This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer (raw, json) Hash identifier: 3GDeBlKyT95Pi1UDg5WN8opjKC68xEiX7a6AN9g+vRQ= Subject key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E26DB6E7DD9C2188E80F71B19FBBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28705 IP: 88.218.88.0/22 IP: 217.16.48.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:26:db:6e:7d:d9:c2:18:8e:80:f7:1b:19:fb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:33:9b:a0:f1:e2:ef:23:c1:3c:ea:7d:5a: ca:ea:06:71:15:82:20:78:55:70:ae:ce:8b:8a:a9: f7:28:36:6a:2d:64:be:f1:14:8c:fb:05:ef:66:ab: 24:fa:d3:9c:0d:1c:02:31:50:98:a2:29:32:9d:a9: 62:ec:26:35:b2:2f:b6:d0:a4:e2:47:da:65:9d:bf: c5:5d:41:ab:c6:3e:c9:fd:58:7b:c3:51:4e:9d:48: 1b:d5:95:a8:94:fd:f4:44:61:56:65:03:8d:4a:40: e2:52:d6:51:9f:1c:c5:b3:85:23:9f:27:d6:1f:33: e6:a0:e4:60:4d:3a:0a:12:f8:c0:93:86:03:04:ea: 08:db:36:3b:35:9d:17:01:1c:69:fb:64:7e:ea:c6: 89:cb:20:70:9b:d4:cb:bf:31:41:76:fe:a8:fa:06: eb:d3:23:0d:fb:c2:d7:f9:43:2a:8f:f9:39:b4:11: c9:4d:2e:0a:ac:d8:bc:3a:b6:a3:05:80:e8:ba:67: 63:74:42:05:03:53:c8:79:ff:ad:e5:be:69:22:89: 96:5c:dc:6e:b1:9e:f6:ca:de:23:74:35:e5:5b:9f: cc:d6:a5:a8:83:10:2d:ef:f5:33:b3:2a:09:b6:05: ef:d4:8e:72:8e:18:0a:22:5d:0e:00:2a:69:f2:c5: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.88.0/22 217.16.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28705 Signature Algorithm: sha256WithRSAEncryption 9d:29:ba:79:1f:6e:96:8e:9b:51:45:34:ef:db:dc:9e:1f:0d: 92:42:59:e3:2c:29:61:74:16:82:f0:6e:c7:9e:af:e8:74:b3: be:41:e9:c0:ae:f2:dd:57:1c:06:2d:b7:b6:b8:5b:8f:d4:91: 8d:79:bb:0a:eb:2f:7d:9e:54:a4:79:ca:64:4a:81:d7:d7:0e: 77:1b:c6:64:4f:5c:28:67:f8:2d:ac:29:b7:69:99:8e:ab:3a: 6d:06:fd:90:51:98:49:79:0b:11:61:38:8e:da:db:80:75:be: 80:b4:dd:60:be:75:86:78:d7:3f:2d:67:22:aa:da:ed:0b:37: 4c:b5:9a:62:98:85:c9:02:d9:f1:a3:af:3b:10:da:58:3e:b2: d0:eb:6b:54:4d:57:82:b5:c9:13:14:7e:09:04:c8:58:be:39: 8d:18:90:90:ca:a9:e9:ef:ae:9b:3d:b7:bd:0d:ac:5b:e1:33: cd:29:39:8f:30:13:62:30:40:9d:e6:9a:4b:7e:17:d8:7d:d5: 78:73:20:14:b7:8c:02:49:33:4f:86:68:4a:d3:35:e9:20:22: bc:f7:b2:ec:a2:95:15:3b:a4:1e:68:9b:f4:65:1c:f5:77:76: a4:ee:c3:ec:3c:8c:3c:62:90:9c:ca:94:48:1d:d6:1d:10:4e: 7a:ac:95:29 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt5fibbbn3ZwhiOgPcbGfu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTg0NjRjZDdkNTY0N2RiNWEwM2I2NjliZGM2YjBmZjczYjBkZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp48zm6Dx4u8jwTzqfVrK6gZxFYIg eFVwrs6Liqn3KDZqLWS+8RSM+wXvZqsk+tOcDRwCMVCYoikynali7CY1si+20KTi R9plnb/FXUGrxj7J/Vh7w1FOnUgb1ZWolP30RGFWZQONSkDiUtZRnxzFs4UjnyfW HzPmoORgTToKEvjAk4YDBOoI2zY7NZ0XARxp+2R+6saJyyBwm9TLvzFBdv6o+gbr 0yMN+8LX+UMqj/k5tBHJTS4KrNi8OrajBYDoumdjdEIFA1PIef+t5b5pIomWXNxu sZ72yt4jdDXlW5/M1qWogxAt7/UzsyoJtgXv1I5yjhgKIl0OACpp8sW+mwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFCWEZM19VkfbWgO2ab3GsP9zsN+KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzgwNDJi Ni1hODk5LTRjOWYtOGZmZC1kNjIzMDIyYzllOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvODA0MmI2 LWE4OTktNGM5Zi04ZmZkLWQ2MjMwMjJjOWU5Ny8xL0pZUmt6WDFXUjl0YUE3WnB2 Y2F3XzNPdzM0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCWNpYAwQE2RAwMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAnAhMA0GCSqGSIb3DQEBCwUAA4IBAQCdKbp5H26WjptRRTTv29yeHw2S QlnjLClhdBaC8G7Hnq/odLO+QenArvLdVxwGLbe2uFuP1JGNebsK6y99nlSkecpk SoHX1w53G8ZkT1woZ/gtrCm3aZmOqzptBv2QUZhJeQsRYTiO2tuAdb6AtN1gvnWG eNc/LWciqtrtCzdMtZpimIXJAtnxo687ENpYPrLQ62tUTVeCtckTFH4JBMhYvjmN GJCQyqnp766bPbe9Daxb4TPNKTmPMBNiMECd5ppLfhfYfdV4cyAUt4wCSTNPhmhK 0zXpICK897LsopUVO6QeaJv0ZRz1d3ak7sPsPIw8YpCcypRIHdYdEE56rJUp -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:11 2026 by rpki-client