This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer File: yoFg7-OfGjB3_dL68ipkgEtUE4I.cer (raw, json) Hash identifier: fr4i2yIUllw+9AejXqEsG3qpyTlfyNSDBa0EMbvbvHo= Subject key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F158F64C85773E2B11FC57A227D98C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56503 IP: 91.106.64.0/19 IP: 185.26.232.0/22 IP: 185.103.244.0 -- 185.103.251.255 IP: 185.104.232.0/22 IP: 185.104.240.0/22 IP: 185.106.136.0/22 IP: 185.106.144.0/22 IP: 185.107.28.0/22 IP: 185.108.164.0/22 IP: 2a04:1380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8f:64:c8:57:73:e2:b1:1f:c5:7a:22:7d:98:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca8160efe39f1a3077fdd2faf22a64804b541382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:76:3a:3d:02:f2:f1:80:8f:27:81:9c:b6:f4: dd:5f:aa:06:1e:33:fe:4c:88:9d:c0:a9:db:33:b4: 5a:c4:51:9f:43:7c:a2:8c:b0:ef:94:69:50:d9:03: 85:7b:e9:51:fa:97:bf:5b:b7:ea:c5:d4:61:fa:f0: 7c:e9:16:f8:02:d4:49:d6:1e:9b:be:4a:4a:2d:9c: b1:93:df:e1:57:dc:2f:b6:05:2d:c9:99:d5:da:f7: aa:ac:5f:41:76:c4:5b:1a:f3:a3:35:85:ef:26:79: ac:db:d2:1d:4e:0b:b6:fb:2b:e4:39:67:ba:a1:d8: 22:43:bc:21:92:4c:5c:88:bc:f5:f9:9b:64:57:c8: 11:65:40:03:b4:ad:4f:62:7b:4e:a4:26:ef:43:5b: 09:06:90:d8:c1:ef:97:ce:e8:37:38:d4:3d:d0:4e: 93:73:b6:f5:96:10:13:b4:bb:37:a3:99:ed:e7:25: b1:d2:8d:88:69:92:f9:32:5a:56:97:81:91:0e:1c: c7:87:f6:a2:d1:f6:ef:bf:bf:00:50:e6:85:7e:59: 70:b0:be:2c:04:21:f0:44:c3:73:2b:18:c1:2d:2a: 5e:06:e4:d5:86:5c:56:82:40:3e:90:26:e6:0a:3a: ff:8f:49:67:1a:1c:16:29:6e:63:9d:86:9e:b6:bb: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.64.0/19 185.26.232.0/22 185.103.244.0-185.103.251.255 185.104.232.0/22 185.104.240.0/22 185.106.136.0/22 185.106.144.0/22 185.107.28.0/22 185.108.164.0/22 IPv6: 2a04:1380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56503 Signature Algorithm: sha256WithRSAEncryption 63:6a:42:08:5f:cc:ec:90:5b:5d:52:3b:b0:46:46:22:ca:0e: 54:a4:c1:7d:33:0a:94:4b:db:31:ee:7c:24:50:5f:ab:8d:26: 27:25:5b:09:5f:aa:48:3e:3d:0d:40:a1:c4:ba:4b:14:03:71: 51:cb:d8:12:bd:f3:1f:1b:ac:a9:af:37:11:73:c2:51:a9:48: 3a:d7:34:03:b2:9b:42:7e:17:b3:e7:50:0b:fc:29:c6:ac:b2: 36:c8:3b:96:1d:9a:7a:d9:a9:9b:18:38:53:55:a9:23:2c:c2: ed:0f:1e:a1:79:60:4b:ea:97:02:70:87:8f:4b:63:dc:ae:88: 0e:34:aa:14:83:18:ec:d4:45:2c:37:d7:8f:63:25:74:65:50: 09:e1:dc:5f:5b:cd:80:ed:d6:20:06:9b:85:f9:74:ac:94:2b: f8:d6:ea:40:80:23:e4:b8:45:7d:92:2e:f7:3b:43:88:22:b4: 85:6a:01:46:4c:9d:f0:57:22:94:ec:2c:ad:a3:9d:c3:85:1c: d6:19:4f:e6:84:e0:14:24:ef:54:86:1a:39:ab:48:c9:96:26: ef:23:cb:76:57:dd:12:c3:52:83:16:fd:fc:0e:22:b1:4d:1e: 20:f2:de:ab:e6:78:90:df:57:6f:38:c4:cf:ff:68:cf:de:aa: a7:0c:65:d9 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt/FY9kyFdz4rEfxXoifZjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTgxNjBlZmUzOWYxYTMwNzdmZGQyZmFmMjJhNjQ4MDRiNTQxMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HY6PQLy8YCPJ4GctvTdX6oGHjP+ TIidwKnbM7RaxFGfQ3yijLDvlGlQ2QOFe+lR+pe/W7fqxdRh+vB86Rb4AtRJ1h6b vkpKLZyxk9/hV9wvtgUtyZnV2veqrF9BdsRbGvOjNYXvJnms29IdTgu2+yvkOWe6 odgiQ7whkkxciLz1+ZtkV8gRZUADtK1PYntOpCbvQ1sJBpDYwe+Xzug3ONQ90E6T c7b1lhATtLs3o5nt5yWx0o2IaZL5MlpWl4GRDhzHh/ai0fbvv78AUOaFfllwsL4s BCHwRMNzKxjBLSpeBuTVhlxWgkA+kCbmCjr/j0lnGhwWKW5jnYaetrs+TwIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFMqBYO/jnxowd/3S+vIqZIBLVBOCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2QyNTAx NS03ZDI0LTRhZDUtYTJjMS1hYzRlMjhjMmM1YjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZDI1MDE1 LTdkMjQtNGFkNS1hMmMxLWFjNGUyOGMyYzViNi8xL3lvRmc3LU9mR2pCM19kTDY4 aXBrZ0V0VUU0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTBEBAIAATA+AwQFW2pAAwQCuRroMAwDBAK5Z/QDBAK5Z/gDBAK5 aOgDBAK5aPADBAK5aogDBAK5apADBAK5axwDBAK5bKQwDQQCAAIwBwMFAyoEE4Aw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANy3MA0GCSqGSIb3DQEBCwUAA4IBAQBj akIIX8zskFtdUjuwRkYiyg5UpMF9MwqUS9sx7nwkUF+rjSYnJVsJX6pIPj0NQKHE uksUA3FRy9gSvfMfG6yprzcRc8JRqUg61zQDsptCfhez51AL/CnGrLI2yDuWHZp6 2ambGDhTVakjLMLtDx6heWBL6pcCcIePS2PcrogONKoUgxjs1EUsN9ePYyV0ZVAJ 4dxfW82A7dYgBpuF+XSslCv41upAgCPkuEV9ki73O0OIIrSFagFGTJ3wVyKU7Cyt o53DhRzWGU/mhOAUJO9Uhho5q0jJlibvI8t2V90Sw1KDFv38DiKxTR4g8t6r5niQ 31dvOMTP/2jP3qqnDGXZ -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:45 2026 by rpki-client