This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer File: yHX3bo-JQkeSPA4nYjTZikw-xcI.cer (raw, json) Hash identifier: b4fcfLKzdurwkVPEQ6aF6OcdMfPGxs+mrpzPFs5xy3A= Subject key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80AD792D4E3643B74F98E746507BC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.41.148.0/22 IP: 2a01:53e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ad:79:2d:4e:36:43:b7:4f:98:e7:46:50:7b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:a0:44:54:db:4c:f9:fe:d5:5a:48:dd:10: 48:ed:83:41:26:c4:34:50:db:df:de:5d:70:da:8d: 1d:39:74:f1:f2:9a:96:95:b2:32:e6:91:d5:0f:95: 95:23:a5:4e:f6:6a:ce:f3:c9:44:24:6d:39:fe:7b: e2:9a:6b:9f:b6:95:b2:7d:f3:2d:18:c9:81:ba:ac: 96:81:bb:3e:05:0d:4b:57:64:77:ae:f3:dc:b4:47: ec:6b:02:b9:10:90:ba:10:80:28:07:f6:ee:a7:e5: c0:95:e8:c4:48:f4:51:c2:28:d9:d8:6d:37:ae:02: a6:26:9d:89:24:61:bb:52:3a:5a:95:b5:bd:0a:3a: eb:99:89:93:cc:2b:e0:b5:c9:88:a7:d9:e3:a5:ef: 8e:56:d8:bb:c6:8b:6e:5d:cd:58:29:57:03:9d:62: 00:43:06:16:c9:18:b9:a5:09:ba:7b:0a:33:fc:fd: 8e:39:de:ab:15:cf:9e:31:33:e3:1b:0a:c0:86:58: 01:80:99:d0:cc:97:4a:9d:62:69:22:11:6d:5a:90: 57:b4:76:ae:1c:45:11:37:a4:ca:b6:1d:f4:3f:71: 62:de:1e:f2:ef:4f:fe:5b:58:6d:15:21:70:7a:42: 49:7f:9a:fe:2c:1e:f5:e1:ab:a6:11:73:8d:3a:e4: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.148.0/22 IPv6: 2a01:53e0::/32 Signature Algorithm: sha256WithRSAEncryption 50:9d:bf:d6:10:08:41:69:c9:5e:80:9e:92:44:96:3b:63:82: d7:f5:80:92:5c:4f:34:c4:c8:03:45:73:fc:e2:1c:2a:ec:b2: 99:18:cf:4e:f2:b9:66:71:85:3f:aa:4d:4f:45:ef:33:7f:84: b0:74:1c:43:00:2e:0c:58:04:91:05:ef:60:e3:bf:ce:bd:02: 27:fb:45:1d:bb:06:b3:03:aa:9e:cf:a9:2f:99:c9:02:dc:3d: af:31:0e:78:c4:8b:02:01:e5:3d:83:5d:70:ee:50:64:df:47: 81:9e:0a:6a:06:c0:75:ba:06:4b:37:bf:4c:d4:f2:05:19:ce: c6:cf:c0:3b:c2:15:7c:9f:cd:41:17:5f:22:c5:ba:b6:64:65: 39:16:b3:af:02:72:bb:51:1f:27:3d:cf:b7:75:79:b6:08:e0: 04:0d:31:ac:d9:eb:e8:ca:30:f7:67:cf:70:a4:16:ae:3b:8c: 4f:1c:03:fa:0b:05:69:f1:3f:e6:12:2c:dd:3f:4c:d2:02:30: b2:45:00:ad:d7:8f:e5:45:f6:5c:00:25:ff:24:5c:72:20:b2: d2:f6:e8:f3:0b:0a:b8:4d:8c:65:89:eb:ab:81:c9:a2:33:93: 63:59:c4:0b:0f:f7:d5:25:41:f9:57:c6:01:8d:c6:3e:71:41: 50:21:d4:f6 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8gK15LU42Q7dPmOdGUHvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODc1Zjc2ZThmODk0MjQ3OTIzYzBlMjc2MjM0ZDk4YTRjM2VjNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM+gRFTbTPn+1VpI3RBI7YNBJsQ0 UNvf3l1w2o0dOXTx8pqWlbIy5pHVD5WVI6VO9mrO88lEJG05/nvimmuftpWyffMt GMmBuqyWgbs+BQ1LV2R3rvPctEfsawK5EJC6EIAoB/bup+XAlejESPRRwijZ2G03 rgKmJp2JJGG7UjpalbW9CjrrmYmTzCvgtcmIp9njpe+OVti7xotuXc1YKVcDnWIA QwYWyRi5pQm6ewoz/P2OOd6rFc+eMTPjGwrAhlgBgJnQzJdKnWJpIhFtWpBXtHau HEURN6TKth30P3Fi3h7y70/+W1htFSFwekJJf5r+LB714aumEXONOuQuKwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMh1926PiUJHkjwOJ2I02YpMPsXCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2U5ZTc5 OC00ZWYzLTRhYTgtODFmMC0zMDU2NThmOTE2MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZTllNzk4 LTRlZjMtNGFhOC04MWYwLTMwNTY1OGY5MTYzNS8xL3lIWDNiby1KUWtlU1BBNG5Z alRaaWt3LXhjSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSmUMA0EAgACMAcDBQAqAVPgMA0GCSqGSIb3 DQEBCwUAA4IBAQBQnb/WEAhBaclegJ6SRJY7Y4LX9YCSXE80xMgDRXP84hwq7LKZ GM9O8rlmcYU/qk1PRe8zf4SwdBxDAC4MWASRBe9g47/OvQIn+0UduwazA6qez6kv mckC3D2vMQ54xIsCAeU9g11w7lBk30eBngpqBsB1ugZLN79M1PIFGc7Gz8A7whV8 n81BF18ixbq2ZGU5FrOvAnK7UR8nPc+3dXm2COAEDTGs2evoyjD3Z89wpBauO4xP HAP6CwVp8T/mEizdP0zSAjCyRQCt14/lRfZcACX/JFxyILLS9ujzCwq4TYxlieur gcmiM5NjWcQLD/fVJUH5V8YBjcY+cUFQIdT2 -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:36 2026 by rpki-client