This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer File: Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer (raw, json) Hash identifier: actnPTWNc4SZ8StVZslgPoaiCJogyyjfcqiOt+klhzM= Subject key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ED4CC6C00A6F20462603D79526B05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197469 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d4:cc:6c:00:a6:f2:04:62:60:3d:79:52:6b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:5b:4a:71:31:bb:5a:77:2e:2b:c7:e1:d1: 99:13:41:da:d7:25:f9:5b:d0:ae:99:8b:dc:57:7b: 8e:dd:6b:38:db:0e:a6:9d:0f:9f:e4:2f:5a:e1:ea: 42:3b:47:a6:12:f3:fe:de:fa:ea:8f:9f:c2:37:52: 6f:68:23:a9:19:95:e6:5c:59:d9:f2:f6:27:3c:2e: 71:b5:f7:2f:90:33:f3:9b:81:f6:7f:4d:a4:8a:1e: a6:35:74:73:93:aa:1d:b0:96:9c:86:d8:cc:f8:24: 2d:e5:48:d9:df:e6:d2:46:dc:b5:7c:db:6f:06:3f: 0c:d9:1f:53:21:68:4c:7e:78:71:6e:25:53:55:a5: d5:8b:6f:4d:05:fe:bf:1c:9c:3f:42:3d:64:a4:80: 33:e9:fe:2a:56:c1:27:86:69:e0:87:81:b0:06:eb: 6e:1f:f7:5a:d2:33:46:f8:5e:57:d7:79:50:51:ed: 35:cb:6f:0a:4c:3c:b5:ed:a3:ce:1e:c0:7a:b3:64: 42:e6:b9:f8:3b:46:35:b0:04:14:35:01:5f:2a:46: 01:29:c1:f5:89:fd:f6:10:a0:f1:98:f8:a8:d0:89: 09:e2:86:bb:c3:f4:d1:01:43:57:07:6a:2f:ab:93: 24:50:a5:e3:d6:4b:3e:f4:04:de:a0:fe:4c:22:ec: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197469 Signature Algorithm: sha256WithRSAEncryption aa:47:1d:64:df:6f:c5:ff:5a:16:b8:b2:89:fc:42:f9:c0:af: 24:c3:ce:5b:af:ea:1a:bd:29:01:13:e0:e5:ef:a7:a0:78:b8: b4:11:3a:c7:97:da:ed:15:74:68:69:fb:be:e1:81:99:5c:dd: bb:fd:a6:75:67:50:f9:64:cb:cc:ca:e1:09:f2:09:1b:1b:a0: 9e:d4:b3:66:b3:92:c2:0f:09:3b:01:41:55:5a:ba:f0:2e:b0: 04:7f:59:c8:fe:89:05:1c:fa:30:72:34:e4:1e:f9:ea:e1:54: 2a:40:aa:e5:a9:de:49:9f:5b:4d:14:f9:3c:ee:e3:7e:44:eb: 8f:d4:3b:50:02:23:88:b6:f8:f4:62:dc:44:5f:a8:57:be:d9: c3:00:46:a2:e7:00:89:70:d8:aa:d7:b4:5c:3c:12:55:3f:3d: d3:b5:c6:87:d2:f6:53:35:bf:19:8a:00:83:24:91:76:ce:1a: fe:44:d4:35:49:b8:d0:60:99:58:2e:89:c0:aa:75:5e:4a:89: 38:a7:4d:46:22:ee:5e:8e:3e:1a:81:78:5d:ec:9b:e5:c4:06: 9f:34:b7:2c:dc:d6:89:30:31:7c:f7:dd:b4:ca:ca:ed:b7:0a: a3:0a:39:ab:2e:bb:e5:f4:b8:3e:76:99:c4:78:41:af:e0:32: f3:ff:d8:f1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5ftTMbACm8gRiYD15UmsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2E4Y2ExNjY2MjA2ZDJjZjEyYjUwNzg3MmVhZDBmNWE3OTNkMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgVbSnExu1p3LivH4dGZE0Ha1yX5 W9CumYvcV3uO3Ws42w6mnQ+f5C9a4epCO0emEvP+3vrqj5/CN1JvaCOpGZXmXFnZ 8vYnPC5xtfcvkDPzm4H2f02kih6mNXRzk6odsJachtjM+CQt5UjZ3+bSRty1fNtv Bj8M2R9TIWhMfnhxbiVTVaXVi29NBf6/HJw/Qj1kpIAz6f4qVsEnhmngh4GwButu H/da0jNG+F5X13lQUe01y28KTDy17aPOHsB6s2RC5rn4O0Y1sAQUNQFfKkYBKcH1 if32EKDxmPio0IkJ4oa7w/TRAUNXB2ovq5MkUKXj1ks+9ATeoP5MIuwWdQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGOoyhZmIG0s8StQeHLq0PWnk9DgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzA0NDZi MS1kZjJmLTQyNjEtYTFiYS03NWFiMjFmM2IzZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvMDQ0NmIx LWRmMmYtNDI2MS1hMWJhLTc1YWIyMWYzYjNkMC8xL1k2aktGbVlnYlN6eEsxQjRj dXJROWFlVDBPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMDXTANBgkqhkiG9w0BAQsFAAOCAQEAqkcdZN9vxf9a FriyifxC+cCvJMPOW6/qGr0pARPg5e+noHi4tBE6x5fa7RV0aGn7vuGBmVzdu/2m dWdQ+WTLzMrhCfIJGxugntSzZrOSwg8JOwFBVVq68C6wBH9ZyP6JBRz6MHI05B75 6uFUKkCq5aneSZ9bTRT5PO7jfkTrj9Q7UAIjiLb49GLcRF+oV77ZwwBGoucAiXDY qte0XDwSVT8907XGh9L2UzW/GYoAgySRds4a/kTUNUm40GCZWC6JwKp1XkqJOKdN RiLuXo4+GoF4Xeyb5cQGnzS3LNzWiTAxfPfdtMrK7bcKowo5qy675fS4PnaZxHhB r+Ay8//Y8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:16 2026 by rpki-client