This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer File: Y42aUATFktCTzImw2QdS4nnVGFQ.cer (raw, json) Hash identifier: lHUEj+7K5/dgUPHMoONJcptyycrv/Hfp5vIgS4f4TaQ= Subject key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED2C429483BEA9E4F4A1F62EF8BC6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35388 IP: 85.209.24.0/22 IP: 2a09:9240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2c:42:94:83:be:a9:e4:f4:a1:f6:2e:f8:bc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=638d9a5004c592d093cc89b0d90752e279d51854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:53:ae:19:e0:9b:ac:ba:e5:4e:a2:9b:3f: 33:cc:6e:37:e6:41:d5:72:2b:a5:0b:0f:f7:c1:27: 4f:0c:cf:97:3b:00:d8:6c:7f:3c:3a:37:08:97:3e: cf:ad:1d:02:fe:61:1b:01:68:53:64:4c:73:d1:8e: f0:42:cd:8d:b6:77:3f:60:2f:6e:ad:fc:9a:62:78: ad:81:89:5e:b0:15:47:63:44:d6:e2:d5:fa:2b:a5: f7:45:1e:6b:42:30:4a:fa:43:b0:bd:79:12:f8:be: b3:88:ee:97:53:62:6d:5a:33:e5:7d:46:56:7d:81: 7a:ba:1a:88:b8:e8:48:9c:eb:91:bf:35:98:3d:f5: e6:6e:8d:d1:a9:71:a8:6d:d7:2f:be:ee:a2:7b:5c: 64:fe:7d:ed:d8:fc:84:d9:d0:97:f6:1e:21:5a:66: 86:e0:a9:3d:ed:70:ba:97:f4:1a:0f:18:e8:f7:41: 55:49:31:48:f2:a7:0c:eb:d3:5e:7c:57:b1:03:dd: 9f:ef:7a:26:fb:7b:89:79:50:2b:20:b8:cb:e8:ad: 13:71:c1:df:9d:d5:18:f1:23:c9:08:f6:c1:8f:8a: 1f:f2:c1:d3:f3:56:0d:7d:6c:41:8b:d9:4a:2b:a7: 8f:0e:4a:2c:5e:50:38:14:f4:0e:ac:63:22:1c:c3: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.24.0/22 IPv6: 2a09:9240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35388 Signature Algorithm: sha256WithRSAEncryption 3a:7b:98:f0:2b:94:41:b1:6d:70:cd:d1:b2:82:c6:d5:46:65: 4b:28:d5:94:b3:3d:62:9b:b6:ae:57:a1:c4:93:04:d1:74:f3: 18:18:d9:e2:94:19:b4:db:1a:f6:f5:db:56:ec:6a:68:82:e0: c7:55:6e:0e:97:b9:2e:4d:5e:15:6a:d1:8b:da:9e:03:1b:a6: 4f:1b:e0:44:6b:ac:7c:7e:0a:23:f0:93:02:30:0a:33:3b:d7: c5:3d:46:76:d2:27:16:94:6b:30:c2:88:78:6a:74:80:5a:1c: 26:20:77:2d:a6:be:66:5e:df:83:62:31:92:36:62:2f:02:37: 6a:f9:8e:83:7c:69:fa:5f:34:b5:47:6d:c1:81:83:84:1c:77: 52:92:2f:96:9c:02:72:3f:ad:0c:fd:c2:ca:7c:99:79:91:5d: 93:97:2d:93:8e:7d:45:cf:d9:c1:99:f6:69:be:33:df:01:9c: f5:98:e6:65:bb:42:5c:74:fd:8f:52:7b:c5:8f:db:b8:29:e3: be:ce:4c:ed:c2:a8:d5:dd:f2:6d:ef:61:b4:2d:33:7f:6b:31: fc:d8:c3:57:74:08:57:0b:06:b8:d4:a1:b6:1f:8a:00:57:76: 92:2e:91:22:dd:09:7e:ff:e2:d0:bc:85:60:d5:0e:e1:32:99: 5a:56:71:4a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87SxClIO+qeT0ofYu+LxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzhkOWE1MDA0YzU5MmQwOTNjYzg5YjBkOTA3NTJlMjc5ZDUxODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEpTrhngm6y65U6imz8zzG435kHV ciulCw/3wSdPDM+XOwDYbH88OjcIlz7PrR0C/mEbAWhTZExz0Y7wQs2Ntnc/YC9u rfyaYnitgYlesBVHY0TW4tX6K6X3RR5rQjBK+kOwvXkS+L6ziO6XU2JtWjPlfUZW fYF6uhqIuOhInOuRvzWYPfXmbo3RqXGobdcvvu6ie1xk/n3t2PyE2dCX9h4hWmaG 4Kk97XC6l/QaDxjo90FVSTFI8qcM69NefFexA92f73om+3uJeVArILjL6K0TccHf ndUY8SPJCPbBj4of8sHT81YNfWxBi9lKK6ePDkosXlA4FPQOrGMiHMM5owIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGONmlAExZLQk8yJsNkHUuJ51RhUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzBjZjZk Ny1kOGVmLTQ0YTgtYWEwNy03NzY4ZDRmYmRjZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvMGNmNmQ3 LWQ4ZWYtNDRhOC1hYTA3LTc3NjhkNGZiZGNkMy8xL1k0MmFVQVRGa3RDVHpJbXcy UWRTNG5uVkdGUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCVdEYMA0EAgACMAcDBQMqCZJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCKPDANBgkqhkiG9w0BAQsFAAOCAQEAOnuY8CuUQbFt cM3RsoLG1UZlSyjVlLM9Ypu2rlehxJME0XTzGBjZ4pQZtNsa9vXbVuxqaILgx1Vu Dpe5Lk1eFWrRi9qeAxumTxvgRGusfH4KI/CTAjAKMzvXxT1GdtInFpRrMMKIeGp0 gFocJiB3Laa+Zl7fg2IxkjZiLwI3avmOg3xp+l80tUdtwYGDhBx3UpIvlpwCcj+t DP3CynyZeZFdk5ctk459Rc/ZwZn2ab4z3wGc9ZjmZbtCXHT9j1J7xY/buCnjvs5M 7cKo1d3ybe9htC0zf2sx/NjDV3QIVwsGuNShth+KAFd2ki6RIt0Jfv/i0LyFYNUO 4TKZWlZxSg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:54 2026 by rpki-client