This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer File: hYYCc-snGSK59-yPSlkQFjVtcys.cer (raw, json) Hash identifier: r8n6Y9MoWi2jjpU5H/kwv7LrnMP8X+Wpu+PKwt4qduA= Subject key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A868BBFF54962E820EE07D3775D49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207989 IP: 84.38.251.0/24 IP: 2a12:eec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:86:8b:bf:f5:49:62:e8:20:ee:07:d3:77:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85860273eb271922b9f7ec8f4a591016356d732b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:08:0a:e7:62:fb:7e:18:f8:dd:e1:f1:d6: d5:89:ab:2d:53:c3:3a:d9:79:fe:cf:db:c8:55:e1: 05:2d:3d:76:5b:03:33:8c:56:5e:05:bb:b0:10:f6: 4f:a6:ff:b6:e0:27:54:4d:a2:77:fb:f7:54:e0:c7: 53:56:57:67:bc:5a:50:70:3f:21:9b:09:b2:ad:12: 8a:fa:30:6b:5f:e8:db:f1:f1:7b:2a:7d:df:63:50: 88:82:eb:23:d0:62:e2:3f:cc:47:ea:aa:bd:3d:ef: d1:f1:8c:b8:1c:bd:fd:74:d3:46:b8:5c:d3:e9:f4: 32:ee:bf:8a:2e:c2:08:e5:32:3e:f0:0d:67:39:f4: 92:03:a4:1a:fc:98:ce:3a:a1:c2:b1:49:76:4f:17: 74:21:2b:e9:79:ee:32:bd:85:7d:47:bf:bf:b3:11: 1b:ab:12:1a:09:0b:fb:36:60:79:d4:05:9a:28:89: c2:11:0c:4e:1c:37:c3:88:7d:47:a0:2c:4b:af:5c: 04:61:6a:31:20:f7:36:2e:c0:9b:dc:e8:db:16:b0: dd:15:d5:88:e9:11:e2:82:73:a3:fb:7c:ed:a6:89: 6b:a4:b1:1e:c5:6e:a1:b9:71:fd:43:f8:bb:97:85: 83:17:1c:f3:52:80:fc:7d:a9:76:b5:9c:95:11:47: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.251.0/24 IPv6: 2a12:eec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207989 Signature Algorithm: sha256WithRSAEncryption ad:2a:e1:a5:13:3b:b5:c7:80:1e:88:75:48:f3:4e:36:d0:19: 80:13:f6:a4:3b:90:40:d9:b2:34:33:a0:33:5f:ff:eb:05:92: c1:d2:80:e9:68:f2:ee:81:ba:ab:7a:6b:ab:bc:08:0f:83:e3: b5:ad:71:c1:57:8a:9c:26:7a:9b:8c:6f:84:28:6a:ef:d8:d6: 38:19:37:65:35:80:9b:81:cb:95:0e:94:c8:eb:46:04:7d:e0: 3c:90:3b:d5:f8:9f:e4:ff:55:f0:26:56:5e:27:77:57:16:62: d3:31:6a:47:ec:aa:55:cb:12:0c:63:d2:e0:57:db:f0:f3:7b: fc:d6:33:6e:44:fd:7a:94:b0:36:35:e5:53:75:b7:d7:a4:9c: 91:3f:2b:ab:25:17:55:82:b7:a4:61:65:a6:58:34:19:6f:07: cb:6f:bc:fc:8b:f2:56:73:ce:c1:a5:52:14:84:e0:8f:b5:a2: 3b:09:18:11:f7:07:08:d4:80:74:c3:48:20:05:b1:30:7a:2a: 90:9f:3c:7e:77:c7:e0:2b:48:8a:a5:5a:3e:82:00:46:4e:d3: 7c:94:f8:ad:84:e4:4c:01:f2:fe:a2:08:70:79:67:de:04:16: c2:1b:f2:3d:02:36:a9:2f:11:79:bc:23:d9:d4:60:f6:8a:c7: a8:de:4a:d9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WoaLv/VJYugg7gfTd11JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTg2MDI3M2ViMjcxOTIyYjlmN2VjOGY0YTU5MTAxNjM1NmQ3MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm0ICudi+34Y+N3h8dbViastU8M6 2Xn+z9vIVeEFLT12WwMzjFZeBbuwEPZPpv+24CdUTaJ3+/dU4MdTVldnvFpQcD8h mwmyrRKK+jBrX+jb8fF7Kn3fY1CIgusj0GLiP8xH6qq9Pe/R8Yy4HL39dNNGuFzT 6fQy7r+KLsII5TI+8A1nOfSSA6Qa/JjOOqHCsUl2Txd0ISvpee4yvYV9R7+/sxEb qxIaCQv7NmB51AWaKInCEQxOHDfDiH1HoCxLr1wEYWoxIPc2LsCb3OjbFrDdFdWI 6RHignOj+3ztpolrpLEexW6huXH9Q/i7l4WDFxzzUoD8fal2tZyVEUf+/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIWGAnPrJxkiuffsj0pZEBY1bXMrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzAxNTdj OS0zNDg4LTRmYjgtOWI0Zi05OTA5ZWUyZjMzYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMDE1N2M5 LTM0ODgtNGZiOC05YjRmLTk5MDllZTJmMzNiMi8xL2hZWUNjLXNuR1NLNTkteVBT bGtRRmpWdGN5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAVCb7MA0EAgACMAcDBQMqEu7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsdTANBgkqhkiG9w0BAQsFAAOCAQEArSrhpRM7tceA Hoh1SPNONtAZgBP2pDuQQNmyNDOgM1//6wWSwdKA6Wjy7oG6q3prq7wID4Pjta1x wVeKnCZ6m4xvhChq79jWOBk3ZTWAm4HLlQ6UyOtGBH3gPJA71fif5P9V8CZWXid3 VxZi0zFqR+yqVcsSDGPS4Ffb8PN7/NYzbkT9epSwNjXlU3W316SckT8rqyUXVYK3 pGFlplg0GW8Hy2+8/IvyVnPOwaVSFITgj7WiOwkYEfcHCNSAdMNIIAWxMHoqkJ88 fnfH4CtIiqVaPoIARk7TfJT4rYTkTAHy/qIIcHln3gQWwhvyPQI2qS8Rebwj2dRg 9orHqN5K2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:59 2026 by rpki-client