoYio3kgq9lTuo4HkNIPfNCEE0JvZjsk9bUZI1SnrJ7Y4NlXNwIDAQAB o4ID8TCCA+0wHQYDVR0OBBYEFMocdXFZbkRKoyNxy6tyTUbTw8UsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzMzNjJj Ni1hMDNhLTRmOWYtYTA5MS1iNzYyYzAxNzVmMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzM2MmM2 LWEwM2EtNGY5Zi1hMDkxLWI3NjJjMDE3NWYyNy8xL3loeDFjVmx1UkVxakkzSExx M0pOUnRQRHhTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBZQYIKwYB BQUHAQcBAf8EggFUMIIBUDCCAT0EAgABMIIBNQMEAk+JgDAMAwQAT4mFAwQAT4mK MAwDBAJPiYwDBAJPiaAwDAMEAE+JpQMEAE+JpgMEAU+JqAMEAU+JrDAMAwQAT4m1 AwQET4ngAwQDT4n4AwQFVcAAMAwDBAJVwCQDBAZVwAAwDAMEA1nQCAMEAlnQMDAM AwQGWdBAAwQCWdBQMAwDBANZ0FgDBABZ0HoDBAJZ0HwwDAMEA1nQiAMEAlnQsDAM AwQDWdC4AwQCWdDAAwQDWdDIAwQCWdDUAwQCWdDgAwQDWdDoAwQEXCbAMAsDBAJc JtQDAwBcJgMEBV+jADAMAwQGX6NAAwQAX6OQAwQBX6OSAwQDX6OYAwQCX6OwAwQD X6O4AwQCuX1kAwQCuZJ0MAwDBAbV28ADBALV29AwDAMEA9Xb2AMEAtXb+AMEBtX4 ADANBAIAAjAHAwUBKgAcSDAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgIxlwIDAxHi AgMDG+MwDQYJKoZIhvcNAQELBQADggEBAHZH17VJsUqhFWpdejr/ZyEG18HoCxc3 bargu6fVlgMdzjaEnkJjnGbNqfw0QqxcSasNOunSo6smnlx7W4/lFSAvCw1JeN9u HQQMqplMKxJ8JrleY0fs/6ZMCRCw7SK75jp3FuADKbCV1k4JRuH7NNL9Z23dR3HH Qw8PbBEou1di+7EiWSuxSv218XT29+x9AkHwMMcZplRh81sEKxQFdxQWDtS2UdwL F5idqnHqjuhP4ZQzwB65HyxkFiWwkSAam0LEMqhCeOXt8igskkyDMLDKD1groHlt 24hCvwK965I03SPbl+zLZvgYs6ZKIrS8fmnke3J5A00ZHfRYwSlvxeQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:53 2026 by rpki-client