This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer File: kY74I7sEHqOsfIk2x1C2AYE34s0.cer (raw, json) Hash identifier: +Q/bJ3QNAfWhuAofESAC4BQWbcHxQDllZH/RhEc2JXY= Subject key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC868EC3752596A0D97C2631C148E82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199455 IP: 185.4.116.0/22 IP: 2a02:6fc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:68:ec:37:52:59:6a:0d:97:c2:63:1c:14:8e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:1d:b0:d6:cd:88:b5:fa:6f:b4:c4:6f:bb: 02:4f:e4:d0:b4:e0:bf:ff:b5:a9:b1:e3:e1:e1:8f: 75:71:d1:42:41:15:fa:38:f8:9b:6f:9d:33:f7:91: e6:16:1a:49:77:a4:61:f7:3c:f5:37:26:60:77:ca: 5b:ba:3e:9d:cf:3e:bf:05:78:c0:1f:38:48:72:2b: 75:a8:71:1d:e4:7e:a7:a4:ae:a0:b3:b2:29:e0:9f: ef:8b:33:27:16:ca:64:a4:90:90:53:a1:e3:1e:a9: 6e:67:47:b8:4b:c6:56:b5:7f:41:ba:30:18:5f:00: 23:6d:2a:fa:66:96:b1:3b:96:39:8a:af:0a:c0:6f: 28:d3:98:d9:3d:b3:12:22:2c:4c:df:5b:9f:d2:ad: 4d:ff:db:c6:39:68:c6:ad:97:ea:4d:c7:7c:4a:24: 54:5b:f5:67:63:f0:56:b0:45:34:45:b8:97:59:70: 16:fb:1e:54:c7:29:d6:3c:b0:79:5d:e8:8e:a7:eb: 04:c5:55:3b:99:b3:ee:06:87:28:1f:ca:46:c3:84: 9e:4f:11:ad:a2:b9:4e:40:55:c7:0b:fb:12:f2:bb: 2d:65:f8:00:d4:3e:08:be:34:7f:17:00:e9:04:c0: 6b:19:bd:fa:e7:dd:73:32:10:c3:27:b5:41:8e:9f: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.116.0/22 IPv6: 2a02:6fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199455 Signature Algorithm: sha256WithRSAEncryption 35:5b:8d:54:8e:74:4d:a7:af:c4:6b:f8:81:e8:ff:2f:38:d6: a8:c3:fd:bd:ce:b2:bb:2d:85:09:3f:8f:5f:72:2e:f3:45:09: c1:af:82:77:50:48:32:30:da:18:a6:cc:d6:ac:94:53:53:46: aa:00:fd:72:36:11:95:00:47:14:36:47:c5:05:a8:c6:7a:25: 5a:1a:2d:bf:96:65:8b:34:a2:f2:32:f4:a9:fb:e1:96:ac:49: 69:c0:9b:8e:c5:af:4a:f4:66:8b:d4:1b:67:6a:99:cd:18:78: 34:83:e1:ad:12:8f:ba:d3:0d:23:74:93:c0:8b:0e:6e:a7:0f: 8a:a1:8d:33:e6:ba:56:ef:57:7e:94:f2:7f:f1:5a:20:7f:b4: ae:5d:de:18:2d:fe:34:03:be:72:f1:f0:66:38:8b:fb:8a:d4: c7:0d:b8:e7:23:3d:0b:f8:68:1e:7c:6b:49:0b:b4:9a:ea:b2: 60:bf:46:6d:80:7c:af:4f:b6:7e:7d:e2:5a:86:8f:ca:a9:ff: 1c:3b:83:77:1b:29:05:dd:c4:f3:a6:27:43:b1:2d:16:34:cb: 81:89:d3:ea:08:88:6f:31:31:61:eb:bd:15:a3:ec:4f:fe:f6: 4f:e1:f0:08:1e:a8:b8:a0:32:4f:88:8d:2e:74:bc:8c:a4:d9: 27:d1:b9:82 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yGjsN1JZag2XwmMcFI6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MThlZjgyM2JiMDQxZWEzYWM3Yzg5MzZjNzUwYjYwMTgxMzdlMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGkdsNbNiLX6b7TEb7sCT+TQtOC/ /7WpsePh4Y91cdFCQRX6OPibb50z95HmFhpJd6Rh9zz1NyZgd8pbuj6dzz6/BXjA HzhIcit1qHEd5H6npK6gs7Ip4J/vizMnFspkpJCQU6HjHqluZ0e4S8ZWtX9BujAY XwAjbSr6ZpaxO5Y5iq8KwG8o05jZPbMSIixM31uf0q1N/9vGOWjGrZfqTcd8SiRU W/VnY/BWsEU0RbiXWXAW+x5UxynWPLB5XeiOp+sExVU7mbPuBocoH8pGw4SeTxGt orlOQFXHC/sS8rstZfgA1D4IvjR/FwDpBMBrGb36591zMhDDJ7VBjp9YKwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJGO+CO7BB6jrHyJNsdQtgGBN+LNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzY1NDIw Yy1mNWUyLTRkMjktYjUwMy02NTI5NzUxYjJiMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNjU0MjBj LWY1ZTItNGQyOS1iNTAzLTY1Mjk3NTFiMmIwMS8xL2tZNzRJN3NFSHFPc2ZJazJ4 MUMyQVlFMzRzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQR0MA0EAgACMAcDBQAqAm/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLHzANBgkqhkiG9w0BAQsFAAOCAQEANVuNVI50Taev xGv4gej/LzjWqMP9vc6yuy2FCT+PX3Iu80UJwa+Cd1BIMjDaGKbM1qyUU1NGqgD9 cjYRlQBHFDZHxQWoxnolWhotv5ZlizSi8jL0qfvhlqxJacCbjsWvSvRmi9QbZ2qZ zRh4NIPhrRKPutMNI3STwIsObqcPiqGNM+a6Vu9XfpTyf/FaIH+0rl3eGC3+NAO+ cvHwZjiL+4rUxw245yM9C/hoHnxrSQu0muqyYL9GbYB8r0+2fn3iWoaPyqn/HDuD dxspBd3E86YnQ7EtFjTLgYnT6giIbzExYeu9FaPsT/72T+HwCB6ouKAyT4iNLnS8 jKTZJ9G5gg== -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:40 2026 by rpki-client