This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer File: ywyjSKyJHDNtjHlFpb1bMyXrXws.cer (raw, json) Hash identifier: Kl9rgKxAmMFVijFgIozREEc+MavgdQPNjfeuOOlJpmg= Subject key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30449A1A45B68C2799509E76E23C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15674 AS: 43646 IP: 91.197.164.0/22 IP: 91.209.15.0/24 IP: 94.247.232.0/21 IP: 95.81.128.0/18 IP: 185.215.136.0/22 IP: 185.228.156.0/22 IP: 185.241.96.0/22 IP: 193.201.103.0/24 IP: 195.35.106.0/24 IP: 213.205.96.0/19 IP: 217.71.208.0/21 IP: 2a00:1080::/32 IP: 2a02:3e8::/32 IP: 2a02:e10::/32 IP: 2a0c:a080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:04:49:a1:a4:5b:68:c2:79:95:09:e7:6e:23:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:db:fb:ae:2f:66:1e:13:b1:94:86:8b:e2: c4:d6:41:d6:40:ef:dd:ee:24:69:76:af:df:87:4c: 06:28:bd:db:67:99:a2:d6:4e:ed:ee:43:3c:d6:60: 43:bf:ee:f6:4a:f1:f4:54:0b:d1:ba:a3:12:0b:65: 4f:85:e5:77:86:bb:67:1d:dc:85:d2:80:09:71:77: be:d9:be:6c:80:5e:ec:9c:f7:e7:1e:c1:0c:e0:21: c6:54:8e:62:ff:f7:3d:c6:5d:1b:4a:d3:d9:e0:65: 02:57:71:78:d4:95:35:27:6c:e0:97:c6:41:5e:8f: cb:c7:80:11:3b:cc:ed:4e:d0:e9:7b:b1:bf:9e:21: 7d:a2:3f:6e:b3:17:b7:c0:16:4b:6a:0f:07:c9:27: f7:f2:6b:fd:17:60:5b:75:4a:aa:b6:c0:80:8a:8b: cc:71:ee:d4:5f:6b:60:4c:ea:0d:27:d6:5c:e6:24: d3:6a:06:8d:41:dc:29:f3:2b:ac:f1:b1:18:95:f5: 5f:44:72:a3:c3:a8:eb:8e:02:68:c0:58:9b:68:f5: 3b:c9:d6:fb:db:ca:cd:41:e6:10:48:48:68:dc:5e: 83:fa:b7:b3:52:93:dd:39:24:df:a1:77:2e:f2:75: 8b:f8:56:d6:77:e3:00:0a:d3:ec:bb:08:6a:a3:14: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.164.0/22 91.209.15.0/24 94.247.232.0/21 95.81.128.0/18 185.215.136.0/22 185.228.156.0/22 185.241.96.0/22 193.201.103.0/24 195.35.106.0/24 213.205.96.0/19 217.71.208.0/21 IPv6: 2a00:1080::/32 2a02:3e8::/32 2a02:e10::/32 2a0c:a080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15674 43646 Signature Algorithm: sha256WithRSAEncryption 3c:68:d7:f0:11:90:3f:46:d1:5c:03:94:e0:f6:33:53:e5:93: 1e:ae:db:b8:c3:25:c0:c2:dc:c7:66:14:f4:5e:86:ab:0b:0f: 9a:fc:71:27:e5:d3:21:93:c8:a4:73:7a:e5:25:94:38:e7:e2: a5:3e:fd:7e:38:07:b6:7e:2f:ad:c1:a0:f3:82:00:79:b2:e6: ed:17:43:0e:ba:1d:05:86:23:42:16:32:b3:fb:d4:e7:20:74: 48:c4:56:d3:89:e8:be:cb:0e:fa:59:72:ec:57:42:8b:bd:83: e2:ea:90:35:4c:86:65:f9:a2:a9:04:1a:20:e2:f7:6b:46:2a: 1b:e7:52:8d:28:d8:4d:c2:c5:58:98:c5:f5:cf:bd:02:c8:a0: f6:3b:db:73:e8:7c:a3:15:c5:66:51:1b:31:bb:91:a1:5d:5e: 08:62:4d:12:d9:70:05:3b:d9:04:86:1c:29:b5:a1:24:63:7f: f8:11:e4:a7:a7:db:a2:ba:e6:1d:4e:94:a7:38:62:4f:ec:4a: b5:25:36:a8:72:f0:c0:1c:7d:04:b4:10:d3:37:bb:05:f9:bb: e9:cc:90:31:0f:4d:a0:8a:14:08:94:78:60:f6:2b:70:ee:cf: 47:85:70:11:ab:02:03:cd:2f:89:ce:25:a7:70:33:f8:28:09: 44:05:4f:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt4owRJoaRbaMJ5lQnnbiPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjBjYTM0OGFjODkxYzMzNmQ4Yzc5NDVhNWJkNWIzMzI1ZWI1ZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Hb+64vZh4TsZSGi+LE1kHWQO/d 7iRpdq/fh0wGKL3bZ5mi1k7t7kM81mBDv+72SvH0VAvRuqMSC2VPheV3hrtnHdyF 0oAJcXe+2b5sgF7snPfnHsEM4CHGVI5i//c9xl0bStPZ4GUCV3F41JU1J2zgl8ZB Xo/Lx4ARO8ztTtDpe7G/niF9oj9usxe3wBZLag8HySf38mv9F2BbdUqqtsCAiovM ce7UX2tgTOoNJ9Zc5iTTagaNQdwp8yus8bEYlfVfRHKjw6jrjgJowFibaPU7ydb7 28rNQeYQSEho3F6D+rezUpPdOSTfoXcu8nWL+FbWd+MACtPsuwhqoxQ4twIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFMsMo0isiRwzbYx5RaW9WzMl618LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2VmNjFk Ni0wNWQxLTRmYjItYTZlYS00MjUyMzJmZDU2NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvZWY2MWQ2 LTA1ZDEtNGZiMi1hNmVhLTQyNTIzMmZkNTY0My8xL3l3eWpTS3lKSEROdGpIbEZw YjFiTXlYclh3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBIBAIAATBCAwQCW8WkAwQAW9EPAwQDXvfoAwQGX1GAAwQCudeI AwQCueScAwQCufFgAwQAwclnAwQAwyNqAwQF1c1gAwQD2UfQMCIEAgACMBwDBQAq ABCAAwUAKgID6AMFACoCDhADBQMqDKCAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC Aj06AgMAqn4wDQYJKoZIhvcNAQELBQADggEBADxo1/ARkD9G0VwDlOD2M1Plkx6u 27jDJcDC3MdmFPRehqsLD5r8cSfl0yGTyKRzeuUllDjn4qU+/X44B7Z+L63BoPOC AHmy5u0XQw66HQWGI0IWMrP71OcgdEjEVtOJ6L7LDvpZcuxXQou9g+LqkDVMhmX5 oqkEGiDi92tGKhvnUo0o2E3CxViYxfXPvQLIoPY723PofKMVxWZRGzG7kaFdXghi TRLZcAU72QSGHCm1oSRjf/gR5Ken26K65h1OlKc4Yk/sSrUlNqhy8MAcfQS0ENM3 uwX5u+nMkDEPTaCKFAiUeGD2K3Duz0eFcBGrAgPNL4nOJadwM/goCUQFT+Y= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:42 2026 by rpki-client