This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer (raw, json) Hash identifier: 083rN4f8zz4b89hKVPklwkS1Bx3E92bZI5U5TiJeu4o= Subject key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910999B136B7AD8B29B50DE4E649596 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204439 IP: 185.248.216.0/22 IP: 2a0d:f180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:99:9b:13:6b:7a:d8:b2:9b:50:de:4e:64:95:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:59:ea:b8:93:d6:5d:ed:10:10:92:69:ab: 39:8d:fa:e3:ab:ce:ec:a3:88:f1:0d:d1:dd:74:fd: ee:e1:3d:2d:b8:aa:f9:6e:03:eb:d3:d3:9a:30:fd: fc:61:2c:03:55:17:bb:2f:40:be:d1:75:86:35:4f: b5:ec:51:da:47:f2:15:9a:2b:52:8a:37:75:34:fe: 13:38:f4:ad:ba:d8:90:b8:05:98:9f:eb:57:4a:b9: 36:f8:85:c7:ae:9f:8d:65:f2:5f:1c:e7:d9:30:7a: 49:41:d0:f1:87:69:e3:26:cc:96:2e:3a:c4:3d:1f: 30:4b:13:7b:9e:9d:74:8d:7e:05:e3:bb:3a:8a:5c: ed:3a:c8:67:fa:91:da:99:44:a9:f4:70:9c:25:42: 25:56:ed:da:cc:dc:f1:42:fc:ae:49:01:bd:29:40: 0b:49:b4:44:29:60:37:99:b7:51:14:44:dd:61:25: af:3b:7a:e5:65:a9:e6:f0:a6:28:8a:31:63:53:86: a5:d5:bf:7e:3c:aa:7b:3b:1d:f2:fa:de:c3:db:cc: f4:73:f7:7a:50:82:17:d0:ae:90:f5:ed:c4:2f:77: a6:16:26:cf:b9:bd:b9:ab:62:78:8d:86:e0:6e:ee: dd:5a:f7:86:a7:d7:85:0c:e8:8e:24:cf:d7:e1:a3: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.216.0/22 IPv6: 2a0d:f180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204439 Signature Algorithm: sha256WithRSAEncryption 2e:2a:e8:58:ca:ab:10:88:1a:ce:ed:9f:76:50:c8:57:60:a2: b5:b1:82:a4:94:a3:fc:54:38:7f:16:57:57:2f:b9:7b:2d:53: be:f1:13:02:4c:6c:eb:26:5a:6e:30:be:85:f3:e6:43:c3:00: 16:00:24:a0:c3:42:5d:19:f7:af:4d:1f:cd:66:09:b8:b7:77: b4:fe:54:bc:ba:8f:eb:74:51:45:c5:b6:80:f8:96:78:30:c6: a1:1f:71:a4:7c:bd:5e:af:af:93:b7:9c:b3:3e:6d:f4:59:94: ee:bb:28:6c:6f:17:5b:d6:a0:8d:e9:44:8c:91:06:ba:aa:10: e6:55:35:c7:7f:e8:3b:37:e0:eb:39:48:fa:05:9d:0f:93:9c: d4:f0:c3:1d:fa:6e:dc:97:8f:27:84:75:fe:17:64:d5:f8:c2: c5:5c:bd:12:57:2e:57:e7:1b:dd:f3:1d:e6:83:79:4d:94:db: 4e:7a:40:9a:d8:30:58:5e:7f:73:cd:ef:cc:bd:99:17:20:7e: a4:fe:88:8d:86:c4:1c:81:61:e4:4a:b3:c5:90:52:80:53:62: 6d:98:d6:da:34:35:c2:d6:70:14:ad:6b:54:6c:37:ba:ad:87: 10:8a:fc:3c:24:f0:66:da:ab:a1:94:b4:56:4c:66:a1:b2:9f: ca:1e:02:56 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EJmbE2t62LKbUN5OZJWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzRjNTNhYmQwZGRhNjhjYTY3ZmM4MDY2YmMxNjVhMmIzMmRjODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqExZ6riT1l3tEBCSaas5jfrjq87s o4jxDdHddP3u4T0tuKr5bgPr09OaMP38YSwDVRe7L0C+0XWGNU+17FHaR/IVmitS ijd1NP4TOPStutiQuAWYn+tXSrk2+IXHrp+NZfJfHOfZMHpJQdDxh2njJsyWLjrE PR8wSxN7np10jX4F47s6ilztOshn+pHamUSp9HCcJUIlVu3azNzxQvyuSQG9KUAL SbREKWA3mbdRFETdYSWvO3rlZanm8KYoijFjU4al1b9+PKp7Ox3y+t7D28z0c/d6 UIIX0K6Q9e3EL3emFibPub25q2J4jYbgbu7dWveGp9eFDOiOJM/X4aNQpwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGNMU6vQ3aaMpn/IBmvBZaKzLcgrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzllOTZh My1jZTg5LTQ0MmUtYmM0OC1hZGRlZmE2OTExYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvOWU5NmEz LWNlODktNDQyZS1iYzQ4LWFkZGVmYTY5MTFiOS8xL1kweFRxOURkcG95bWY4Z0dh OEZsb3JNdHlDcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufjYMA0EAgACMAcDBQMqDfGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMelzANBgkqhkiG9w0BAQsFAAOCAQEALiroWMqrEIga zu2fdlDIV2CitbGCpJSj/FQ4fxZXVy+5ey1TvvETAkxs6yZabjC+hfPmQ8MAFgAk oMNCXRn3r00fzWYJuLd3tP5UvLqP63RRRcW2gPiWeDDGoR9xpHy9Xq+vk7ecsz5t 9FmU7rsobG8XW9agjelEjJEGuqoQ5lU1x3/oOzfg6zlI+gWdD5Oc1PDDHfpu3JeP J4R1/hdk1fjCxVy9ElcuV+cb3fMd5oN5TZTbTnpAmtgwWF5/c83vzL2ZFyB+pP6I jYbEHIFh5EqzxZBSgFNibZjW2jQ1wtZwFK1rVGw3uq2HEIr8PCTwZtqroZS0Vkxm obKfyh4CVg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:14 2026 by rpki-client