This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer File: Yj80T9SpG_rRODCNUnFVu85Sr24.cer (raw, json) Hash identifier: iedLwpGPs75uRAXsA2xg7T6Fkax+3EPL7u5F7Quhqi0= Subject key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC93981D43A2985E7303AF995522260 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8819 IP: 46.227.104.0/21 IP: 83.142.192.0/21 IP: 91.189.24.0/21 IP: 185.188.68.0/22 IP: 2a0e:6180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:39:81:d4:3a:29:85:e7:30:3a:f9:95:52:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=623f344fd4a91bfad138308d527155bbce52af6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:49:f0:6c:09:1a:65:41:39:33:04:5a:31: 07:a9:99:1d:17:fb:0b:80:22:ff:74:90:1a:a1:d0: ca:01:8e:33:0b:7f:97:d8:eb:3d:9a:a7:81:97:53: 76:26:35:14:de:ae:67:47:46:3d:d3:a5:35:b1:ab: a8:b1:f9:5f:93:a5:9a:6b:57:e3:e8:79:ab:83:2c: 3c:60:72:ae:66:0f:f7:88:24:4e:15:e1:d5:ea:b2: ec:98:cf:ed:66:a7:33:f0:3f:3e:21:5b:67:86:34: 11:87:ba:61:28:a8:7e:91:8d:83:93:9b:95:cc:34: 23:27:47:b7:a2:6c:23:d6:e5:b4:10:ef:cc:3e:be: 2e:b3:f4:dd:9b:2c:28:82:9d:58:f8:4c:97:20:f7: b8:ba:e2:71:e4:4a:6e:b6:4c:0b:af:71:38:ec:0a: 50:f4:ce:2c:bd:d2:eb:17:fe:37:b7:7c:68:82:1c: 1c:7e:19:60:3b:7b:d9:25:a4:b2:e4:25:67:3a:e0: 59:fe:d2:35:29:4d:34:84:cd:87:5e:ec:dc:a1:33: a1:e5:3f:c4:3e:3e:5e:8f:03:fd:7f:ba:a0:b5:71: 28:03:e4:5a:90:26:00:bf:7c:98:62:ec:bf:ad:83: 96:a3:e2:a4:ab:11:bf:c6:c2:7c:85:2f:a3:89:73: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.104.0/21 83.142.192.0/21 91.189.24.0/21 185.188.68.0/22 IPv6: 2a0e:6180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8819 Signature Algorithm: sha256WithRSAEncryption ab:8f:d0:05:85:fc:6a:ac:95:ea:33:74:4f:72:ac:93:d5:4a: 42:1a:60:7c:89:e1:15:d2:9a:4f:99:34:98:4a:53:f5:ac:25: 04:8e:f5:8a:6d:c2:5d:67:6c:76:e6:67:5e:84:91:0a:b2:d1: 7a:42:c3:68:a3:71:20:d2:24:cf:89:a8:d9:42:0f:48:9b:78: 06:17:82:87:f0:1e:88:06:fd:ba:1e:1c:b2:43:56:17:5f:6b: ed:68:90:6b:07:4d:7d:73:d5:c7:78:1f:a6:97:53:fc:d2:01: 32:98:d6:6e:98:fa:85:aa:7a:76:10:71:22:73:8a:d5:2a:7a: 4b:8d:2b:c6:97:cb:a5:99:a2:f9:79:68:1b:cb:d2:44:88:d0: a3:64:01:af:8d:12:9e:49:d6:40:f1:1b:5c:b3:6b:dc:e0:6b: 7c:94:e0:ec:c5:eb:65:4c:50:b5:21:cb:e3:ab:30:55:56:13: be:3a:9d:18:8e:84:cf:26:06:b3:52:07:d1:df:f9:d3:2f:70: 7a:b0:3f:d6:44:50:1b:0c:1c:77:c2:14:b4:31:a3:4f:bb:d4: d1:5a:ef:19:6d:c7:55:25:3a:5a:50:f3:1c:54:c5:b0:12:fb: d1:93:f4:23:19:0a:ee:50:b4:96:13:44:fc:cc:99:8e:2e:ad: 2b:d1:c8:65 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt9yTmB1DophecwOvmVUiJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjNmMzQ0ZmQ0YTkxYmZhZDEzODMwOGQ1MjcxNTViYmNlNTJhZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi5J8GwJGmVBOTMEWjEHqZkdF/sL gCL/dJAaodDKAY4zC3+X2Os9mqeBl1N2JjUU3q5nR0Y906U1sauosflfk6Waa1fj 6Hmrgyw8YHKuZg/3iCROFeHV6rLsmM/tZqcz8D8+IVtnhjQRh7phKKh+kY2Dk5uV zDQjJ0e3omwj1uW0EO/MPr4us/Tdmywogp1Y+EyXIPe4uuJx5EputkwLr3E47ApQ 9M4svdLrF/43t3xoghwcfhlgO3vZJaSy5CVnOuBZ/tI1KU00hM2HXuzcoTOh5T/E Pj5ejwP9f7qgtXEoA+RakCYAv3yYYuy/rYOWo+KkqxG/xsJ8hS+jiXOiLQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFGI/NE/UqRv60TgwjVJxVbvOUq9uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzEwNWRh MC0wYzdkLTQxNWQtOGQwMC1hMzRlODY3OWYzNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMTA1ZGEw LTBjN2QtNDE1ZC04ZDAwLWEzNGU4Njc5ZjM3NC8xL1lqODBUOVNwR19yUk9EQ05V bkZWdTg1U3IyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDLuNoAwQDU47AAwQDW70YAwQCubxEMA0EAgAC MAcDBQMqDmGAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiJzMA0GCSqGSIb3DQEB CwUAA4IBAQCrj9AFhfxqrJXqM3RPcqyT1UpCGmB8ieEV0ppPmTSYSlP1rCUEjvWK bcJdZ2x25mdehJEKstF6QsNoo3Eg0iTPiajZQg9Im3gGF4KH8B6IBv26HhyyQ1YX X2vtaJBrB019c9XHeB+ml1P80gEymNZumPqFqnp2EHEic4rVKnpLjSvGl8ulmaL5 eWgby9JEiNCjZAGvjRKeSdZA8Rtcs2vc4Gt8lODsxetlTFC1IcvjqzBVVhO+Op0Y joTPJgazUgfR3/nTL3B6sD/WRFAbDBx3whS0MaNPu9TRWu8ZbcdVJTpaUPMcVMWw EvvRk/QjGQruULSWE0T8zJmOLq0r0chl -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:05 2026 by rpki-client