This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer File: Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer (raw, json) Hash identifier: r5qbQQPGXutsww60yYbG+ZMWklfQolMl3zy+EZ9XwpA= Subject key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7090531F198F6C0B2A81EF6F9B84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215242 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:70:90:53:1f:19:8f:6c:0b:2a:81:ef:6f:9b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9a:eb:9b:44:ba:c8:81:af:39:2b:73:60:d1: f3:24:9c:d9:db:9e:01:6f:2a:9b:c9:dd:eb:76:dc: c2:78:fa:f9:01:93:2d:bf:d8:9b:a4:f5:9a:6b:db: e6:41:34:e9:b6:36:bf:db:db:28:10:fe:bd:3e:40: ee:65:cc:00:50:42:4e:49:1a:f5:34:03:76:9c:34: 46:a9:a3:d5:b1:4e:28:72:33:d1:cb:2b:de:88:d0: e0:35:6d:72:86:c8:08:2e:a6:68:89:53:86:d3:31: f6:ec:c5:72:72:b3:12:c9:04:11:99:33:4f:83:46: 4f:2f:61:c9:04:66:40:5d:6b:a6:71:cd:13:9e:c7: 98:79:1c:dc:e8:94:60:94:68:09:77:8c:25:56:68: f9:55:39:00:a4:09:95:e7:46:53:4a:26:5f:b4:0b: e4:af:8a:7f:18:09:b0:17:91:e9:df:c2:68:ba:85: df:b5:07:af:75:e9:90:55:85:7f:58:9c:ad:83:c9: 22:4f:97:6b:ec:96:bb:4b:a6:6a:73:10:96:ed:ae: 1b:2f:aa:ff:ac:33:31:75:1f:e0:05:1c:9b:52:dc: 70:a4:99:1f:46:07:ba:3e:39:f1:b1:93:b1:2f:70: 3e:db:49:81:dd:a4:29:bf:c9:6c:5c:56:5e:8f:ff: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215242 Signature Algorithm: sha256WithRSAEncryption 8f:d1:26:00:1d:5f:51:68:47:61:a0:14:84:95:4e:55:e5:e0: 83:17:f1:f3:fd:6f:be:c8:f9:b6:6c:b4:3b:d5:67:d8:2f:63: 0a:89:47:dd:b0:26:b4:bc:17:ce:76:b6:3c:59:53:04:ac:a2: dc:ab:ef:0b:65:4d:38:3f:23:db:ac:2e:01:e4:be:73:94:9d: 5e:d0:de:4f:b8:90:b0:f8:a1:69:af:fa:d5:cf:ca:9e:fd:0d: 07:a2:53:27:1f:ad:7b:8b:19:df:b6:d2:d9:0a:5b:98:9c:1b: 62:d2:e1:1e:5e:b0:f4:9c:12:44:06:8d:fe:a1:ea:94:21:cd: 31:0c:b1:bb:ea:93:71:e7:2e:51:49:cd:bb:2e:fd:04:20:5e: e4:20:6e:18:55:ca:60:f8:0e:b9:2c:f6:8e:33:ee:df:61:1a: ed:b0:eb:b0:90:37:c1:db:d7:ab:50:ed:11:7d:f1:1d:9a:17: 06:35:c3:b3:42:63:b0:3b:24:e8:fe:15:2a:02:61:22:77:d2: e9:48:d2:3e:c9:17:31:3c:b6:98:d0:05:a9:e3:39:75:67:6e: 1d:41:d5:a5:60:13:73:d1:9e:24:70:03:89:d6:c9:86:93:34: 1d:5c:7b:2a:01:38:d4:29:44:a7:f6:00:02:6c:4e:3c:f7:ef: 73:79:67:8d -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt263CQUx8Zj2wLKoHvb5uEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Y3YjI5MzcxZTgxNDMzNmM1MmQ5YzQzZDFhZjRmOWZhMzNlODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5prrm0S6yIGvOStzYNHzJJzZ254B byqbyd3rdtzCePr5AZMtv9ibpPWaa9vmQTTptja/29soEP69PkDuZcwAUEJOSRr1 NAN2nDRGqaPVsU4ocjPRyyveiNDgNW1yhsgILqZoiVOG0zH27MVycrMSyQQRmTNP g0ZPL2HJBGZAXWumcc0TnseYeRzc6JRglGgJd4wlVmj5VTkApAmV50ZTSiZftAvk r4p/GAmwF5Hp38JouoXftQevdemQVYV/WJytg8kiT5dr7Ja7S6ZqcxCW7a4bL6r/ rDMxdR/gBRybUtxwpJkfRge6PjnxsZOxL3A+20mB3aQpv8lsXFZej//+3wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFGP3spNx6BQzbFLZxD0a9Pn6M+hVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2QwNjMz M2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDA2 MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0MmUxLzMvNjNGN0IyOTM3MUU4 MTQzMzZDNTJEOUM0M0QxQUY0RjlGQTMzRTg1NS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSMow DQYJKoZIhvcNAQELBQADggEBAI/RJgAdX1FoR2GgFISVTlXl4IMX8fP9b77I+bZs tDvVZ9gvYwqJR92wJrS8F852tjxZUwSsotyr7wtlTTg/I9usLgHkvnOUnV7Q3k+4 kLD4oWmv+tXPyp79DQeiUycfrXuLGd+20tkKW5icG2LS4R5esPScEkQGjf6h6pQh zTEMsbvqk3HnLlFJzbsu/QQgXuQgbhhVymD4Drks9o4z7t9hGu2w67CQN8Hb16tQ 7RF98R2aFwY1w7NCY7A7JOj+FSoCYSJ30ulI0j7JFzE8tpjQBanjOXVnbh1B1aVg E3PRniRwA4nWyYaTNB1ceyoBONQpRKf2AAJsTjz373N5Z40= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:09 2026 by rpki-client