This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer File: MYN4WRbNmNfHcNaFFFSZqKChVyI.cer (raw, json) Hash identifier: Ggg2EBGGe2ly5iG8nZQofQbSnt/5cJvAvHF+t2rH8LY= Subject key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3549E0CE0924E4850434995FF7542F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3233 IP: 80.96.0.0/15 IP: 81.180.0.0/15 IP: 85.120.0.0/14 IP: 192.162.16.0/24 IP: 193.226.0.0/17 IP: 193.230.0.0/15 IP: 194.62.122.0/23 IP: 194.62.126.0/23 IP: 194.102.32.0 -- 194.102.44.255 IP: 194.102.46.0 -- 194.102.61.255 IP: 194.102.65.0 -- 194.102.68.255 IP: 194.102.71.0 -- 194.102.73.255 IP: 194.102.75.0 -- 194.102.76.255 IP: 194.102.78.0/23 IP: 194.102.82.0 -- 194.102.84.255 IP: 194.102.87.0 -- 194.102.92.255 IP: 194.102.94.0 -- 194.102.98.255 IP: 194.102.104.0/22 IP: 194.102.109.0 -- 194.102.112.255 IP: 194.102.114.0 -- 194.102.116.255 IP: 194.102.119.0 -- 194.102.123.255 IP: 194.102.130.0/24 IP: 194.102.132.0 -- 194.102.137.255 IP: 194.102.142.0 -- 194.102.145.255 IP: 194.102.148.0 -- 194.102.161.255 IP: 194.102.163.0 -- 194.102.187.255 IP: 194.102.189.0/24 IP: 194.102.191.0 -- 194.102.193.255 IP: 194.102.196.0/22 IP: 194.102.201.0/24 IP: 194.102.205.0 -- 194.102.207.255 IP: 194.102.209.0 -- 194.102.214.255 IP: 194.102.216.0/22 IP: 194.102.222.0/24 IP: 194.102.224.0 -- 194.102.233.255 IP: 194.102.236.0 -- 194.102.238.255 IP: 194.102.240.0 -- 194.102.242.255 IP: 194.102.244.0/22 IP: 194.105.0.0/24 IP: 194.105.2.0/24 IP: 194.105.6.0/24 IP: 194.105.8.0 -- 194.105.16.255 IP: 194.105.18.0/24 IP: 194.105.20.0/24 IP: 194.105.22.0/23 IP: 194.153.224.0/21 IP: 194.153.233.0 -- 194.153.239.255 IP: 194.153.241.0 -- 194.153.247.255 IP: 194.153.249.0 -- 194.153.255.255 IP: 194.176.160.0/23 IP: 194.176.163.0/24 IP: 194.176.174.0/23 IP: 194.176.177.0 -- 194.176.185.255 IP: 194.176.187.0 -- 194.176.189.255 IP: 212.35.128.0/19 IP: 217.156.0.0/17 IP: 2a03:5e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:49:e0:ce:09:24:e4:85:04:34:99:5f:f7:54:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3183785916cd98d7c770d685145499a8a0a15722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:10:81:af:14:a7:d6:7a:ae:0e:38:83:81: 26:03:15:76:0a:41:8a:31:12:d7:de:ae:81:f3:51: 82:b4:9a:73:75:b0:c0:55:0d:ae:23:f0:47:e4:ef: 4e:97:27:27:5b:4a:f9:13:b8:01:0c:0a:96:96:11: 84:8c:b8:7a:83:46:3d:69:7c:f7:a3:8e:7f:e0:b7: 44:0a:7a:a3:34:80:78:ba:66:7c:18:cc:50:6a:e7: 