This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer (raw, json) Hash identifier: m6AfR6gMQKoNMDBA7AsTKG2W8OMcGyBqvqft7egfZm4= Subject key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80AFFD41FDC357A85A6733034E0F12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.212.75.0/24 IP: 2a11:e980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:af:fd:41:fd:c3:57:a8:5a:67:33:03:4e:0f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:19:7e:d7:fc:fd:2a:09:aa:2f:04:b8:1b: 8e:c4:59:40:fd:42:cb:0f:ad:96:66:7e:92:34:76: f8:8c:a9:ea:3f:eb:18:1d:fd:d4:18:95:9f:78:fa: a1:3c:08:2b:f2:7e:ae:85:25:78:48:3e:4e:a6:ad: 71:f2:a2:26:e0:fe:25:e4:c0:9a:11:83:e3:77:c5: a2:47:9e:1b:44:2c:cf:12:04:3d:7a:7e:93:7c:24: 4d:91:ed:e1:c6:eb:31:c1:fa:68:66:01:cc:8a:69: 69:cb:9c:09:56:85:7f:bc:a3:e0:6d:63:32:0d:f5: 8e:c0:92:5c:da:58:4d:89:0a:56:4f:7e:30:05:d0: 61:4e:8a:c6:f3:bb:a8:94:8d:a1:e7:7d:f2:bd:48: 05:89:6a:93:e8:92:1e:8a:82:36:03:01:4f:2f:0f: 74:7c:56:a5:37:45:5e:3a:97:00:73:1e:29:29:46: cc:52:d4:d6:93:d9:b1:20:46:1b:64:b8:10:96:e4: 3d:b0:01:93:86:d2:83:09:68:81:10:d1:b1:4a:2c: 2e:c9:79:17:f1:ef:1d:e3:41:29:41:51:28:b4:df: fc:a3:02:06:48:33:68:f9:a5:4c:fd:6c:7d:08:bc: 3f:31:0e:e6:b8:1c:32:d8:f3:78:7f:25:49:69:b4: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.75.0/24 IPv6: 2a11:e980::/29 Signature Algorithm: sha256WithRSAEncryption 35:9a:0b:79:86:23:c6:5a:0f:c5:16:96:29:a2:40:ac:ef:4d: 9f:b4:fa:9e:7f:68:12:fa:9a:83:93:e2:9c:53:e9:70:1f:fc: 72:f2:58:75:37:3f:7f:8f:79:f5:36:f2:cc:78:1d:2c:fa:f3: c8:eb:23:d8:b1:45:d5:03:50:fc:fa:1a:a7:80:c2:1b:a9:45: 2a:99:e7:5d:f0:ad:18:9d:66:99:46:b8:8a:bf:f8:f1:b0:a3: 4c:8b:d3:5f:28:88:24:a9:3a:31:e2:3e:92:20:bc:d0:1e:72: e6:63:c0:34:73:67:b1:9c:8f:e7:0d:b7:67:26:9b:dc:39:81: be:6c:f2:60:9b:4a:f5:15:a5:39:f1:02:b6:08:af:0a:29:f7: 96:f1:a7:2d:af:ca:90:2c:c7:06:47:6a:39:06:17:49:c3:c6: 66:b1:33:af:53:e2:8c:5c:8e:c1:27:1f:7c:8e:69:2e:75:51: 3f:7e:29:55:2f:fd:4a:a2:a8:21:b3:77:c7:35:b8:d8:d5:2d: 74:73:08:bf:64:96:e1:2d:e4:5e:96:58:2b:f6:57:f3:d5:a3: 05:81:0a:86:da:a0:6b:6c:6a:86:70:8d:d6:62:25:98:42:1d: 76:aa:ff:4a:2c:19:90:d0:16:85:2c:34:a1:21:c0:30:43:56: cd:b7:c1:50 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8gK/9Qf3DV6haZzMDTg8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjJlZDI0NzAzZDMzNGIxMWNkMjJlZTQ4OWZjM2M2NGJkYzA2ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO0Zftf8/SoJqi8EuBuOxFlA/ULL D62WZn6SNHb4jKnqP+sYHf3UGJWfePqhPAgr8n6uhSV4SD5Opq1x8qIm4P4l5MCa EYPjd8WiR54bRCzPEgQ9en6TfCRNke3hxusxwfpoZgHMimlpy5wJVoV/vKPgbWMy DfWOwJJc2lhNiQpWT34wBdBhTorG87uolI2h533yvUgFiWqT6JIeioI2AwFPLw90 fFalN0VeOpcAcx4pKUbMUtTWk9mxIEYbZLgQluQ9sAGThtKDCWiBENGxSiwuyXkX 8e8d40EpQVEotN/8owIGSDNo+aVM/Wx9CLw/MQ7muBwy2PN4fyVJabS5IQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAsu0kcD0zSxHNIu5In8PGS9wG9LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzcxNzBl MC1hMDQzLTRiNzgtYWFiMS1iNjQ4OGFlYzUzM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNzE3MGUw LWEwNDMtNGI3OC1hYWIxLWI2NDg4YWVjNTMzYi8xL0N5N1NSd1BUTkxFYzBpN2tp Znc4WkwzQWIwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAstRLMA0EAgACMAcDBQMqEemAMA0GCSqGSIb3 DQEBCwUAA4IBAQA1mgt5hiPGWg/FFpYpokCs702ftPqef2gS+pqDk+KcU+lwH/xy 8lh1Nz9/j3n1NvLMeB0s+vPI6yPYsUXVA1D8+hqngMIbqUUqmedd8K0YnWaZRriK v/jxsKNMi9NfKIgkqTox4j6SILzQHnLmY8A0c2exnI/nDbdnJpvcOYG+bPJgm0r1 FaU58QK2CK8KKfeW8actr8qQLMcGR2o5BhdJw8ZmsTOvU+KMXI7BJx98jmkudVE/ filVL/1Koqghs3fHNbjY1S10cwi/ZJbhLeRellgr9lfz1aMFgQqG2qBrbGqGcI3W YiWYQh12qv9KLBmQ0BaFLDShIcAwQ1bNt8FQ -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:55 2026 by rpki-client