This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer File: YbG7REdxjxaz02Z10gXE3qQbugo.cer (raw, json) Hash identifier: tx7QE4SW9q+GoLiPl3dTyRvHtKyky980UyoOUnjVakg= Subject key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B787DB2CBAA21DDC3D65A11DFAB5294CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 07:37:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209526 IP: 2.57.16.0/21 IP: 2.58.28.0/22 IP: 2.58.172.0/22 IP: 5.45.36.0/22 IP: 5.181.124.0 -- 5.181.135.255 IP: 5.182.108.0/22 IP: 5.252.68.0 -- 5.252.83.255 IP: 5.252.160.0/22 IP: 5.253.200.0/22 IP: 37.143.60.0/22 IP: 45.81.0.0/22 IP: 45.87.184.0/22 IP: 45.88.96.0/22 IP: 45.89.240.0/22 IP: 45.89.248.0/21 IP: 45.93.44.0/22 IP: 45.95.12.0/22 IP: 45.95.20.0/22 IP: 45.95.36.0/22 IP: 45.133.168.0 -- 45.133.179.255 IP: 45.137.28.0/22 IP: 45.137.116.0/22 IP: 45.137.124.0/22 IP: 45.137.132.0/22 IP: 45.137.156.0/22 IP: 45.139.180.0/22 IP: 45.231.206.0/23 IP: 85.208.72.0/22 IP: 85.209.176.0/22 IP: 89.19.44.0 -- 89.19.51.255 IP: 92.118.160.0/22 IP: 92.119.32.0/22 IP: 92.242.184.0/22 IP: 103.141.68.0/23 IP: 109.106.0.0/22 IP: 130.185.124.0/22 IP: 141.98.88.0/22 IP: 149.62.40.0/22 IP: 179.61.128.0/17 IP: 181.41.192.0/19 IP: 181.214.0.0/15 IP: 185.34.40.0/22 IP: 185.130.204.0/22 IP: 185.135.8.0/22 IP: 185.135.156.0/22 IP: 185.137.12.0/22 IP: 185.137.92.0/22 IP: 185.139.0.0/22 IP: 185.139.236.0/22 IP: 185.141.164.0/22 IP: 185.142.24.0/22 IP: 185.143.228.0/22 IP: 185.145.36.0/22 IP: 185.151.56.0/22 IP: 185.158.100.0 -- 185.158.107.255 IP: 185.158.132.0/22 IP: 185.158.148.0/22 IP: 185.170.40.0/22 IP: 185.170.56.0/22 IP: 185.172.56.0/22 IP: 185.172.64.0/22 IP: 185.173.24.0/22 IP: 185.173.32.0/22 IP: 185.174.60.0/22 IP: 191.96.0.0/16 IP: 191.101.0.0/16 IP: 193.7.200.0/22 IP: 193.31.40.0/22 IP: 193.58.104.0/22 IP: 193.107.208.0/22 IP: 194.53.140.0/22 IP: 194.110.12.0/22 IP: 194.110.242.0/24 IP: 213.109.168.0/22 IP: 2a00:d1a0::/32 IP: 2a03:a960::/29 IP: 2a03:fbc0::/29 IP: 2a06:2b80::/29 IP: 2a09:4b40::/29 IP: 2a0a:4e80::/29 IP: 2a0a:7a00::/29 IP: 2a0a:7e00::/29 IP: 2a0a:8600::/29 IP: 2a0a:8e00::/29 IP: 2a0a:9200::/29 IP: 2a0a:9600::/29 IP: 2a0a:9a00::/29 IP: 2a0a:9e00::/29 IP: 