This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer (raw, json) Hash identifier: ShyPP6lrI5gqccrEcAyVkGDC7qWC9UxOkDptnHN/QNQ= Subject key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C667EBEFFF57E62F04B91AB82F0D66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12837 AS: 41684 IP: 193.35.25.0/24 IP: 193.41.239.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:67:eb:ef:ff:57:e6:2f:04:b9:1a:b8:2f:0d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:a3:c6:23:19:5b:74:4a:20:05:8c:42:6d: b6:da:ab:0c:31:80:fc:d3:c3:a2:ff:c4:b4:fc:45: 12:d4:4f:81:a3:86:84:88:c9:c4:ee:df:26:59:1b: dc:28:e4:00:91:7e:33:a4:e3:5a:de:d3:6a:46:89: 35:0d:83:0b:8b:6a:70:6c:48:1e:0f:59:6b:75:fb: 9e:9d:fa:fa:08:01:e0:d6:93:c1:42:f1:70:d2:e4: dd:e8:e5:0f:a9:86:3a:01:18:21:9e:62:5b:41:37: f2:42:23:56:af:5c:d3:0b:99:df:2f:eb:50:63:12: fd:ae:86:d4:44:99:3c:5f:db:ea:13:21:8f:dc:30: bc:af:46:3f:3c:64:62:4c:5b:89:31:11:78:ab:27: 81:65:41:72:67:3c:c4:64:2b:42:12:50:e6:6e:55: d0:a6:cb:e9:df:a1:8e:35:98:50:24:49:a6:a2:5e: 2f:b8:c3:0b:87:dc:50:17:1a:68:7e:b1:41:11:1b: 69:97:d2:4d:cd:72:81:6d:67:cf:45:88:97:7e:9c: 78:b0:88:7d:55:59:4c:37:a5:d1:2d:de:fd:37:e0: 5d:95:fc:c8:9b:be:b5:1c:c8:0e:e7:fe:f3:55:9f: b1:ec:2e:13:0f:6a:a6:75:02:9d:c3:11:36:7f:f0: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.25.0/24 193.41.239.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12837 41684 Signature Algorithm: sha256WithRSAEncryption af:86:33:a2:f6:b6:75:a9:0d:9e:b1:9f:85:a5:a1:ad:45:2e: c7:86:3a:b5:6e:e5:da:4c:00:bf:78:ba:ed:13:8b:de:9b:8a: b3:2e:2c:7c:02:b0:de:4c:fe:aa:f2:fd:61:53:bb:7a:46:2d: 28:1c:6b:46:db:22:92:79:e9:b5:4c:8c:6c:44:79:c3:c8:90: 59:f2:52:a4:f1:87:6d:44:40:55:55:15:ed:c2:ff:4f:3c:91: a8:f8:f7:d6:34:a1:36:33:12:37:eb:c1:bd:0f:d9:db:06:e1: f8:00:33:a3:b0:64:45:8d:57:18:99:75:8e:ad:2d:97:f6:24: 46:3c:ef:fa:d3:9d:4c:22:de:da:fa:c5:62:3c:5b:d3:18:da: 79:73:90:fe:bc:e3:38:c2:1e:3d:c2:49:4e:e9:b3:84:8b:04: e9:08:e7:82:84:2a:25:5d:9b:28:88:53:83:05:e5:45:6e:76: a6:6f:a7:8e:c9:9a:0a:9b:65:78:ff:41:4e:96:17:c2:d7:5b: 62:89:46:9f:4c:01:3d:ea:34:dd:22:cb:a4:af:d9:f4:1a:33: f8:3b:6a:ce:6b:9e:cf:a9:54:be:e0:65:34:25:70:b9:e8:8e: fb:db:85:12:44:d4:d7:3d:93:96:a9:4e:ef:09:3a:fc:6e:69: 14:ab:47:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt3xmfr7/9X5i8EuRq4Lw1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDg5N2JkOGM2ZGYxY2I3MTQxMGZlMTk0YmVkNzM5YTJmOGE2NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ2jxiMZW3RKIAWMQm222qsMMYD8 08Oi/8S0/EUS1E+Bo4aEiMnE7t8mWRvcKOQAkX4zpONa3tNqRok1DYMLi2pwbEge D1lrdfuenfr6CAHg1pPBQvFw0uTd6OUPqYY6ARghnmJbQTfyQiNWr1zTC5nfL+tQ YxL9robURJk8X9vqEyGP3DC8r0Y/PGRiTFuJMRF4qyeBZUFyZzzEZCtCElDmblXQ psvp36GONZhQJEmmol4vuMMLh9xQFxpofrFBERtpl9JNzXKBbWfPRYiXfpx4sIh9 VVlMN6XRLd79N+BdlfzIm761HMgO5/7zVZ+x7C4TD2qmdQKdwxE2f/BiMwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFD2Je9jG3xy3FBD+GUvtc5ovimdzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzU0NzFm OC1jOTM4LTQwY2MtYjEzOS1mOWY5MjE1MGNkMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNTQ3MWY4 LWM5MzgtNDBjYy1iMTM5LWY5ZjkyMTUwY2QzOS8xL1BZbDcyTWJmSExjVUVQNFpT LTF6bWktS1ozTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwSMZAwQAwSnvMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAjIlAgMAotQwDQYJKoZIhvcNAQELBQADggEBAK+GM6L2tnWpDZ6xn4Wl oa1FLseGOrVu5dpMAL94uu0Ti96birMuLHwCsN5M/qry/WFTu3pGLSgca0bbIpJ5 6bVMjGxEecPIkFnyUqTxh21EQFVVFe3C/088kaj499Y0oTYzEjfrwb0P2dsG4fgA M6OwZEWNVxiZdY6tLZf2JEY87/rTnUwi3tr6xWI8W9MY2nlzkP684zjCHj3CSU7p s4SLBOkI54KEKiVdmyiIU4MF5UVudqZvp47JmgqbZXj/QU6WF8LXW2KJRp9MAT3q NN0iy6Sv2fQaM/g7as5rns+pVL7gZTQlcLnojvvbhRJE1Nc9k5apTu8JOvxuaRSr Rzs= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:47 2026 by rpki-client