This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer File: y9_OOlNV-GH9xIwyASx4ydr5paQ.cer (raw, json) Hash identifier: olxhE+kG2JYIocpQq2A6gESce9+v3AiLF4fQ9zh/kas= Subject key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4504D61C800A01DD4CC6DB79A68D7317 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 07:45:03 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 31655 AS: 204193 AS: 216167 IP: 5.2.96.0/19 IP: 5.144.156.0/22 IP: 62.222.0.0/15 IP: 80.252.64.0/20 IP: 88.215.0.0/18 IP: 89.213.8.0 -- 89.213.39.255 IP: 185.4.196.0/22 IP: 185.21.208.0/22 IP: 185.110.180.0 -- 185.110.182.255 IP: 188.66.64.0/18 IP: 195.162.96.0/19 IP: 213.218.192.0/20 IP: 2a02:c1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:04:d6:1c:80:0a:01:dd:4c:c6:db:79:a6:8d:73:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 22 07:45:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:1b:e2:98:2b:0f:1b:c6:ea:d2:5f:e8:8d: a5:b7:97:4b:da:ee:38:e3:6c:3c:45:f9:c4:38:8a: 87:02:ae:31:6b:b1:09:02:3b:10:47:29:64:ce:ab: d9:9e:a5:34:bd:12:58:6d:df:94:d1:f8:a5:19:8d: 2e:58:f6:02:73:62:83:eb:fb:07:5b:d3:ea:12:cd: 54:86:3e:9f:ec:14:93:51:9d:80:02:6b:3c:a9:b7: e0:b9:a8:45:3a:81:63:bc:95:dc:7a:58:d1:f0:b8: 51:d8:88:f0:de:90:bc:18:6c:80:d3:e0:a3:45:fb: 87:e1:54:7c:43:47:c0:8c:15:9e:d3:30:b3:65:89: a0:93:3e:ce:5c:63:e3:89:f0:06:7f:25:e9:f7:11: c7:b6:3c:94:1f:ef:b5:39:df:30:e7:98:8a:29:2e: 8f:62:16:16:b3:14:8d:73:6b:02:7d:5e:ba:cf:60: 7a:55:16:73:9e:38:78:e3:d3:7c:49:aa:6b:8c:8c: 32:03:eb:73:ad:cb:d4:23:24:94:aa:05:8a:04:eb: 59:38:da:ad:cf:98:16:ac:0b:48:fd:9c:9b:85:3e: 94:1a:88:64:b5:ba:d1:bb:39:10:b7:b4:a9:29:79: fd:c1:87:03:82:28:95:10:2c:52:9d:a4:61:01:10: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.96.0/19 5.144.156.0/22 62.222.0.0/15 80.252.64.0/20 88.215.0.0/18 89.213.8.0-89.213.39.255 185.4.196.0/22 185.21.208.0/22 185.110.180.0-185.110.182.255 188.66.64.0/18 195.162.96.0/19 213.218.192.0/20 IPv6: 2a02:c1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31655 204193 216167 Signature Algorithm: sha256WithRSAEncryption 5f:59:ec:b9:2f:af:02:15:c7:f3:d3:07:b7:67:42:e3:ca:32: 99:a9:98:c9:12:67:f8:87:60:58:9e:87:eb:16:34:50:a9:f5: 7a:8a:0a:4e:d8:3f:68:f5:ac:6d:55:cf:5a:9b:3e:81:c1:b9: be:d6:2f:8e:c2:a2:d9:2b:43:d8:a1:47:7e:7a:ef:e7:8a:a7: 51:e3:a5:2f:5c:2f:79:84:6f:29:4c:6d:16:ab:8f:3d:d8:f4: 44:be:20:27:8b:ec:ca:47:5c:4a:14:14:c4:5d:f0:76:58:b9: 3e:5e:74:c7:04:e2:5d:56:c8:17:e2:3d:13:c9:4d:86:4d:89: 39:1b:47:8f:a3:94:d8:d9:af:84:f8:44:94:c1:5b:51:e0:84: 33:15:bd:f2:18:bc:b1:7c:ff:15:44:55:92:2b:14:dc:e0:c4: d6:8a:37:a4:d7:24:03:55:58:80:b0:02:62:bb:f4:9b:2e:7a: 26:6e:ab:b3:b7:a1:12:75:11:5e:ac:f0:16:cb:42:01:11:33: ee:cb:1c:8e:a8:b4:da:14:a1:66:0a:8a:f7:a0:6d:6e:d2:02: a9:7f:cf:12:22:b9:16:b6:64:5f:95:83:21:5d:41:66:a1:45: 9f:b5:06:f3:66:41:82:23:c8:08:e1:10:cf:66:f1:8d:58:16: 69:3e:21:5c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZtFBNYcgAoB3UzG23mmjXMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIyMDc0NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmRmY2UzYTUzNTVmODYxZmRjNDhjMzIwMTJjNzhjOWRhZjlhNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFUb4pgrDxvG6tJf6I2lt5dL2u44 42w8RfnEOIqHAq4xa7EJAjsQRylkzqvZnqU0vRJYbd+U0filGY0uWPYCc2KD6/sH W9PqEs1Uhj6f7BSTUZ2AAms8qbfguahFOoFjvJXceljR8LhR2Ijw3pC8GGyA0+Cj RfuH4VR8Q0fAjBWe0zCzZYmgkz7OXGPjifAGfyXp9xHHtjyUH++1Od8w55iKKS6P YhYWsxSNc2sCfV66z2B6VRZznjh449N8SaprjIwyA+tzrcvUIySUqgWKBOtZONqt z5gWrAtI/ZybhT6UGohktbrRuzkQt7SpKXn9wYcDgiiVECxSnaRhARDvFQIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFMvfzjpTVfhh/cSMMgEseMna+aWkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzc0YTFi NS0zYzJlLTQ4ZTItOTBmZC1iNDlkODllMzBkZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNzRhMWI1 LTNjMmUtNDhlMi05MGZkLWI0OWQ4OWUzMGRkZC8xL3k5X09PbE5WLUdIOXhJd3lB U3g0eWRyNXBhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBdBAIAATBXAwQFBQJgAwQCBZCcAwMBPt4DBARQ/EADBAZY1wAw DAMEA1nVCAMEA1nVIAMEArkExAMEArkV0DAMAwQCuW60AwQAuW62AwQGvEJAAwQF w6JgAwQE1drAMA0EAgACMAcDBQMqAsHAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4C AnunAgMDHaECAwNMZzANBgkqhkiG9w0BAQsFAAOCAQEAX1nsuS+vAhXH89MHt2dC 48oymamYyRJn+IdgWJ6H6xY0UKn1eooKTtg/aPWsbVXPWps+gcG5vtYvjsKi2StD 2KFHfnrv54qnUeOlL1wveYRvKUxtFquPPdj0RL4gJ4vsykdcShQUxF3wdli5Pl50 xwTiXVbIF+I9E8lNhk2JORtHj6OU2NmvhPhElMFbUeCEMxW98hi8sXz/FURVkisU 3ODE1oo3pNckA1VYgLACYrv0my56Jm6rs7ehEnURXqzwFstCAREz7sscjqi02hSh ZgqK96BtbtICqX/PEiK5FrZkX5WDIV1BZqFFn7UG82ZBgiPICOEQz2bxjVgWaT4h XA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:52 2025 by rpki-client