This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer (raw, json) Hash identifier: r9DUMKU9JelK0bVtkAPHTZdDp/JkjlraMULzz75INPw= Subject key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3874BAA5E93464D65F74AD31F3BC66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51758 IP: 95.215.184.0/21 IP: 185.206.232.0/22 IP: 2a00:51c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:74:ba:a5:e9:34:64:d6:5f:74:ad:31:f3:bc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=448ca39537597cfae60ae0421db8e098b4e26130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:f8:c3:84:3e:a3:74:9b:db:14:3d:40:31: 4a:c7:a1:be:10:8f:89:dd:92:11:b3:87:42:ad:d3: bd:2e:0f:21:aa:d1:3b:c6:96:90:3d:f1:92:bd:0a: 20:84:27:b0:c6:86:ca:b7:87:2a:1f:02:f5:0b:0d: 0c:c1:01:88:f4:a5:12:b9:0f:e1:ac:5f:7a:2f:77: 83:f0:00:5f:53:b7:4c:5e:31:27:c9:81:d9:7a:1e: 7e:ab:34:74:d7:b9:5a:c6:f7:82:c9:a9:08:04:0b: 8a:31:e8:09:00:9a:cd:8e:96:be:58:d5:cf:bd:d3: 53:a0:cb:2a:ba:98:1c:07:bd:36:1c:e5:9f:ab:55: f0:14:00:82:c9:b2:e0:71:44:33:ff:4f:cb:25:a6: c3:53:0b:71:8c:8c:45:25:c1:7a:f8:03:76:42:21: 43:68:f3:df:a2:1f:84:e2:b0:77:f8:78:04:82:f6: 56:a9:d3:c4:a0:c7:f9:3d:8f:f5:26:97:8a:3e:99: a3:81:54:25:64:1e:c8:7c:35:88:6f:c4:1f:f5:4f: 2c:43:3a:49:aa:e7:f5:ff:1f:9a:98:75:04:aa:06: 10:a4:b3:6d:17:2a:55:a8:f0:d1:0f:56:6c:0a:66: ad:20:63:09:d7:70:da:ad:b1:f4:ef:18:63:00:e6: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.184.0/21 185.206.232.0/22 IPv6: 2a00:51c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51758 Signature Algorithm: sha256WithRSAEncryption 99:a9:2c:55:3e:41:11:10:9f:89:32:52:3a:68:02:5f:ec:77: 94:31:ba:2c:b7:be:b9:35:6a:b8:69:f8:e6:fa:81:70:85:24: b0:ec:c1:d4:34:47:16:61:39:e0:86:03:2b:b3:dc:30:6f:b5: 25:98:ae:3f:0f:0e:43:9b:af:c1:ee:3f:e9:ae:49:4f:d0:56: 33:66:48:45:45:91:ef:c1:e3:f9:aa:35:9c:fb:0b:04:fe:64: 15:69:f8:0f:28:2b:c4:be:05:5b:e4:c7:89:65:45:f6:ea:82: dc:f4:2a:e4:d8:a9:f9:d5:c4:59:6d:0f:9c:d8:f0:53:03:45: 7a:19:a5:4f:af:82:74:b5:56:57:c4:b0:80:4d:c8:44:20:b0: 78:0e:60:3e:b4:6d:94:fb:bd:41:15:10:4e:7e:2b:4e:bb:09: 13:c0:09:2d:87:c1:56:b3:db:4a:58:36:77:27:bb:04:a1:4e: e2:a1:d7:3b:08:45:14:b7:96:5c:00:76:67:9d:6d:b3:3d:55: 68:d0:45:85:2a:b0:72:f5:d3:32:2f:8b:47:22:44:16:2f:4c: 5c:29:33:4e:2c:f8:b9:f1:c3:12:bd:9d:7d:0c:f5:6d:2a:64: 97:90:9c:13:33:87:6e:60:a3:aa:83:d3:4d:b2:40:7d:24:9e: e1:4d:0d:97 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OHS6pek0ZNZfdK0x87xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDhjYTM5NTM3NTk3Y2ZhZTYwYWUwNDIxZGI4ZTA5OGI0ZTI2MTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonj4w4Q+o3Sb2xQ9QDFKx6G+EI+J 3ZIRs4dCrdO9Lg8hqtE7xpaQPfGSvQoghCewxobKt4cqHwL1Cw0MwQGI9KUSuQ/h rF96L3eD8ABfU7dMXjEnyYHZeh5+qzR017laxveCyakIBAuKMegJAJrNjpa+WNXP vdNToMsqupgcB702HOWfq1XwFACCybLgcUQz/0/LJabDUwtxjIxFJcF6+AN2QiFD aPPfoh+E4rB3+HgEgvZWqdPEoMf5PY/1JpeKPpmjgVQlZB7IfDWIb8Qf9U8sQzpJ quf1/x+amHUEqgYQpLNtFypVqPDRD1ZsCmatIGMJ13DarbH07xhjAOaWcQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFESMo5U3WXz65grgQh244Ji04mEwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2RiMDUx OS00ZTVhLTRiNzUtODhmZC1iYmMyMzllODk3ZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZGIwNTE5 LTRlNWEtNGI3NS04OGZkLWJiYzIzOWU4OTdlYi8xL1JJeWpsVGRaZlBybUN1QkNI YmpnbUxUaVlUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDX9e4AwQCuc7oMA0EAgACMAcDBQAqAFHAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDKLjANBgkqhkiG9w0BAQsFAAOCAQEAmaks VT5BERCfiTJSOmgCX+x3lDG6LLe+uTVquGn45vqBcIUksOzB1DRHFmE54IYDK7Pc MG+1JZiuPw8OQ5uvwe4/6a5JT9BWM2ZIRUWR78Hj+ao1nPsLBP5kFWn4DygrxL4F W+THiWVF9uqC3PQq5Nip+dXEWW0PnNjwUwNFehmlT6+CdLVWV8SwgE3IRCCweA5g PrRtlPu9QRUQTn4rTrsJE8AJLYfBVrPbSlg2dye7BKFO4qHXOwhFFLeWXAB2Z51t sz1VaNBFhSqwcvXTMi+LRyJEFi9MXCkzTiz4ufHDEr2dfQz1bSpkl5CcEzOHbmCj qoPTTbJAfSSe4U0Nlw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:17 2026 by rpki-client