This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer File: yuzkHLwsMGJu8qKNGDny1sR1fz8.cer (raw, json) Hash identifier: viNouW2S5iPz20gbWb2H0Yloyo1Y6oea9HeW70ljoiQ= Subject key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A75DEA39AA3930EDCB2D74B18970 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6815 -- 6817 AS: 15625 AS: 16289 AS: 21205 AS: 34064 AS: 44591 IP: 91.199.173.0/24 IP: 91.221.72.0/23 IP: 145.221.0.0/16 IP: 156.114.0.0/16 IP: 193.26.29.0/24 IP: 193.41.234.0/24 IP: 193.176.46.0/24 IP: 194.104.160.0 -- 194.104.184.255 IP: 2a10:d6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a7:5d:ea:39:aa:39:30:ed:cb:2d:74:b1:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:27:6d:b8:79:7b:6f:3a:ee:f2:bc:4b:ed: 88:7a:7c:f9:bb:f8:f9:7c:e5:67:c8:1d:91:59:fc: cd:6d:aa:ea:0b:10:38:50:ac:19:23:fd:3a:a6:e7: 5c:d0:fa:86:39:d6:94:be:71:1e:b1:1c:d5:d1:69: 06:4d:5b:dc:a9:63:f4:64:bd:1e:5d:b3:e3:33:15: b4:5a:53:3f:41:4b:a9:18:ee:f2:d5:71:e1:91:35: fb:26:78:cd:ac:ed:19:43:bd:b8:04:48:fd:36:cc: e4:bb:9b:d9:a6:08:29:a7:d3:eb:f3:54:47:01:b4: 0c:8f:ec:1e:a1:90:d9:58:12:42:b9:7b:5e:56:37: 32:22:62:27:42:dd:e5:71:8e:72:e6:6b:25:15:f8: 79:2b:5c:a9:34:ff:77:fd:69:4b:35:f5:fb:c1:dd: 53:bb:12:28:8b:c8:47:dd:48:56:b2:89:05:d2:83: 2f:72:68:24:5d:dc:78:0d:90:e3:28:1d:b5:59:5e: e2:43:93:c4:d2:c3:79:46:66:e4:b7:28:45:22:52: 4b:e6:84:b6:27:ce:e8:3d:32:87:6f:73:15:db:f2: 13:b9:a9:65:58:07:74:bc:9b:78:35:1d:9d:e1:c8: a8:0e:3b:e1:9c:e7:7f:dc:4f:9c:21:99:b2:33:0c: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.173.0/24 91.221.72.0/23 145.221.0.0/16 156.114.0.0/16 193.26.29.0/24 193.41.234.0/24 193.176.46.0/24 194.104.160.0-194.104.184.255 IPv6: 2a10:d6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6815-6817 15625 16289 21205 34064 44591 Signature Algorithm: sha256WithRSAEncryption 59:b7:81:f3:e6:fb:4d:a8:0b:dc:6f:6e:fe:e1:e0:c5:6f:ea: 00:2d:c5:58:0c:94:f4:a7:67:78:fb:dd:ec:69:fe:bf:24:b1: 6f:c1:6f:b7:13:95:ea:9b:3c:59:a8:cf:41:63:e9:bf:67:15: a1:e9:1f:79:77:79:fe:40:bb:98:2b:93:71:e5:06:ab:3c:4a: d9:a2:9a:8b:76:6c:44:c2:05:00:d3:75:b1:47:fa:25:7d:4d: 0f:06:76:3f:b6:49:a7:88:95:18:e8:d8:0a:54:83:8e:b0:20: c4:e1:6a:91:7f:37:c5:df:22:ea:88:08:65:c7:47:56:2e:9f: 98:ad:19:aa:94:6c:58:1f:59:19:0e:fb:a7:44:16:f2:16:87: e7:c0:21:10:77:39:db:19:ae:ae:90:9e:bd:44:3c:3c:fa:90: a5:a8:3f:ab:10:19:06:31:65:03:dc:5c:05:1b:34:3d:b0:17: d6:b6:8d:5f:31:2f:ca:63:dd:04:c5:53:b5:94:2a:b3:82:33: 70:f6:af:ae:5e:5e:2e:78:25:b0:41:d4:6a:e1:2a:5d:08:99: 20:27:92:40:9e:08:a2:bd:1a:6a:53:a8:be:0a:4b:3f:f1:4b: 15:07:23:b8:03:8e:95:a8:65:9d:a0:76:db:90:21:f1:d7:1d: 09:dc:6e:4e -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt3xqdd6jmqOTDtyy10sYlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWVjZTQxY2JjMmMzMDYyNmVmMmEyOGQxODM5ZjJkNmM0NzU3ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVgnbbh5e2867vK8S+2Ienz5u/j5 fOVnyB2RWfzNbarqCxA4UKwZI/06pudc0PqGOdaUvnEesRzV0WkGTVvcqWP0ZL0e XbPjMxW0WlM/QUupGO7y1XHhkTX7JnjNrO0ZQ724BEj9Nszku5vZpggpp9Pr81RH AbQMj+weoZDZWBJCuXteVjcyImInQt3lcY5y5mslFfh5K1ypNP93/WlLNfX7wd1T uxIoi8hH3UhWsokF0oMvcmgkXdx4DZDjKB21WV7iQ5PE0sN5RmbktyhFIlJL5oS2 J87oPTKHb3MV2/ITuallWAd0vJt4NR2d4cioDjvhnOd/3E+cIZmyMwwqEQIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFMrs5By8LDBibvKijRg58tbEdX8/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzYzMGNi ZS1jZTAxLTQ2NGQtODJlYi1kODUxZTQwZDU3YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvNjMwY2Jl LWNlMDEtNDY0ZC04MmViLWQ4NTFlNDBkNTdiZi8xL3l1emtITHdzTUdKdThxS05H RG55MXNSMWZ6OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQAW8etAwQBW91IAwMAkd0DAwCccgMEAMEaHQME AMEp6gMEAMGwLjAMAwQFwmigAwQAwmi4MA0EAgACMAcDBQMqENbAMDUGCCsGAQUF BwEIAQH/BCYwJKAiMCAwCAICGp8CAhqhAgI9CQICP6ECAlLVAgMAhRACAwCuLzAN BgkqhkiG9w0BAQsFAAOCAQEAWbeB8+b7TagL3G9u/uHgxW/qAC3FWAyU9KdnePvd 7Gn+vySxb8FvtxOV6ps8WajPQWPpv2cVoekfeXd5/kC7mCuTceUGqzxK2aKai3Zs RMIFANN1sUf6JX1NDwZ2P7ZJp4iVGOjYClSDjrAgxOFqkX83xd8i6ogIZcdHVi6f mK0ZqpRsWB9ZGQ77p0QW8haH58AhEHc52xmurpCevUQ8PPqQpag/qxAZBjFlA9xc BRs0PbAX1raNXzEvymPdBMVTtZQqs4IzcPavrl5eLnglsEHUauEqXQiZICeSQJ4I or0aalOovgpLP/FLFQcjuAOOlahlnaB225Ah8dcdCdxuTg== -----END CERTIFICATE-----Generated at Mon Jan 5 19:12:37 2026 by rpki-client