This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.cer (raw, json) Hash identifier: C62SqZfjETH9aywbcHm6zmyvxB3biTS2lBpXhElHpoM= Subject key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A8C764CA5B8576B8E43B99ED9848 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49229 IP: 89.39.166.0/24 IP: 91.226.181.0/24 IP: 185.12.192.0/22 IP: 185.29.172.0/22 IP: 185.34.232.0/22 IP: 195.24.230.0/23 IP: 195.88.236.0/23 IP: 2a03:72c0::/32 IP: 2a04:6040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a8:c7:64:ca:5b:85:76:b8:e4:3b:99:ed:98:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:a7:c1:b1:e4:69:0b:72:66:cb:8d:87:7f: a5:c9:53:3a:b6:87:8a:20:09:49:5c:9f:ed:0c:dc: bb:b3:d1:10:3e:6f:15:15:f9:a2:13:d4:a2:44:ab: 8a:80:2f:32:21:34:79:63:fc:e7:af:9b:23:0e:8d: f5:3f:35:36:6d:fc:be:19:f5:44:af:c9:15:ec:53: 03:29:02:29:ca:f2:42:52:e0:b9:7e:ca:92:eb:60: 34:c9:af:76:0e:50:43:b1:dc:26:b0:90:0e:bc:f3: 37:b0:bb:99:db:01:66:37:3f:39:af:f8:f0:b1:a6: 13:1c:ec:06:32:9a:48:99:5c:60:f3:ea:bf:17:f2: 78:82:68:41:48:0b:5a:a6:6c:75:1f:54:b7:6d:49: bd:7e:ed:bd:ac:2e:32:e6:2b:48:f9:10:db:18:16: 0f:27:99:0c:34:51:ab:c5:e9:83:ca:39:64:1d:2d: 2a:9f:68:95:fd:e8:7f:82:6b:0c:9f:62:2f:a6:c8: e1:01:16:d2:c9:7a:be:91:02:ca:66:1d:cc:fd:bb: 16:b0:83:b3:fe:b6:22:3f:55:a0:4a:c6:88:ad:2c: 08:75:94:8a:40:f3:7a:fa:55:57:66:77:6e:d6:46: 97:a0:0f:ae:a5:0b:79:f4:dc:b1:6d:2e:4c:83:66: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.166.0/24 91.226.181.0/24 185.12.192.0/22 185.29.172.0/22 185.34.232.0/22 195.24.230.0/23 195.88.236.0/23 IPv6: 2a03:72c0::/32 2a04:6040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49229 Signature Algorithm: sha256WithRSAEncryption 7b:90:62:05:a6:e5:c6:31:06:f8:62:13:2f:a6:3a:db:6f:8b: 93:55:0a:ce:4e:51:ad:2a:c4:d9:a3:c2:df:48:9b:bb:6f:37: 54:41:a7:5a:9d:c9:be:bb:52:ce:8a:11:52:af:b5:8b:8d:3c: 5f:45:36:c5:ee:d9:d5:6f:82:25:b4:cd:c9:f8:31:c5:d3:03: 9d:25:99:0d:f1:63:cb:26:d1:e7:cd:e3:5a:d1:ef:77:f9:2b: 47:78:70:8c:d0:83:19:40:83:1e:7e:25:d6:16:84:7e:2b:43: 93:61:c1:3a:88:92:0c:c5:a0:59:eb:b8:23:94:68:6e:f3:d0: e3:a1:64:ef:19:30:a4:52:ce:74:c9:0c:17:75:a8:59:2f:66: 4f:08:6e:28:4d:95:08:00:42:95:f3:d4:31:f5:e2:b2:15:87: c3:09:fd:22:11:96:72:b5:68:75:04:01:ca:4a:3d:7f:69:6f: b8:39:7b:16:69:5a:9d:36:03:4e:89:3a:59:fc:81:85:f7:35: 9a:e6:24:5c:5e:64:24:05:49:37:fd:1a:0d:4d:fc:ce:69:9a: 1e:c0:c3:1b:62:d5:d7:e6:16:7a:d3:a7:80:49:2c:f9:ca:fb: f4:6b:0b:0f:cc:0b:da:12:ee:d7:1d:c9:08:79:cb:56:ca:b4: cf:eb:7c:8d -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt3WKjHZMpbhXa45DuZ7ZhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGMxZjI1Y2E1N2YzM2ZkODRkMjY2NjBlODIzMDU4NTZkNGZmNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujWnwbHkaQtyZsuNh3+lyVM6toeK IAlJXJ/tDNy7s9EQPm8VFfmiE9SiRKuKgC8yITR5Y/znr5sjDo31PzU2bfy+GfVE r8kV7FMDKQIpyvJCUuC5fsqS62A0ya92DlBDsdwmsJAOvPM3sLuZ2wFmNz85r/jw saYTHOwGMppImVxg8+q/F/J4gmhBSAtapmx1H1S3bUm9fu29rC4y5itI+RDbGBYP J5kMNFGrxemDyjlkHS0qn2iV/eh/gmsMn2IvpsjhARbSyXq+kQLKZh3M/bsWsIOz /rYiP1WgSsaIrSwIdZSKQPN6+lVXZndu1kaXoA+upQt59NyxbS5Mg2b0NQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFP3B8lylfzP9hNJmYOgjBYVtT/VOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2Q3NTg2 OS1hZTBkLTQ0NmQtOTNlZC0wMGEwYTMyOGJiNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZDc1ODY5 LWFlMGQtNDQ2ZC05M2VkLTAwYTBhMzI4YmI3My8xL19jSHlYS1ZfTV8yRTBtWmc2 Q01GaFcxUDlVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQAWSemAwQAW+K1AwQCuQzAAwQCuR2sAwQCuSLo AwQBwxjmAwQBw1jsMBQEAgACMA4DBQAqA3LAAwUDKgRgQDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMAwE0wDQYJKoZIhvcNAQELBQADggEBAHuQYgWm5cYxBvhiEy+m Ottvi5NVCs5OUa0qxNmjwt9Im7tvN1RBp1qdyb67Us6KEVKvtYuNPF9FNsXu2dVv giW0zcn4McXTA50lmQ3xY8sm0efN41rR73f5K0d4cIzQgxlAgx5+JdYWhH4rQ5Nh wTqIkgzFoFnruCOUaG7z0OOhZO8ZMKRSznTJDBd1qFkvZk8IbihNlQgAQpXz1DH1 4rIVh8MJ/SIRlnK1aHUEAcpKPX9pb7g5exZpWp02A06JOln8gYX3NZrmJFxeZCQF STf9Gg1N/M5pmh7Awxti1dfmFnrTp4BJLPnK+/RrCw/MC9oS7tcdyQh5y1bKtM/r fI0= -----END CERTIFICATE-----Generated at Fri Jan 9 08:00:42 2026 by rpki-client