This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer File: _Y7_IBIYpagjy-hTNoU-PbTdFus.cer (raw, json) Hash identifier: pN709dSvbE0JRSzc+n5qP1aOgyakLzK7Bc8nuThww5c= Subject key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B35BB4DDE7BED92101FC16818F707D278 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 08:30:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210427 IP: 45.149.76.0/22 IP: 158.255.74.0/24 IP: 171.22.24.0/22 IP: 176.97.218.0/24 IP: 178.211.145.0/24 IP: 185.190.39.0/24 IP: 185.204.197.0/24 IP: 185.252.86.0/24 IP: 193.105.234.0/24 IP: 193.242.125.0/24 IP: 194.5.175.0/24 IP: 194.5.188.0/24 IP: 194.5.195.0/24 IP: 194.5.205.0/24 IP: 194.62.43.0/24 IP: 195.88.208.0/24 IP: 195.177.255.0/24 IP: 212.23.201.0/24 IP: 2a0e:b080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bb:4d:de:7b:ed:92:10:1f:c1:68:18:f7:07:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 08:30:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:7d:d6:7c:a4:3e:dc:1d:32:7f:cc:b9:0f: c7:c3:ae:7a:b1:01:fe:8f:85:fc:f3:57:a2:4a:71: 28:5a:7e:d3:da:1d:d5:94:48:64:96:24:45:e1:2f: 10:0d:d1:34:e8:36:15:b6:3f:65:02:d1:30:d9:98: f8:45:12:9f:89:2c:76:1b:5b:3f:13:ee:57:4c:1a: e5:a5:0a:56:19:e8:90:db:c7:41:2e:14:ce:ea:e6: ef:e8:cd:1f:42:5c:23:27:79:c7:b1:1a:2a:c7:84: cf:6c:3c:d6:6b:a1:b3:a2:ee:94:b6:06:76:5a:79: 77:2f:09:b8:b5:1f:32:8a:70:a1:e9:36:fb:31:2f: 28:2b:c4:e8:d5:43:67:e4:d4:8c:0c:1c:f3:b0:6c: 9d:88:b7:8d:0a:8b:73:62:f0:32:32:f7:aa:f4:88: 24:65:0d:26:9b:b8:ba:ec:6d:33:ec:a8:b0:55:53: cb:7b:b4:96:eb:89:7f:bf:81:e1:29:70:aa:c2:32: 4b:ba:20:ed:49:52:4c:48:00:b4:6a:99:a6:77:32: 4d:95:67:3c:c4:2c:8a:55:6c:2b:75:54:94:bb:14: 00:fb:25:06:3b:56:8f:3b:3f:dd:59:61:10:db:74: f0:51:f9:5f:63:f1:3e:06:09:94:29:bd:fc:5e:96: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.76.0/22 158.255.74.0/24 171.22.24.0/22 176.97.218.0/24 178.211.145.0/24 185.190.39.0/24 185.204.197.0/24 185.252.86.0/24 193.105.234.0/24 193.242.125.0/24 194.5.175.0/24 194.5.188.0/24 194.5.195.0/24 194.5.205.0/24 194.62.43.0/24 195.88.208.0/24 195.177.255.0/24 212.23.201.0/24 IPv6: 2a0e:b080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210427 Signature Algorithm: sha256WithRSAEncryption a9:91:58:66:ce:ae:df:8c:31:b6:21:5d:b3:0a:81:a5:08:e7: 5b:e7:df:a6:57:3a:89:0c:20:0e:d1:9b:d0:61:5e:33:a4:89: 4e:7a:b5:c6:77:7f:67:ec:b5:40:14:5e:34:cb:b9:0e:ed:9f: 