This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer (raw, json) Hash identifier: 5/1j2t3xbn59zPKUMKAtCvzZYdPHAKdxXFc4bttft84= Subject key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385CDE48196B0A0E738E4EE68501FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13178 AS: 15552 IP: 5.56.136.0/21 IP: 5.57.216.0/21 IP: 5.101.224.0/19 IP: 37.114.0.0/21 IP: 85.232.96.0/19 IP: 91.204.20.0/22 IP: 91.205.44.0/22 IP: 93.88.128.0/20 IP: 93.187.120.0/21 IP: 145.255.32.0/20 IP: 185.6.116.0/22 IP: 185.6.216.0/22 IP: 185.55.40.0/22 IP: 185.58.124.0/22 IP: 185.58.152.0/22 IP: 185.59.192.0/22 IP: 185.61.192.0/22 IP: 185.175.72.0/22 IP: 212.232.0.0/20 IP: 2a00:8040::/32 IP: 2a02:6160::/32 IP: 2a03:6c0::/32 IP: 2a03:ed80::/32 IP: 2a04:d2c0::/29 IP: 2a04:e080::/29 IP: 2a04:ed40::/29 IP: 2a0b:d700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5c:de:48:19:6b:0a:0e:73:8e:4e:e6:85:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:03:8d:5d:d2:a0:f0:8a:b0:ed:75:71:25: 50:68:e2:f9:b1:ea:bf:ae:16:f4:d4:42:93:97:fa: e5:23:df:9f:ef:9c:99:08:88:df:4a:77:54:ca:a0: de:fe:2c:1b:77:9a:2e:d2:52:8b:a0:98:0c:fd:bc: 60:de:bb:34:79:25:ec:7c:8c:f0:cb:5c:7b:42:9f: 41:36:57:e4:2a:96:83:97:e8:a0:29:63:6e:9e:fe: a6:fd:40:64:11:14:a0:94:03:15:53:15:27:7b:33: ea:2f:46:87:5b:9b:c0:07:9c:30:f2:dc:a4:dc:a0: 58:11:89:99:fa:71:0d:bd:d8:50:1f:af:23:c3:44: 92:c9:ad:66:57:4f:4a:51:0a:76:80:69:40:58:49: 46:e9:9c:f6:14:e6:2c:f8:14:59:8c:fd:28:1e:71: 57:2d:42:d8:27:84:89:1a:0e:4d:d1:41:80:cb:db: c8:7f:39:79:8a:ea:c3:25:7a:36:61:63:4e:d0:af: fe:23:46:52:4e:63:6c:43:6a:2d:f5:cb:1a:75:97: 4f:af:22:d8:39:76:e1:ba:c2:f4:50:89:a8:fd:e5: 29:f4:fc:84:05:55:64:43:76:61:1c:c6:9f:b4:8b: d5:c5:05:5e:92:60:b9:58:c0:b7:9b:0e:30:a8:d4: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.136.0/21 5.57.216.0/21 5.101.224.0/19 37.114.0.0/21 85.232.96.0/19 91.204.20.0/22 91.205.44.0/22 93.88.128.0/20 93.187.120.0/21 145.255.32.0/20 185.6.116.0/22 185.6.216.0/22 185.55.40.0/22 185.58.124.0/22 185.58.152.0/22 185.59.192.0/22 185.61.192.0/22 185.175.72.0/22 212.232.0.0/20 IPv6: 2a00:8040::/32 2a02:6160::/32 2a03:6c0::/32 2a03:ed80::/32 2a04:d2c0::/29 2a04:e080::/29 2a04:ed40::/29 2a0b:d700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13178 15552 Signature Algorithm: sha256WithRSAEncryption 99:a8:53:f6:a6:9c:28:cf:6d:9a:f1:79:30:be:2d:8f:b9:3c: 34:98:02:5e:5f:25:1d:dc:8e:b1:83:cd:27:04:dc:da:f6:e8: 