2a0a:9f00::/29 IP: 2a0a:a600::/29 IP: 2a0a:a700::/29 IP: 2a0a:b200::/29 IP: 2a0a:b600::/29 IP: 2a0a:ba00::/29 IP: 2a0a:be00::/29 IP: 2a0a:c600::/29 IP: 2a0a:ce00::/29 IP: 2a0a:d200::/29 IP: 2a0b:300::/29 IP: 2a0b:500::/29 IP: 2a0b:3300::/29 IP: 2a0b:3700::/29 IP: 2a0b:8700::/29 IP: 2a0c:fa40::/29 IP: 2a0d:5c0::/29 IP: 2a0d:4b40::/29 IP: 2a0d:4c40::/29 IP: 2a0e:1c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:7d:b2:cb:aa:21:dd:c3:d6:5a:11:df:ab:52:94:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 07:37:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:da:79:63:5b:c6:cf:fa:55:17:11:e3:24: 38:c3:ce:d7:32:1a:5d:42:a5:d6:ea:cf:9d:43:1f: be:82:a7:80:ca:e5:fe:4a:ef:b5:99:05:00:1b:6a: 88:95:c2:54:55:70:c6:5b:9c:1b:b4:3c:93:4d:e7: af:9e:5a:6e:4c:6a:e3:71:5b:21:1a:4f:6f:84:94: a0:28:a4:02:45:9f:31:84:c8:a8:92:17:99:5f:26: 54:73:bb:af:3b:2e:bc:41:b2:5c:a0:20:92:37:e6: 4d:fb:7f:10:7e:33:a3:5e:19:fe:53:b2:06:a2:a0: 5c:1e:93:c1:5a:7e:a9:b9:58:08:81:07:a3:43:2d: ea:f3:94:38:c7:a2:82:8e:00:35:93:ca:53:51:38: 00:86:df:b0:bc:26:b7:59:f0:1d:e3:8b:c7:59:15: 5f:d6:5c:b6:94:a5:d0:d8:77:8c:ac:a4:f2:1d:b7: 3f:5a:a8:d0:20:c1:8e:05:34:39:05:0c:89:45:a1: 18:a8:2a:c9:fc:31:8f:3f:c1:e9:83:ae:df:23:c1: 48:62:ae:0e:0b:1c:3e:87:d4:2b:7c:66:e9:ad:32: 9c:71:fa:ed:b8:06:b9:60:b0:90:ff:c6:39:ef:2c: 6a:c2:b0:76:e3:3e:56:ab:46:3c:6d:5e:97:9c:2c: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.16.0/21 2.58.28.0/22 2.58.172.0/22 5.45.36.0/22 5.181.124.0-5.181.135.255 5.182.108.0/22 5.252.68.0-5.252.83.255 5.252.160.0/22 5.253.200.0/22 37.143.60.0/22 45.81.0.0/22 45.87.184.0/22 45.88.96.0/22 45.89.240.0/22 45.89.248.0/21 45.93.44.0/22 45.95.12.0/22 45.95.20.0/22 45.95.36.0/22 45.133.168.0-45.133.179.255 45.137.28.0/22 45.137.116.0/22 45.137.124.0/22 45.137.132.0/22 45.137.156.0/22 45.139.180.0/22 45.231.206.0/23 85.208.72.0/22 85.209.176.0/22 89.19.44.0-89.19.51.255 92.118.160.0/22 92.119.32.0/22 92.242.184.0/22 103.141.68.0/23 109.106.0.0/22 130.185.124.0/22 141.98.88.0/22 149.62.40.0/22 179.61.128.0/17 181.41.192.0/19 181.214.0.0/15 185.34.40.0/22 185.130.204.0/22 185.135.8.0/22 185.135.156.0/22 185.137.12.0/22 185.137.92.0/22 185.139.0.0/22 