This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer File: Y3bCUtsJvoF7hypxepWe3KxEJms.cer (raw, json) Hash identifier: OkWh7fveYbJXtVnDajjYmAHzFk6nZ0z1cLeV1nMT/NE= Subject key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7F4CD7C49579BADB6D88E4A79BC26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200336 IP: 194.56.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f4:cd:7c:49:57:9b:ad:b6:d8:8e:4a:79:bc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6376c252db09be817b872a717a959edcac44266b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:5b:89:e1:db:26:12:67:68:db:0c:4c:a2: 0a:f6:20:fc:be:cb:82:5a:b4:8b:ed:66:7b:8b:b9: 0f:ed:e4:0f:92:b8:bf:5e:d4:a9:a5:90:94:a6:00: 51:60:4f:48:ce:4f:48:f6:10:6c:6b:bb:1d:ca:c0: d7:f5:b8:8e:2b:fd:48:b0:be:30:a3:7c:72:c4:76: 2d:26:4d:85:5c:53:80:c1:b3:62:0b:7f:67:46:a4: 69:e4:b6:d5:bc:30:41:0d:05:02:97:29:f0:cf:51: 93:57:83:15:1e:81:9e:34:15:bb:1f:13:50:e3:6a: 43:db:ca:ac:02:f8:84:aa:c5:5f:d3:02:33:4a:1a: b2:1a:71:6c:02:6a:5c:6d:f2:e1:62:7e:d1:b1:38: b9:fc:a2:cb:7f:eb:0d:b7:e5:1e:85:64:7f:88:f2: cc:36:a3:e0:78:07:43:1b:bf:3f:82:d9:f1:90:f9: 92:07:c0:4b:79:12:10:13:7f:5a:20:59:64:59:e9: 50:a0:49:40:d5:cd:90:9e:f8:1e:29:b3:81:e5:28: 80:17:d2:bd:5a:23:4f:86:38:2c:08:54:19:0a:30: 02:01:b1:36:34:6d:21:fa:e8:ae:07:33:cc:78:20: 75:63:af:eb:45:e2:d6:1d:95:d1:60:78:95:e7:89: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.192.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200336 Signature Algorithm: sha256WithRSAEncryption 0e:b5:73:78:9a:97:91:68:2a:4b:b3:02:63:ef:1f:6a:87:81: 71:70:b7:89:c9:e7:15:2e:58:8b:36:5d:c2:4a:e9:3f:18:26: 49:d8:9d:fc:a8:e4:24:8f:d8:d1:5b:b1:87:5b:ad:ac:7c:01: 65:34:08:f5:4f:fc:8a:ff:c3:78:9f:ec:51:ed:21:77:d5:ae: 1f:36:9c:ff:0c:d5:8a:e7:2b:83:02:fe:27:28:d6:13:29:c8: a7:91:c7:04:68:70:d3:d9:07:c7:70:34:5f:c5:3e:ea:f9:f3: 63:61:ea:b4:38:2c:e3:43:75:de:68:ba:1d:fc:c6:32:72:96: cb:cb:67:95:75:0d:64:75:a4:cf:dd:bd:e2:ae:ae:26:b9:c1: 9b:a5:ee:02:b9:07:c3:f6:87:33:32:dc:06:fe:b9:15:e4:c1: 7b:04:50:d1:04:7a:2d:51:4d:e8:c9:bb:86:94:4d:d2:f0:df: 58:f3:c7:b3:88:5e:2e:15:64:14:51:a8:66:90:2f:d1:95:4a: af:15:06:c1:b5:a7:10:a6:cf:de:57:0e:c4:f4:c2:c2:79:c4: e9:9c:23:c3:b7:53:fd:08:21:e6:eb:96:98:dc:7a:2f:b5:dc: 79:e8:dd:b4:60:f6:28:a4:61:a3:91:c9:ff:b0:3d:7f:3b:c3: 8e:96:76:da -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x/TNfElXm6222I5KebwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzc2YzI1MmRiMDliZTgxN2I4NzJhNzE3YTk1OWVkY2FjNDQyNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIJbieHbJhJnaNsMTKIK9iD8vsuC WrSL7WZ7i7kP7eQPkri/XtSppZCUpgBRYE9Izk9I9hBsa7sdysDX9biOK/1IsL4w o3xyxHYtJk2FXFOAwbNiC39nRqRp5LbVvDBBDQUClynwz1GTV4MVHoGeNBW7HxNQ 42pD28qsAviEqsVf0wIzShqyGnFsAmpcbfLhYn7RsTi5/KLLf+sNt+UehWR/iPLM NqPgeAdDG78/gtnxkPmSB8BLeRIQE39aIFlkWelQoElA1c2QnvgeKbOB5SiAF9K9 WiNPhjgsCFQZCjACAbE2NG0h+uiuBzPMeCB1Y6/rReLWHZXRYHiV54lVswIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGN2wlLbCb6Be4cqcXqVntysRCZrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2I4MWMw Yi1hZjFjLTRlZTgtYjRjMC1kY2EwZmQ1MDlmYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYjgxYzBi LWFmMWMtNGVlOC1iNGMwLWRjYTBmZDUwOWZiNi8xL1kzYkNVdHNKdm9GN2h5cHhl cFdlM0t4RUptcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwjjAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMOkDANBgkqhkiG9w0BAQsFAAOCAQEADrVzeJqXkWgqS7MCY+8faoeBcXC3icnn FS5YizZdwkrpPxgmSdid/KjkJI/Y0Vuxh1utrHwBZTQI9U/8iv/DeJ/sUe0hd9Wu Hzac/wzViucrgwL+JyjWEynIp5HHBGhw09kHx3A0X8U+6vnzY2HqtDgs40N13mi6 HfzGMnKWy8tnlXUNZHWkz9294q6uJrnBm6XuArkHw/aHMzLcBv65FeTBewRQ0QR6 LVFN6Mm7hpRN0vDfWPPHs4heLhVkFFGoZpAv0ZVKrxUGwbWnEKbP3lcOxPTCwnnE 6Zwjw7dT/Qgh5uuWmNx6L7XceejdtGD2KKRho5HJ/7A9fzvDjpZ22g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:36 2026 by rpki-client