This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer File: 0xryhyw_VQMHOGbf_vSItxeD2rY.cer (raw, json) Hash identifier: x7lpEORmoFGCkNXpMyHbXtM/RQAigDkB/j5YZbCNyws= Subject key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113A56E4215D0EF68EE2F8C2C7C6B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198076 IP: 176.123.49.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3a:56:e4:21:5d:0e:f6:8e:e2:f8:c2:c7:c6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d31af2872c3f5503073866dffef488b71783dab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:a4:26:8b:de:a9:73:e8:4e:2d:bb:37:89: ca:08:ed:f1:db:fb:37:01:47:35:0a:06:6d:51:c2: 36:5d:a0:81:a7:99:81:b7:8d:a5:d9:55:68:9e:2e: 5c:62:bd:16:89:97:c5:5d:7a:68:9d:e4:e3:fc:00: 99:81:ed:94:42:3e:2f:c2:5f:f7:32:df:ec:c0:d8: 97:bd:e2:d9:b1:63:a0:69:c0:37:73:0e:58:a8:47: 51:27:b2:ea:10:a0:b0:e4:15:e5:19:cf:ae:69:19: 06:bc:1c:1d:0c:ce:e8:38:e1:f1:fd:3c:2a:3d:1d: 68:25:9a:cb:30:2a:40:cd:db:d4:4c:3d:06:67:7c: 51:7f:1e:53:69:d8:98:ad:02:45:b8:7c:92:ef:b0: 6d:eb:af:36:c6:1d:fb:2b:0c:bd:85:28:86:5d:15: 73:08:25:e6:e5:3e:15:5c:63:bd:51:be:51:a4:ef: fc:9e:0a:9c:5a:35:58:16:32:e3:63:81:69:d7:2f: 82:a3:52:ea:82:7d:c3:97:bd:9b:0f:ec:03:a5:61: ad:42:4f:b1:39:7f:f7:e7:60:21:ab:cb:08:0d:d9: 0a:7f:a5:48:f2:e7:03:16:1e:5a:9d:c2:de:74:20: 88:7c:66:51:07:a2:bb:e7:f0:f5:b1:a7:a5:e2:c4: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.123.49.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198076 Signature Algorithm: sha256WithRSAEncryption 75:99:45:eb:78:7e:fd:63:54:0c:6b:64:af:7b:6c:5e:be:67: 14:c0:10:e8:7d:be:1b:2f:ec:e4:31:0d:97:09:01:cb:af:ee: 18:f3:3c:ed:60:f8:0a:58:35:19:cc:33:db:61:1d:c3:87:1e: 4e:9d:fd:74:8f:cd:43:83:cc:61:65:65:0b:f9:7b:57:a9:07: 18:fa:f6:75:7b:7c:1f:7b:54:73:1c:11:4b:24:51:09:77:4b: b8:3a:95:9e:f3:af:1b:b6:49:4e:46:7b:5b:b2:2c:89:b8:c1: 08:c4:b1:df:ee:92:45:53:6a:8d:91:b1:a8:05:c7:50:c7:a1: cb:19:f1:a8:5a:ba:4e:e0:5f:fd:6d:cd:66:69:a7:78:b6:37: 27:e0:6a:a7:f2:56:e3:d1:d9:04:2e:3b:eb:c6:0a:d8:90:2f: e8:3b:13:09:71:9e:78:8e:8f:5c:a8:e0:0c:0a:4b:60:ab:7f: d3:f2:fe:f2:bd:1a:cf:a1:5b:82:78:a4:05:e0:d5:ce:8d:3a: 0f:91:a0:f9:e7:a5:16:33:87:4c:ef:aa:0b:b3:5f:29:4e:95: 59:73:7a:85:62:2f:2e:c5:4b:98:f7:af:a4:82:cc:3c:5f:6e: 15:c7:3a:28:62:3e:6b:76:e1:b9:24:cd:a6:2c:4e:ee:4c:03: 0c:ec:30:71 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ETpW5CFdDvaO4vjCx8awMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzFhZjI4NzJjM2Y1NTAzMDczODY2ZGZmZWY0ODhiNzE3ODNkYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY6kJoveqXPoTi27N4nKCO3x2/s3 AUc1CgZtUcI2XaCBp5mBt42l2VVoni5cYr0WiZfFXXponeTj/ACZge2UQj4vwl/3 Mt/swNiXveLZsWOgacA3cw5YqEdRJ7LqEKCw5BXlGc+uaRkGvBwdDM7oOOHx/Twq PR1oJZrLMCpAzdvUTD0GZ3xRfx5TadiYrQJFuHyS77Bt6682xh37Kwy9hSiGXRVz CCXm5T4VXGO9Ub5RpO/8ngqcWjVYFjLjY4Fp1y+Co1Lqgn3Dl72bD+wDpWGtQk+x OX/352Ahq8sIDdkKf6VI8ucDFh5ancLedCCIfGZRB6K75/D1sael4sR2vQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNMa8ocsP1UDBzhm3/70iLcXg9q2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzY4Yjc1 Yy04M2RmLTQ3NGUtYTlmZS0wMWJmMWYxNDVjMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNjhiNzVj LTgzZGYtNDc0ZS1hOWZlLTAxYmYxZjE0NWMyNi8xLzB4cnloeXdfVlFNSE9HYmZf dlNJdHhlRDJyWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHsxMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFvDANBgkqhkiG9w0BAQsFAAOCAQEAdZlF63h+/WNUDGtkr3tsXr5nFMAQ6H2+ Gy/s5DENlwkBy6/uGPM87WD4Clg1Gcwz22Edw4ceTp39dI/NQ4PMYWVlC/l7V6kH GPr2dXt8H3tUcxwRSyRRCXdLuDqVnvOvG7ZJTkZ7W7IsibjBCMSx3+6SRVNqjZGx qAXHUMehyxnxqFq6TuBf/W3NZmmneLY3J+Bqp/JW49HZBC4768YK2JAv6DsTCXGe eI6PXKjgDApLYKt/0/L+8r0az6FbgnikBeDVzo06D5Gg+eelFjOHTO+qC7NfKU6V WXN6hWIvLsVLmPevpILMPF9uFcc6KGI+a3bhuSTNpixO7kwDDOwwcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:36 2026 by rpki-client