1d:4e:6e:da:10:14:d9:11:ba:7c:4c:4e:51:d2:54:60:f4:33: b6:c1:de:70:10:b0:42:6b:41:b7:92:28:5b:e8:68:b4:67:85: bb:ce:c3:e3:7e:3a:a8:1d:5e:9c:22:c9:89:d4:1b:dc:5e:59: fb:b6:47:23:2f:1c:e7:06:c5:03:87:c6:3f:d3:44:17:6a:43: 3b:f2:05:43:82:5c:80:23:b0:fc:53:05:b6:27:1d:dd:a5:ff: af:85:40:31:d5:ab:3e:c9:3c:11:c8:65:3f:fc:2e:e2:68:8c: 2f:16:87:a3:74:a3:e5:e1:f2:1e:92:96:30:cd:fc:03:42:67: eb:df:7a:84:e6:9a:e5:0e:c6:1d:71:44:aa:34:1b:a5:43:13: af:c0:89:38:39:81:4e:62:20:6c:d5:d5:79:52:bb:bf:8a:48: 8b:22:e3:16:51:4d:e9:fc:3d:f2:9a:63:65:d2:c2:05:8a:03: ac:2e:8a:f3:78:bf:46:b6:9c:35:55:15:3f:72:c8:13:09:74: 86:ae:bb:d2 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISAZs1u03ee+2SEB/BaBj3B9J4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MDgzMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDhlZmYyMDEyMThhNWE4MjNjYmU4NTMzNjg1M2UzZGI0ZGQxNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1h91nykPtwdMn/MuQ/Hw656sQH+ j4X881eiSnEoWn7T2h3VlEhkliRF4S8QDdE06DYVtj9lAtEw2Zj4RRKfiSx2G1s/ E+5XTBrlpQpWGeiQ28dBLhTO6ubv6M0fQlwjJ3nHsRoqx4TPbDzWa6Gzou6UtgZ2 Wnl3Lwm4tR8yinCh6Tb7MS8oK8To1UNn5NSMDBzzsGydiLeNCotzYvAyMveq9Igk ZQ0mm7i67G0z7KiwVVPLe7SW64l/v4HhKXCqwjJLuiDtSVJMSAC0apmmdzJNlWc8 xCyKVWwrdVSUuxQA+yUGO1aPOz/dWWEQ23TwUflfY/E+BgmUKb38Xpb8awIDAQAB o4IDGDCCAxQwHQYDVR0OBBYEFP2O/yASGKWoI8voUzaFPj203RbrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzk5ZmQ0 MS03ZWQ4LTRiMjUtOGQ1Ni1jN2FjMjZiY2MyZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOTlmZDQx LTdlZDgtNGIyNS04ZDU2LWM3YWMyNmJjYzJkYS8xL19ZN19JQklZcGFnanktaFRO b1UtUGJUZEZ1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGWBggrBgEF BQcBBwEB/wSBhjCBgzByBAIAATBsAwQCLZVMAwQAnv9KAwQCqxYYAwQAsGHaAwQA stORAwQAub4nAwQAuczFAwQAufxWAwQAwWnqAwQAwfJ9AwQAwgWvAwQAwgW8AwQA wgXDAwQAwgXNAwQAwj4rAwQAw1jQAwQAw7H/AwQA1BfJMA0EAgACMAcDBQMqDrCA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1+zANBgkqhkiG9w0BAQsFAAOCAQEA qZFYZs6u34wxtiFdswqBpQjnW+ffplc6iQwgDtGb0GFeM6SJTnq1xnd/Z+y1QBRe NMu5Du2fHU5u2hAU2RG6fExOUdJUYPQztsHecBCwQmtBt5IoW+hotGeFu87D4346 qB1enCLJidQb3F5Z+7ZHIy8c5wbFA4fGP9NEF2pDO/IFQ4JcgCOw/FMFticd3aX/ r4VAMdWrPsk8EchlP/wu4miMLxaHo3Sj5eHyHpKWMM38A0Jn6996hOaa5Q7GHXFE qjQbpUMTr8CJODmBTmIgbNXVeVK7v4pIiyLjFlFN6fw98ppjZdLCBYoDrC6K83i/ RracNVUVP3LIEwl0hq670g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:49:26 2025 by rpki-client