This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer File: Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer (raw, json) Hash identifier: hznRYKWIvWxXFCBTKJ0Yz1NRvCDgkQR8wdh8qhwnEuY= Subject key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B10E82CBE254B05557EFBBAC14629 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51073 IP: 195.254.168.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:10:e8:2c:be:25:4b:05:55:7e:fb:ba:c1:46:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:d9:8f:a0:c8:1c:a7:20:4e:ba:fa:4e:4d: cb:8f:69:77:89:68:3b:ab:f1:a3:93:a0:81:a8:11: 79:1e:78:58:a6:96:ed:66:56:40:d8:68:e8:f8:81: 48:b2:b0:a9:d7:e5:06:70:19:d9:5a:00:5a:14:ec: 9e:8a:73:d7:10:9a:d4:c3:54:f4:cb:66:c0:53:3f: 1a:2d:3c:8a:00:45:96:3b:9b:d4:87:cc:d7:b8:85: fc:88:78:00:70:0e:5e:c9:46:34:3b:3f:2d:f9:a2: 37:e3:3b:5e:2e:63:ef:84:02:5e:43:f8:90:90:fe: 7a:99:84:e6:6b:cd:66:5a:7d:23:c7:7d:d6:0c:a1: 56:70:bc:ea:13:fc:14:d5:c1:77:15:bc:41:c8:0a: 78:05:f9:93:de:32:b0:dc:ad:d7:5c:14:8f:95:aa: 47:5c:d6:00:56:ad:06:3c:12:8f:4b:f1:9f:6a:4f: 8f:fe:e7:8b:64:3a:ca:a7:9f:2d:ab:86:9d:51:21: cc:ad:1f:40:75:cc:3e:d5:c7:22:72:41:30:f1:75: fe:46:26:f0:d0:d1:28:75:e8:96:a5:f7:37:f9:3d: 7a:4a:65:4b:1f:3c:b4:2a:b5:ee:46:10:a1:d9:a7: 45:bf:a5:b4:bc:e5:ea:3c:c9:71:86:db:53:10:6e: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.168.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51073 Signature Algorithm: sha256WithRSAEncryption 8b:38:4e:28:8a:c9:b1:95:73:e8:58:53:0d:a9:6c:80:e7:49: b8:d1:c4:66:c3:85:7d:0c:06:ff:60:8c:9f:2b:a6:f8:c3:60: d2:ef:dc:df:3a:99:74:5a:a0:03:b7:00:e5:01:73:aa:64:42: 6a:42:d5:11:6e:ef:ee:7f:7c:b0:6a:61:15:7d:d1:1a:af:6f: ec:96:b7:dd:9d:5b:4b:6c:88:3d:ed:5e:e1:ea:85:ed:c3:84: b0:38:6c:cb:ec:82:9a:4e:5c:ae:79:67:be:03:d6:79:c9:19: 12:53:03:90:7d:25:c4:2f:6b:b7:75:eb:10:5c:87:65:b9:a3: 52:9e:93:5b:69:e4:93:4e:af:14:f1:7d:2c:bb:c4:a5:9a:95: 24:63:30:cc:65:fb:df:cb:f8:0c:8e:32:54:6e:91:33:33:46: a1:8d:71:dc:9b:47:a1:3f:05:44:29:ef:d5:70:27:66:25:cf: 0e:fb:2c:b6:9b:05:04:d9:c1:92:61:29:bf:7e:e3:62:1d:9a: d2:c3:5d:0f:e3:db:63:4d:a9:1f:58:30:f3:90:8f:a6:f9:c2: ff:4f:b2:5f:83:e2:95:99:e3:8e:93:a6:74:4d:f0:61:ba:3d: 4a:be:0e:9b:f9:48:e3:c4:39:b3:f1:39:a7:dd:c3:72:a3:a1: c0:a8:38:b7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9WxDoLL4lSwVVfvu6wUYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzY0MmMxY2EzZDM4YzdlMTVlNjg3ZTBkOTQ4NWM3ODI2OTM4YzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBvZj6DIHKcgTrr6Tk3Lj2l3iWg7 q/Gjk6CBqBF5HnhYppbtZlZA2Gjo+IFIsrCp1+UGcBnZWgBaFOyeinPXEJrUw1T0 y2bAUz8aLTyKAEWWO5vUh8zXuIX8iHgAcA5eyUY0Oz8t+aI34zteLmPvhAJeQ/iQ kP56mYTma81mWn0jx33WDKFWcLzqE/wU1cF3FbxByAp4BfmT3jKw3K3XXBSPlapH XNYAVq0GPBKPS/Gfak+P/ueLZDrKp58tq4adUSHMrR9Adcw+1ccickEw8XX+Ribw 0NEodeiWpfc3+T16SmVLHzy0KrXuRhCh2adFv6W0vOXqPMlxhttTEG45cQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGNkLByj04x+FeaH4NlIXHgmk4wQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzRmNTkw My1mZjlmLTRlYzYtODZjMC0wN2IwZWE3NWMyNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvNGY1OTAz LWZmOWYtNGVjNi04NmMwLTA3YjBlYTc1YzI0Yi8xL1kyUXNIS1BUakg0VjVvZmcy VWhjZUNhVGpCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw/6oMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHgTANBgkqhkiG9w0BAQsFAAOCAQEAizhOKIrJsZVz6FhTDalsgOdJuNHEZsOF fQwG/2CMnyum+MNg0u/c3zqZdFqgA7cA5QFzqmRCakLVEW7v7n98sGphFX3RGq9v 7Ja33Z1bS2yIPe1e4eqF7cOEsDhsy+yCmk5crnlnvgPWeckZElMDkH0lxC9rt3Xr EFyHZbmjUp6TW2nkk06vFPF9LLvEpZqVJGMwzGX738v4DI4yVG6RMzNGoY1x3JtH oT8FRCnv1XAnZiXPDvsstpsFBNnBkmEpv37jYh2a0sNdD+PbY02pH1gw85CPpvnC /0+yX4PilZnjjpOmdE3wYbo9Sr4Om/lI48Q5s/E5p93DcqOhwKg4tw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:07 2026 by rpki-client