This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer (raw, json) Hash identifier: qCAOO/l6I+2VpGLAeMz4abT7V/lWnylM7k4N7nSwkDQ= Subject key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3682119439FDF770E46674BB0A8FE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205359 IP: 85.193.76.0/24 IP: 194.31.99.0/24 IP: 2a12:9c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:82:11:94:39:fd:f7:70:e4:66:74:bb:0a:8f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:9b:20:29:da:9a:fc:66:70:a2:c4:94:40: ce:9a:25:aa:ec:3c:63:7b:1e:69:5f:1b:7d:3c:2d: 25:db:95:6e:81:08:f9:c0:d5:2b:34:de:4a:f2:37: ac:ae:83:b6:55:e1:d6:c6:45:eb:51:3a:35:09:18: 34:a7:97:11:08:ea:9d:e0:3f:ad:d7:23:39:58:40: 68:2d:6c:18:27:03:08:1c:5e:bb:43:8e:ee:e6:4c: d2:9f:8f:1e:bd:9f:38:45:7b:5d:70:36:45:70:e4: 4a:2b:f5:a0:59:30:ce:14:9d:47:89:6c:bf:66:0a: fe:d5:b1:1b:bd:db:87:48:b0:f0:72:f9:92:ea:13: 24:75:cb:7a:78:d1:00:31:41:33:67:05:5d:6d:53: 4f:76:ee:57:40:db:b3:d9:3f:3e:9e:45:29:57:1a: e1:f1:ef:71:e1:49:1d:70:6f:4b:29:7a:5a:e3:69: 73:0f:e5:0c:87:28:d1:4a:da:a6:f1:b7:46:ae:d1: d6:3e:b8:0f:24:06:7f:ac:64:ca:4e:93:28:10:e8: dc:e0:ce:23:e2:9f:38:02:f0:92:88:e6:ee:3e:23: bc:bb:18:a2:c0:d3:b1:14:68:55:8c:3c:19:0a:79: 95:f9:bd:32:fc:b4:07:ec:7b:c4:f2:ca:35:c6:f5: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.193.76.0/24 194.31.99.0/24 IPv6: 2a12:9c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205359 Signature Algorithm: sha256WithRSAEncryption af:2c:7d:23:0e:57:35:8f:5c:17:2b:fc:26:85:85:b4:59:61: ee:96:66:b3:e0:8e:db:ce:ae:54:53:80:c0:5c:20:05:74:67: 43:21:fb:6e:e4:03:26:62:85:ac:c3:cb:c2:4e:35:2d:0b:57: 53:94:59:ad:49:a7:c5:27:91:29:5f:b9:b3:27:6e:b3:19:9a: 68:91:5b:1d:dd:60:89:5e:eb:3b:fa:29:99:ff:10:14:92:57: eb:43:bf:3e:3b:cc:b1:c7:54:7e:5a:f5:86:08:a5:b8:1f:01: 3f:93:45:0e:77:35:c5:cc:22:c8:1f:e9:76:cd:55:56:4b:72: 0c:8c:be:03:74:92:da:cc:a8:17:12:e4:07:c2:c0:95:26:8d: c1:45:7d:64:46:b4:93:65:49:25:5c:42:71:0f:ce:8b:52:b4: 18:18:bc:9a:1e:90:fd:69:90:18:fd:12:cf:6b:41:f5:ac:bb: 89:52:d9:c8:0e:f1:49:47:0c:91:18:36:17:a5:c3:09:59:de: 20:4a:2c:2e:f6:02:c5:7d:6a:f1:1d:05:9e:1e:07:4f:65:a7: 16:60:56:8d:e9:05:33:1f:0a:17:9d:85:8d:b7:94:c7:c3:e2: 35:5d:8e:27:cf:d2:47:79:2c:30:2d:64:12:fa:90:ef:66:0e: ef:14:99:e8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NoIRlDn993DkZnS7Co/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzU5YTY0OWIwMzYxMDNlODBhM2NlOGYzZDFiMDEzOGE2MDU4MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp2bICnamvxmcKLElEDOmiWq7Dxj ex5pXxt9PC0l25VugQj5wNUrNN5K8jesroO2VeHWxkXrUTo1CRg0p5cRCOqd4D+t 1yM5WEBoLWwYJwMIHF67Q47u5kzSn48evZ84RXtdcDZFcORKK/WgWTDOFJ1HiWy/ Zgr+1bEbvduHSLDwcvmS6hMkdct6eNEAMUEzZwVdbVNPdu5XQNuz2T8+nkUpVxrh 8e9x4UkdcG9LKXpa42lzD+UMhyjRStqm8bdGrtHWPrgPJAZ/rGTKTpMoEOjc4M4j 4p84AvCSiObuPiO8uxiiwNOxFGhVjDwZCnmV+b0y/LQH7HvE8so1xvW3ZwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGNZpkmwNhA+gKPOjz0bATimBYHXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzQ1NzRi Yy0yOTZkLTRhNTgtYWVmNy1kMmJiZDk0OWM0NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvNDU3NGJj LTI5NmQtNGE1OC1hZWY3LWQyYmJkOTQ5YzQ1Mi8xL1kxbW1TYkEyRUQ2QW84NlBQ UnNCT0tZRmdkYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVcFMAwQAwh9jMA0EAgACMAcDBQMqEpxAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMiLzANBgkqhkiG9w0BAQsFAAOCAQEAryx9 Iw5XNY9cFyv8JoWFtFlh7pZms+CO286uVFOAwFwgBXRnQyH7buQDJmKFrMPLwk41 LQtXU5RZrUmnxSeRKV+5sydusxmaaJFbHd1giV7rO/opmf8QFJJX60O/PjvMscdU flr1hgiluB8BP5NFDnc1xcwiyB/pds1VVktyDIy+A3SS2syoFxLkB8LAlSaNwUV9 ZEa0k2VJJVxCcQ/Oi1K0GBi8mh6Q/WmQGP0Sz2tB9ay7iVLZyA7xSUcMkRg2F6XD CVneIEosLvYCxX1q8R0Fnh4HT2WnFmBWjekFMx8KF52FjbeUx8PiNV2OJ8/SR3ks MC1kEvqQ72YO7xSZ6A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:31 2026 by rpki-client