This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer File: yh3yu8zALk5_Rk1p-q89bDcjSV4.cer (raw, json) Hash identifier: d6ZNiKIlLQkFomkv2Yfg9Y6OorJcP/Vp8O8NbHlDHQo= Subject key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37AA5C2AE75C0806DA5445680FCCC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206912 IP: 185.105.172.0/22 IP: 185.166.64.0/22 IP: 185.170.232.0/22 IP: 2a0a:aa00::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:a5:c2:ae:75:c0:80:6d:a5:44:56:80:fc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:b3:37:d3:30:86:fe:7c:c5:b3:f5:12:65: 81:06:04:63:93:a3:69:95:26:f1:b9:03:cb:ed:27: 3e:24:f2:af:3f:e5:c7:df:0e:97:19:b8:d4:23:50: b6:18:24:3e:ce:3f:f0:3f:49:e1:af:c9:87:b8:3f: 26:57:02:91:98:99:93:f7:be:74:68:5c:ca:67:35: 80:3f:0b:7e:77:9f:d1:64:31:39:f3:db:45:74:76: 42:1d:d1:92:08:9e:3a:9a:a9:d7:d6:c0:12:b8:44: d8:9b:97:1c:21:9e:a7:61:83:64:6d:05:13:af:a2: 69:98:d6:5e:d5:04:93:22:58:de:98:15:e2:5e:1e: 82:52:9f:50:1a:5f:4d:aa:59:fa:3c:69:f3:c3:9f: b5:e9:cf:de:84:8b:f2:ff:5d:58:91:db:5f:5c:ce: 3c:d8:66:64:4c:f1:00:f2:40:57:5c:33:7d:22:25: 43:80:b1:ab:f1:4a:ff:52:5f:6c:44:37:5c:07:29: 85:9b:54:55:b2:a6:0e:ba:f4:58:5b:f9:36:1a:1b: fd:8f:3d:36:b2:6c:92:e7:54:20:a1:17:02:90:1d: 1b:3f:61:11:e8:45:ee:7a:35:59:c8:fa:07:d0:6a: 38:1f:09:e2:8b:fe:02:82:07:b4:d5:a1:27:00:4f: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.172.0/22 185.166.64.0/22 185.170.232.0/22 IPv6: 2a0a:aa00::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206912 Signature Algorithm: sha256WithRSAEncryption 67:65:b0:23:7e:e2:c3:0d:a4:13:0d:d8:58:8a:f6:f1:54:c9: 50:a2:1f:5e:49:3e:26:0c:ca:83:bd:87:17:79:ef:8a:9d:15: 97:23:e2:39:63:80:79:1f:76:71:dd:40:7e:07:65:51:3d:b8: b5:96:7a:e4:ef:cf:f3:6a:ab:9e:e8:86:bf:ea:6a:39:41:42: 19:f8:53:62:6e:fd:a7:f6:48:e0:af:80:92:74:30:3f:78:0e: 1c:3a:a1:81:1a:16:5f:36:b6:c9:08:c6:2f:dc:20:c5:78:a5: 2b:6c:98:48:ad:af:d1:7d:83:f7:4d:3d:fa:0a:19:c4:60:c4: 84:d3:82:3f:8d:ff:2c:a3:43:c1:3b:bf:29:5b:29:67:dd:56: 43:c7:88:5e:f0:9d:27:f6:0e:2c:4e:9c:2b:d9:c4:1e:4b:9e: 2c:09:0c:98:27:c9:8d:03:8f:d0:5e:cd:c9:32:59:33:ae:fa: 71:9f:8a:c4:01:9e:4e:4a:67:6c:72:38:bd:f6:fe:2c:cc:45: a0:7a:4c:f7:7f:1e:ae:dd:1d:b0:b4:40:2e:75:8f:26:39:d1: 55:0e:48:67:d0:ca:c0:ee:b5:72:f2:4e:78:6c:48:b3:2b:17: 6f:d9:88:7c:80:97:07:e0:d3:2c:60:60:18:6c:85:7d:c8:b6: 9b:5c:a3:4c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4o3qlwq51wIBtpURWgPzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFkZjJiYmNjYzAyZTRlN2Y0NjRkNjlmYWFmM2Q2YzM3MjM0OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupezN9Mwhv58xbP1EmWBBgRjk6Np lSbxuQPL7Sc+JPKvP+XH3w6XGbjUI1C2GCQ+zj/wP0nhr8mHuD8mVwKRmJmT9750 aFzKZzWAPwt+d5/RZDE589tFdHZCHdGSCJ46mqnX1sASuETYm5ccIZ6nYYNkbQUT r6JpmNZe1QSTIljemBXiXh6CUp9QGl9Nqln6PGnzw5+16c/ehIvy/11YkdtfXM48 2GZkTPEA8kBXXDN9IiVDgLGr8Ur/Ul9sRDdcBymFm1RVsqYOuvRYW/k2Ghv9jz02 smyS51QgoRcCkB0bP2ER6EXuejVZyPoH0Go4Hwnii/4Cgge01aEnAE9HoQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMod8rvMwC5Of0ZNafqvPWw3I0leMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzdiN2Jk Ni1iNTM4LTQ5NjAtODU1OS1kZDQ5ZWNjMjYwOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvN2I3YmQ2 LWI1MzgtNDk2MC04NTU5LWRkNDllY2MyNjA5NS8xL3loM3l1OHpBTGs1X1JrMXAt cTg5YkRjalNWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuWmsAwQCuaZAAwQCuaroMA0EAgACMAcDBQIq CqoAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMoQDANBgkqhkiG9w0BAQsFAAOC AQEAZ2WwI37iww2kEw3YWIr28VTJUKIfXkk+JgzKg72HF3nvip0VlyPiOWOAeR92 cd1AfgdlUT24tZZ65O/P82qrnuiGv+pqOUFCGfhTYm79p/ZI4K+AknQwP3gOHDqh gRoWXza2yQjGL9wgxXilK2yYSK2v0X2D9009+goZxGDEhNOCP43/LKNDwTu/KVsp Z91WQ8eIXvCdJ/YOLE6cK9nEHkueLAkMmCfJjQOP0F7NyTJZM676cZ+KxAGeTkpn bHI4vfb+LMxFoHpM938ert0dsLRALnWPJjnRVQ5IZ9DKwO61cvJOeGxIsysXb9mI fICXB+DTLGBgGGyFfci2m1yjTA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:10 2026 by rpki-client