This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer File: NyQY8ATVhPL-JshCNeZrtrKUJxg.cer (raw, json) Hash identifier: CgUqaeG/haliUoOtF64P47aEgaygOClOHZbEXeeNW98= Subject key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECCC5801E51A733BB4A35A42ACA80B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206004 IP: 185.194.200.0/23 IP: 2a0a:4fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cc:58:01:e5:1a:73:3b:b4:a3:5a:42:ac:a8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372418f004d584f2fe26c84235e66bb6b2942718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:ec:cd:b1:ef:80:47:a1:41:b5:9e:84:90: b5:57:ed:6a:d5:26:3b:fa:2b:a8:f1:33:0d:8b:1b: cf:e7:d8:fb:5d:23:52:e7:a4:08:8d:c0:a7:43:59: 4b:41:4a:47:b4:a0:00:e8:cb:df:13:57:f7:d2:31: 29:79:00:cd:eb:98:eb:96:4e:8d:3b:87:d1:32:80: 16:a1:6d:53:77:bc:18:15:82:bd:d3:44:1c:a8:16: 3a:be:d7:24:a9:c8:af:24:01:a4:95:07:93:af:0c: bb:c0:e0:14:50:5d:36:02:e3:11:e4:77:65:a5:7a: 8a:42:bd:46:29:4b:83:b3:8d:34:97:4e:08:5c:b5: 1b:6d:cc:58:30:d4:94:75:7b:2e:4d:8f:51:95:39: a7:06:7a:9a:da:54:4a:c4:e2:90:95:dd:ea:31:be: 37:58:3c:d2:25:55:1c:0d:5f:d3:ff:ef:5b:28:c7: fe:83:a5:0e:d6:20:d7:a5:54:e0:6f:ce:6f:de:e3: 49:80:95:40:5f:bd:20:23:41:66:02:4f:66:7d:57: 6b:7a:0d:56:0e:8b:7f:8e:8b:b8:77:59:2c:ce:ab: 1c:0f:ec:ed:aa:67:d8:99:5b:d3:0e:95:dd:a9:2c: bd:7a:73:a3:b7:70:ae:a7:a2:32:eb:a6:0e:d8:ca: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.200.0/23 IPv6: 2a0a:4fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206004 Signature Algorithm: sha256WithRSAEncryption b0:f3:74:57:2b:1b:dc:0b:50:91:52:a9:e5:b5:0c:a1:79:b3: bb:83:db:f1:d2:50:11:e4:1f:f2:6c:6d:50:3e:52:83:63:bf: 58:68:b4:2f:70:5f:22:c2:f4:de:f0:98:f4:33:79:39:28:f0: 8f:55:19:ff:76:db:3d:08:ce:f7:f9:27:a9:b3:c2:bd:b3:fa: 95:75:9c:0c:ce:76:e0:b8:2a:dd:66:dc:7c:a6:e4:7c:23:86: ed:ac:9f:a6:04:e4:62:94:0b:c7:ba:98:6e:e8:a8:7b:e4:6f: 09:ee:0a:c5:59:67:a1:df:35:7b:e0:3a:fb:2b:50:1c:ff:7c: 53:cc:47:32:27:4c:b0:ba:a8:31:46:c0:e0:b1:16:02:f5:36: c3:02:1d:83:8c:96:93:c4:cf:ab:d0:4e:64:bd:6a:de:e5:9a: e6:25:cf:7e:59:08:c3:25:c5:34:fe:14:8a:c5:c8:1e:e4:a8: a6:a5:42:4d:5c:a0:2e:3e:27:9e:d8:19:7b:aa:e7:26:9d:12: 54:dd:47:65:0a:ba:f1:87:b2:13:89:06:65:fd:d8:88:f8:66: 97:e4:e4:bd:3a:88:51:10:08:ba:75:fa:8f:45:0a:7d:d8:53: 88:82:52:0f:ee:f3:a5:1a:65:87:4e:02:ac:10:b6:7d:8e:01: 0c:66:23:2e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87MxYAeUaczu0o1pCrKgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzI0MThmMDA0ZDU4NGYyZmUyNmM4NDIzNWU2NmJiNmIyOTQyNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlbszbHvgEehQbWehJC1V+1q1SY7 +iuo8TMNixvP59j7XSNS56QIjcCnQ1lLQUpHtKAA6MvfE1f30jEpeQDN65jrlk6N O4fRMoAWoW1Td7wYFYK900QcqBY6vtckqcivJAGklQeTrwy7wOAUUF02AuMR5Hdl pXqKQr1GKUuDs400l04IXLUbbcxYMNSUdXsuTY9RlTmnBnqa2lRKxOKQld3qMb43 WDzSJVUcDV/T/+9bKMf+g6UO1iDXpVTgb85v3uNJgJVAX70gI0FmAk9mfVdreg1W Dot/jou4d1kszqscD+ztqmfYmVvTDpXdqSy9enOjt3Cup6Iy66YO2MojbQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDckGPAE1YTy/ibIQjXma7aylCcYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzkzYzg1 MS1iYWE2LTQxMjEtYmNkZC1hMTM2YTMyODk1YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvOTNjODUx LWJhYTYtNDEyMS1iY2RkLWExMzZhMzI4OTVjMC8xL055UVk4QVRWaFBMLUpzaENO ZVpydHJLVUp4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBucLIMA0EAgACMAcDBQMqCk/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMktDANBgkqhkiG9w0BAQsFAAOCAQEAsPN0Vysb3AtQ kVKp5bUMoXmzu4Pb8dJQEeQf8mxtUD5Sg2O/WGi0L3BfIsL03vCY9DN5OSjwj1UZ /3bbPQjO9/knqbPCvbP6lXWcDM524Lgq3WbcfKbkfCOG7ayfpgTkYpQLx7qYbuio e+RvCe4KxVlnod81e+A6+ytQHP98U8xHMidMsLqoMUbA4LEWAvU2wwIdg4yWk8TP q9BOZL1q3uWa5iXPflkIwyXFNP4UisXIHuSopqVCTVygLj4nntgZe6rnJp0SVN1H ZQq68YeyE4kGZf3YiPhml+TkvTqIURAIunX6j0UKfdhTiIJSD+7zpRplh04CrBC2 fY4BDGYjLg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:48 2026 by rpki-client