This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer File: YiJ2252bNM3sJiDHJX3FrUrrgy0.cer (raw, json) Hash identifier: rff4G5cBSJOLWKI0EDKca11LLARCjnlyaN2pLGAmg64= Subject key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B24D5E152B27BEDE2550351B0FB52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.142.248.0/22 IP: 193.53.2.0/24 IP: 193.53.5.0/24 IP: 193.53.7.0/24 IP: 193.53.12.0/24 IP: 2a0e:dd40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:24:d5:e1:52:b2:7b:ed:e2:55:03:51:b0:fb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:22:f0:e9:85:86:1e:e9:35:80:9d:06:3d: f6:07:1f:36:af:95:3e:1e:37:6c:f2:36:75:f9:5e: ba:6c:bd:1e:b4:86:60:a2:9a:19:d5:97:7c:c3:fb: aa:dc:cf:7e:c6:62:58:d4:16:69:4d:69:69:5a:ca: 84:9b:4c:65:c0:bd:b1:86:17:03:e3:8e:4f:f4:0c: 5c:41:c5:9c:36:61:52:01:8e:8b:90:3e:f3:66:fc: aa:77:86:b1:3f:f7:99:4a:36:7b:13:7c:9d:80:5b: 24:68:44:62:c6:7c:65:56:e6:0f:9e:a7:42:02:6b: e8:86:28:bd:50:2b:0c:5a:17:4d:fa:e9:06:4c:29: 67:70:90:11:bf:97:68:a3:07:0e:bc:2c:d2:2b:74: 3b:d0:dc:13:c4:45:46:bd:2f:93:dd:ad:e3:c0:b1: 8c:69:66:2c:29:35:cd:fd:9c:4e:a4:a4:68:30:1e: 9f:e3:92:92:50:14:7c:84:10:24:27:23:7b:e7:6a: cb:b6:a8:ff:59:fd:dd:1d:e8:87:60:9b:d6:8c:4b: cf:a9:04:42:0e:66:d7:eb:76:86:6c:ea:67:69:ab: ed:72:d9:98:0a:ca:79:95:d1:b5:bb:f7:82:45:3b: 7c:9b:2d:2c:52:6e:19:73:60:bf:88:c6:06:dc:5b: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.248.0/22 193.53.2.0/24 193.53.5.0/24 193.53.7.0/24 193.53.12.0/24 IPv6: 2a0e:dd40::/32 Signature Algorithm: sha256WithRSAEncryption 0a:f0:b2:66:15:56:42:9b:6a:c8:cf:ce:0b:d6:22:fe:20:ed: c5:db:a3:28:d5:10:5c:ca:a9:d3:e5:b0:57:85:1b:e5:86:21: 41:c5:46:07:f2:0e:04:50:2f:75:43:5f:49:fe:c6:03:f4:e5: e7:bb:25:3f:ff:e7:03:a8:c0:bf:07:b1:e0:97:74:95:99:64: d2:9c:d0:aa:bc:33:24:20:44:09:09:a1:19:0b:de:4f:e8:b7: 92:a6:3b:cb:b1:13:34:4c:73:13:53:41:35:01:d9:7e:66:ed: b7:72:03:39:c2:47:b0:c3:90:64:dd:2c:6c:09:b4:f4:2e:81: bd:49:74:35:4d:dd:56:a3:8d:53:55:aa:ce:35:0b:5e:6f:14: 99:7f:1e:f4:f1:68:c4:9c:a2:03:e2:fd:bc:7f:bb:78:76:90: 66:64:58:d4:2e:06:c4:63:70:e1:9f:74:bc:63:a5:2d:f6:61: 49:97:03:4a:63:37:5c:15:d1:ca:3d:50:2c:e1:92:d2:38:5f: 38:73:c7:c8:d3:4f:bb:af:8b:45:0c:ad:03:c9:bc:a0:36:4f: 26:6b:e8:f3:6e:d3:3b:c9:4d:6f:11:88:d1:0f:df:9d:89:20: 3b:5a:0d:d5:db:07:2a:40:00:85:f1:67:27:6f:07:4d:0f:98: 8e:8f:b6:14 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt6WyTV4VKye+3iVQNRsPtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjIyNzZkYjlkOWIzNGNkZWMyNjIwYzcyNTdkYzVhZDRhZWI4MzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveUi8OmFhh7pNYCdBj32Bx82r5U+ Hjds8jZ1+V66bL0etIZgopoZ1Zd8w/uq3M9+xmJY1BZpTWlpWsqEm0xlwL2xhhcD 445P9AxcQcWcNmFSAY6LkD7zZvyqd4axP/eZSjZ7E3ydgFskaERixnxlVuYPnqdC Amvohii9UCsMWhdN+ukGTClncJARv5doowcOvCzSK3Q70NwTxEVGvS+T3a3jwLGM aWYsKTXN/ZxOpKRoMB6f45KSUBR8hBAkJyN752rLtqj/Wf3dHeiHYJvWjEvPqQRC DmbX63aGbOpnaavtctmYCsp5ldG1u/eCRTt8my0sUm4Zc2C/iMYG3FvoEwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFGIidtudmzTN7CYgxyV9xa1K64MtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzg3YWEz ZC1jYTVlLTQ1MTMtYWE5ZS1lNmVlNTgzNGM5OTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvODdhYTNk LWNhNWUtNDUxMy1hYTllLWU2ZWU1ODM0Yzk5NS8xL1lpSjIyNTJiTk0zc0ppREhK WDNGclVycmd5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCLY74AwQAwTUCAwQAwTUFAwQAwTUHAwQAwTUM MA0EAgACMAcDBQAqDt1AMA0GCSqGSIb3DQEBCwUAA4IBAQAK8LJmFVZCm2rIz84L 1iL+IO3F26Mo1RBcyqnT5bBXhRvlhiFBxUYH8g4EUC91Q19J/sYD9OXnuyU//+cD qMC/B7Hgl3SVmWTSnNCqvDMkIEQJCaEZC95P6LeSpjvLsRM0THMTU0E1Adl+Zu23 cgM5wkeww5Bk3SxsCbT0LoG9SXQ1Td1Wo41TVarONQtebxSZfx708WjEnKID4v28 f7t4dpBmZFjULgbEY3Dhn3S8Y6Ut9mFJlwNKYzdcFdHKPVAs4ZLSOF84c8fI00+7 r4tFDK0DybygNk8ma+jzbtM7yU1vEYjRD9+diSA7Wg3V2wcqQACF8WcnbwdND5iO j7YU -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:25 2026 by rpki-client