This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer File: ny8WbQXql29prtWORqQfflBSRHU.cer (raw, json) Hash identifier: y1pf9yr4d2gdcxJ2h2P9aDg/RJmdtq0GG7FVM+Si+jE= Subject key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E382B3D1E0B1854B7FA19C0076E76B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208163 IP: 45.152.204.0/22 IP: 2a0f:f300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:3d:1e:0b:18:54:b7:fa:19:c0:07:6e:76:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2f166d05ea976f69aed58e46a41f7e50524475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:2a:9b:6b:53:c6:72:5c:71:14:b8:bb:92: 87:09:49:b0:a5:fb:60:16:47:07:6a:74:c5:cf:1c: 3b:d3:d1:cd:c4:bd:ec:36:35:30:62:d2:61:c1:44: 6d:e1:60:91:6f:10:97:ac:48:f9:e9:ee:4d:38:e6: d0:f5:8f:f7:0a:e4:22:f4:79:4b:cc:39:15:9b:0e: 65:09:48:6b:a0:f9:38:a7:45:51:89:b2:8a:f3:14: fd:ab:68:9a:c1:28:4e:fd:c1:00:f5:27:b9:94:91: 90:c3:8d:83:12:b5:c9:4c:ef:89:b6:a8:9e:73:d5: 83:7a:db:3a:5e:0b:a4:34:c5:ae:4a:06:20:e4:c7: 69:ba:a7:21:fb:b6:31:fc:31:41:d5:90:98:c0:9f: 3f:43:61:ac:8f:66:59:aa:74:df:e4:4a:68:b4:67: 5f:98:48:16:56:e6:35:99:f3:39:e6:9b:27:9d:7d: 1e:80:74:d1:2a:2b:bc:ad:c8:55:20:28:d6:51:44: d6:9d:c1:89:9a:e4:9f:94:89:df:89:d4:28:c0:b1: 87:6d:1a:7e:c8:e4:bb:ba:e7:38:7f:5b:d6:78:c0: ef:a0:e5:ab:b8:9b:f7:75:8a:90:58:64:40:8e:a9: 5b:cb:2f:74:5d:d9:48:9b:79:8c:1c:4c:87:e2:1a: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.204.0/22 IPv6: 2a0f:f300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208163 Signature Algorithm: sha256WithRSAEncryption 43:ef:73:d5:d1:f9:57:dc:a1:6d:25:fc:f5:74:dc:60:08:33: 8d:a4:be:bb:ac:6f:de:5b:6e:5c:ad:57:9b:90:db:26:91:b8: 99:c1:f5:0c:98:d3:b6:43:a6:81:c9:ca:b6:a0:51:b0:81:8f: 70:73:80:2d:ce:2b:82:6d:63:72:23:f0:80:f9:79:2f:4b:a9: 5d:e6:cc:06:b4:55:c8:79:53:de:b6:51:fc:26:15:db:7a:f2: 1e:0f:62:03:68:ca:e4:cc:19:9a:a7:90:0c:b4:81:df:54:04: 4f:c8:e4:b7:45:6f:35:20:79:1b:7e:5e:aa:12:ef:ff:e5:c8: 0a:cf:98:d8:1d:0e:6c:e9:90:ee:6f:85:36:31:9b:26:15:7c: 8d:10:a4:89:d2:40:73:ae:97:09:21:04:2b:93:ed:82:dd:dd: 9d:ac:53:ff:46:0e:d9:1a:1e:12:cf:83:b1:fc:e3:3d:e5:6b: 02:d4:74:b2:51:48:84:48:7a:84:e8:de:3c:d3:e3:7f:dc:1e: 1f:a4:77:2f:2a:83:22:27:31:8c:34:e7:35:55:25:47:95:b0: 81:d0:10:4d:fb:03:18:f4:88:09:99:52:96:8b:2f:85:50:50: 41:c2:2c:25:59:ed:35:a4:1d:54:d8:a5:2c:90:20:85:d2:19: d1:73:a0:9a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OCs9HgsYVLf6GcAHbnaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJmMTY2ZDA1ZWE5NzZmNjlhZWQ1OGU0NmE0MWY3ZTUwNTI0NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA880qm2tTxnJccRS4u5KHCUmwpftg FkcHanTFzxw709HNxL3sNjUwYtJhwURt4WCRbxCXrEj56e5NOObQ9Y/3CuQi9HlL zDkVmw5lCUhroPk4p0VRibKK8xT9q2iawShO/cEA9Se5lJGQw42DErXJTO+Jtqie c9WDets6XgukNMWuSgYg5Mdpuqch+7Yx/DFB1ZCYwJ8/Q2Gsj2ZZqnTf5EpotGdf mEgWVuY1mfM55psnnX0egHTRKiu8rchVICjWUUTWncGJmuSflInfidQowLGHbRp+ yOS7uuc4f1vWeMDvoOWruJv3dYqQWGRAjqlbyy90XdlIm3mMHEyH4hpBtwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ8vFm0F6pdvaa7VjkakH35QUkR1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzIyZWZi Yi0zNjU5LTRhM2QtYmVhNC05NjJkNGYwYzI5YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMjJlZmJi LTM2NTktNGEzZC1iZWE0LTk2MmQ0ZjBjMjliMC8xL255OFdiUVhxbDI5cHJ0V09S cVFmZmxCU1JIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZjMMA0EAgACMAcDBQMqD/MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtIzANBgkqhkiG9w0BAQsFAAOCAQEAQ+9z1dH5V9yh bSX89XTcYAgzjaS+u6xv3ltuXK1Xm5DbJpG4mcH1DJjTtkOmgcnKtqBRsIGPcHOA Lc4rgm1jciPwgPl5L0upXebMBrRVyHlT3rZR/CYV23ryHg9iA2jK5MwZmqeQDLSB 31QET8jkt0VvNSB5G35eqhLv/+XICs+Y2B0ObOmQ7m+FNjGbJhV8jRCkidJAc66X CSEEK5Ptgt3dnaxT/0YO2RoeEs+DsfzjPeVrAtR0slFIhEh6hOjePNPjf9weH6R3 LyqDIicxjDTnNVUlR5WwgdAQTfsDGPSICZlSlosvhVBQQcIsJVntNaQdVNilLJAg hdIZ0XOgmg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:44 2026 by rpki-client