This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer File: YKVAzkUEVjReyOCY709TY010vx8.cer (raw, json) Hash identifier: JOTL2Myit0aN5LLWiSN+i2/+dQVzZhOY0Y9wzTAdvY8= Subject key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13559C6ECC2B21D12B4C408CC0C093 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213122 IP: 5.252.164.0/22 IP: 31.216.59.0/24 IP: 45.87.60.0/22 IP: 45.130.152.0/22 IP: 45.143.144.0/22 IP: 89.36.230.0/24 IP: 89.37.100.0/24 IP: 89.46.43.0/24 IP: 94.154.8.0/24 IP: 103.104.248.0/22 IP: 103.202.52.0/22 IP: 135.84.208.0/21 IP: 178.211.157.0/24 IP: 185.162.74.0/23 IP: 185.234.115.0/24 IP: 188.210.236.0/24 IP: 194.49.68.0/23 IP: 194.49.78.0/23 IP: 207.189.0.0/19 IP: 2a0e:f380::/29 IP: 2a0f:5c0::/29 IP: 2a10:e580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:55:9c:6e:cc:2b:21:d1:2b:4c:40:8c:c0:c0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60a540ce450456345ec8e098ef4f53634d74bf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:8b:e8:36:17:32:d7:d7:d5:ae:36:42:5c: 98:d4:ea:7a:fb:f9:13:1e:67:08:94:00:3b:46:e0: 47:d1:e0:26:af:3c:cd:fa:eb:13:61:be:af:ae:ae: 3d:a1:d1:92:0c:dc:b5:57:51:9c:a4:52:a6:87:9f: c8:82:ef:3f:18:9e:f1:a0:c2:8e:68:aa:11:76:b4: 56:f5:b2:1d:f7:0c:e5:e6:62:fd:f2:9a:43:c7:16: 4c:c0:bd:ef:21:0e:56:51:1d:a2:4b:a5:2b:32:ff: 36:12:bd:89:70:85:61:78:a3:d5:a8:4f:88:79:d8: 37:43:16:a1:ed:a3:2d:da:19:dd:58:a7:24:b6:41: 69:36:df:65:de:0a:fc:7c:78:f1:f1:7d:68:49:36: 58:30:ee:9c:1d:5a:99:63:d2:a8:90:ef:5f:ac:5b: 12:56:18:e5:3d:de:60:58:5c:6c:ba:b7:23:1c:00: dd:1a:28:69:27:f7:a7:8c:d6:52:9e:e4:9d:b4:b8: fd:73:4a:03:35:8b:eb:e9:51:ea:e9:08:ea:c0:fd: 42:f9:53:59:62:9a:25:66:51:e7:65:6d:db:e7:64: c8:a7:c7:8e:df:86:cf:d7:91:a9:87:47:d6:d0:a1: 61:ae:53:f5:f7:8f:0b:b6:9d:7b:30:87:1f:83:b6: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.164.0/22 31.216.59.0/24 45.87.60.0/22 45.130.152.0/22 45.143.144.0/22 89.36.230.0/24 89.37.100.0/24 89.46.43.0/24 94.154.8.0/24 103.104.248.0/22 103.202.52.0/22 135.84.208.0/21 178.211.157.0/24 185.162.74.0/23 185.234.115.0/24 188.210.236.0/24 194.49.68.0/23 194.49.78.0/23 207.189.0.0/19 IPv6: 2a0e:f380::/29 2a0f:5c0::/29 2a10:e580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213122 Signature Algorithm: sha256WithRSAEncryption 3b:e4:b0:4c:5c:b7:fa:36:9d:1d:d3:40:45:69:24:18:b2:62: a3:7b:22:05:3c:ed:e0:0b:6b:5b:42:fa:2e:ce:62:73:28:e8: 