This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer File: PYAS-hSs56DDvS6C4KKdmkS_4pA.cer (raw, json) Hash identifier: 1sJ3YR2FkWHr7eBVpGRk2G6Wlwi/CY0Qma33YJcKlmQ= Subject key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36877EBFC2BD69790BB0CE084BB6D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206801 AS: 209137 IP: 5.180.168.0/22 IP: 185.170.136.0/22 IP: 2a10:c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:87:7e:bf:c2:bd:69:79:0b:b0:ce:08:4b:b6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:91:cf:f8:ed:bc:8e:a6:08:64:63:fc:b0: c7:1c:fa:c1:a5:0a:42:82:41:a8:4e:e0:f9:20:aa: 4e:b8:e0:08:3d:be:16:e2:79:e9:c8:73:63:2c:90: 86:42:de:82:cf:ab:5f:4f:46:d3:1b:5b:e2:50:fe: bf:5b:2b:21:f1:45:1d:3b:d0:e6:8d:e6:57:08:70: 06:5e:6b:d8:74:cc:4e:7d:0e:b3:20:97:bb:a0:51: b2:64:37:1c:99:e9:d7:17:c2:6c:ad:59:d4:0b:0a: 3d:04:08:a5:15:fd:5e:b8:e5:cc:8c:77:4b:b5:d4: 8c:90:36:41:d7:cc:7e:d3:14:f7:83:ab:e6:aa:3f: be:dd:0a:3e:fa:36:46:f9:67:74:bb:b8:85:b3:38: 2d:06:a3:4a:be:de:e3:4b:5d:d5:29:69:ad:12:df: 27:8c:53:95:f9:3f:7c:93:4c:b6:38:29:be:c4:33: fd:27:30:11:3b:f9:64:60:c8:de:58:65:ee:b0:78: 20:2d:b6:4f:33:1c:13:a3:f1:7e:ff:5c:45:7e:d4: 47:ae:34:24:0b:87:ea:fb:db:67:98:9c:79:b0:65: df:c9:03:19:6a:97:fa:66:06:12:de:6b:3a:93:d9: 57:25:4d:de:66:70:cf:d7:b6:c8:fa:fe:6a:e0:68: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.168.0/22 185.170.136.0/22 IPv6: 2a10:c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206801 209137 Signature Algorithm: sha256WithRSAEncryption ab:55:4d:6b:90:93:3b:1f:7c:89:1b:de:a5:6b:4b:e6:0d:94: ad:29:6a:72:b8:2b:06:12:7a:d6:5b:16:d8:46:08:f8:40:97: 70:81:c5:bb:8a:42:02:d4:fc:32:3d:1e:5b:17:9d:9a:a8:36: 5a:90:91:91:4a:91:77:4c:28:c5:2a:7a:50:93:18:bd:f2:12: 96:15:f6:79:00:fd:7c:c5:2d:12:d3:04:a8:73:1f:26:9b:aa: 6a:f4:6d:cf:0f:2b:b2:fd:d9:a1:de:59:3e:8e:ea:58:c0:70: 5c:33:1a:f4:ef:c2:1c:27:8a:e6:5f:31:59:28:19:85:9f:4c: c0:5b:25:8f:c1:6f:f5:1a:8d:e1:db:6a:8d:02:69:b8:ec:42: 65:21:db:25:da:1f:76:12:2f:8f:97:90:87:a9:70:7d:d7:de: 0a:29:f5:83:ba:5a:ec:4a:fc:72:1f:c8:34:8d:38:2b:be:13: e8:7d:21:de:39:dc:04:25:e4:e9:24:39:7b:64:8c:72:10:73: 45:0b:76:12:41:54:f0:72:33:44:e4:c3:21:66:40:48:81:d6: 02:2a:b3:5f:93:d8:e9:ea:6b:d7:0e:4a:f3:84:00:f0:68:51: 47:b4:51:ce:da:07:88:5a:bf:81:d8:34:6d:44:1b:bd:d2:78: cd:52:70:e3 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7Nod+v8K9aXkLsM4IS7bTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDgwMTJmYTE0YWNlN2EwYzNiZDJlODJlMGEyOWQ5YTQ0YmZlMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzqRz/jtvI6mCGRj/LDHHPrBpQpC gkGoTuD5IKpOuOAIPb4W4nnpyHNjLJCGQt6Cz6tfT0bTG1viUP6/Wysh8UUdO9Dm jeZXCHAGXmvYdMxOfQ6zIJe7oFGyZDccmenXF8JsrVnUCwo9BAilFf1euOXMjHdL tdSMkDZB18x+0xT3g6vmqj++3Qo++jZG+Wd0u7iFszgtBqNKvt7jS13VKWmtEt8n jFOV+T98k0y2OCm+xDP9JzARO/lkYMjeWGXusHggLbZPMxwTo/F+/1xFftRHrjQk C4fq+9tnmJx5sGXfyQMZapf6ZgYS3ms6k9lXJU3eZnDP17bI+v5q4GhgqQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFD2AEvoUrOegw70uguCinZpEv+KQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2VmNWVk MS1iZGVlLTQ2MzktOTI0OC03N2Y4NGM1NjJhNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZWY1ZWQx LWJkZWUtNDYzOS05MjQ4LTc3Zjg0YzU2MmE1Zi8xL1BZQVMtaFNzNTZERHZTNkM0 S0tkbWtTXzRwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBbSoAwQCuaqIMA0EAgACMAcDBQMqEAwAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMn0QIDAzDxMA0GCSqGSIb3DQEBCwUAA4IB AQCrVU1rkJM7H3yJG96la0vmDZStKWpyuCsGEnrWWxbYRgj4QJdwgcW7ikIC1Pwy PR5bF52aqDZakJGRSpF3TCjFKnpQkxi98hKWFfZ5AP18xS0S0wSocx8mm6pq9G3P Dyuy/dmh3lk+jupYwHBcMxr078IcJ4rmXzFZKBmFn0zAWyWPwW/1Go3h22qNAmm4 7EJlIdsl2h92Ei+Pl5CHqXB9194KKfWDulrsSvxyH8g0jTgrvhPofSHeOdwEJeTp JDl7ZIxyEHNFC3YSQVTwcjNE5MMhZkBIgdYCKrNfk9jp6mvXDkrzhADwaFFHtFHO 2geIWr+B2DRtRBu90njNUnDj -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:42 2026 by rpki-client