This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer File: yRggtQAH5BxT3WAps3lU01cvTCk.cer (raw, json) Hash identifier: 9axwXQWDVVT/Nr9vmCf30PLELoI47daxS167U8nMqwE= Subject key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775922E5E455A6D439384C4D4E02607C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.193.148.0/22 IP: 91.223.170.0/24 IP: 195.206.226.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:22:e5:e4:55:a6:d4:39:38:4c:4d:4e:02:60:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c91820b50007e41c53dd6029b37954d3572f4c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:28:3e:88:bc:87:60:06:f0:62:34:39:a4: 22:3b:36:43:b9:be:2b:c5:16:dd:3a:33:e8:63:ce: 26:2c:d5:4f:63:1e:81:09:38:f8:86:36:45:f4:32: 10:2d:4a:38:fc:1c:eb:a7:1c:b9:91:6d:90:82:ff: e3:d3:6c:95:8f:e9:43:c2:1c:2c:14:d0:b8:a1:ce: 6b:73:8a:5e:ff:f1:f6:7b:40:c5:a8:8e:ed:be:85: e9:20:89:e7:da:2e:c2:67:4e:e3:8e:26:d3:22:0c: 9c:bf:6c:d9:9f:fd:4f:44:20:ca:ac:e3:d5:de:6c: 61:1f:62:2f:02:4e:79:81:45:5e:66:bc:f5:ee:7f: f4:a8:c8:4e:8f:83:86:88:e9:0d:61:37:fb:2c:2d: 2b:d5:4a:db:b1:f6:ff:c9:ff:ac:bc:5f:3a:6b:1d: 2f:50:be:86:c5:8d:d0:e8:68:47:e9:b4:cf:5e:96: 51:58:18:d5:63:2e:35:17:7a:50:5a:4c:4a:c6:31: 78:91:f1:ef:c6:f4:74:09:c6:e4:2c:b6:d6:a0:34: e3:55:f9:fe:f4:d3:09:16:59:47:3f:73:07:5d:ed: ba:29:f0:24:26:ff:49:3a:15:1b:c6:83:d0:66:5e: b1:ac:0c:7a:41:7e:9f:a0:47:7d:25:41:b6:c2:60: 08:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.148.0/22 91.223.170.0/24 195.206.226.0/23 Signature Algorithm: sha256WithRSAEncryption 67:08:47:8a:4a:f4:bb:43:a9:01:e2:12:1a:88:7b:23:93:69: df:b9:7d:e6:90:66:09:1c:51:7f:2d:03:eb:57:46:cf:0e:9f: 34:01:63:d8:15:f9:2e:00:0c:ab:6f:74:ba:92:8f:a5:6d:2e: 59:58:e7:aa:8e:24:b7:b8:ab:46:66:9e:78:7c:90:d7:be:99: bf:77:7f:67:ef:a8:1b:f5:1e:db:0c:b5:c6:7c:71:5d:bb:34: 9c:7d:8a:3b:84:11:8d:00:18:84:9b:e4:d3:f4:7b:65:b5:02: b6:a7:90:8d:0d:45:6e:05:6c:e2:1f:dc:57:ff:a5:7b:08:16: 17:97:71:b5:44:f0:66:b0:05:26:aa:6a:2a:0c:6f:05:ab:17: 2c:67:d1:50:16:38:bf:d6:b7:db:77:73:94:53:eb:56:4d:e0: ea:c1:52:46:ba:3f:24:c9:1d:cf:55:25:db:58:62:59:43:f4: 00:ee:ef:e7:10:7a:f8:08:9a:54:2e:63:fe:18:e6:aa:68:a9: 99:4e:6c:63:e2:fa:8e:0c:8f:99:30:e0:5f:37:b1:18:84:67: 3c:7d:ea:19:2e:08:98:c1:74:e4:ae:f9:97:2c:56:f6:19:ff: f5:6a:d9:1f:cb:54:e0:a8:71:ba:c8:42:3f:de:56:73:46:f1: 05:5c:28:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt3WSLl5FWm1Dk4TE1OAmB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTE4MjBiNTAwMDdlNDFjNTNkZDYwMjliMzc5NTRkMzU3MmY0YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv0oPoi8h2AG8GI0OaQiOzZDub4r xRbdOjPoY84mLNVPYx6BCTj4hjZF9DIQLUo4/Bzrpxy5kW2Qgv/j02yVj+lDwhws FNC4oc5rc4pe//H2e0DFqI7tvoXpIInn2i7CZ07jjibTIgycv2zZn/1PRCDKrOPV 3mxhH2IvAk55gUVeZrz17n/0qMhOj4OGiOkNYTf7LC0r1Urbsfb/yf+svF86ax0v UL6GxY3Q6GhH6bTPXpZRWBjVYy41F3pQWkxKxjF4kfHvxvR0CcbkLLbWoDTjVfn+ 9NMJFllHP3MHXe26KfAkJv9JOhUbxoPQZl6xrAx6QX6foEd9JUG2wmAIKQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFMkYILUAB+QcU91gKbN5VNNXL0wpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2VhNzEy MS01NDE0LTQ0ODQtOTE4NS1lZWMxNGM5NzFjNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZWE3MTIx LTU0MTQtNDQ4NC05MTg1LWVlYzE0Yzk3MWM0ZC8xL3lSZ2d0UUFINUJ4VDNXQXBz M2xVMDFjdlRDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW8GUAwQAW9+qAwQBw87iMA0GCSqGSIb3DQEB CwUAA4IBAQBnCEeKSvS7Q6kB4hIaiHsjk2nfuX3mkGYJHFF/LQPrV0bPDp80AWPY FfkuAAyrb3S6ko+lbS5ZWOeqjiS3uKtGZp54fJDXvpm/d39n76gb9R7bDLXGfHFd uzScfYo7hBGNABiEm+TT9HtltQK2p5CNDUVuBWziH9xX/6V7CBYXl3G1RPBmsAUm qmoqDG8FqxcsZ9FQFji/1rfbd3OUU+tWTeDqwVJGuj8kyR3PVSXbWGJZQ/QA7u/n EHr4CJpULmP+GOaqaKmZTmxj4vqODI+ZMOBfN7EYhGc8feoZLgiYwXTkrvmXLFb2 Gf/1atkfy1TgqHG6yEI/3lZzRvEFXCi8 -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:13 2026 by rpki-client