87:02:aa:39:37:6b:d4:f7:24:36:14:ed:1f:4c:ce:e3:47:ac: b2:e2:48:f6:f0:b0:f1:7e:e4:b9:72:cc:b4:da:32:c6:9b:a0: 64:89:3f:5b:bb:04:cd:0a:6b:07:97:a0:37:1b:10:85:46:5e: 01:55:83:86:76:89:7d:53:02:0a:40:0b:f0:06:8f:61:6f:e4: 03:7d:7c:c4:9c:83:81:3c:fb:0d:9f:91:5e:2a:a8:92:89:44: d5:f8:7f:52:dd:1e:f4:e5:c6:4e:e1:a5:b9:c9:cc:4a:80:f9: 2e:fa:d8:ab:df:c5:ee:20:b2:f3:f2:46:92:ae:2b:92:4e:78: eb:b7:96:21:34:fc:d7:4d:b5:c0:a3:e8:47:71:e9:7e:a9:0a: db:13:5b:2e:19:1c:fc:f2:e8:12:ce:2e:1e:82:55:1f:5b:62: c4:e2:af:f7:11:e8:b4:31:6a:00:4b:00:a7:12:42:29:b0:c8: 6c:b6:58:3e:57:9b:60:fe:60:6c:ec:60:c4:2e:41:14:d5:e1: 29:0b:2f:3e:24:fb:00:a0:d4:1d:40:dc:9b:0b:2a:5c:d2:1d: 85:c0:e8:94 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgISAZt8E1WcbswrIdErTECMwMCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGE1NDBjZTQ1MDQ1NjM0NWVjOGUwOThlZjRmNTM2MzRkNzRiZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaKL6DYXMtfX1a42QlyY1Op6+/kT HmcIlAA7RuBH0eAmrzzN+usTYb6vrq49odGSDNy1V1GcpFKmh5/Igu8/GJ7xoMKO aKoRdrRW9bId9wzl5mL98ppDxxZMwL3vIQ5WUR2iS6UrMv82Er2JcIVheKPVqE+I edg3Qxah7aMt2hndWKcktkFpNt9l3gr8fHjx8X1oSTZYMO6cHVqZY9KokO9frFsS VhjlPd5gWFxsurcjHADdGihpJ/enjNZSnuSdtLj9c0oDNYvr6VHq6QjqwP1C+VNZ YpolZlHnZW3b52TIp8eO34bP15Gph0fW0KFhrlP1948Ltp17MIcfg7bkDwIDAQAB o4IDLDCCAygwHQYDVR0OBBYEFGClQM5FBFY0XsjgmO9PU2NNdL8fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzE5NWE0 Ny1hMmNiLTRmMDAtODUzMS1lNDczNTMxZjZmZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMTk1YTQ3 LWEyY2ItNGYwMC04NTMxLWU0NzM1MzFmNmZlOC8xL1lLVkF6a1VFVmpSZXlPQ1k3 MDlUWTAxMHZ4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGqBggrBgEF BQcBBwEB/wSBmjCBlzB4BAIAATByAwQCBfykAwQAH9g7AwQCLVc8AwQCLYKYAwQC LY+QAwQAWSTmAwQAWSVkAwQAWS4rAwQAXpoIAwQCZ2j4AwQCZ8o0AwQDh1TQAwQA stOdAwQBuaJKAwQAuepzAwQAvNLsAwQBwjFEAwQBwjFOAwQFz70AMBsEAgACMBUD BQMqDvOAAwUDKg8FwAMFAyoQ5YAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0CC MA0GCSqGSIb3DQEBCwUAA4IBAQA75LBMXLf6Np0d00BFaSQYsmKjeyIFPO3gC2tb QvouzmJzKOiHAqo5N2vU9yQ2FO0fTM7jR6yy4kj28LDxfuS5csy02jLGm6BkiT9b uwTNCmsHl6A3GxCFRl4BVYOGdol9UwIKQAvwBo9hb+QDfXzEnIOBPPsNn5FeKqiS iUTV+H9S3R705cZO4aW5ycxKgPku+tir38XuILLz8kaSriuSTnjrt5YhNPzXTbXA o+hHcel+qQrbE1suGRz88ugSzi4eglUfW2LE4q/3Eei0MWoASwCnEkIpsMhstlg+ V5tg/mBs7GDELkEU1eEpCy8+JPsAoNQdQNybCypc0h2FwOiU -----END CERTIFICATE-----Generated at Fri Jan 9 03:31:45 2026 by rpki-client