This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.cer (raw, json) Hash identifier: ETZTOTQsUAr7PWWlAF0jIXBwzmhg9+iCRVzBGszpz24= Subject key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1D129DC255E208597CFE7F6119E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204870 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1d:12:9d:c2:55:e2:08:59:7c:fe:7f:61:19:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db460d201795a6a992ed4ac18bb7c52c108b7852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:31:0f:50:e8:07:42:09:10:ef:e0:98:50: 31:52:4d:ed:9c:a7:d8:c4:0e:90:9d:7d:6b:3e:c3: ae:8f:26:1b:f9:d5:e0:a9:9f:07:9b:d9:1c:bf:6f: e8:19:76:4d:57:ab:25:17:c6:49:c0:66:98:7c:a5: e1:26:9c:dc:03:1b:ec:19:a0:0f:ed:a1:f5:fb:90: a8:de:3b:1a:61:ba:c9:39:00:10:e7:10:a0:64:04: f0:30:5a:da:e1:b5:c4:9e:21:84:76:1a:9c:c8:a4: f7:57:9b:bf:19:30:8d:43:18:8a:93:8a:08:88:70: cf:c0:d7:cd:52:5d:89:18:1c:fc:a4:02:9a:45:8b: 75:4c:c5:c2:dc:b2:63:ae:dc:c6:00:27:b3:ca:7c: c6:47:b7:6d:22:c8:ca:9e:9c:0f:fd:23:38:9b:63: 38:84:19:47:68:b1:05:8e:82:77:8a:27:9c:6c:28: 98:6c:77:b2:73:ed:f9:66:18:28:75:94:11:10:f3: 66:6f:c3:22:8d:c8:75:bb:47:00:2f:0c:0e:a7:9b: 5a:49:88:77:c6:1b:70:15:3b:d3:a7:94:b4:27:7a: eb:f9:29:ac:48:2a:e0:7a:c0:84:af:91:42:fc:69: f8:7e:2d:07:da:3e:d1:2f:9f:c5:5f:49:44:2c:06: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204870 Signature Algorithm: sha256WithRSAEncryption 6b:18:ea:b6:92:00:95:ac:c0:c2:79:d4:b4:3b:2f:db:18:c8: 99:4f:1f:ca:e4:1c:ef:7c:c6:f1:91:e8:7a:4c:d5:83:f9:46: f8:b8:fe:6b:29:68:9d:af:7c:45:22:37:78:3f:d2:61:87:94: 37:2d:2d:61:bd:e6:2e:4b:1e:5a:00:b8:dc:dc:86:ac:45:e7: 1a:52:af:35:da:66:f7:9b:89:d1:39:64:47:d9:1a:8b:f8:2c: fb:4f:90:50:2c:57:7a:fc:df:eb:9c:ff:1c:35:67:1c:0f:72: 7c:94:cb:36:7c:01:67:3b:f8:01:2f:c7:0a:7b:6f:19:38:9d: ac:1f:c2:e0:8a:6d:24:c4:e1:a2:cb:17:c9:fa:85:82:0c:91: 29:dc:d6:f3:3b:9a:5c:b8:f0:c3:bd:2a:07:66:63:19:7e:db: 15:dd:76:14:b6:09:1a:13:2f:c4:4c:02:db:d1:74:0c:60:1a: be:86:85:da:27:0c:d8:31:1d:12:7c:2b:70:3c:c6:f5:b9:1d: e9:99:28:53:1c:de:36:83:0c:5b:10:ef:8e:d7:c0:62:41:b3: 7c:52:45:d4:15:36:e8:40:bf:55:bd:c9:dc:9c:d8:ae:29:93: 69:66:67:87:47:d3:c5:fd:58:02:3f:ef:56:0a:6c:60:70:89: 4f:ee:7f:64 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87h0SncJV4ghZfP5/YRnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjQ2MGQyMDE3OTVhNmE5OTJlZDRhYzE4YmI3YzUyYzEwOGI3ODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQoxD1DoB0IJEO/gmFAxUk3tnKfY xA6QnX1rPsOujyYb+dXgqZ8Hm9kcv2/oGXZNV6slF8ZJwGaYfKXhJpzcAxvsGaAP 7aH1+5Co3jsaYbrJOQAQ5xCgZATwMFra4bXEniGEdhqcyKT3V5u/GTCNQxiKk4oI iHDPwNfNUl2JGBz8pAKaRYt1TMXC3LJjrtzGACezynzGR7dtIsjKnpwP/SM4m2M4 hBlHaLEFjoJ3iiecbCiYbHeyc+35ZhgodZQREPNmb8Mijch1u0cALwwOp5taSYh3 xhtwFTvTp5S0J3rr+SmsSCrgesCEr5FC/Gn4fi0H2j7RL5/FX0lELAZfEQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNtGDSAXlaapku1KwYu3xSwQi3hSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzFmMzQ2 YS1hODdkLTQ5NTctYTRjZS1lODJlZDNkNzZhODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMWYzNDZh LWE4N2QtNDk1Ny1hNGNlLWU4MmVkM2Q3NmE4Ny8xLzIwWU5JQmVWcHFtUzdVckJp N2ZGTEJDTGVGSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgRjANBgkqhkiG9w0BAQsFAAOCAQEAaxjqtpIAlazA wnnUtDsv2xjImU8fyuQc73zG8ZHoekzVg/lG+Lj+aylona98RSI3eD/SYYeUNy0t Yb3mLkseWgC43NyGrEXnGlKvNdpm95uJ0TlkR9kai/gs+0+QUCxXevzf65z/HDVn HA9yfJTLNnwBZzv4AS/HCntvGTidrB/C4IptJMThossXyfqFggyRKdzW8zuaXLjw w70qB2ZjGX7bFd12FLYJGhMvxEwC29F0DGAavoaF2icM2DEdEnwrcDzG9bkd6Zko UxzeNoMMWxDvjtfAYkGzfFJF1BU26EC/Vb3J3JzYrimTaWZnh0fTxf1YAj/vVgps YHCJT+5/ZA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:04 2026 by rpki-client