This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer (raw, json) Hash identifier: N4XKC0VZWAfVqxXwOLAibZcW0ludEe1r6Zf1OhlP4qw= Subject key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84BEE1D7880D027A21448C8FEB132D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200423 IP: 185.107.220.0/22 IP: 2a06:4600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:be:e1:d7:88:0d:02:7a:21:44:8c:8f:eb:13:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:9e:bc:ab:54:95:20:8c:ec:84:19:d4:39: bf:8e:e2:cf:36:25:c1:ab:c4:af:cd:8b:11:3a:cd: 10:7b:2d:18:10:00:13:dd:d5:ec:53:97:9e:2d:24: 8a:58:3b:51:58:59:ab:4d:de:ec:12:39:67:56:31: 88:5c:0d:07:f2:d2:a6:b9:3d:5e:fe:00:50:69:2a: 42:74:a4:a6:87:d9:d4:d1:ed:6a:e9:2e:dc:cb:5d: 29:29:c4:27:ae:57:fd:a9:e6:93:ec:2b:49:f1:7b: 3b:9e:93:8d:03:81:ef:74:87:d4:84:9c:8e:0a:2a: 7e:65:05:d9:d4:6d:2d:38:83:9d:5d:df:5f:a9:08: 03:85:95:8d:06:ff:7f:c3:44:bd:75:fb:c7:6f:b5: 60:f2:15:52:61:df:af:fe:a6:ab:4d:48:e7:52:ac: cf:bf:2d:3b:c3:23:fa:2b:a1:e8:49:f9:8a:4a:b6: 50:d1:b2:2e:5c:d7:f8:3f:d5:b0:c9:2f:0b:39:bc: 77:7e:a6:aa:a3:7d:cd:c0:68:85:91:fa:16:ce:79: a1:45:c3:e2:ae:18:dd:7d:f7:e3:6a:3b:b8:18:28: f6:c2:30:6d:13:d9:29:51:98:17:7e:b8:e3:9e:56: a2:8c:cf:3c:34:8d:d4:78:df:86:18:0e:79:be:ab: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.220.0/22 IPv6: 2a06:4600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200423 Signature Algorithm: sha256WithRSAEncryption 76:4f:24:b6:11:17:26:dc:27:67:38:f5:eb:82:b2:b6:be:04: 55:63:2c:c8:64:b3:7e:e3:b0:7e:4b:9b:c6:58:58:fa:6f:64: 43:7a:d3:c1:70:5a:7b:f1:be:27:a4:82:bc:7b:e9:fd:c6:fd: be:59:4a:fb:32:ab:7f:82:6e:95:f9:8d:6e:bc:e6:7a:d8:2e: 64:c6:d3:47:5a:bb:de:56:b9:00:92:4d:e5:ea:02:39:be:45: 4f:79:84:63:e8:f4:ba:ed:9b:18:52:bb:64:a9:f5:94:dc:46: 97:95:83:71:45:80:3a:61:e7:ef:77:a1:3d:70:d1:22:32:81: ee:2a:86:04:08:3e:5f:d9:cd:9a:d9:57:50:b7:7c:d4:7d:b9: 4b:82:f8:94:81:3a:bc:b8:98:22:39:71:ea:03:ab:3e:6b:41: 60:a7:ca:97:3f:04:9a:5a:6c:d6:29:c2:af:f1:c7:4b:b8:fc: 4b:e0:70:bd:6e:ce:6c:20:0f:37:45:c3:36:a1:97:a6:18:01: 3d:0a:12:99:c1:00:d2:02:b3:d6:df:fd:70:e3:26:76:9c:08: 63:68:44:da:14:57:71:6c:13:c7:8a:99:54:b2:eb:0e:36:ce: 77:33:50:3d:3d:52:5d:6a:ff:17:0a:0d:85:ed:09:3e:e6:16: 28:c9:55:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hL7h14gNAnohRIyP6xMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWQ2MWFlODQ3MmM1YzhmY2Q4MTM3NTZjMTY0YzJmMTg2NGQzYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfmevKtUlSCM7IQZ1Dm/juLPNiXB q8SvzYsROs0Qey0YEAAT3dXsU5eeLSSKWDtRWFmrTd7sEjlnVjGIXA0H8tKmuT1e /gBQaSpCdKSmh9nU0e1q6S7cy10pKcQnrlf9qeaT7CtJ8Xs7npONA4HvdIfUhJyO Cip+ZQXZ1G0tOIOdXd9fqQgDhZWNBv9/w0S9dfvHb7Vg8hVSYd+v/qarTUjnUqzP vy07wyP6K6HoSfmKSrZQ0bIuXNf4P9WwyS8LObx3fqaqo33NwGiFkfoWznmhRcPi rhjdfffjaju4GCj2wjBtE9kpUZgXfrjjnlaijM88NI3UeN+GGA55vqtO7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJXWGuhHLFyPzYE3VsFkwvGGTTyQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2VlNDc0 OC00ZWFiLTRlNTUtYjY0YS0yYzdhMTFjMWZiYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZWU0NzQ4 LTRlYWItNGU1NS1iNjRhLTJjN2ExMWMxZmJhZi8xL2xkWWE2RWNzWElfTmdUZFd3 V1RDOFlaTlBKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWvcMA0EAgACMAcDBQMqBkYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMO5zANBgkqhkiG9w0BAQsFAAOCAQEAdk8kthEXJtwn Zzj164Kytr4EVWMsyGSzfuOwfkubxlhY+m9kQ3rTwXBae/G+J6SCvHvp/cb9vllK +zKrf4JulfmNbrzmetguZMbTR1q73la5AJJN5eoCOb5FT3mEY+j0uu2bGFK7ZKn1 lNxGl5WDcUWAOmHn73ehPXDRIjKB7iqGBAg+X9nNmtlXULd81H25S4L4lIE6vLiY Ijlx6gOrPmtBYKfKlz8Emlps1inCr/HHS7j8S+BwvW7ObCAPN0XDNqGXphgBPQoS mcEA0gKz1t/9cOMmdpwIY2hE2hRXcWwTx4qZVLLrDjbOdzNQPT1SXWr/FwoNhe0J PuYWKMlV9A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:07 2026 by rpki-client