This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer File: 1yuCN7P20dG-rCnSlpZAs53LlD4.cer (raw, json) Hash identifier: DM7XLKlB5Znf7MlI9fNdyXNKRmpe/YnV5Zh3YJ1Simc= Subject key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C09144C03C2E168A787471ACD2D259428 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 29 Jan 2026 09:27:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44737 IP: 91.199.222.0/24 IP: 94.142.249.0/24 IP: 176.111.36.0/24 IP: 176.111.47.0/24 IP: 2a01:f300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:14:4c:03:c2:e1:68:a7:87:47:1a:cd:2d:25:94:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 29 09:27:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:a6:af:98:55:71:55:a5:b9:38:1b:ea:05: fc:40:27:90:c0:ef:bf:53:cc:04:82:db:a0:9a:3f: 5c:50:92:f5:00:52:ce:25:d3:15:0f:5a:5c:d1:74: 9a:9c:cf:50:ac:f4:a0:37:c7:bc:59:9c:13:19:60: 1a:a4:87:fe:5d:cc:6a:43:c5:4e:ab:00:04:f1:c8: ec:bf:e7:4f:60:83:b3:76:60:0e:2e:69:5c:10:cd: 88:ec:18:de:3d:1e:0a:b4:cc:ce:d5:ff:9e:01:ae: 95:1d:af:bf:8b:37:d5:dc:97:d1:e3:70:e7:87:46: 88:af:9c:7b:49:15:05:61:9d:e9:e5:3b:b5:8e:2c: 71:54:b7:69:5a:66:33:d5:f8:c9:3f:b0:9e:59:a2: 5e:79:1f:71:52:6a:20:5a:41:e8:62:f2:61:26:9a: b7:b4:aa:37:cb:87:35:a9:75:b0:a3:08:11:ce:37: 4d:7d:30:18:e8:16:b4:33:34:2b:91:86:e4:48:30: a5:92:5d:4f:65:aa:25:63:81:6e:a1:9a:9b:11:a3: d4:3b:27:5f:35:48:84:f9:08:c0:20:49:8d:b8:95: 30:7c:bd:64:cc:14:17:ae:c2:dd:13:87:66:56:53: 09:e7:bf:2e:18:29:8b:06:cc:97:a7:dc:0f:d4:15: 7c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.222.0/24 94.142.249.0/24 176.111.36.0/24 176.111.47.0/24 IPv6: 2a01:f300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44737 Signature Algorithm: sha256WithRSAEncryption 0e:b3:3c:df:b8:08:e9:1f:bd:36:25:da:aa:72:c4:30:b6:4e: 15:56:81:71:e3:91:01:e6:97:ac:19:88:7f:99:74:72:66:7e: 70:9d:83:55:2c:ff:83:ba:3c:21:a9:b1:31:7e:02:4b:d9:f0: 6d:d8:a9:4a:4e:5d:87:b7:a7:44:ac:dc:08:8f:da:49:af:ac: ec:1e:11:8a:f1:11:30:92:a9:0d:54:0b:13:6b:88:d3:50:f5: 1e:b8:a6:ca:f7:e8:f2:d2:d2:b2:d7:d5:0b:05:65:a1:63:1e: d1:48:d6:06:c5:69:3f:de:0b:fe:7c:e7:26:6d:68:2d:f2:48: 9b:b4:3b:66:57:90:ee:31:a4:37:4a:11:12:74:b1:ba:19:4b: 0f:46:7f:33:1c:39:43:d6:73:09:7b:ad:3b:cd:1b:8b:19:05: 55:b7:30:0d:17:24:b9:0d:08:7c:90:c4:13:42:e1:70:0f:6b: 3f:83:cc:39:79:89:3a:f7:71:f4:51:04:9a:5a:fe:db:93:8b: 82:f1:b0:c9:86:0c:9a:f7:f5:1c:7f:47:3a:48:b2:c3:c5:a7: 45:82:3f:8c:ee:7f:80:bb:b5:e6:3c:18:b4:b1:52:c4:8f:00: c5:7d:32:8b:33:fd:55:87:0d:6f:39:35:06:15:0c:2f:12:df: be:b9:6c:b3 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZwJFEwDwuFop4dHGs0tJZQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI5MDkyNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzJiODIzN2IzZjZkMWQxYmVhYzI5ZDI5Njk2NDBiMzlkY2I5NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpymr5hVcVWluTgb6gX8QCeQwO+/ U8wEgtugmj9cUJL1AFLOJdMVD1pc0XSanM9QrPSgN8e8WZwTGWAapIf+XcxqQ8VO qwAE8cjsv+dPYIOzdmAOLmlcEM2I7BjePR4KtMzO1f+eAa6VHa+/izfV3JfR43Dn h0aIr5x7SRUFYZ3p5Tu1jixxVLdpWmYz1fjJP7CeWaJeeR9xUmogWkHoYvJhJpq3 tKo3y4c1qXWwowgRzjdNfTAY6Ba0MzQrkYbkSDClkl1PZaolY4FuoZqbEaPUOydf NUiE+QjAIEmNuJUwfL1kzBQXrsLdE4dmVlMJ578uGCmLBsyXp9wP1BV88wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFNcrgjez9tHRvqwp0paWQLOdy5Q+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzZhMTYz OC0xZWE2LTQ2NjEtOGNlOC1lNjhkOWE1NjQ1MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvNmExNjM4 LTFlYTYtNDY2MS04Y2U4LWU2OGQ5YTU2NDUyYy8xLzF5dUNON1AyMGRHLXJDblNs cFpBczUzTGxENC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW8feAwQAXo75AwQAsG8kAwQAsG8vMA0EAgAC MAcDBQAqAfMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCuwTANBgkqhkiG9w0B AQsFAAOCAQEADrM837gI6R+9NiXaqnLEMLZOFVaBceORAeaXrBmIf5l0cmZ+cJ2D VSz/g7o8IamxMX4CS9nwbdipSk5dh7enRKzcCI/aSa+s7B4RivERMJKpDVQLE2uI 01D1Hrimyvfo8tLSstfVCwVloWMe0UjWBsVpP94L/nznJm1oLfJIm7Q7ZleQ7jGk N0oREnSxuhlLD0Z/Mxw5Q9ZzCXutO80bixkFVbcwDRckuQ0IfJDEE0LhcA9rP4PM OXmJOvdx9FEEmlr+25OLgvGwyYYMmvf1HH9HOkiyw8WnRYI/jO5/gLu15jwYtLFS xI8AxX0yizP9VYcNbzk1BhUMLxLfvrlssw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:35 2026 by rpki-client