This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer File: GYe7aFnJOMi2PlqqVtkHvQRE484.cer (raw, json) Hash identifier: qAFjpM5zlNlpQUghzpEqM4bCIVxnnP7T2Rzr6iNfiPQ= Subject key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13A242A3D6A444F8BAA300D84D3A33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47574 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a2:42:a3:d6:a4:44:f8:ba:a3:00:d8:4d:3a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:c4:30:04:90:ca:bc:4d:29:f3:6f:9a:7b: 6c:16:1c:71:63:e8:6e:dc:d8:f4:12:5b:5d:3c:65: 03:e9:cf:d4:c1:ac:d6:18:cc:e2:12:05:95:a1:11: b6:3e:72:5a:5c:78:9f:56:c8:60:8f:0d:df:40:6b: 3f:53:16:77:d1:d5:2b:b3:96:6a:de:59:f7:ba:40: b7:36:1c:29:6b:ba:6f:36:72:00:b4:69:e6:a7:a9: 22:f4:3f:0d:46:23:6f:64:da:ee:77:43:4a:aa:13: a0:48:58:53:d2:0d:35:85:a3:a0:5d:5f:f1:4f:fb: 52:56:e2:9a:06:10:6d:36:82:d2:ab:53:dc:ee:bd: 23:59:5a:48:f9:bc:ef:8f:f4:47:07:79:c4:f6:90: 12:0d:ee:cf:45:2c:49:bb:e1:3b:0d:b6:ae:1d:53: 72:7e:83:88:d5:36:b3:ab:f9:43:c6:d9:1a:37:b1: 1b:61:a9:4f:5a:f4:7a:3b:f4:7c:e2:3f:84:5c:ce: f0:e7:18:af:bc:37:f3:5d:0f:2d:b5:86:cf:8c:ae: 03:a3:04:a6:f1:1a:d4:59:76:65:d0:ba:41:b4:88: 77:9f:2e:b9:19:de:c5:1c:4d:54:dd:ad:8e:a3:1d: 57:b6:3c:af:7c:01:6d:9b:e4:03:94:d7:a5:41:19: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47574 Signature Algorithm: sha256WithRSAEncryption 72:bf:88:62:9b:a4:3e:7b:fa:f4:b9:58:7d:83:9f:75:65:b4: ae:7b:9f:d6:9a:3d:b3:75:78:84:6c:3e:ee:2d:7a:3e:d0:8c: 81:eb:fb:09:47:8e:d5:2b:76:9f:f1:aa:77:bf:36:1c:a1:e9: 8c:06:83:cc:01:d6:63:17:c2:6a:f4:82:44:2c:e6:5a:1a:7e: ad:2d:04:e2:da:0c:2f:71:9f:1e:a8:00:3c:f5:1e:f8:8b:25: ce:4b:4f:b9:79:27:82:6b:c2:dc:b2:f8:29:ac:81:39:34:b6: 24:52:9b:b4:9c:24:1c:cd:2a:d1:da:ca:f6:4f:b0:66:ca:74: b2:b5:10:15:f4:d2:e6:db:ec:27:2c:2e:75:83:1c:41:6b:f3: e9:29:b6:d3:b3:e4:04:a2:01:d7:b4:bf:2f:83:3d:1c:14:97: ce:de:43:0b:7e:2c:49:88:9d:0a:14:1d:6e:8b:15:4f:ce:b1: 96:be:19:07:d3:96:a5:54:94:45:5c:71:cf:93:72:88:93:d2: bb:81:7e:13:dc:dd:a9:05:4f:b0:76:17:49:16:06:0f:9e:da: e8:f2:f8:fb:d4:ec:ff:6a:6c:63:6e:c2:d8:f7:92:3c:91:f6: cb:af:8c:d1:f9:e9:10:f0:2f:02:28:02:9f:68:82:8c:0c:52: e2:bd:3e:bb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/E6JCo9akRPi6owDYTTozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTg3YmI2ODU5YzkzOGM4YjYzZTVhYWE1NmQ5MDdiZDA0NDRlM2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdPEMASQyrxNKfNvmntsFhxxY+hu 3Nj0EltdPGUD6c/UwazWGMziEgWVoRG2PnJaXHifVshgjw3fQGs/UxZ30dUrs5Zq 3ln3ukC3Nhwpa7pvNnIAtGnmp6ki9D8NRiNvZNrud0NKqhOgSFhT0g01haOgXV/x T/tSVuKaBhBtNoLSq1Pc7r0jWVpI+bzvj/RHB3nE9pASDe7PRSxJu+E7DbauHVNy foOI1Tazq/lDxtkaN7EbYalPWvR6O/R84j+EXM7w5xivvDfzXQ8ttYbPjK4DowSm 8RrUWXZl0LpBtIh3ny65Gd7FHE1U3a2Oox1XtjyvfAFtm+QDlNelQRlpQwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBmHu2hZyTjItj5aqlbZB70EROPOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2VmMjJk Yi1lM2IwLTQzOWYtYTBjMi1iZjRkNDU3ZTk1MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZWYyMmRi LWUzYjAtNDM5Zi1hMGMyLWJmNGQ0NTdlOTUxOC8xL0dZZTdhRm5KT01pMlBscXFW dGtIdlFSRTQ4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC51jANBgkqhkiG9w0BAQsFAAOCAQEAcr+IYpukPnv6 9LlYfYOfdWW0rnuf1po9s3V4hGw+7i16PtCMgev7CUeO1St2n/Gqd782HKHpjAaD zAHWYxfCavSCRCzmWhp+rS0E4toML3GfHqgAPPUe+IslzktPuXkngmvC3LL4KayB OTS2JFKbtJwkHM0q0drK9k+wZsp0srUQFfTS5tvsJywudYMcQWvz6Sm207PkBKIB 17S/L4M9HBSXzt5DC34sSYidChQdbosVT86xlr4ZB9OWpVSURVxxz5NyiJPSu4F+ E9zdqQVPsHYXSRYGD57a6PL4+9Ts/2psY27C2PeSPJH2y6+M0fnpEPAvAigCn2iC jAxS4r0+uw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:38 2026 by rpki-client