This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer (raw, json) Hash identifier: Mud87SAfIi3552ocLO+4iL1+1U6vXd9e9id4jfrdd8E= Subject key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1333801D251FBDE89BF5FF57D6E465 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214815 IP: 91.90.166.0/24 IP: 147.189.163.0/24 IP: 2001:67c:328::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:33:80:1d:25:1f:bd:e8:9b:f5:ff:57:d6:e4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:84:56:78:e7:46:73:e7:0e:3f:e1:19:d8: 07:f8:8c:4f:83:32:c3:83:c2:5a:50:0d:28:8b:99: f6:13:f0:61:46:d5:29:f0:ad:70:02:73:eb:8b:31: db:8d:26:a8:6c:40:5b:7f:9b:be:9b:86:66:67:ca: bb:7e:92:b3:77:42:97:9d:70:db:ec:5e:af:6d:55: a5:93:fc:56:c5:d3:b3:1f:1b:c1:03:8a:29:03:09: 17:ec:ca:ee:70:3e:f9:a6:23:f4:ba:a1:75:81:da: ae:52:8e:0e:8d:97:33:7b:97:7d:f0:11:66:1d:f5: 37:65:de:6e:5b:1d:6f:c5:52:88:1e:4b:2d:fd:ac: ea:51:1e:ad:92:b3:79:95:99:e8:f4:64:60:93:fc: a3:f8:09:b5:e7:77:b4:26:2f:37:f4:bf:8c:02:17: 8a:90:e4:07:04:fc:9c:b7:e1:6a:80:99:01:71:8a: 08:1d:a9:1c:af:f1:fe:c4:4b:1a:e9:9d:14:e6:0a: 00:0f:61:20:bb:e3:b3:17:9c:39:71:2a:3e:98:01: c2:70:4b:28:fd:90:f2:c4:bd:27:c4:67:7d:75:d6: c6:08:34:37:73:ed:2c:a8:31:c1:ef:1d:c8:96:28: 05:2e:de:35:92:ed:fe:b0:33:2e:9f:fc:bb:3f:b1: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.166.0/24 147.189.163.0/24 IPv6: 2001:67c:328::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214815 Signature Algorithm: sha256WithRSAEncryption a0:71:ee:77:16:9b:61:eb:ad:53:7c:dc:90:7f:69:1a:69:67: 05:da:b1:19:5f:a1:0d:75:9d:36:cd:b9:97:19:c3:1a:16:7a: 4b:99:2f:20:66:ef:c7:ad:60:63:e1:cc:97:c0:d7:e5:1f:17: a6:40:09:d5:7e:03:d1:fc:43:69:2a:4b:17:c5:38:15:12:88: 85:41:c9:ce:fd:fa:eb:54:54:43:70:8f:e6:c2:d4:4f:7f:9e: fa:18:11:55:ea:15:fc:0a:20:92:d1:58:d0:ff:e0:ed:ac:43: 76:e6:48:92:31:1c:f2:2f:7a:e9:4a:6f:6c:47:30:41:fc:fd: ec:78:53:85:8e:80:3f:96:7c:f3:af:0c:9e:b4:76:30:73:ad: 72:2b:0f:ba:5d:a1:33:16:eb:aa:05:20:82:6b:46:2d:e3:85: ea:be:98:b1:63:a3:a9:6d:d7:a7:ee:28:db:77:bc:9f:2b:b1: 5f:97:1c:67:43:a1:ac:b5:0d:d7:e3:54:80:38:70:b3:07:d3: c5:6e:8d:ba:9c:ae:16:1a:08:42:29:59:a0:43:a2:9c:4d:2e: 42:68:d8:91:2f:3d:c9:01:2e:d1:95:f8:f9:91:ce:f8:17:0b: 95:bd:be:a7:55:64:a9:e5:4a:e3:ee:12:3c:95:74:75:8e:14: b5:60:90:e6 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt/EzOAHSUfveib9f9X1uRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDhiZTQ3NGMxNTVmYzEzODQ3Yjg1OTUwMWE1NTNjZmZjM2FjNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1WEVnjnRnPnDj/hGdgH+IxPgzLD g8JaUA0oi5n2E/BhRtUp8K1wAnPrizHbjSaobEBbf5u+m4ZmZ8q7fpKzd0KXnXDb 7F6vbVWlk/xWxdOzHxvBA4opAwkX7MrucD75piP0uqF1gdquUo4OjZcze5d98BFm HfU3Zd5uWx1vxVKIHkst/azqUR6tkrN5lZno9GRgk/yj+Am153e0Ji839L+MAheK kOQHBPyct+FqgJkBcYoIHakcr/H+xEsa6Z0U5goAD2Egu+OzF5w5cSo+mAHCcEso /ZDyxL0nxGd9ddbGCDQ3c+0sqDHB7x3IligFLt41ku3+sDMun/y7P7F3TQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFA2L5HTBVfwThHuFlQGlU8/8OsSyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2ZkMmVm ZS0xNDcxLTQyZDgtOTM0Ny00ODYxZDQzZTI0ZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvZmQyZWZl LTE0NzEtNDJkOC05MzQ3LTQ4NjFkNDNlMjRlZi8xL0RZdmtkTUZWX0JPRWU0V1ZB YVZUel93NnhMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAW1qmAwQAk72jMA8EAgACMAkDBwAgAQZ8Aygw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0cfMA0GCSqGSIb3DQEBCwUAA4IBAQCg ce53Fpth661TfNyQf2kaaWcF2rEZX6ENdZ02zbmXGcMaFnpLmS8gZu/HrWBj4cyX wNflHxemQAnVfgPR/ENpKksXxTgVEoiFQcnO/frrVFRDcI/mwtRPf576GBFV6hX8 CiCS0VjQ/+DtrEN25kiSMRzyL3rpSm9sRzBB/P3seFOFjoA/lnzzrwyetHYwc61y Kw+6XaEzFuuqBSCCa0Yt44XqvpixY6Opbden7ijbd7yfK7FflxxnQ6GstQ3X41SA OHCzB9PFbo26nK4WGghCKVmgQ6KcTS5CaNiRLz3JAS7Rlfj5kc74FwuVvb6nVWSp 5Urj7hI8lXR1jhS1YJDm -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:38 2026 by rpki-client