This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer (raw, json) Hash identifier: rRnxauLG6UgYRTN/ktZjuQWyxwo+xfKg5pTWosRYiUU= Subject key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BADE39E1771CEAFA91E0659BB8CBA7C71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 11 Jan 2026 16:28:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205514 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:e3:9e:17:71:ce:af:a9:1e:06:59:bb:8c:ba:7c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 11 16:28:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d862e65e93d885c4f97449bcaebabc351de67d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:5f:d2:d7:07:37:1e:9e:23:4a:24:d9:19: 97:d3:1b:f8:fd:69:5a:1c:0b:72:b8:dd:e8:18:f7: a1:09:58:46:60:bb:77:4e:c6:0b:9a:a6:62:b8:18: e2:36:cd:5e:ad:be:12:7b:bb:a2:c1:86:40:4d:26: c8:0b:1b:bf:85:39:26:dc:ad:de:85:25:72:f5:73: f0:de:3d:18:ef:19:e2:9d:69:11:c4:5b:e1:58:d4: 10:b7:1e:3d:e9:55:5a:68:f7:1d:24:96:fc:39:48: 4b:8f:05:38:34:64:dc:71:42:cc:d7:51:e6:2d:59: b7:8f:33:9f:06:88:fd:5c:8c:74:74:01:4d:62:bc: d0:6e:93:e3:11:65:3e:69:a8:d4:92:07:e9:04:ab: 83:d5:59:03:2c:b3:ff:a1:b6:a8:56:a5:28:9a:15: 55:2e:92:02:21:c9:12:e1:e9:7e:22:b1:82:a0:93: 96:3a:5e:f0:a3:28:36:1d:46:fd:90:f3:18:04:3e: 84:21:42:6f:66:b2:d9:ce:ab:48:13:7f:6e:60:6f: ea:16:f1:3f:a1:c2:29:d8:fd:45:c7:d7:ed:f3:fa: 07:a8:4a:03:75:74:ae:c4:7c:ab:45:3b:27:8c:9e: 6a:bb:11:60:f0:a8:2d:b8:70:56:a7:46:bc:ba:83: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205514 Signature Algorithm: sha256WithRSAEncryption 39:3e:13:96:6a:ce:88:28:48:51:9e:a9:f8:60:f2:fe:e5:9a: c6:63:d3:2b:c9:40:be:be:07:65:00:a9:86:59:c5:f6:d2:f6: 23:80:66:1c:ae:a6:1c:8c:a0:7a:84:50:1e:cc:42:52:82:e1: 70:8c:91:76:17:a0:ac:f8:62:d3:dc:26:80:63:0b:ba:fe:3b: 55:65:23:a8:90:2f:d8:fd:1a:0a:36:62:eb:32:15:7b:5c:a2: 15:a2:c7:57:82:05:ab:d7:ae:38:5a:c3:f4:01:7a:b9:57:aa: 7d:db:88:54:2b:6e:82:e7:96:ef:a4:a0:1f:c7:2e:b4:8a:75: 37:09:81:d4:9e:d8:a9:3d:27:23:fd:ac:4b:09:4c:e5:67:0c: a9:ef:cf:10:ba:c2:15:c3:8d:bb:7a:98:99:60:78:2b:7d:0f: 28:d5:f3:e5:33:05:88:6c:9c:3a:f5:38:8e:58:1a:8d:f0:95: 01:65:4c:0d:70:12:4d:fb:f8:85:25:f7:6c:1d:9d:88:75:95: 50:76:bc:47:fe:16:05:5d:c5:48:42:69:30:6c:da:54:b2:90: 47:6d:3c:52:d3:4d:2f:c4:e3:c9:e1:21:39:d1:0f:1a:e2:d1: b7:09:3b:cd:b9:03:b9:15:ac:aa:a8:d8:c5:15:5c:30:c3:1b: 66:6b:ee:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZut454Xcc6vqR4GWbuMunxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTExMTYyODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDg2MmU2NWU5M2Q4ODVjNGY5NzQ0OWJjYWViYWJjMzUxZGU2N2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9f0tcHNx6eI0ok2RmX0xv4/Wla HAtyuN3oGPehCVhGYLt3TsYLmqZiuBjiNs1erb4Se7uiwYZATSbICxu/hTkm3K3e hSVy9XPw3j0Y7xninWkRxFvhWNQQtx496VVaaPcdJJb8OUhLjwU4NGTccULM11Hm LVm3jzOfBoj9XIx0dAFNYrzQbpPjEWU+aajUkgfpBKuD1VkDLLP/obaoVqUomhVV LpICIckS4el+IrGCoJOWOl7woyg2HUb9kPMYBD6EIUJvZrLZzqtIE39uYG/qFvE/ ocIp2P1Fx9ft8/oHqEoDdXSuxHyrRTsnjJ5quxFg8KgtuHBWp0a8uoOaxwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE2GLmXpPYhcT5dEm8rrq8NR3mfSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzliMWVk My1mZWNkLTRkZTYtYmMxYS04ODM4YTgyODI5ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOWIxZWQz LWZlY2QtNGRlNi1iYzFhLTg4MzhhODI4MjlmOS8xL1RZWXVaZWs5aUZ4UGwwU2J5 dXVydzFIZVo5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMiyjANBgkqhkiG9w0BAQsFAAOCAQEAOT4TlmrOiChI UZ6p+GDy/uWaxmPTK8lAvr4HZQCphlnF9tL2I4BmHK6mHIygeoRQHsxCUoLhcIyR dhegrPhi09wmgGMLuv47VWUjqJAv2P0aCjZi6zIVe1yiFaLHV4IFq9euOFrD9AF6 uVeqfduIVCtugueW76SgH8cutIp1NwmB1J7YqT0nI/2sSwlM5WcMqe/PELrCFcON u3qYmWB4K30PKNXz5TMFiGycOvU4jlgajfCVAWVMDXASTfv4hSX3bB2diHWVUHa8 R/4WBV3FSEJpMGzaVLKQR208UtNNL8TjyeEhOdEPGuLRtwk7zbkDuRWsqqjYxRVc MMMbZmvuvg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:55 2026 by rpki-client