This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer (raw, json) Hash identifier: YYtASOOvGcvzZKPMBjiy+RJVkHv9MoZDye+4Y0xvdrk= Subject key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B414E7C54420FEA81A7D6BB87C90 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206611 IP: 167.160.5.0/24 IP: 185.98.157.0/24 IP: 185.181.52.0/22 IP: 192.161.6.0/23 IP: 2a0c:df00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b4:14:e7:c5:44:20:fe:a8:1a:7d:6b:b8:7c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd4719d72d288a73218d8c1a498823333297e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:97:cf:4c:d6:3f:88:36:26:0e:28:c2:9a: 05:c9:b6:43:99:48:93:37:24:ae:e6:de:cd:6f:ed: 11:c1:c6:2e:6b:93:ed:63:a6:c0:af:c3:04:ae:54: 23:55:b7:b5:39:6b:0f:7c:2e:c5:10:13:df:85:25: 80:31:9b:f5:45:82:b0:5e:45:36:97:95:2f:bc:f6: 55:65:8b:62:0b:e1:7e:66:24:a7:23:11:75:d2:f1: 52:c8:87:81:e4:2e:e1:03:3c:fb:a6:bd:3c:25:60: ae:1c:7a:68:ef:fb:62:df:8a:56:12:3f:3b:be:07: 47:04:2d:c7:6e:07:91:c2:c0:59:c1:f1:a3:bc:af: 6e:55:6c:a4:0d:9e:2c:cc:01:65:84:d6:b6:b9:df: 6a:51:d5:c4:6f:2b:2e:49:6a:67:7b:ea:ce:f7:a9: 1a:37:af:fb:f1:f4:6b:0c:2e:33:a6:e3:22:d2:4d: 1a:04:fd:77:40:b4:64:86:90:1b:f4:3e:00:20:74: e7:43:8e:09:d4:e1:a2:73:7d:61:b1:92:eb:b6:78: 80:75:b9:cf:7c:9e:9e:7e:e3:16:5b:45:6d:78:61: 1e:a7:c2:6e:a8:15:1e:0f:d6:db:51:8f:b3:f7:9c: 9d:b2:54:ef:d0:35:ff:18:94:03:7e:80:7f:3a:c6: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.160.5.0/24 185.98.157.0/24 185.181.52.0/22 192.161.6.0/23 IPv6: 2a0c:df00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206611 Signature Algorithm: sha256WithRSAEncryption 62:c3:4a:75:8e:c2:69:88:2f:32:83:1f:6b:d6:cc:79:48:09: b7:bd:b6:45:76:2d:5e:e8:f1:03:ed:2e:d4:59:26:7f:9f:6b: 31:34:66:e2:dc:ac:ef:b4:85:25:0a:63:44:23:9c:15:e7:3d: 3e:98:6f:95:a4:5d:b2:30:3a:06:b2:44:d4:45:34:2e:a0:14: e4:c3:e4:84:23:92:d7:42:29:b6:28:7b:9f:23:a3:05:c8:be: 66:96:75:59:c9:69:7a:29:77:89:8e:bd:49:80:97:32:e5:b4: 4d:6c:ee:4f:44:a0:e8:6c:ed:0f:d5:56:33:14:02:f2:80:47: 97:05:db:de:24:bb:3a:4e:03:aa:c3:d2:e1:fe:00:f2:b5:49: 7d:53:57:b3:63:9d:78:38:1c:f4:c8:5f:69:dc:69:e5:17:85: 75:43:b2:35:bd:c5:27:71:3c:05:7a:31:d2:69:3d:7f:10:13: 2e:a0:a3:f7:41:70:88:23:97:63:1b:76:25:bf:c1:d4:b1:13: b4:cd:68:e9:4b:a1:4d:65:d9:cb:d0:3c:61:b6:c8:a9:b7:93: ec:59:8f:f5:15:02:c3:d4:90:95:28:77:9e:e6:83:d5:86:78: ba:44:03:b7:b0:02:dc:f2:02:07:c1:86:9f:20:8a:6a:5e:64: 9b:0e:d6:5b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3xrQU58VEIP6oGn1ruHyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ0NzE5ZDcyZDI4OGE3MzIxOGQ4YzFhNDk4ODIzMzMzMjk3ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs12Xz0zWP4g2Jg4owpoFybZDmUiT NySu5t7Nb+0RwcYua5PtY6bAr8MErlQjVbe1OWsPfC7FEBPfhSWAMZv1RYKwXkU2 l5UvvPZVZYtiC+F+ZiSnIxF10vFSyIeB5C7hAzz7pr08JWCuHHpo7/ti34pWEj87 vgdHBC3HbgeRwsBZwfGjvK9uVWykDZ4szAFlhNa2ud9qUdXEbysuSWpne+rO96ka N6/78fRrDC4zpuMi0k0aBP13QLRkhpAb9D4AIHTnQ44J1OGic31hsZLrtniAdbnP fJ6efuMWW0VteGEep8JuqBUeD9bbUY+z95ydslTv0DX/GJQDfoB/Osb2QQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMvUcZ1y0oinMhjYwaSYgjMzKX4lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2RjOGMw ZC1mOGMzLTQwNmMtYjc5ZS1iNDkyZDZmZjQ4M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZGM4YzBk LWY4YzMtNDA2Yy1iNzllLWI0OTJkNmZmNDgzZi8xL3k5UnhuWExTaUtjeUdOakJw SmlDTXpNcGZpVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAp6AFAwQAuWKdAwQCubU0AwQBwKEGMA0EAgAC MAcDBQMqDN8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMnEzANBgkqhkiG9w0B AQsFAAOCAQEAYsNKdY7CaYgvMoMfa9bMeUgJt722RXYtXujxA+0u1Fkmf59rMTRm 4tys77SFJQpjRCOcFec9PphvlaRdsjA6BrJE1EU0LqAU5MPkhCOS10Iptih7nyOj Bci+ZpZ1Wclpeil3iY69SYCXMuW0TWzuT0Sg6GztD9VWMxQC8oBHlwXb3iS7Ok4D qsPS4f4A8rVJfVNXs2OdeDgc9Mhfadxp5ReFdUOyNb3FJ3E8BXox0mk9fxATLqCj 90FwiCOXYxt2Jb/B1LETtM1o6UuhTWXZy9A8YbbIqbeT7FmP9RUCw9SQlSh3nuaD 1YZ4ukQDt7AC3PICB8GGnyCKal5kmw7WWw== -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:53 2026 by rpki-client