185.139.236.0/22 185.141.164.0/22 185.142.24.0/22 185.143.228.0/22 185.145.36.0/22 185.151.56.0/22 185.158.100.0-185.158.107.255 185.158.132.0/22 185.158.148.0/22 185.170.40.0/22 185.170.56.0/22 185.172.56.0/22 185.172.64.0/22 185.173.24.0/22 185.173.32.0/22 185.174.60.0/22 191.96.0.0/16 191.101.0.0/16 193.7.200.0/22 193.31.40.0/22 193.58.104.0/22 193.107.208.0/22 194.53.140.0/22 194.110.12.0/22 194.110.242.0/24 213.109.168.0/22 IPv6: 2a00:d1a0::/32 2a03:a960::/29 2a03:fbc0::/29 2a06:2b80::/29 2a09:4b40::/29 2a0a:4e80::/29 2a0a:7a00::/29 2a0a:7e00::/29 2a0a:8600::/29 2a0a:8e00::/29 2a0a:9200::/29 2a0a:9600::/29 2a0a:9a00::/29 2a0a:9e00::/29 2a0a:9f00::/29 2a0a:a600::/29 2a0a:a700::/29 2a0a:b200::/29 2a0a:b600::/29 2a0a:ba00::/29 2a0a:be00::/29 2a0a:c600::/29 2a0a:ce00::/29 2a0a:d200::/29 2a0b:300::/29 2a0b:500::/29 2a0b:3300::/29 2a0b:3700::/29 2a0b:8700::/29 2a0c:fa40::/29 2a0d:5c0::/29 2a0d:4b40::/29 2a0d:4c40::/29 2a0e:1c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209526 Signature Algorithm: sha256WithRSAEncryption 71:5e:45:21:fa:8e:9f:c0:18:6f:86:d3:25:d0:fc:12:8b:75: c8:e8:eb:ad:b6:c7:20:12:af:47:2e:2d:94:09:05:1a:3d:de: 0a:1c:fe:40:cb:6a:b0:26:35:62:da:3e:fa:a7:16:06:16:47: b5:a1:c4:41:b9:66:a3:a5:3b:14:19:64:eb:22:ef:b5:79:2b: 35:93:f4:ef:32:7e:26:67:13:bc:0f:85:0b:50:68:15:99:69: b2:4a:61:53:01:af:4e:d5:71:7f:21:22:73:19:69:a3:7e:b6: fd:af:50:c0:c6:c5:4f:9d:5d:f5:81:58:c7:af:b0:78:50:9a: de:c6:ef:42:aa:52:6c:bb:dd:18:73:c9:55:97:83:34:a7:31: dc:33:97:1a:f1:c3:61:4a:10:d2:c6:da:9d:65:45:a5:b5:f1: da:7a:6d:4d:27:e6:51:4b:e2:1f:07:9e:7e:de:54:73:de:70: 1f:a3:c3:4d:84:3c:49:eb:22:56:95:a0:e8:ff:e5:85:38:16: 7a:ba:78:8a:5e:94:26:12:14:e2:d3:a0:e1:64:c1:83:97:53: a3:14:17:73:cd:22:03:6b:93:3c:79:16:04:15:0d:f8:b2:95: 2e:f5:a1:c4:e7:11:44:90:79:cf:73:de:12:a5:b5:13:9f:0b: 3e:19:e6:e1 -----BEGIN CERTIFICATE----- MIIIjTCCB3WgAwIBAgISAZt4fbLLqiHdw9ZaEd+rUpTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDczNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWIxYmI0NDQ3NzE4ZjE2YjNkMzY2NzVkMjA1YzRkZWE0MWJiYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+raeWNbxs/6VRcR4yQ4w87XMhpd QqXW6s+dQx++gqeAyuX+Su+1mQUAG2qIlcJUVXDGW5wbtDyTTeevnlpuTGrjcVsh