This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer File: yhx1cVluREqjI3HLq3JNRtPDxSw.cer (raw, json) Hash identifier: hIFZvw7Qm5YkrA1MIq7u3f7VzW25Rv5Q6IPuUOIuQ2g= Subject key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C240980F6554B52324B6FD72CACDFA37C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 03 Feb 2026 15:05:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12695 AS: 201186 IP: 79.137.128.0/22 IP: 79.137.133.0 -- 79.137.138.255 IP: 79.137.140.0 -- 79.137.163.255 IP: 79.137.165.0 -- 79.137.166.255 IP: 79.137.168.0/23 IP: 79.137.172.0/23 IP: 79.137.181.0 -- 79.137.239.255 IP: 79.137.248.0/21 IP: 85.192.0.0/19 IP: 85.192.36.0 -- 85.192.63.255 IP: 89.208.8.0 -- 89.208.51.255 IP: 89.208.64.0 -- 89.208.83.255 IP: 89.208.88.0 -- 89.208.122.255 IP: 89.208.124.0/22 IP: 89.208.136.0 -- 89.208.179.255 IP: 89.208.184.0 -- 89.208.195.255 IP: 89.208.200.0/21 IP: 89.208.212.0/22 IP: 89.208.224.0/22 IP: 89.208.232.0/21 IP: 92.38.192.0/20 IP: 92.38.212.0 -- 92.38.255.255 IP: 95.163.0.0/19 IP: 95.163.64.0 -- 95.163.144.255 IP: 95.163.146.0/23 IP: 95.163.152.0/21 IP: 95.163.176.0/22 IP: 95.163.184.0/21 IP: 185.125.100.0/22 IP: 185.146.116.0/22 IP: 213.219.192.0 -- 213.219.211.255 IP: 213.219.216.0 -- 213.219.251.255 IP: 213.248.0.0/18 IP: 2a00:1c48::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:09:80:f6:55:4b:52:32:4b:6f:d7:2c:ac:df:a3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 3 15:05:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:23:ed:62:fe:5c:42:4d:ae:fb:54:ec:d7:18: b8:c7:97:43:b4:39:92:92:15:05:2a:9c:e6:89:38: 56:dc:57:9b:18:94:88:41:51:a4:0b:ba:c2:92:05: e8:98:3e:6a:ce:79:f8:9f:51:76:e0:97:b4:0e:6e: b6:a7:26:06:bb:29:78:33:9b:76:73:69:27:d3:f1: d8:11:a3:c4:fb:aa:7a:71:09:33:c9:93:c9:2e:79: 62:e4:23:3d:6c:09:7f:da:f4:3b:36:8a:af:f5:f0: b9:2c:fb:7b:13:55:55:e8:60:a7:86:2f:0f:d3:f8: 71:bb:9d:ba:42:49:4c:e8:a9:85:56:29:69:c9:53: 43:a2:2c:e4:fa:fc:0d:46:74:0a:5b:40:7e:b6:bd: a4:1a:e7:fd:11:1c:ff:1e:ab:ba:5e:b7:6d:05:76: 11:79:c6:dc:a4:70:c6:8c:54:41:cc:d1:70:2e:e9: c7:a4:b8:98:18:07:67:45:e8:9b:51:b9:df:78:39: cf:08:0b:4f:2e:c3:90:d1:c1:bd:d7:08:b2:ff:35: 4c:2e:58:5c:48:16:c1:b8:13:34:22:86:22:a3:79: 20:ab:d9:53:ba:8e:07:90:d2:0f:7c:d0:84:13:42: 6f:66:3b:24:f5:b5:19:23:54:a7:ac:9e:d8:e0:d9: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.137.128.0/22 79.137.133.0-79.137.138.255 79.137.140.0-79.137.163.255 79.137.165.0-79.137.166.255 79.137.168.0/23 79.137.172.0/23 79.137.181.0-79.137.239.255 79.137.248.0/21 85.192.0.0/19 85.192.36.0-85.192.63.255 89.208.8.0-89.208.51.255 89.208.64.0-89.208.83.255 89.208.88.0-89.208.122.255 89.208.124.0/22 89.208.136.0-89.208.179.255 89.208.184.0-89.208.195.255 89.208.200.0/21 89.208.212.0/22 89.208.224.0/22 89.208.232.0/21 92.38.192.0/20 92.38.212.0-92.38.255.255 95.163.0.0/19 95.163.64.0-95.163.144.255 95.163.146.0/23 95.163.152.0/21 95.163.176.0/22 95.163.184.0/21 185.125.100.0/22 185.146.116.0/22 213.219.192.0-213.219.211.255 