This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer File: yxvWK-7KsOkDspgRJB2yRLv1LDk.cer (raw, json) Hash identifier: V+uze16hS6Bq1qEMtos/IS8zcIw6/9tGcVyIc/he2H8= Subject key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD2740B8BF2D02F282A358708B406 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212851 IP: 185.214.65.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d2:74:0b:8b:f2:d0:2f:28:2a:35:87:08:b4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb1bd62beecab0e903b29811241db244bbf52c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:1c:ff:04:53:05:da:7f:12:16:f4:ad:d0: af:f7:4d:35:f9:2c:b8:ce:fb:9a:ef:b6:47:be:e2: 18:43:1f:dc:9e:b8:e4:f5:f1:b8:7f:5b:b0:9b:85: 19:ba:86:82:9f:72:81:00:eb:d5:4d:00:5b:b6:59: 81:58:70:b5:eb:bb:a5:4b:03:7e:4b:4c:3f:b1:32: c9:94:9a:df:cf:b5:07:6b:b1:c5:e8:24:e3:6c:da: a8:88:f7:26:9a:76:80:92:8e:57:f6:5c:e3:2b:9d: 2e:07:9a:30:81:f2:a5:68:5d:1d:66:8e:86:9e:d2: c2:34:d1:21:da:f5:13:3e:72:45:6b:15:6e:9f:7d: 60:03:13:37:51:74:79:34:f6:b1:ae:dd:4e:e7:ea: b6:f8:e2:a5:e2:ab:a9:18:59:0d:56:3c:ee:fd:9d: 00:b9:79:ed:d9:37:d2:b7:2c:d2:f6:28:f5:54:79: b2:ce:61:27:96:e6:e8:5d:8f:ef:4d:0b:00:15:2e: 0b:d3:b7:d4:64:75:ce:b0:77:27:86:8d:6a:fe:ab: e4:c5:b2:54:37:14:37:1c:20:44:e8:44:89:80:15: d0:af:c5:06:64:d2:b8:83:97:2b:91:07:d5:ad:1a: c2:e1:5f:32:61:2c:76:32:5e:af:7b:b3:7b:6f:57: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.65.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212851 Signature Algorithm: sha256WithRSAEncryption a8:8f:79:0a:55:28:11:b2:be:a5:16:2e:a0:67:6e:29:a2:89: 21:81:3f:e6:66:9f:89:5d:c8:30:0d:f2:60:d3:4d:56:20:56: 6f:73:60:27:a2:d7:91:5a:f1:96:3a:99:3c:2b:b3:02:95:13: 47:5a:b5:48:98:a0:3f:b4:d2:48:1b:10:38:4c:7f:3e:0f:2d: 1b:4a:50:41:43:f5:42:6b:23:c4:7d:a1:d5:03:63:85:b8:f2: cd:15:3b:fc:32:a9:95:29:9b:67:bc:bd:48:48:6e:f0:16:cd: 3c:08:51:c2:fd:a0:e5:c9:c8:7f:3d:e4:13:c6:a1:dd:59:c5: 25:da:0f:75:10:c5:0c:66:1e:45:9d:9f:f0:ed:bc:0f:54:2c: c0:c4:45:1c:0b:ea:00:15:eb:7d:7f:86:0c:8c:33:e2:d8:cb: 5f:af:8e:81:dc:93:c7:bb:f7:69:11:44:eb:b3:a2:d8:46:42: 94:88:6f:94:c1:d9:fb:58:c4:aa:45:bb:86:d1:31:c6:dc:54: f1:69:30:40:71:a3:3e:97:8d:d5:7f:30:de:d9:e7:46:5a:7f: 01:6e:72:02:1e:1f:a3:fb:7a:a2:04:56:1b:fa:5e:97:34:19: 01:3c:ad:7d:1f:1c:d9:6d:00:d9:67:9e:f9:57:89:3f:b5:58: b6:39:a4:38 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87dJ0C4vy0C8oKjWHCLQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjFiZDYyYmVlY2FiMGU5MDNiMjk4MTEyNDFkYjI0NGJiZjUyYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju0c/wRTBdp/Ehb0rdCv9001+Sy4 zvua77ZHvuIYQx/cnrjk9fG4f1uwm4UZuoaCn3KBAOvVTQBbtlmBWHC167ulSwN+ S0w/sTLJlJrfz7UHa7HF6CTjbNqoiPcmmnaAko5X9lzjK50uB5owgfKlaF0dZo6G ntLCNNEh2vUTPnJFaxVun31gAxM3UXR5NPaxrt1O5+q2+OKl4qupGFkNVjzu/Z0A uXnt2TfStyzS9ij1VHmyzmEnluboXY/vTQsAFS4L07fUZHXOsHcnho1q/qvkxbJU NxQ3HCBE6ESJgBXQr8UGZNK4g5crkQfVrRrC4V8yYSx2Ml6ve7N7b1dSJwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMsb1ivuyrDpA7KYESQdskS79Sw5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2UwMmI0 Ny1mMmUwLTQ0MDItODE0Zi1lNDAxNmFkNTNjYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZTAyYjQ3 LWYyZTAtNDQwMi04MTRmLWU0MDE2YWQ1M2NjOS8xL3l4dldLLTdLc09rRHNwZ1JK QjJ5Ukx2MUxEay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAudZBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM/czANBgkqhkiG9w0BAQsFAAOCAQEAqI95ClUoEbK+pRYuoGduKaKJIYE/5maf iV3IMA3yYNNNViBWb3NgJ6LXkVrxljqZPCuzApUTR1q1SJigP7TSSBsQOEx/Pg8t G0pQQUP1QmsjxH2h1QNjhbjyzRU7/DKplSmbZ7y9SEhu8BbNPAhRwv2g5cnIfz3k E8ah3VnFJdoPdRDFDGYeRZ2f8O28D1QswMRFHAvqABXrfX+GDIwz4tjLX6+OgdyT x7v3aRFE67Oi2EZClIhvlMHZ+1jEqkW7htExxtxU8WkwQHGjPpeN1X8w3tnnRlp/ AW5yAh4fo/t6ogRWG/pelzQZATytfR8c2W0A2Wee+VeJP7VYtjmkOA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:10 2026 by rpki-client