This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer (raw, json) Hash identifier: 23pPqzWGDfF5D7MZ99V8pwDYVHtuO8M9U7PAt0MUFbM= Subject key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F452F8C42EBFC0CEF275DF3FA47D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208794 IP: 45.85.12.0/22 IP: 193.43.138.0/23 IP: 193.43.142.0/23 IP: 2a0e:b280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:45:2f:8c:42:eb:fc:0c:ef:27:5d:f3:fa:47:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44fc887c977393575de6257e75fa99cde2037c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:f8:ae:28:27:96:49:85:3b:e3:91:25:aa: 40:38:d0:5a:8c:29:1a:fd:d4:ef:77:b1:df:9c:f5: 5d:d5:da:64:e0:f5:75:d4:19:fa:a9:dd:37:b4:3b: a9:78:44:b5:f0:ca:08:f2:03:2a:c4:de:a1:e5:ad: da:76:15:42:f0:d2:58:2f:21:25:ef:05:cd:88:25: 16:06:fb:71:8b:4b:9a:41:36:75:d1:6d:f9:a2:93: a2:d7:1e:13:89:ea:7f:ab:84:b0:cf:d9:5a:d3:c4: 45:a0:ef:65:60:89:ee:6c:2d:45:ff:47:81:0c:ba: 06:f0:6f:fb:30:18:50:0e:f5:de:74:66:4f:20:1a: 9f:54:9f:48:29:a7:6c:70:fd:b1:38:19:1a:9c:16: 22:b6:90:15:be:23:b7:d2:c2:01:a8:94:e7:90:35: 06:0c:ed:fe:d3:72:a7:5e:a7:62:92:ce:67:4a:b3: b6:c5:40:e5:a9:be:5a:d6:5b:29:d7:26:44:bf:a6: bf:9f:f7:1e:2e:17:65:6a:e6:2c:c7:ea:71:8c:fe: ae:8a:0c:1a:cd:f5:f6:6f:93:a1:ad:18:e8:a0:89: fb:62:d4:ec:a5:78:81:c9:38:20:73:a6:d5:98:f3: 3c:6c:ef:5a:ea:f2:5c:d6:d9:4f:13:c3:bf:d1:59: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.12.0/22 193.43.138.0/23 193.43.142.0/23 IPv6: 2a0e:b280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208794 Signature Algorithm: sha256WithRSAEncryption 46:d1:2b:a6:77:35:03:82:07:2d:48:23:5c:82:72:c2:10:26: e0:1c:31:77:b6:b8:6f:4b:46:cf:3d:85:70:54:74:64:9f:a1: 7d:6f:73:79:5c:13:9b:89:22:85:23:3e:93:e2:00:5d:8c:24: 20:b9:20:88:43:8e:f9:a8:31:d4:a5:b4:00:c0:d7:44:11:79: 10:1d:e9:df:88:28:52:06:a4:a5:94:a7:44:f1:2e:c7:b3:66: 2d:50:8b:b0:5e:1e:09:d5:41:2b:2c:e9:6b:73:a3:9b:e4:bc: 34:e0:27:89:26:1c:1f:e9:fe:e3:0c:e6:e9:e3:32:fa:c3:6d: ed:19:a8:38:a1:10:58:e2:11:98:61:9d:ed:4d:f3:e0:c9:c0: 9b:b7:f4:1a:e2:a0:08:17:db:e6:34:7f:8b:59:67:79:ba:8f: b2:19:13:4c:5b:f4:d7:d8:1e:68:56:6d:23:9d:96:35:b3:38: 7b:1f:81:4b:76:14:3d:1b:43:d4:3b:79:43:ce:7f:8a:62:f5: 13:61:87:c4:15:38:b4:c4:70:3e:70:7d:2e:d3:89:50:8b:73: aa:d1:16:f9:9b:d3:7f:48:d7:e6:9e:ee:fb:f7:d1:d5:3f:b4: 0e:d1:49:36:18:31:31:b9:91:48:af:06:b8:d4:37:c9:81:5c: 62:c8:04:af -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8f0UvjELr/AzvJ13z+kfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGZjODg3Yzk3NzM5MzU3NWRlNjI1N2U3NWZhOTljZGUyMDM3YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kj4rignlkmFO+ORJapAONBajCka /dTvd7HfnPVd1dpk4PV11Bn6qd03tDupeES18MoI8gMqxN6h5a3adhVC8NJYLyEl 7wXNiCUWBvtxi0uaQTZ10W35opOi1x4Tiep/q4Swz9la08RFoO9lYInubC1F/0eB DLoG8G/7MBhQDvXedGZPIBqfVJ9IKadscP2xOBkanBYitpAVviO30sIBqJTnkDUG DO3+03KnXqdiks5nSrO2xUDlqb5a1lsp1yZEv6a/n/ceLhdlauYsx+pxjP6uigwa zfX2b5OhrRjooIn7YtTspXiByTggc6bVmPM8bO9a6vJc1tlPE8O/0Vkg+QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFET8iHyXc5NXXeYlfnX6mc3iA3xsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2YwN2M2 Ni00NzNkLTQzNWEtYjY5My1jMzY5YzFkNGMzMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZjA3YzY2 LTQ3M2QtNDM1YS1iNjkzLWMzNjljMWQ0YzMzNy8xL1JQeUlmSmR6azFkZDVpVi1k ZnFaemVJRGZHdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLVUMAwQBwSuKAwQBwSuOMA0EAgACMAcDBQMq DrKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvmjANBgkqhkiG9w0BAQsFAAOC AQEARtErpnc1A4IHLUgjXIJywhAm4Bwxd7a4b0tGzz2FcFR0ZJ+hfW9zeVwTm4ki hSM+k+IAXYwkILkgiEOO+agx1KW0AMDXRBF5EB3p34goUgakpZSnRPEux7NmLVCL sF4eCdVBKyzpa3Ojm+S8NOAniSYcH+n+4wzm6eMy+sNt7RmoOKEQWOIRmGGd7U3z 4MnAm7f0GuKgCBfb5jR/i1lnebqPshkTTFv019geaFZtI52WNbM4ex+BS3YUPRtD 1Dt5Q85/imL1E2GHxBU4tMRwPnB9LtOJUItzqtEW+ZvTf0jX5p7u+/fR1T+0DtFJ NhgxMbmRSK8GuNQ3yYFcYsgErw== -----END CERTIFICATE-----Generated at Thu Feb 5 16:30:33 2026 by rpki-client