Gk9vhJSgKKQCRZ8xhMiokheZXyZUc7uvOy68QbJcoCCSN+ZN+38QfjOjXhn+U7IG oqBcHpPBWn6puVgIgQejQy3q85Q4x6KCjgA1k8pTUTgAht+wvCa3WfAd44vHWRVf 1ly2lKXQ2HeMrKTyHbc/WqjQIMGOBTQ5BQyJRaEYqCrJ/DGPP8Hpg67fI8FIYq4O Cxw+h9QrfGbprTKccfrtuAa5YLCQ/8Y57yxqwrB24z5Wq0Y8bV6XnCxT9wIDAQAB o4IFmTCCBZUwHQYDVR0OBBYEFGGxu0RHcY8Ws9NmddIFxN6kG7oKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1 OWU3LTJhODMtNDNkMS05YWExLTU4NDE3YWJhYzRiNi8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTM3 NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFjNGI2LzEvNjFCMUJCNDQ0Nzcx OEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjCCAvoGCCsGAQUFBwEHAQH/BIIC6TCCAuUwggHp BAIAATCCAeEDBAMCORADBAICOhwDBAICOqwDBAIFLSQwDAMEAgW1fAMEAwW1gAME AgW2bDAMAwQCBfxEAwQCBfxQAwQCBfygAwQCBf3IAwQCJY88AwQCLVEAAwQCLVe4 AwQCLVhgAwQCLVnwAwQDLVn4AwQCLV0sAwQCLV8MAwQCLV8UAwQCLV8kMAwDBAMt hagDBAIthbADBAItiRwDBAItiXQDBAItiXwDBAItiYQDBAItiZwDBAIti7QDBAEt 584DBAJV0EgDBAJV0bAwDAMEAlkTLAMEAlkTMAMEAlx2oAMEAlx3IAMEAlzyuAME AWeNRAMEAm1qAAMEAoK5fAMEAo1iWAMEApU+KAMEB7M9gAMEBbUpwAMDAbXWAwQC uSIoAwQCuYLMAwQCuYcIAwQCuYecAwQCuYkMAwQCuYlcAwQCuYsAAwQCuYvsAwQC uY2kAwQCuY4YAwQCuY/kAwQCuZEkAwQCuZc4MAwDBAK5nmQDBAK5nmgDBAK5noQD BAK5npQDBAK5qigDBAK5qjgDBAK5rDgDBAK5rEADBAK5rRgDBAK5rSADBAK5rjwD AwC/YAMDAL9lAwQCwQfIAwQCwR8oAwQCwTpoAwQCwWvQAwQCwjWMAwQCwm4MAwQA wm7yAwQC1W2oMIH1BAIAAjCB7gMFACoA0aADBQMqA6lgAwUDKgP7wAMFAyoGK4AD BQMqCUtAAwUDKgpOgAMFAyoKegADBQMqCn4AAwUDKgqGAAMFAyoKjgADBQMqCpIA AwUDKgqWAAMFAyoKmgADBQMqCp4AAwUDKgqfAAMFAyoKpgADBQMqCqcAAwUDKgqy AAMFAyoKtgADBQMqCroAAwUDKgq+AAMFAyoKxgADBQMqCs4AAwUDKgrSAAMFAyoL AwADBQMqCwUAAwUDKgszAAMFAyoLNwADBQMqC4cAAwUDKgz6QAMFAyoNBcADBQMq DUtAAwUDKg1MQAMFAyoOHAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzJ2MA0G CSqGSIb3DQEBCwUAA4IBAQBxXkUh+o6fwBhvhtMl0PwSi3XI6OuttscgEq9HLi2U CQUaPd4KHP5Ay2qwJjVi2j76pxYGFke1ocRBuWajpTsUGWTrIu+1eSs1k/TvMn4m ZxO8D4ULUGgVmWmySmFTAa9O1XF/ISJzGWmjfrb9r1DAxsVPnV31gVjHr7B4UJre xu9CqlJsu90Yc8lVl4M0pzHcM5ca8cNhShDSxtqdZUWltfHaem1NJ+ZRS+IfB55+ 3lRz3nAfo8NNhDxJ6yJWlaDo/+WFOBZ6uniKXpQmEhTi06DhZMGDl1OjFBdzzSID a5M8eRYEFQ34spUu9aHE5xFEkHnPc94SpbUTnws+Gebh -----END CERTIFICATE-----Generated at Mon Jan 19 12:17:02 2026 by rpki-client