This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer (raw, json) Hash identifier: Mm7YYde7fMcSWpqUpBk9ny3IozcXlM1QyOcDDig0IDs= Subject key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1E75F0AAB0F4DB8A614423F99FB7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208214 IP: 45.152.80.0/22 IP: 193.35.84.0/22 IP: 2a0d:61c0::/29 IP: 2a0f:8d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e7:5f:0a:ab:0f:4d:b8:a6:14:42:3f:99:fb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63b147f67e8795d959ed3530396d1256055b126e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:0e:2c:c0:bf:36:72:be:4e:35:48:94:c5: 5d:ab:cf:aa:15:76:bb:13:bd:43:79:31:39:15:97: 41:19:af:b2:79:e7:a1:f5:fe:eb:90:e6:11:76:28: 19:66:3d:28:74:34:06:eb:4e:19:61:dd:46:a7:a9: 86:65:8f:52:85:4e:59:90:1e:df:17:5b:07:df:39: ab:e5:16:d9:b6:69:0a:55:51:02:ee:99:2e:d4:e3: 47:1e:f2:22:b4:3e:e4:e3:d5:f7:d6:56:09:08:90: 17:dc:a1:f1:7f:ad:37:63:38:b8:9d:76:c6:5d:52: 89:4f:9f:78:c5:c5:74:ad:8a:72:2b:25:23:c0:55: 1b:93:4a:60:1d:af:e3:b2:29:dd:97:aa:45:07:53: fc:64:cf:00:21:ab:1e:44:f8:5c:02:73:9c:78:ef: c6:6a:f6:5e:ea:e2:96:8d:56:67:d8:d7:87:c9:07: 03:b8:ae:1b:68:f4:4c:40:16:47:bc:47:d4:cf:1a: 41:4e:98:de:85:98:91:d2:92:1f:bd:e7:44:96:37: 7d:7d:e1:b4:c1:26:de:d0:33:e1:65:a2:9c:c7:06: 85:93:41:22:55:10:9b:e6:ba:e0:37:8d:ee:6c:a0: 32:02:21:a1:ed:11:89:e2:47:70:49:ff:46:70:13: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.80.0/22 193.35.84.0/22 IPv6: 2a0d:61c0::/29 2a0f:8d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208214 Signature Algorithm: sha256WithRSAEncryption 90:02:ac:f0:04:05:44:e8:bc:4c:1e:4f:3e:45:82:6a:3f:a1: 0b:4a:8a:05:97:78:a0:fb:72:9d:71:f3:25:66:d3:8d:82:30: 40:e9:22:0b:23:84:4c:5f:e9:5b:34:3d:85:21:50:87:d1:da: 75:1f:15:fb:84:55:52:f8:74:34:b4:14:dd:09:a6:ad:03:70: d0:67:97:29:84:2b:48:81:79:61:ce:9a:b0:84:8c:d5:db:f3: 88:a3:31:40:ef:ce:48:4e:0f:37:0d:3e:9a:a3:d0:aa:1a:b9: f9:d8:29:de:87:2e:c6:3e:d6:bf:72:90:08:e7:68:73:22:42: cf:da:0c:f3:0e:92:03:be:bf:bc:83:96:9f:f3:82:4e:ac:a9: 8c:27:90:4e:e2:e3:8d:aa:0d:1e:72:4d:1d:29:1f:4c:19:09: 6b:70:ea:0d:7b:09:aa:cc:5d:0d:43:75:be:40:ab:ed:2f:64: 1c:a2:36:60:6e:f3:9a:ff:72:0d:e8:24:2a:cb:f8:e1:99:30: f5:bb:6a:21:39:83:36:dc:fd:8c:54:e4:10:82:ff:c9:e7:da: a8:aa:28:22:67:ff:fa:a2:70:62:e3:28:b8:84:32:d9:70:14: ce:23:70:ef:5b:d0:b2:1a:f8:12:a2:ba:82:0d:10:c7:af:7f: 2b:c7:e1:9c -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt/8edfCqsPTbimFEI/mft7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2IxNDdmNjdlODc5NWQ5NTllZDM1MzAzOTZkMTI1NjA1NWIxMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxIOLMC/NnK+TjVIlMVdq8+qFXa7 E71DeTE5FZdBGa+yeeeh9f7rkOYRdigZZj0odDQG604ZYd1Gp6mGZY9ShU5ZkB7f F1sH3zmr5RbZtmkKVVEC7pku1ONHHvIitD7k49X31lYJCJAX3KHxf603Yzi4nXbG XVKJT594xcV0rYpyKyUjwFUbk0pgHa/jsindl6pFB1P8ZM8AIaseRPhcAnOceO/G avZe6uKWjVZn2NeHyQcDuK4baPRMQBZHvEfUzxpBTpjehZiR0pIfvedEljd9feG0 wSbe0DPhZaKcxwaFk0EiVRCb5rrgN43ubKAyAiGh7RGJ4kdwSf9GcBOlKwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFGOxR/Z+h5XZWe01MDltElYFWxJuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzBmODdl Mi1iODA1LTRiZjktYTM2Ni0wZjJjMzM0ZTVlMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvMGY4N2Uy LWI4MDUtNGJmOS1hMzY2LTBmMmMzMzRlNWUwNS8xL1k3Rkg5bjZIbGRsWjdUVXdP VzBTVmdWYkVtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLZhQAwQCwSNUMBQEAgACMA4DBQMqDWHAAwUD Kg+NADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLVYwDQYJKoZIhvcNAQELBQAD ggEBAJACrPAEBUTovEweTz5Fgmo/oQtKigWXeKD7cp1x8yVm042CMEDpIgsjhExf 6Vs0PYUhUIfR2nUfFfuEVVL4dDS0FN0Jpq0DcNBnlymEK0iBeWHOmrCEjNXb84ij MUDvzkhODzcNPpqj0KoaufnYKd6HLsY+1r9ykAjnaHMiQs/aDPMOkgO+v7yDlp/z gk6sqYwnkE7i442qDR5yTR0pH0wZCWtw6g17CarMXQ1Ddb5Aq+0vZByiNmBu85r/ cg3oJCrL+OGZMPW7aiE5gzbc/YxU5BCC/8nn2qiqKCJn//qicGLjKLiEMtlwFM4j cO9b0LIa+BKiuoINEMevfyvH4Zw= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:44 2026 by rpki-client