5d:1b:d2:98:df:6a:97:35:06:4f:25:60:80:10:33: be:46:9d:c2:91:f1:16:15:33:a9:1c:3b:1b:24:40: 1f:47:0c:60:db:13:c6:07:dd:3b:b8:64:97:45:4f: a1:b4:86:e5:27:1d:4b:ab:20:4c:95:f2:75:25:49: 62:75:fe:12:42:7e:05:4b:ff:c3:99:10:b0:4a:a9: e2:c7:56:7a:8a:e2:08:09:45:d1:f9:e5:b2:85:7a: d9:02:2b:d9:75:3a:6a:74:d2:e0:7e:0a:f2:b8:a6: e4:fd:9a:3b:55:5b:4e:38:8a:61:da:fc:e4:8e:51: 7d:d6:a9:11:aa:c2:5b:9c:49:a8:d2:83:68:9a:bc: ab:98:39:35:76:f2:3a:ee:06:4b:e5:26:17:5d:74: af:f7:70:74:e4:8a:e7:07:e2:ce:b1:b3:32:b7:5e: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.0.0/15 81.180.0.0/15 85.120.0.0/14 192.162.16.0/24 193.226.0.0/17 193.230.0.0/15 194.62.122.0/23 194.62.126.0/23 194.102.32.0-194.102.44.255 194.102.46.0-194.102.61.255 194.102.65.0-194.102.68.255 194.102.71.0-194.102.73.255 194.102.75.0-194.102.76.255 194.102.78.0/23 194.102.82.0-194.102.84.255 194.102.87.0-194.102.92.255 194.102.94.0-194.102.98.255 194.102.104.0/22 194.102.109.0-194.102.112.255 194.102.114.0-194.102.116.255 194.102.119.0-194.102.123.255 194.102.130.0/24 194.102.132.0-194.102.137.255 194.102.142.0-194.102.145.255 194.102.148.0-194.102.161.255 194.102.163.0-194.102.187.255 194.102.189.0/24 194.102.191.0-194.102.193.255 194.102.196.0/22 194.102.201.0/24 194.102.205.0-194.102.207.255 194.102.209.0-194.102.214.255 194.102.216.0/22 194.102.222.0/24 194.102.224.0-194.102.233.255 194.102.236.0-194.102.238.255 194.102.240.0-194.102.242.255 194.102.244.0/22 194.105.0.0/24 194.105.2.0/24 194.105.6.0/24 194.105.8.0-194.105.16.255 194.105.18.0/24 194.105.20.0/24 194.105.22.0/23 194.153.224.0/21 194.153.233.0-194.153.239.255 194.153.241.0-194.153.247.255 194.153.249.0-194.153.255.255 194.176.160.0/23 194.176.163.0/24 194.176.174.0/23 194.176.177.0-194.176.185.255 194.176.187.0-194.176.189.255 212.35.128.0/19 217.156.0.0/17 IPv6: 2a03:5e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3233 Signature Algorithm: sha256WithRSAEncryption 70:2f:60:5f:f7:3c:e6:93:39:40:5c:eb:74:f5:15:32:a0:91: de:94:ac:db:49:64:69:f6:4e:1b:ae:cc:b5:a6:4c:ab:9b:30: 63:d6:01:61:1e:d9:ef:fb:93:00:b7:f9:ce:3f:b6:3a:20:50: b1:75:ea:d7:2b:37:fa:cd:54:eb:21:12:2c:6c:54:28:89:29: b7:cd:bb:6d:c8:d6:97:29:da:d4:ff:e8:26:30:8a:95:65:7d: df:86:b2:f2:a9:b4:44:a2:04:35:fe:5d:2f:57:3e:e1:a6:ce: b7:f7:81:fc:c5:94:2e:a3:ac:60:d8:e4:68:b8:c9:af:98:a4: ea:b4:19:16:f3:d9:0f:c9:ea:61:5f:e3:64:4f:6c:fd:3b:1f: 92:db:47:ec:a4:ac:7f:c5:27:81:85:fb:39:7a:71:14:87:a7: 