17:d9:66:c7:fd:8f:bd:d3:50:ca:1f:36:0b:05:65:e1:c2:e3: 4c:91:b1:6a:1d:b8:fa:7c:d9:fc:2c:da:56:6a:36:27:7e:02: a4:53:79:8d:20:c1:2e:01:c2:37:54:cd:7c:e9:4b:31:92:98: 9f:e2:10:5f:c6:38:a5:12:74:23:c4:1a:47:9a:1f:2b:fe:eb: 6b:86:b7:a6:2e:c7:9c:f8:32:1e:3d:ad:ac:95:00:73:2b:02: fc:b8:50:f6:61:d2:72:62:5f:5a:0a:81:20:d5:58:80:d8:24: 1b:33:40:40:04:76:cc:b7:93:b5:30:d8:4a:a9:b6:b5:81:1b: 30:32:6b:89:6c:6a:d3:cb:25:12:47:28:ac:56:80:b8:ae:45: 51:39:09:4d:b9:f4:af:d1:88:60:d8:39:34:47:88:04:76:01: 57:5b:3e:59:4c:a3:d6:f8:a5:98:16:7f:e4:a1:fb:39:69:6a: b7:0a:5a:ff:fc:29:b3:f8:49:d4:f2:73:c1:f8:b4:71:a7:7c: db:2a:25:ae:dc:4e:7b:20:a9:6b:83:0a:c7:49:d9:86:b1:d1: 16:38:94:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgISAZt+OFzeSBlrCg5zjk7mhQH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjI5ZTcwYWYyZjdlMThjYmMxOWY5N2NjYThmZDZjMDUwOTk3NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvggDjV3SoPCKsO11cSVQaOL5seq/ rhb01EKTl/rlI9+f75yZCIjfSndUyqDe/iwbd5ou0lKLoJgM/bxg3rs0eSXsfIzw y1x7Qp9BNlfkKpaDl+igKWNunv6m/UBkERSglAMVUxUnezPqL0aHW5vAB5ww8tyk 3KBYEYmZ+nENvdhQH68jw0SSya1mV09KUQp2gGlAWElG6Zz2FOYs+BRZjP0oHnFX LULYJ4SJGg5N0UGAy9vIfzl5iurDJXo2YWNO0K/+I0ZSTmNsQ2ot9csadZdPryLY OXbhusL0UImo/eUp9PyEBVVkQ3ZhHMaftIvVxQVekmC5WMC3mw4wqNQ8JwIDAQAB o4IDUjCCA04wHQYDVR0OBBYEFP8p5wry9+GMvBn5fMqP1sBQmXQdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2VjMmQ4 OS00NGRkLTRiYWItYWU3YS1jZjIwZTViNjdmYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvZWMyZDg5 LTQ0ZGQtNGJhYi1hZTdhLWNmMjBlNWI2N2ZjOC8xL195bm5DdkwzNFl5OEdmbDh5 b19Xd0ZDWmRCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHNBggrBgEF BQcBBwEB/wSBvTCBujB4BAIAATByAwQDBTiIAwQDBTnYAwQFBWXgAwQDJXIAAwQF VehgAwQCW8wUAwQCW80sAwQEXViAAwQDXbt4AwQEkf8gAwQCuQZ0AwQCuQbYAwQC uTcoAwQCuTp8AwQCuTqYAwQCuTvAAwQCuT3AAwQCua9IAwQE1OgAMD4EAgACMDgD BQAqAIBAAwUAKgJhYAMFACoDBsADBQAqA+2AAwUDKgTSwAMFAyoE4IADBQMqBO1A AwUDKgvXADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIzegICPMAwDQYJKoZIhvcN AQELBQADggEBAJmoU/amnCjPbZrxeTC+LY+5PDSYAl5fJR3cjrGDzScE3Nr26BfZ Zsf9j73TUMofNgsFZeHC40yRsWoduPp82fws2lZqNid+AqRTeY0gwS4BwjdUzXzp SzGSmJ/iEF/GOKUSdCPEGkeaHyv+62uGt6Yux5z4Mh49rayVAHMrAvy4UPZh0nJi X1oKgSDVWIDYJBszQEAEdsy3k7Uw2EqptrWBGzAya4lsatPLJRJHKKxWgLiuRVE5 CU259K/RiGDYOTRHiAR2AVdbPllMo9b4pZgWf+Sh+zlparcKWv/8KbP4SdTyc8H4 tHGnfNsqJa7cTnsgqWuDCsdJ2Yax0RY4lF4= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:13 2026 by rpki-client