This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer File: YT1eE3n-qdHQ9yVu0PyRg750_vs.cer (raw, json) Hash identifier: MUX7EKUJKi1zJs3wM+BGr02meSCzbgAzQXP+Nx+nAtM= Subject key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C133B7204BBBDA6463326223FA8DFFD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207335 IP: 185.106.133.0/24 IP: 2a10:1380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3b:72:04:bb:bd:a6:46:33:26:22:3f:a8:df:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b2:84:83:e1:b6:3f:4a:7a:04:8c:d0:bd:87: ee:8d:d0:39:8d:67:f7:4d:b3:5c:3d:a3:60:af:ab: 21:48:50:65:4d:87:80:61:e9:d5:3d:5a:5a:e3:1d: 53:f3:d1:19:d8:66:3e:12:e8:f4:97:9f:28:bf:be: f3:3a:1f:8f:ca:5e:a6:1b:9f:13:31:a5:80:03:c5: 3a:a5:8a:b0:6e:2b:c2:bb:22:d2:e6:7e:b2:9a:ee: 34:43:59:9e:47:6f:96:ec:03:01:3d:61:2b:95:35: 2f:3b:ed:10:4a:b6:9b:9d:56:16:a1:80:98:f8:58: c1:dd:78:a2:60:76:bd:63:ed:b1:3e:23:7c:23:eb: 53:96:d5:80:b5:9c:6d:22:2b:b3:51:a2:a9:5f:88: 6d:bf:99:06:e1:ae:bc:aa:20:d1:12:64:4d:d4:31: e0:e7:17:de:e3:e3:15:60:a9:f7:78:49:ee:37:e5: 4e:57:41:ae:9c:30:27:1a:ef:9f:20:82:ae:37:c7: 61:33:4b:6d:e0:b3:a5:29:b7:bd:c0:f0:39:af:84: 60:7b:7f:8b:34:fb:9c:bf:ca:c0:13:d5:64:10:b5: c1:54:26:69:e7:26:b4:0f:02:ec:85:a2:1f:e3:5f: f3:a7:24:67:ed:36:07:d2:7f:de:f2:d5:87:a5:bf: 11:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.133.0/24 IPv6: 2a10:1380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207335 Signature Algorithm: sha256WithRSAEncryption 52:f3:c2:b2:05:11:3c:38:9b:0e:ce:26:05:0c:3d:80:57:04: 9c:ce:1c:69:08:c6:55:8a:0b:7b:1e:58:99:19:e6:e5:5e:1f: 56:d7:c3:e1:f6:58:48:a8:40:33:17:65:2d:9d:54:e2:9c:e9: ef:0c:d2:8b:b9:1f:b6:50:93:93:c2:cb:35:d0:7c:52:88:1e: 93:20:5d:23:e3:20:3c:e7:e9:9d:b4:7d:9e:c4:1c:bb:a3:b2: 17:27:88:35:5f:c4:fc:cd:9e:b6:4a:5e:dd:e9:df:28:62:76: 42:a3:e6:ac:3e:16:fc:04:8b:85:dd:cf:ed:ef:b2:aa:dd:1b: bf:fa:da:d8:9d:db:5e:67:9c:4f:b1:f3:d1:82:43:f8:31:6d: bb:ca:67:ca:59:c5:b0:68:be:6f:5f:02:d0:6c:fc:d1:ff:1b: 6c:55:21:0d:d0:31:eb:ab:58:96:c8:48:c6:f4:00:6f:c2:37: 3b:d7:75:af:ee:1f:72:27:79:63:f4:ef:4e:6c:21:2e:d5:0a: 82:5f:cf:66:5d:6a:ea:ed:d5:0a:aa:a7:37:9b:a9:2b:e1:a1: 06:57:48:b7:24:ce:fe:2d:52:a6:12:f9:f6:82:95:49:0b:60: 8c:84:16:ff:34:a6:46:f3:18:d7:29:d3:9a:cf:4d:fb:9e:4c: 8c:07:2c:2e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EztyBLu9pkYzJiI/qN/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTNkNWUxMzc5ZmVhOWQxZDBmNzI1NmVkMGZjOTE4M2JlNzRmZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bKEg+G2P0p6BIzQvYfujdA5jWf3 TbNcPaNgr6shSFBlTYeAYenVPVpa4x1T89EZ2GY+Euj0l58ov77zOh+Pyl6mG58T MaWAA8U6pYqwbivCuyLS5n6ymu40Q1meR2+W7AMBPWErlTUvO+0QSrabnVYWoYCY +FjB3XiiYHa9Y+2xPiN8I+tTltWAtZxtIiuzUaKpX4htv5kG4a68qiDREmRN1DHg 5xfe4+MVYKn3eEnuN+VOV0GunDAnGu+fIIKuN8dhM0tt4LOlKbe9wPA5r4Rge3+L NPucv8rAE9VkELXBVCZp5ya0DwLshaIf41/zpyRn7TYH0n/e8tWHpb8RYwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGE9XhN5/qnR0PclbtD8kYO+dP77MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2ZkNjA3 MC05ZTBiLTQzM2EtOGE3NS03ZjczYTQ2NzFhMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZmQ2MDcw LTllMGItNDMzYS04YTc1LTdmNzNhNDY3MWExZS8xL1lUMWVFM24tcWRIUTl5VnUw UHlSZzc1MF92cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuWqFMA0EAgACMAcDBQMqEBOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMp5zANBgkqhkiG9w0BAQsFAAOCAQEAUvPCsgURPDib Ds4mBQw9gFcEnM4caQjGVYoLex5YmRnm5V4fVtfD4fZYSKhAMxdlLZ1U4pzp7wzS i7kftlCTk8LLNdB8UogekyBdI+MgPOfpnbR9nsQcu6OyFyeINV/E/M2etkpe3enf KGJ2QqPmrD4W/ASLhd3P7e+yqt0bv/ra2J3bXmecT7Hz0YJD+DFtu8pnylnFsGi+ b18C0Gz80f8bbFUhDdAx66tYlshIxvQAb8I3O9d1r+4fcid5Y/TvTmwhLtUKgl/P Zl1q6u3VCqqnN5upK+GhBldItyTO/i1SphL59oKVSQtgjIQW/zSmRvMY1ynTms9N +55MjAcsLg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:45 2026 by rpki-client