This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer File: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer (raw, json) Hash identifier: 98CyyCvIqFg8y8+sbA7k2RqEmrR/86p0Z1WKJm+HRa8= Subject key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC109AB50F3B3575C239734CDF188 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41966 IP: 109.206.192.0/19 IP: 185.20.172.0/22 IP: 194.11.24.0/24 IP: 194.153.119.0/24 IP: 2a00:54c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:09:ab:50:f3:b3:57:5c:23:97:34:cd:f1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:1e:99:34:38:7a:8d:64:6a:e9:84:cd:9e: 74:c7:07:23:b0:5f:da:90:c8:f9:a4:70:63:6b:5b: 96:ab:80:31:93:a1:18:5a:cb:45:e2:b7:31:08:05: 35:52:2e:4a:2c:73:14:9e:63:6f:51:e5:2a:62:f4: a1:e5:02:cc:12:14:ef:6c:70:bc:25:71:57:b3:fb: 53:56:16:ab:85:35:f1:00:e4:98:61:07:b5:55:27: 97:4b:e3:70:a5:7a:97:a1:2b:5f:33:4e:8a:06:73: db:de:10:a9:0b:04:83:ca:9e:64:47:b6:78:ac:a2: 7f:d4:49:70:64:32:d8:74:53:0e:aa:40:d1:56:4f: 3c:5c:96:35:fc:13:e3:19:a4:5e:4d:c9:8a:54:0d: 46:6c:a0:d7:ca:d0:cb:82:f2:da:93:a0:f4:3a:41: 14:cc:76:25:cd:e6:04:4a:df:a9:95:d6:16:80:7d: 3f:57:1f:14:19:70:ec:6c:79:85:11:72:41:04:fd: d3:b6:00:65:50:69:ec:10:88:d9:df:b7:f6:d0:b6: d0:2e:ba:e8:cb:40:7d:cb:36:91:c9:ee:e1:49:fe: 6c:66:4e:c6:52:ef:c3:95:04:c2:50:50:c6:3c:c0: 2d:33:d6:d5:82:36:fb:35:23:15:d3:25:bc:92:3f: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.206.192.0/19 185.20.172.0/22 194.11.24.0/24 194.153.119.0/24 IPv6: 2a00:54c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41966 Signature Algorithm: sha256WithRSAEncryption a2:57:aa:f2:fa:76:5c:9a:12:d3:9d:da:10:6b:02:19:48:46: 3e:cc:59:05:08:f2:96:04:81:72:78:fe:52:fc:38:b0:97:fd: 2f:81:d0:ad:d6:fb:a1:49:45:a3:15:3c:f0:07:ca:dc:46:7f: af:76:fa:35:41:4a:e9:1b:85:e7:c6:07:38:91:48:a3:f5:3e: 9c:71:60:16:1b:85:99:85:5d:87:02:b7:e8:76:cd:52:8d:8d: 61:4e:48:eb:41:53:f6:97:59:48:6e:55:35:ef:eb:2e:95:7e: 53:66:75:74:f2:a4:58:77:ee:4f:ce:0c:f8:2e:f1:87:9d:bd: c9:e0:a1:fe:e0:94:fd:af:12:df:53:32:0c:a2:42:91:8f:09: 7a:ef:87:ac:b1:32:05:cc:d1:cc:ad:ec:b6:22:1e:63:59:93: 9f:b0:58:cd:d7:3a:15:8f:d7:83:63:dc:87:d6:fa:29:e3:b7: 93:13:91:6d:53:b5:b5:55:27:d8:8b:10:16:10:4f:8f:ad:b3: 5b:25:d6:e2:76:27:fa:c4:1c:9d:32:53:9d:6d:38:4e:40:f9: ac:89:33:de:73:d2:ba:fe:1f:ad:53:f1:3a:07:88:b4:ab:30: 3a:c5:16:76:a4:88:5c:4a:f3:bc:68:8c:fb:82:5c:75:a7:53: d0:54:8c:58 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt57MEJq1Dzs1dcI5c0zfGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTg1ZTVlMTVhYTM0Mjg3Y2FlNDM2OGNiNThlNzIyN2ZkODdlY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhsemTQ4eo1kaumEzZ50xwcjsF/a kMj5pHBja1uWq4Axk6EYWstF4rcxCAU1Ui5KLHMUnmNvUeUqYvSh5QLMEhTvbHC8 JXFXs/tTVharhTXxAOSYYQe1VSeXS+NwpXqXoStfM06KBnPb3hCpCwSDyp5kR7Z4 rKJ/1ElwZDLYdFMOqkDRVk88XJY1/BPjGaReTcmKVA1GbKDXytDLgvLak6D0OkEU zHYlzeYESt+pldYWgH0/Vx8UGXDsbHmFEXJBBP3TtgBlUGnsEIjZ37f20LbQLrro y0B9yzaRye7hSf5sZk7GUu/DlQTCUFDGPMAtM9bVgjb7NSMV0yW8kj/JHQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKWF5eFao0KHyuQ2jLWOcif9h+y6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzA2NjUw OS03YTkxLTQ1ZjktOWUxOC1hOWU3YjM0M2JjNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvMDY2NTA5 LTdhOTEtNDVmOS05ZTE4LWE5ZTdiMzQzYmM2Ni8xL3BZWGw0VnFqUW9mSzVEYU10 WTV5Sl8ySDdMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFbc7AAwQCuRSsAwQAwgsYAwQAwpl3MA0EAgAC MAcDBQAqAFTAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCj7jANBgkqhkiG9w0B AQsFAAOCAQEAoleq8vp2XJoS053aEGsCGUhGPsxZBQjylgSBcnj+Uvw4sJf9L4HQ rdb7oUlFoxU88AfK3EZ/r3b6NUFK6RuF58YHOJFIo/U+nHFgFhuFmYVdhwK36HbN Uo2NYU5I60FT9pdZSG5VNe/rLpV+U2Z1dPKkWHfuT84M+C7xh529yeCh/uCU/a8S 31MyDKJCkY8Jeu+HrLEyBczRzK3stiIeY1mTn7BYzdc6FY/Xg2Pch9b6KeO3kxOR bVO1tVUn2IsQFhBPj62zWyXW4nYn+sQcnTJTnW04TkD5rIkz3nPSuv4frVPxOgeI tKswOsUWdqSIXErzvGiM+4JcdadT0FSMWA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:00 2026 by rpki-client