This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer File: JYlBoze4yhX8rpFvy0IMWN8uC5w.cer (raw, json) Hash identifier: 9lAnoiYcAxVcsFo8E1E27HdNTf4hzLkJwrdledjrDJE= Subject key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C33AB6AA42206F8F7E2217BFE4B34A5B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 15:56:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.202.2.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:ab:6a:a4:22:06:f8:f7:e2:21:7b:fe:4b:34:a5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 15:56:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:87:fd:3d:66:25:a7:61:88:04:b9:bc:dc: 3f:b4:f4:12:b1:06:2d:73:ee:8f:85:5d:6a:29:4b: d4:ba:00:40:00:31:cf:79:30:0d:fb:60:bf:ba:84: 36:20:75:ba:3a:0b:39:8a:c0:43:f2:03:33:05:15: a8:0a:5a:96:cb:63:1a:d9:41:99:82:f7:9b:94:ff: 9d:20:64:e4:c3:ae:23:a9:75:cc:62:04:29:d1:79: 9f:ca:8a:e5:d3:c2:cf:f4:1f:41:ef:2a:9d:ab:bf: 1c:e6:d7:a6:d8:80:0c:fc:3c:32:44:8e:7b:84:ae: 9d:2a:69:17:61:9a:9f:fd:21:7e:ba:94:b7:26:55: c2:d4:0f:20:0c:0e:c6:3b:f9:a7:66:55:d5:c7:9e: bf:ae:c6:3c:3f:c2:22:d1:a1:41:45:dc:1f:d4:32: 6c:b1:c8:4c:81:89:23:5f:44:3a:08:72:be:d1:ec: 0d:1e:c3:e6:a3:4c:a6:40:a7:8f:dd:c6:b2:a7:51: db:64:4e:17:71:48:eb:46:b7:fb:c4:6b:eb:ad:a0: e2:5a:c3:0d:12:cc:12:02:ef:d8:38:cd:09:89:db: cc:32:05:53:15:e9:26:07:29:78:8f:2f:66:bd:6f: 7a:29:10:d1:4f:68:20:16:b0:f9:1b:c0:a3:63:e8: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.2.0/24 Signature Algorithm: sha256WithRSAEncryption 43:29:6e:b4:57:ee:8f:20:fd:18:17:ef:eb:ed:d1:84:8e:d5: 70:f2:76:92:c7:29:32:5e:01:24:c4:06:d6:1e:cf:23:d1:11: 0d:4e:31:c4:11:60:59:f7:ed:6a:c7:1c:5c:37:53:5b:08:57: 3d:54:08:e2:85:e5:46:a1:5a:dc:1d:54:c0:bc:90:a8:cd:ac: eb:58:0d:65:2e:88:35:7e:92:f8:12:50:33:07:75:96:c0:3c: 5b:9a:32:6b:cd:3e:37:0b:98:45:8a:46:bb:14:b0:ab:a8:52: 4b:0c:3e:79:13:80:4f:3b:64:d3:6c:20:3d:e6:91:b7:87:1f: 4e:8f:f7:65:d3:da:4c:44:8c:31:2f:21:2d:97:ea:ef:40:7d: 83:8e:43:e6:43:d7:bd:5c:eb:79:c8:0f:56:71:0b:9a:df:87: 90:74:a2:81:be:af:b4:92:9e:42:4f:0e:55:41:5a:08:8a:57: 03:90:7c:f2:9a:e4:7a:3a:d4:0b:6e:5a:35:b0:7e:a5:00:85: 02:6d:f0:0b:21:9b:26:c6:2b:e0:fa:4b:5b:70:c2:4f:17:8e: 1b:1c:2d:26:3d:54:2f:48:63:0c:83:4d:7e:2e:79:3d:79:7c: 8b:0e:08:e5:b6:94:26:fc:80:9a:38:72:2c:2c:a4:3a:ad:f6: 96:22:7a:47 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZwzq2qkIgb49+Ihe/5LNKW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MTU1NjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTg5NDFhMzM3YjhjYTE1ZmNhZTkxNmZjYjQyMGM1OGRmMmUwYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsuH/T1mJadhiAS5vNw/tPQSsQYt c+6PhV1qKUvUugBAADHPeTAN+2C/uoQ2IHW6Ogs5isBD8gMzBRWoClqWy2Ma2UGZ gveblP+dIGTkw64jqXXMYgQp0Xmfyorl08LP9B9B7yqdq78c5tem2IAM/DwyRI57 hK6dKmkXYZqf/SF+upS3JlXC1A8gDA7GO/mnZlXVx56/rsY8P8Ii0aFBRdwf1DJs schMgYkjX0Q6CHK+0ewNHsPmo0ymQKeP3cayp1HbZE4XcUjrRrf7xGvrraDiWsMN EswSAu/YOM0JidvMMgVTFekmByl4jy9mvW96KRDRT2ggFrD5G8CjY+gbowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFCWJQaM3uMoV/K6Rb8tCDFjfLgucMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzA0ZWY2 MC1jNzlmLTQ4NTQtYTU3Ni00Nzc1YmI2NjhiMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMDRlZjYw LWM3OWYtNDg1NC1hNTc2LTQ3NzViYjY2OGIwNC8xL0pZbEJvemU0eWhYOHJwRnZ5 MElNV044dUM1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8oCMA0GCSqGSIb3DQEBCwUAA4IBAQBDKW60 V+6PIP0YF+/r7dGEjtVw8naSxykyXgEkxAbWHs8j0RENTjHEEWBZ9+1qxxxcN1Nb CFc9VAjiheVGoVrcHVTAvJCozazrWA1lLog1fpL4ElAzB3WWwDxbmjJrzT43C5hF ika7FLCrqFJLDD55E4BPO2TTbCA95pG3hx9Oj/dl09pMRIwxLyEtl+rvQH2DjkPm Q9e9XOt5yA9WcQua34eQdKKBvq+0kp5CTw5VQVoIilcDkHzymuR6OtQLblo1sH6l AIUCbfALIZsmxivg+ktbcMJPF44bHC0mPVQvSGMMg01+Lnk9eXyLDgjltpQm/ICa OHIsLKQ6rfaWInpH -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:34 2026 by rpki-client