This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer File: YV3bd8eSb1d7AKvNPVL0LJICec0.cer (raw, json) Hash identifier: TrMUnt1HsNEZH6PziJzpFG4QxyXD4Hyn3TgCBh7gnYM= Subject key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775938CE097F75A74A53A11132F10315 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41160 AS: 202323 AS: 204060 AS: 206881 IP: 89.207.104.0/21 IP: 159.253.184.0/21 IP: 185.64.204.0/22 IP: 185.116.0.0/22 IP: 185.205.164.0/22 IP: 185.225.216.0/22 IP: 2a04:fc00::/29 IP: 2a0b:7c0::/29 IP: 2a0c:a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:38:ce:09:7f:75:a7:4a:53:a1:11:32:f1:03:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=615ddb77c7926f577b00abcd3d52f42c920279cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:50:67:8e:c5:46:ca:0d:58:bc:f0:fd:2e: ce:64:8e:8a:64:5e:e9:39:1f:6c:d2:5e:94:89:05: 9e:5f:be:9a:b3:be:1c:88:d5:e0:97:22:92:2e:b1: 22:8e:ba:68:09:45:5d:3e:bf:32:34:1e:a3:cb:77: 12:d6:6e:8b:7c:58:98:a0:3c:21:e2:93:7a:ad:cb: b1:d9:bf:2f:be:3e:fb:1e:7d:93:d2:89:80:13:08: 41:ab:90:43:37:86:a5:e7:81:5e:ce:6a:fd:18:9e: fc:d8:0a:4d:d5:62:5e:97:c7:94:12:59:96:75:63: 41:4b:67:3e:57:1d:81:64:2b:1b:32:6a:91:3e:bb: f1:64:65:67:f9:64:0f:d8:ae:b9:a1:d7:97:95:c9: 8e:d1:f5:f5:28:d1:fd:22:34:ba:db:c5:d1:c8:50: b5:3a:01:b6:16:61:1a:60:93:cc:94:f9:bb:27:b4: d3:e2:de:c3:5b:d5:f1:ec:eb:be:dc:f6:8d:04:da: bc:2b:03:30:d4:09:a2:a0:8b:78:1a:1f:34:c9:83: c3:02:69:40:74:82:af:1d:dd:75:bc:4c:0c:08:05: d2:55:b0:cd:4a:6e:80:9e:31:ef:68:f3:31:d4:e5: 59:a7:55:0d:2e:6e:e1:2d:54:93:f7:73:c6:34:d8: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.104.0/21 159.253.184.0/21 185.64.204.0/22 185.116.0.0/22 185.205.164.0/22 185.225.216.0/22 IPv6: 2a04:fc00::/29 2a0b:7c0::/29 2a0c:a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41160 202323 204060 206881 Signature Algorithm: sha256WithRSAEncryption 7b:e0:ea:df:54:88:a3:70:fd:3c:1c:6e:e7:1f:6b:a1:ba:bb: 2c:9e:e3:5a:cb:67:cd:52:8c:4b:d0:46:ce:38:df:48:09:ab: dc:15:01:81:ba:0a:3a:9c:d5:cd:b2:41:59:6d:dd:0d:6c:fc: fc:0c:40:c3:89:ce:8a:3b:de:77:26:17:7b:3c:92:e2:e7:df: 3b:b7:aa:a6:e4:78:94:63:1c:71:1a:cc:59:04:e8:cd:08:d7: d3:57:89:fc:3c:14:14:04:cf:93:24:b0:35:b3:86:9e:cc:5b: 4e:a0:1d:3b:db:10:27:b5:8b:80:7a:53:50:0e:5b:ec:7b:a8: b7:74:12:52:9e:d3:80:c3:d9:c9:aa:c5:0f:68:04:2b:9a:5d: be:cd:9e:ca:15:28:48:ca:2a:81:71:89:0c:78:09:64:18:10: 6f:82:03:bf:82:d0:e2:c0:fc:da:f7:8a:88:62:df:89:ee:96: 34:fd:0c:e0:9d:af:20:db:f3:86:db:d2:97:66:3a:f2:45:e4: ab:e7:8e:14:ab:e2:1a:cf:f6:5c:a5:b4:e0:f3:a5:a1:87:89: 1b:57:1a:fd:23:7b:1a:37:ae:e4:53:19:9e:a5:99:c6:4a:4f: c8:35:4c:bf:dd:63:23:78:c4:b5:55:ba:5b:e7:27:3e:5a:ec: 02:b2:62:ca -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt3WTjOCX91p0pToREy8QMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTVkZGI3N2M3OTI2ZjU3N2IwMGFiY2QzZDUyZjQyYzkyMDI3OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9NQZ47FRsoNWLzw/S7OZI6KZF7p OR9s0l6UiQWeX76as74ciNXglyKSLrEijrpoCUVdPr8yNB6jy3cS1m6LfFiYoDwh 4pN6rcux2b8vvj77Hn2T0omAEwhBq5BDN4al54Fezmr9GJ782ApN1WJel8eUElmW dWNBS2c+Vx2BZCsbMmqRPrvxZGVn+WQP2K65odeXlcmO0fX1KNH9IjS628XRyFC1 OgG2FmEaYJPMlPm7J7TT4t7DW9Xx7Ou+3PaNBNq8KwMw1AmioIt4Gh80yYPDAmlA dIKvHd11vEwMCAXSVbDNSm6AnjHvaPMx1OVZp1UNLm7hLVST93PGNNhLIwIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFGFd23fHkm9XewCrzT1S9CySAnnNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzEwNWI4 YS0zNTY5LTRlMzMtOTQxZi1iMGRjMmUyMjExZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMTA1Yjhh LTM1NjktNGUzMy05NDFmLWIwZGMyZTIyMTFlYi8xL1lWM2JkOGVTYjFkN0FLdk5Q VkwwTEpJQ2VjMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTAqBAIAATAkAwQDWc9oAwQDn/24AwQCuUDMAwQCuXQAAwQCuc2k AwQCueHYMBsEAgACMBUDBQMqBPwAAwUDKgsHwAMFAyoMCgAwKQYIKwYBBQUHAQgB Af8EGjAYoBYwFAIDAKDIAgMDFlMCAwMdHAIDAyghMA0GCSqGSIb3DQEBCwUAA4IB AQB74OrfVIijcP08HG7nH2uhurssnuNay2fNUoxL0EbOON9ICavcFQGBugo6nNXN skFZbd0NbPz8DEDDic6KO953Jhd7PJLi5987t6qm5HiUYxxxGsxZBOjNCNfTV4n8 PBQUBM+TJLA1s4aezFtOoB072xAntYuAelNQDlvse6i3dBJSntOAw9nJqsUPaAQr ml2+zZ7KFShIyiqBcYkMeAlkGBBvggO/gtDiwPza94qIYt+J7pY0/Qzgna8g2/OG 29KXZjryReSr544Uq+Iaz/ZcpbTg86Whh4kbVxr9I3saN67kUxmepZnGSk/INUy/ 3WMjeMS1Vbpb5yc+WuwCsmLK -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:13 2026 by rpki-client