213.219.216.0-213.219.251.255 213.248.0.0/18 IPv6: 2a00:1c48::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12695 201186 Signature Algorithm: sha256WithRSAEncryption a3:06:68:d8:af:06:e5:fe:ad:6d:2d:09:68:20:d1:59:ca:24: aa:fa:a8:20:89:4e:9c:d1:04:b2:71:1f:2a:62:08:55:4f:67: 64:aa:7d:8e:51:f8:c6:bf:8e:7b:6b:89:1b:c2:82:68:84:78: 35:29:a0:c3:24:57:00:e0:45:71:18:23:fb:30:02:75:ad:d4: cf:54:1f:15:e9:01:b8:2d:24:c6:26:ff:5f:b8:6a:18:64:13: 97:84:84:42:10:16:81:67:71:eb:28:d1:f4:03:7d:44:c0:b0: 0d:54:5c:10:2a:9d:07:39:e5:b1:39:d2:e0:1f:db:a3:88:3b: f2:ab:3c:f3:84:de:59:a4:eb:53:e7:4c:85:b4:11:6a:4d:e8: 48:23:98:ae:56:87:d0:6e:07:c6:d6:9c:2b:1a:09:5f:7f:22: 00:14:4a:91:b1:ee:e0:c8:0c:7d:a8:11:6e:d4:20:e4:fa:6d: fe:a0:ec:4f:5b:7d:a3:91:29:42:c7:a1:9f:d1:06:83:4e:04: 86:82:61:43:24:92:de:83:5e:fd:08:56:28:1d:57:93:b3:04: f4:0b:6d:76:38:0f:6c:24:a3:ce:33:e4:6d:6b:76:f1:95:28: 99:fc:58:49:cc:4b:f4:87:8a:ad:99:6b:01:97:87:34:3e:04: fc:3e:eb:72 -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgISAZwkCYD2VUtSMktv1yys36N8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAzMTUwNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFjNzU3MTU5NmU0NDRhYTMyMzcxY2JhYjcyNGQ0NmQzYzNjNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iPtYv5cQk2u+1Ts1xi4x5dDtDmS khUFKpzmiThW3FebGJSIQVGkC7rCkgXomD5qznn4n1F24Je0Dm62pyYGuyl4M5t2 c2kn0/HYEaPE+6p6cQkzyZPJLnli5CM9bAl/2vQ7Noqv9fC5LPt7E1VV6GCnhi8P 0/hxu526QklM6KmFVilpyVNDoizk+vwNRnQKW0B+tr2kGuf9ERz/Hqu6XrdtBXYR ecbcpHDGjFRBzNFwLunHpLiYGAdnReibUbnfeDnPCAtPLsOQ0cG91wiy/zVMLlhc SBbBuBM0IoYio3kgq9lTuo4HkNIPfNCEE0JvZjsk9bUZI1SnrJ7Y4NlXNwIDAQAB o4ID7DCCA+gwHQYDVR0OBBYEFMocdXFZbkRKoyNxy6tyTUbTw8UsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzMzNjJj Ni1hMDNhLTRmOWYtYTA5MS1iNzYyYzAxNzVmMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzM2MmM2 LWEwM2EtNGY5Zi1hMDkxLWI3NjJjMDE3NWYyNy8xL3loeDFjVmx1UkVxakkzSExx M0pOUnRQRHhTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBZQYIKwYB BQUHAQcBAf8EggFUMIIBUDCCAT0EAgABMIIBNQMEAk+JgDAMAwQAT4mFAwQAT4mK MAwDBAJPiYwDBAJPiaAwDAMEAE+JpQMEAE+JpgMEAU+JqAMEAU+JrDAMAwQAT4m1 AwQET4ngAwQDT4n4AwQFVcAAMAwDBAJVwCQDBAZVwAAwDAMEA1nQCAMEAlnQMDAM AwQGWdBAAwQCWdBQMAwDBANZ0FgDBABZ0HoDBAJZ0HwwDAMEA1nQiAMEAlnQsDAM AwQDWdC4AwQCWdDAAwQDWdDIAwQCWdDUAwQCWdDgAwQDWdDoAwQEXCbAMAsDBAJc JtQDAwBcJgMEBV+jADAMAwQGX6NAAwQAX6OQAwQBX6OSAwQDX6OYAwQCX6OwAwQD X6O4AwQCuX1kAwQCuZJ0MAwDBAbV28ADBALV29AwDAMEA9Xb2AMEAtXb+AMEBtX4 ADANBAIAAjAHAwUBKgAcSDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIxlwIDAxHi MA0GCSqGSIb3DQEBCwUAA4IBAQCjBmjYrwbl/q1tLQloINFZyiSq+qggiU6c0QSy cR8qYghVT2dkqn2OUfjGv457a4kbwoJohHg1KaDDJFcA4EVxGCP7MAJ1rdTPVB8V 6QG4LSTGJv9fuGoYZBOXhIRCEBaBZ3HrKNH0A31EwLANVFwQKp0HOeWxOdLgH9uj iDvyqzzzhN5ZpOtT50yFtBFqTehII5iuVofQbgfG1pwrGglffyIAFEqRse7gyAx9 qBFu1CDk+m3+oOxPW32jkSlCx6Gf0QaDTgSGgmFDJJLeg179CFYoHVeTswT0C212 OA9sJKPOM+Rta3bxlSiZ/FhJzEv0h4qtmWsBl4c0PgT8Puty -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:26 2026 by rpki-client