This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer (raw, json) Hash identifier: r18IeZ11rBWPt4PwXmWVwZEk5IUmjy3X5dHHVlGak8I= Subject key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD520D9100FFB41C32F629B739148 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.214.208.0/22 IP: 2a0f:7f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d5:20:d9:10:0f:fb:41:c3:2f:62:9b:73:91:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60077f22c6428bc889b365b006cb5248d4bf61cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:46:2e:24:63:35:83:64:29:72:a5:64:c5: 5c:08:03:e0:a8:34:c8:3f:53:52:a6:e6:c5:30:ce: 55:bb:0e:af:d5:ca:0d:a9:84:31:a7:b7:33:96:09: 89:ce:8f:fd:9b:cd:97:6f:da:0d:43:10:4e:5d:af: d0:77:95:d8:23:7c:b4:58:41:91:f3:99:ee:ae:4d: c4:68:6c:9b:33:72:2e:9b:b9:25:0d:e6:76:eb:e3: 58:39:7e:2c:4b:82:be:a5:d5:b0:7b:13:4f:3d:d3: 48:30:10:01:6c:43:7e:cf:6f:3b:d5:cc:c0:f5:bf: 07:6f:5e:61:ee:47:eb:e2:74:8f:13:d4:25:ea:61: 4f:36:e1:21:c5:82:d3:24:7b:72:18:2a:53:a1:ff: 96:68:d4:33:9a:c0:14:15:9b:de:01:d2:d8:9f:b0: 8c:cb:e6:1a:45:c1:42:e4:de:4e:93:1d:d5:c9:08: 25:fd:ef:0a:a9:fd:af:b6:f4:d4:3d:41:3c:33:0a: 96:a2:38:b2:07:bf:2b:ce:a0:4e:97:95:93:ec:3e: cc:f5:c4:32:f7:86:57:54:9c:2d:50:b3:4a:27:76: 4f:ff:fc:9a:b2:50:9c:ab:dc:35:95:4f:2e:fe:30: 02:49:d3:9a:af:15:05:76:22:8d:2c:c6:60:69:f0: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.208.0/22 IPv6: 2a0f:7f40::/29 Signature Algorithm: sha256WithRSAEncryption 46:73:15:7e:12:70:d2:e7:49:4c:40:40:c6:07:b0:0c:12:cd: 8d:91:55:66:4f:9e:4e:d9:99:95:06:e2:67:7f:8b:fa:39:c0: f4:18:8f:29:1f:c8:82:88:66:69:56:fb:cb:6a:04:e9:97:2b: 40:a3:42:81:4e:1b:24:31:8e:e5:66:08:7b:fd:6d:99:7e:61: 64:07:4b:36:06:5d:8b:08:d3:14:ab:5a:1e:e7:dd:35:d2:85: ed:2c:dc:c9:77:c6:f0:3d:3e:a0:ec:06:31:f8:8c:55:27:52: 4b:de:8e:1b:0f:a0:52:ab:d5:1a:e5:2d:f2:8a:cd:8f:36:ea: 4f:43:81:77:60:8c:01:8f:7e:ac:c2:ea:5a:ed:7b:d3:b2:2e: 76:c5:52:6d:10:7b:f4:c0:a5:11:65:92:3f:e8:22:00:43:49: 7a:65:98:20:11:25:a2:f2:d4:45:3b:13:16:cb:3d:e9:c3:b3: b6:f6:fd:34:83:ab:06:f2:0f:de:dd:02:05:f6:ba:5d:3f:aa: eb:eb:0d:ba:c2:5b:04:6f:8b:50:e4:1f:d6:d4:24:b8:32:a1: 02:a4:57:8f:0c:3b:17:9f:86:22:81:9c:56:3e:0d:41:86:91: db:99:53:f0:e9:3d:0f:8a:7c:aa:38:5e:86:d4:32:58:f5:0d: 9f:4f:fe:95 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9ytUg2RAP+0HDL2Kbc5FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDA3N2YyMmM2NDI4YmM4ODliMzY1YjAwNmNiNTI0OGQ0YmY2MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4JGLiRjNYNkKXKlZMVcCAPgqDTI P1NSpubFMM5Vuw6v1coNqYQxp7czlgmJzo/9m82Xb9oNQxBOXa/Qd5XYI3y0WEGR 85nurk3EaGybM3Ium7klDeZ26+NYOX4sS4K+pdWwexNPPdNIMBABbEN+z2871czA 9b8Hb15h7kfr4nSPE9Ql6mFPNuEhxYLTJHtyGCpTof+WaNQzmsAUFZveAdLYn7CM y+YaRcFC5N5Okx3VyQgl/e8Kqf2vtvTUPUE8MwqWojiyB78rzqBOl5WT7D7M9cQy 94ZXVJwtULNKJ3ZP//yaslCcq9w1lU8u/jACSdOarxUFdiKNLMZgafDz0QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGAHfyLGQovIibNlsAbLUkjUv2HPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4Lzg0N2Vl MC1iYTJhLTRmZDItODlkNy04N2ZlMmU1NGJhNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvODQ3ZWUw LWJhMmEtNGZkMi04OWQ3LTg3ZmUyZTU0YmE3OS8xL1lBZF9Jc1pDaThpSnMyV3dC c3RTU05TX1ljOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCX9bQMA0EAgACMAcDBQMqD39AMA0GCSqGSIb3 DQEBCwUAA4IBAQBGcxV+EnDS50lMQEDGB7AMEs2NkVVmT55O2ZmVBuJnf4v6OcD0 GI8pH8iCiGZpVvvLagTplytAo0KBThskMY7lZgh7/W2ZfmFkB0s2Bl2LCNMUq1oe 59010oXtLNzJd8bwPT6g7AYx+IxVJ1JL3o4bD6BSq9Ua5S3yis2PNupPQ4F3YIwB j36swupa7XvTsi52xVJtEHv0wKURZZI/6CIAQ0l6ZZggESWi8tRFOxMWyz3pw7O2 9v00g6sG8g/e3QIF9rpdP6rr6w26wlsEb4tQ5B/W1CS4MqECpFePDDsXn4YigZxW Pg1BhpHbmVPw6T0PinyqOF6G1DJY9Q2fT/6V -----END CERTIFICATE-----Generated at Tue Feb 10 04:28:48 2026 by rpki-client