This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer File: RYzFKgcHzDQKycf26QKLZLcCZ7w.cer (raw, json) Hash identifier: qc4Rfr0vXSKjPCIs3FtlY72e7aH2u0QXtjekWaj7cXg= Subject key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791070ACF80079F9BF0D18585C0D61D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.1.155.0/24 IP: 2a13:9e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:ac:f8:00:79:f9:bf:0d:18:58:5c:0d:61:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:74:aa:a8:20:43:09:e6:8c:55:f1:33:7c: 5d:94:87:5e:0f:bb:0b:18:d5:e2:e5:10:33:0f:10: 95:87:6e:82:10:58:59:26:e6:6a:b5:19:03:3f:2a: d4:b6:9f:92:f8:a2:8a:51:61:63:33:1e:3c:f7:06: 7f:51:bb:88:f2:06:fd:b0:e1:b8:ba:00:46:72:9a: 51:1d:3f:ed:7e:de:34:d8:d8:2c:60:80:ae:16:22: 26:7f:f7:02:0a:4a:47:c4:3a:e3:c7:02:39:6b:7d: 1c:a7:3d:8a:9f:a7:5f:68:d0:b0:03:b9:be:fa:30: 88:b2:59:ee:75:c4:06:16:a8:ac:89:fa:a4:b9:af: cb:d1:75:10:a4:b3:47:0d:41:d6:cb:f7:db:5f:ac: 3b:0c:38:94:ae:98:d8:a0:b8:fa:b8:1a:69:29:ca: ff:8b:10:d5:94:98:56:d2:46:5b:19:02:ff:48:d8: f9:b8:a9:7c:82:3e:12:25:2f:b8:37:4c:91:27:3b: 54:45:c7:c7:a5:86:69:06:c9:db:d0:bc:d4:e5:5d: b5:57:f7:e6:50:52:42:09:28:e3:04:b1:f5:2e:bc: 93:45:3f:69:50:a8:8d:a8:18:22:ba:2b:58:ff:cb: c4:ad:1b:ac:64:de:e8:02:f3:72:94:7d:89:87:80: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.155.0/24 IPv6: 2a13:9e40::/29 Signature Algorithm: sha256WithRSAEncryption 22:11:c9:d8:9c:63:5c:b3:10:ab:41:a9:4c:40:d8:ac:c7:ec: e1:73:08:9d:8f:37:13:ee:63:fd:8b:11:c1:b1:09:46:ad:f2: 49:fd:a3:8c:a1:0e:bc:70:14:6e:e1:ca:8e:fe:7e:7c:ca:6c: d2:cf:d8:80:73:af:4d:e5:01:17:91:15:9e:f6:41:40:58:25: ea:7d:7f:b4:fb:57:23:13:08:17:05:93:13:d3:c0:64:a2:0f: ab:e5:67:4d:e1:6a:43:e8:b9:53:36:9d:2d:3c:4b:9b:f1:3c: d0:8e:bf:7c:3e:ab:13:36:37:e7:72:99:d5:5b:44:90:f5:da: 59:13:47:1f:8e:c4:66:66:1c:6b:78:c3:26:40:04:3c:53:ab: 06:e8:1d:5e:75:e5:17:02:89:5f:2d:a1:62:60:a4:f0:a1:63: d2:ae:6b:7b:5e:64:56:cf:b9:56:af:ba:e9:b0:16:54:c2:c9: 26:c5:60:0c:de:71:d9:6b:02:d8:9e:77:9c:7c:6b:eb:79:44: 9f:36:15:6b:7f:ea:05:09:14:66:15:5b:6e:c0:29:f3:ed:2d: fa:c6:41:f5:81:db:85:af:f8:e4:68:f3:7b:0b:b9:73:00:db: 93:cc:7d:80:54:69:e1:8c:ce:52:9c:30:a7:47:ce:3a:7c:8a: b2:59:72:af -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EHCs+AB5+b8NGFhcDWHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NThjYzUyYTA3MDdjYzM0MGFjOWM3ZjZlOTAyOGI2NGI3MDI2N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukh0qqggQwnmjFXxM3xdlIdeD7sL GNXi5RAzDxCVh26CEFhZJuZqtRkDPyrUtp+S+KKKUWFjMx489wZ/UbuI8gb9sOG4 ugBGcppRHT/tft402NgsYICuFiImf/cCCkpHxDrjxwI5a30cpz2Kn6dfaNCwA7m+ +jCIslnudcQGFqisifqkua/L0XUQpLNHDUHWy/fbX6w7DDiUrpjYoLj6uBppKcr/ ixDVlJhW0kZbGQL/SNj5uKl8gj4SJS+4N0yRJztURcfHpYZpBsnb0LzU5V21V/fm UFJCCSjjBLH1LryTRT9pUKiNqBgiuitY/8vErRusZN7oAvNylH2Jh4CuEQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEWMxSoHB8w0CsnH9ukCi2S3Ame8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzVhN2Qy Zi01MTY4LTQ3MjAtOGNlMC03MDQxNDk2MTljNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvNWE3ZDJm LTUxNjgtNDcyMC04Y2UwLTcwNDE0OTYxOWM0Ni8xL1JZekZLZ2NIekRRS3ljZjI2 UUtMWkxjQ1o3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwgGbMA0EAgACMAcDBQMqE55AMA0GCSqGSIb3 DQEBCwUAA4IBAQAiEcnYnGNcsxCrQalMQNisx+zhcwidjzcT7mP9ixHBsQlGrfJJ /aOMoQ68cBRu4cqO/n58ymzSz9iAc69N5QEXkRWe9kFAWCXqfX+0+1cjEwgXBZMT 08Bkog+r5WdN4WpD6LlTNp0tPEub8TzQjr98PqsTNjfncpnVW0SQ9dpZE0cfjsRm ZhxreMMmQAQ8U6sG6B1edeUXAolfLaFiYKTwoWPSrmt7XmRWz7lWr7rpsBZUwskm xWAM3nHZawLYnnecfGvreUSfNhVrf+oFCRRmFVtuwCnz7S36xkH1gduFr/jkaPN7 C7lzANuTzH2AVGnhjM5SnDCnR846fIqyWXKv -----END CERTIFICATE-----Generated at Tue Jan 27 04:44:54 2026 by rpki-client