This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer File: Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer (raw, json) Hash identifier: Xc2r8Oxlx63CQouvn/Ek2iNbN4HdMPbMNaS/u7Bao6A= Subject key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE3C9960611755EEACB42953CE8F9BFE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 03:39:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.181.252.0/22 IP: 45.86.39.0/24 IP: 45.86.180.0/22 IP: 89.223.76.0/22 IP: 185.153.92.0/22 IP: 2a0c:f280::/29 IP: 2a11:e840::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e3:c9:96:06:11:75:5e:ea:cb:42:95:3c:e8:f9:bf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 03:39:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:eb:45:62:2d:09:00:a1:5d:39:c6:2d:03: 43:22:e8:cb:bb:fe:b8:fa:cb:bb:f7:4b:f5:cb:64: d3:a7:f4:08:8d:b4:a7:ea:10:db:7a:3f:fd:28:6a: b6:32:ce:b3:08:a9:52:e0:8b:36:e3:d4:a3:44:93: 9e:55:aa:e8:7d:43:50:d3:a4:05:ff:d6:14:32:8a: 06:8b:7d:c5:16:3d:25:97:63:5f:f6:4a:bb:7b:49: 0a:98:3d:37:6f:7c:d1:55:d1:4d:34:aa:d1:fe:5b: 39:9c:45:1e:60:23:6f:45:bb:36:fc:53:6d:77:44: 0d:10:1b:06:5e:75:ed:bf:b3:9e:25:c3:28:76:17: 4b:46:7c:e3:4b:23:68:81:2a:41:ce:81:36:d8:51: e0:85:ed:2e:66:a7:1e:3c:39:18:4c:31:13:98:34: 1c:3f:d6:00:3a:58:12:78:bb:c7:1c:b7:67:4b:46: a9:11:2f:97:0e:35:f9:d1:ee:9f:7c:8c:ff:a2:02: 95:4d:0d:15:c7:03:a5:28:3a:7f:6f:19:07:17:9e: cb:66:c2:7d:90:ca:48:2b:68:32:7d:78:64:fa:56: 04:c4:e0:e3:55:a3:bc:2c:e2:2f:c1:f2:be:ec:78: 9e:c1:e4:bf:d6:e1:b9:cc:02:aa:b1:e0:5a:05:c5: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.252.0/22 45.86.39.0/24 45.86.180.0/22 89.223.76.0/22 185.153.92.0/22 IPv6: 2a0c:f280::/29 2a11:e840::/30 Signature Algorithm: sha256WithRSAEncryption 56:92:ad:14:ff:75:42:1c:f6:97:85:ab:fe:65:d1:b4:d4:43: 0c:38:35:4e:04:95:2e:c5:99:ea:7b:90:ab:79:05:3d:11:0d: 4d:54:11:aa:ad:d2:12:92:2d:ea:9a:7a:43:5a:ce:85:a0:ea: d6:e3:63:1b:e8:03:f8:41:c3:9e:d5:32:2a:06:73:43:92:c5: f1:83:01:0e:8f:e6:99:69:e7:65:8e:24:4c:60:f4:17:35:36: 37:22:e8:d2:3c:ad:35:72:cd:71:ac:28:ef:cc:21:ce:84:79: 7a:f3:56:b5:be:ed:d3:e9:9a:2e:fe:ac:32:75:a1:12:bd:26: 00:f6:c0:3e:00:f7:df:a1:f9:bf:26:90:d2:9a:ab:44:e4:2a: 99:c9:44:24:ca:a5:4e:dc:2c:f3:49:f0:dd:89:84:8b:b5:7a: dc:53:6d:a7:99:8e:ea:68:c8:4c:f0:23:69:5c:9e:99:8c:84: ca:3d:6d:73:f8:d2:e3:89:46:97:80:6f:f0:28:a0:2b:58:b4: 38:7e:2f:a2:a3:67:0c:2b:6c:dc:67:0b:e4:ea:10:cc:6f:5f: 66:ea:bc:49:ff:2f:7f:b1:d8:a4:cc:95:4e:22:63:b0:09:ab: a6:1a:d1:59:dc:37:9e:80:0d:ec:c3:0b:b8:e8:58:5a:f5:3a: 83:2f:6d:78 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZvjyZYGEXVe6stClTzo+b/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMDMzOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2NiZmNkYTFkYzA5ZDg4YjNhZjVjZWY5MGRhMDE2MmZkYTM3NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA633rRWItCQChXTnGLQNDIujLu/64 +su790v1y2TTp/QIjbSn6hDbej/9KGq2Ms6zCKlS4Is249SjRJOeVarofUNQ06QF /9YUMooGi33FFj0ll2Nf9kq7e0kKmD03b3zRVdFNNKrR/ls5nEUeYCNvRbs2/FNt d0QNEBsGXnXtv7OeJcModhdLRnzjSyNogSpBzoE22FHghe0uZqcePDkYTDETmDQc P9YAOlgSeLvHHLdnS0apES+XDjX50e6ffIz/ogKVTQ0VxwOlKDp/bxkHF57LZsJ9 kMpIK2gyfXhk+lYExODjVaO8LOIvwfK+7HieweS/1uG5zAKqseBaBcUEJwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFGPL/NodwJ2Is69c75DaAWL9o3S0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzZmYjdl Ni0wNGMwLTQzNjEtOTRjMC03MzMxYmYyMDdmNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNmZiN2U2 LTA0YzAtNDM2MS05NGMwLTczMzFiZjIwN2Y0ZC8xL1k4djgyaDNBbllpenIxenZr Tm9CWXYyamRMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQCBbX8AwQALVYnAwQCLVa0AwQCWd9MAwQCuZlc MBQEAgACMA4DBQMqDPKAAwUCKhHoQDANBgkqhkiG9w0BAQsFAAOCAQEAVpKtFP91 Qhz2l4Wr/mXRtNRDDDg1TgSVLsWZ6nuQq3kFPRENTVQRqq3SEpIt6pp6Q1rOhaDq 1uNjG+gD+EHDntUyKgZzQ5LF8YMBDo/mmWnnZY4kTGD0FzU2NyLo0jytNXLNcawo 78whzoR5evNWtb7t0+maLv6sMnWhEr0mAPbAPgD336H5vyaQ0pqrROQqmclEJMql Ttws80nw3YmEi7V63FNtp5mO6mjITPAjaVyemYyEyj1tc/jS44lGl4Bv8CigK1i0 OH4voqNnDCts3GcL5OoQzG9fZuq8Sf8vf7HYpMyVTiJjsAmrphrRWdw3noAN7MML uOhYWvU6gy9teA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:25 2026 by rpki-client