This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer File: BlYaCnJamJSs2TKm9OoEJLdtq3w.cer (raw, json) Hash identifier: DUj9KlPpwi+/GUhkGJD6o+xPGlENSXv6XrJ/iQV39jo= Subject key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BCF6B885877E97C0C51E503E2F8AF6538 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 18 Jan 2026 04:44:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202782 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:6b:88:58:77:e9:7c:0c:51:e5:03:e2:f8:af:65:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 18 04:44:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:cb:ca:71:27:95:c1:0e:80:ae:5a:6c:ae: 8f:38:2a:97:23:67:d8:87:3e:ec:2e:22:c9:7f:e3: c6:ec:0a:e5:65:a8:26:83:e6:75:b3:51:a2:19:ad: 64:eb:a4:a7:3c:5d:7b:53:45:2f:38:64:b8:a3:2b: af:ca:72:82:36:f3:5e:10:dc:1a:9d:d2:20:08:da: f7:dd:6a:b2:6b:03:6f:9f:28:95:bf:f6:63:68:78: 39:84:22:f7:4a:5b:e0:18:6b:4a:01:73:f7:bd:69: 88:16:b3:25:2c:fa:8e:54:06:a6:a3:65:2f:94:c6: ed:91:8f:54:b2:cd:69:2f:f7:63:06:86:4e:9c:d7: 41:69:d1:69:b1:93:1c:f5:92:d5:b7:9e:6a:2a:dc: 33:6a:d1:ab:f7:5b:8b:95:36:48:56:28:d6:4c:c5: 8f:8a:e2:0d:13:95:90:0d:8b:87:3d:7d:5c:32:95: ef:df:98:4c:c3:be:73:fc:2e:3d:c5:2f:b1:e4:35: ad:87:73:63:64:3c:4e:07:25:f4:90:27:5c:70:1b: 7e:5c:c5:07:91:0a:58:d8:97:f2:95:bd:67:db:56: 48:6b:1e:bd:2b:c9:46:e8:4a:94:e2:55:2f:92:04: b2:91:3e:71:62:b4:87:db:2d:23:55:d9:82:f1:96: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202782 Signature Algorithm: sha256WithRSAEncryption 42:f0:1b:59:cc:e4:a4:5a:7c:16:83:2a:83:31:6f:a3:6f:d3: 47:b2:dd:cc:09:a5:71:e7:1e:2d:64:42:da:0a:0e:09:6d:e3: 3d:ae:ce:c2:66:bc:b2:9d:b6:b3:81:f8:23:7d:3e:14:b8:cd: e7:82:4d:42:be:57:1c:9e:1d:55:4b:43:b0:d2:ae:0e:cd:8a: 4a:ce:7a:36:e2:82:27:f3:22:a9:f4:12:75:7a:4a:c0:f8:42: b7:d3:7b:f6:3e:07:f4:f2:be:41:59:64:00:da:cb:0b:e4:df: 13:2f:22:10:5d:66:ca:9e:01:75:73:b7:14:ca:fb:f1:0e:4b: 02:a2:b8:4c:41:c1:89:ff:c1:eb:11:8c:17:f7:bf:4e:88:b4: 25:95:be:21:ee:0c:2d:b7:92:48:02:b2:eb:5e:e5:c0:f7:6f: 37:a5:31:0e:09:31:0f:b6:4d:10:c6:d1:ed:a5:29:b1:0f:25: 23:71:88:bb:d2:7c:d0:ea:47:e4:ea:f1:09:33:02:61:d7:c7: b9:e9:1f:2a:7f:9b:3e:04:e1:4b:c5:12:42:9b:f5:2d:bb:de: 8b:1b:be:29:79:25:84:5f:c2:b6:4a:a1:da:47:02:08:19:39: 0c:3a:58:7c:1c:63:9e:a7:ff:62:93:46:e1:7a:4c:68:16:19: 43:27:8f:f5 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZvPa4hYd+l8DFHlA+L4r2U4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE4MDQ0NDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjU2MWEwYTcyNWE5ODk0YWNkOTMyYTZmNGVhMDQyNGI3NmRhYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9/LynEnlcEOgK5abK6POCqXI2fY hz7sLiLJf+PG7ArlZagmg+Z1s1GiGa1k66SnPF17U0UvOGS4oyuvynKCNvNeENwa ndIgCNr33WqyawNvnyiVv/ZjaHg5hCL3SlvgGGtKAXP3vWmIFrMlLPqOVAamo2Uv lMbtkY9Uss1pL/djBoZOnNdBadFpsZMc9ZLVt55qKtwzatGr91uLlTZIVijWTMWP iuINE5WQDYuHPX1cMpXv35hMw75z/C49xS+x5DWth3NjZDxOByX0kCdccBt+XMUH kQpY2Jfylb1n21ZIax69K8lG6EqU4lUvkgSykT5xYrSH2y0jVdmC8ZZ6wwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFAZWGgpyWpiUrNkypvTqBCS3bat8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAxNTc2 NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi81LzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDE1 NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFmYWIyLzUvMDY1NjFBMEE3MjVB OTg5NEFDRDkzMkE2RjRFQTA0MjRCNzZEQUI3Qy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGB4w DQYJKoZIhvcNAQELBQADggEBAELwG1nM5KRafBaDKoMxb6Nv00ey3cwJpXHnHi1k QtoKDglt4z2uzsJmvLKdtrOB+CN9PhS4zeeCTUK+VxyeHVVLQ7DSrg7NikrOejbi gifzIqn0EnV6SsD4QrfTe/Y+B/TyvkFZZADaywvk3xMvIhBdZsqeAXVztxTK+/EO SwKiuExBwYn/wesRjBf3v06ItCWVviHuDC23kkgCsute5cD3bzelMQ4JMQ+2TRDG 0e2lKbEPJSNxiLvSfNDqR+Tq8QkzAmHXx7npHyp/mz4E4UvFEkKb9S273osbvil5 JYRfwrZKodpHAggZOQw6WHwcY56n/2KTRuF6TGgWGUMnj/U= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:55 2026 by rpki-client