50:16:99:9c:58:0a:7a:dc:a4:c4:bd:cd:42:f2:de:6d:0c:98: 61:b2:e2:6b:6e:e5:ef:60:4d:d4:99:12:ef:13:39:6d:08:0c: 8d:58:67:3f:1d:ac:0f:3c:f0:dd:c7:85:ae:48:76:af:f2:de: b0:cb:e2:0f:1d:05:f2:87:31:5b:e1:b5:cf:d3:c9:a4:62:8d: 8c:03:d8:88:f3:a3:2b:83:ed:b6:3f:8f:29:98:b1:b3:5c:55: 49:fd:31:c2 -----BEGIN CERTIFICATE----- MIIHyTCCBrGgAwIBAgISAZt7NUngzgkk5IUENJlf91QvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0Qga8Up9Z6rg44g4EmAxV2CkGK MRLX3q6B81GCtJpzdbDAVQ2uI/BH5O9OlycnW0r5E7gBDAqWlhGEjLh6g0Y9aXz3 o45/4LdECnqjNIB4umZ8GMxQauddG9KY32qXNQZPJWCAEDO+Rp3CkfEWFTOpHDsb JEAfRwxg2xPGB907uGSXRU+htIblJx1LqyBMlfJ1JUlidf4SQn4FS//DmRCwSqni x1Z6iuIICUXR+eWyhXrZAivZdTpqdNLgfgryuKbk/Zo7VVtOOIph2vzkjlF91qkR qsJbnEmo0oNomryrmDk1dvI67gZL5SYXXXSv93B05IrnB+LOsbMyt16OuQIDAQAB o4IE1TCCBNEwHQYDVR0OBBYEFDGDeFkWzZjXx3DWhRRUmaigoVciMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzcxOTNk Yi03Zjg1LTQyYmItYjA5YS1mNTJjNDdjMjI1ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvNzE5M2Ri LTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5mSGNOYUZG RlNacUtDaFZ5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICUwYIKwYB BQUHAQcBAf8EggJCMIICPjCCAisEAgABMIICIwMDAVBgAwMBUbQDAwJVeAMEAMCi EAMEB8HiAAMDAcHmAwQBwj56AwQBwj5+MAwDBAXCZiADBADCZiwwDAMEAcJmLgME AcJmPDAMAwQAwmZBAwQAwmZEMAwDBADCZkcDBAHCZkgwDAMEAMJmSwMEAMJmTAME AcJmTjAMAwQBwmZSAwQAwmZUMAwDBADCZlcDBADCZlwwDAMEAcJmXgMEAMJmYgME AsJmaDAMAwQAwmZtAwQAwmZwMAwDBAHCZnIDBADCZnQwDAMEAMJmdwMEAsJmeAME AMJmgjAMAwQCwmaEAwQBwmaIMAwDBAHCZo4DBAHCZpAwDAMEAsJmlAMEAcJmoDAM AwQAwmajAwQCwma4AwQAwma9MAwDBADCZr8DBAHCZsADBALCZsQDBADCZskwDAME AMJmzQMEBMJmwDAMAwQAwmbRAwQAwmbWAwQCwmbYAwQAwmbeMAwDBAXCZuADBAHC ZugwDAMEAsJm7AMEAMJm7jAMAwQEwmbwAwQAwmbyAwQCwmb0AwQAwmkAAwQAwmkC AwQAwmkGMAwDBAPCaQgDBADCaRADBADCaRIDBADCaRQDBAHCaRYDBAPCmeAwDAME AMKZ6QMEBMKZ4DAMAwQAwpnxAwQDwpnwMAsDBADCmfkDAwHCmAMEAcKwoAMEAMKw owMEAcKwrjAMAwQAwrCxAwQBwrC4MAwDBADCsLsDBAHCsLwDBAXUI4ADBAfZnAAw DQQCAAIwBwMFAyoDXoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDKEwDQYJKoZI hvcNAQELBQADggEBAHAvYF/3POaTOUBc63T1FTKgkd6UrNtJZGn2ThuuzLWmTKub MGPWAWEe2e/7kwC3+c4/tjogULF16tcrN/rNVOshEixsVCiJKbfNu23I1pcp2tT/ 6CYwipVlfd+GsvKptESiBDX+XS9XPuGmzrf3gfzFlC6jrGDY5Gi4ya+YpOq0GRbz 2Q/J6mFf42RPbP07H5LbR+ykrH/FJ4GF+zl6cRSHp1AWmZxYCnrcpMS9zULy3m0M mGGy4mtu5e9gTdSZEu8TOW0IDI1YZz8drA888N3Hha5Idq/y3rDL4g8dBfKHMVvh tc/TyaRijYwD2IjzoyuD7bY/jymYsbNcVUn9McI= -----END CERTIFICATE-----Generated at Mon Jan 19 12:47:47 2026 by rpki-client