This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer (raw, json) Hash identifier: N/bqJg7ke0s49A/J9Ezfp3cLueA6n/9m5O7NqrwDDb4= Subject key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A23DC9AE04351D7AB2BA163F6E0E88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.155.168.0/22 IP: 2a07:94c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3d:c9:ae:04:35:1d:7a:b2:ba:16:3f:6e:0e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:95:4f:a5:a2:c3:36:a7:ce:0a:5f:de:aa: db:64:f8:0f:b9:a8:18:26:5c:72:7f:d5:d0:c8:65: 03:b6:99:c2:a4:2d:d9:4a:56:ab:e1:90:ed:60:29: a0:69:e8:79:3c:4a:91:1a:bc:a6:c1:55:d0:57:c8: 09:5d:a8:80:9b:94:4a:a5:73:88:03:22:38:6d:4a: cb:93:39:17:a6:13:c2:d6:c1:58:aa:c2:07:79:21: d3:a7:58:bd:16:62:ea:6c:df:ef:7c:c3:58:15:56: af:3a:74:e2:3c:63:80:a8:b8:70:2b:ad:d7:fd:d8: 8b:c6:d8:27:9f:7e:96:91:ed:e3:d4:98:58:c9:51: 5e:43:8a:6b:28:d5:39:11:81:97:62:ec:66:ee:7c: a3:b7:f9:cf:19:ac:aa:03:0c:ee:1a:cd:9e:93:ea: a2:2b:41:27:1d:52:51:27:7f:1e:aa:07:20:53:55: f1:70:43:6c:31:d1:7c:97:78:49:39:59:82:91:8b: 7d:e6:3e:af:f0:0e:e9:da:bc:d8:39:14:ed:96:37: 21:f5:a4:bb:5e:45:54:67:b7:f6:23:21:26:57:e6: 64:05:4f:0e:71:16:38:b9:58:f0:ee:da:2a:5f:34: 03:b4:ba:93:67:24:ca:0c:f4:23:f1:d2:3a:94:32: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.168.0/22 IPv6: 2a07:94c0::/29 Signature Algorithm: sha256WithRSAEncryption 0c:26:63:a9:8b:5f:4e:15:74:af:21:40:30:a1:05:7c:b1:05: 97:be:49:3b:f2:80:6f:f9:de:24:0a:e7:83:e7:47:13:00:d2: bb:f3:76:9a:12:78:d5:4b:be:08:c6:36:40:57:23:be:9e:17: 67:34:97:8a:5d:28:12:2c:68:9c:4a:64:fe:ba:68:14:7f:00: af:54:cc:96:2d:32:e3:ee:58:8c:4d:97:2d:a9:d1:36:bb:bd: 8a:40:32:76:2a:38:0b:c2:72:87:94:1f:45:3c:37:f6:d5:4c: 86:4f:c2:fd:6e:12:48:19:fc:aa:60:ab:a7:52:2c:b1:c3:67: 0c:d3:13:5a:8d:ca:ca:38:58:93:5b:56:4b:0c:12:3a:5c:f2: 4e:8e:de:62:33:ac:ac:fe:20:fe:57:09:92:0b:23:d5:0f:a3: 28:c1:e0:6c:88:48:fc:69:18:b8:67:f8:a7:76:15:eb:37:15: 60:8a:9c:c8:43:55:17:40:6f:a9:d0:7f:7d:b7:60:10:40:af: ea:08:e5:f5:69:60:a1:1f:05:31:e6:86:9a:06:39:cf:92:f5: 79:08:4f:78:ac:d8:a2:94:c1:22:43:0c:5f:37:98:65:07:3e: 13:88:8f:30:22:a6:b8:27:3b:eb:1d:45:b4:bb:09:d2:06:87: ec:7f:bc:5c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4oj3JrgQ1HXqyuhY/bg6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjhmZTJkMjM0M2NmMjhlMjI3YjU0ZjgwNGIyY2UwMzJkM2QxODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTKVT6Wiwzanzgpf3qrbZPgPuagY Jlxyf9XQyGUDtpnCpC3ZSlar4ZDtYCmgaeh5PEqRGrymwVXQV8gJXaiAm5RKpXOI AyI4bUrLkzkXphPC1sFYqsIHeSHTp1i9FmLqbN/vfMNYFVavOnTiPGOAqLhwK63X /diLxtgnn36Wke3j1JhYyVFeQ4prKNU5EYGXYuxm7nyjt/nPGayqAwzuGs2ek+qi K0EnHVJRJ38eqgcgU1XxcENsMdF8l3hJOVmCkYt95j6v8A7p2rzYORTtljch9aS7 XkVUZ7f2IyEmV+ZkBU8OcRY4uVjw7toqXzQDtLqTZyTKDPQj8dI6lDIOoQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGKP4tI0PPKOIntU+ASyzgMtPRiVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzlhZGJl NC0zMzYzLTQ1MjMtOTI3OC0yZjgxMjFhMjhiZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOWFkYmU0 LTMzNjMtNDUyMy05Mjc4LTJmODEyMWEyOGJmMC8xL1lvX2kwalE4OG80aWUxVDRC TExPQXkwOUdKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZuoMA0EAgACMAcDBQMqB5TAMA0GCSqGSIb3 DQEBCwUAA4IBAQAMJmOpi19OFXSvIUAwoQV8sQWXvkk78oBv+d4kCueD50cTANK7 83aaEnjVS74IxjZAVyO+nhdnNJeKXSgSLGicSmT+umgUfwCvVMyWLTLj7liMTZct qdE2u72KQDJ2KjgLwnKHlB9FPDf21UyGT8L9bhJIGfyqYKunUiyxw2cM0xNajcrK OFiTW1ZLDBI6XPJOjt5iM6ys/iD+VwmSCyPVD6MoweBsiEj8aRi4Z/indhXrNxVg ipzIQ1UXQG+p0H99t2AQQK/qCOX1aWChHwUx5oaaBjnPkvV5CE94rNiilMEiQwxf N5hlBz4TiI8wIqa4JzvrHUW0uwnSBofsf7xc -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:12 2026 by rpki-client