This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer File: YDe79svKAic6peIbuIjj4exnZ98.cer (raw, json) Hash identifier: hRimNA72uxoKmW8Gd9PN3ERg9DtKH2piaYOiUPO+OOA= Subject key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE4F186142DA14ED6C6B0E7CAF4A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201013 IP: 185.85.156.0/22 IP: 2a05:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:f1:86:14:2d:a1:4e:d6:c6:b0:e7:ca:f4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:ae:ad:0d:5a:ef:4c:1c:04:e4:ef:7c:37: cd:2b:62:be:1b:e7:dc:51:7d:ae:35:2f:5e:a2:33: 4c:a5:33:65:6c:6e:7e:d6:84:17:3f:df:c6:2c:90: d3:ae:f5:13:32:5b:8d:52:2c:7f:4a:8f:6e:50:41: c6:e2:f4:5a:73:42:10:64:0c:47:a8:cf:42:57:b1: 44:fd:d4:74:a9:af:94:b5:e8:80:3e:49:53:20:7e: 95:af:16:18:78:b6:e6:23:6e:2d:2f:61:6d:a3:86: e6:08:85:7d:60:01:3c:0c:4a:8b:0d:d7:a0:ad:b4: 9c:d0:b9:f7:ab:f1:c0:9c:ad:b1:0c:48:27:19:ee: 38:85:75:fe:81:33:fb:81:98:22:54:86:0b:73:d1: b8:7e:7d:b8:3f:e7:9b:c1:9f:f6:fb:82:f6:e5:87: 70:48:64:45:bf:9c:20:05:25:ab:1b:c7:e4:52:1e: df:15:f6:0b:2c:7e:67:b4:17:6a:52:2e:d3:0e:fa: 02:da:f8:f8:aa:e5:03:4d:95:fe:23:e5:da:1c:70: 22:87:13:8e:66:7c:9a:8a:fe:93:9e:5b:ce:32:b6: 46:33:c8:6e:22:8f:38:89:3d:36:25:af:ac:c0:e9: fe:0e:27:a0:32:a4:15:d7:08:95:1d:83:ac:20:b4: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.156.0/22 IPv6: 2a05:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201013 Signature Algorithm: sha256WithRSAEncryption 63:8b:80:ea:81:87:34:d5:5f:e5:07:ad:bd:2f:a2:d6:1a:d1: 36:2c:ba:21:f7:ea:ea:22:36:5e:81:ea:20:be:7d:6c:92:89: 5b:91:c0:c8:ca:b3:9b:8f:aa:f4:70:f6:89:74:b9:5e:5f:aa: 12:a7:3a:84:ef:b4:67:a2:e2:26:87:62:16:13:2d:fe:0f:8d: 18:8d:67:56:88:9b:c4:a2:bc:80:14:0c:7b:dc:e8:ae:62:53: 9b:bc:cb:29:5a:64:c4:d4:0e:b4:18:ed:5d:f1:d0:25:c9:74: 0e:bb:40:75:02:02:fc:18:39:e6:d7:fd:fc:81:e8:39:70:1e: 54:bc:c3:41:be:b4:2b:61:fc:3b:7f:cf:91:cc:a7:33:82:b7: 46:f0:94:33:33:d4:48:5e:c9:79:de:37:40:7c:7c:9f:bd:b5: 1f:a4:f4:51:54:5f:9b:3a:71:52:21:87:3d:d8:84:10:19:98: 0b:a0:4b:6d:d0:44:5d:91:ce:ea:3a:96:57:28:87:04:fe:05: 5b:ca:ce:42:ee:1a:18:31:1b:58:0c:38:90:a3:a2:ca:49:41: 1d:91:52:44:10:2c:19:29:80:51:55:a7:e7:22:01:3b:ef:9a: 27:ad:0d:98:e1:fe:be:a3:53:70:53:b0:a6:c5:a8:00:09:bd: fa:63:08:a6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XOTxhhQtoU7WxrDnyvSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDM3YmJmNmNiY2EwMjI3M2FhNWUyMWJiODg4ZTNlMWVjNjc2N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCurQ1a70wcBOTvfDfNK2K+G+fc UX2uNS9eojNMpTNlbG5+1oQXP9/GLJDTrvUTMluNUix/So9uUEHG4vRac0IQZAxH qM9CV7FE/dR0qa+UteiAPklTIH6VrxYYeLbmI24tL2Fto4bmCIV9YAE8DEqLDdeg rbSc0Ln3q/HAnK2xDEgnGe44hXX+gTP7gZgiVIYLc9G4fn24P+ebwZ/2+4L25Ydw SGRFv5wgBSWrG8fkUh7fFfYLLH5ntBdqUi7TDvoC2vj4quUDTZX+I+XaHHAihxOO Znyaiv6TnlvOMrZGM8huIo84iT02Ja+swOn+DiegMqQV1wiVHYOsILTF2QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGA3u/bLygInOqXiG7iI4+HsZ2ffMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzY0ZTIw Yy04ZjYxLTQzNTEtODA3Ny1mYzNiM2UxMTE2MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvNjRlMjBj LThmNjEtNDM1MS04MDc3LWZjM2IzZTExMTYxZC8xL1lEZTc5c3ZLQWljNnBlSWJ1 SWpqNGV4blo5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVWcMA0EAgACMAcDBQMqBa2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRNTANBgkqhkiG9w0BAQsFAAOCAQEAY4uA6oGHNNVf 5QetvS+i1hrRNiy6Iffq6iI2XoHqIL59bJKJW5HAyMqzm4+q9HD2iXS5Xl+qEqc6 hO+0Z6LiJodiFhMt/g+NGI1nVoibxKK8gBQMe9zormJTm7zLKVpkxNQOtBjtXfHQ Jcl0DrtAdQIC/Bg55tf9/IHoOXAeVLzDQb60K2H8O3/PkcynM4K3RvCUMzPUSF7J ed43QHx8n721H6T0UVRfmzpxUiGHPdiEEBmYC6BLbdBEXZHO6jqWVyiHBP4FW8rO Qu4aGDEbWAw4kKOiyklBHZFSRBAsGSmAUVWn5yIBO++aJ60NmOH+vqNTcFOwpsWo AAm9+mMIpg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:00 2026 by rpki-client