This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer File: YooI4osxu-XBgS_akOfoyKSDNeg.cer (raw, json) Hash identifier: WGrzKDf5iR/C5dmd7OfZ6+l3IAtoq3SXckZKRYl4Rqg= Subject key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3941A95FC2A455D69FAE63958012F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43371 AS: 199494 IP: 83.142.216.0/21 IP: 91.201.88.0/22 IP: 176.115.80.0/21 IP: 193.0.192.0 -- 193.0.197.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:94:1a:95:fc:2a:45:5d:69:fa:e6:39:58:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:1a:2f:90:80:8e:84:7a:69:c1:be:90:33: 7e:3a:d6:c5:7d:2a:1c:14:a6:0b:71:fe:54:a1:c0: ea:86:ef:3c:4a:cb:af:03:21:64:cb:52:6f:e3:27: 51:29:cf:df:4c:ef:e1:2a:47:51:7a:bc:ec:ef:6e: ca:d5:8b:14:00:cf:fb:9e:2f:a4:3b:0d:82:11:3e: 66:0c:94:a5:0e:b3:59:9d:88:f8:71:a9:ab:72:06: 3e:f4:72:31:af:f4:10:8b:ea:5d:52:f6:c1:ae:b7: 3d:66:54:2a:c5:4b:01:ce:88:e1:32:6a:0d:8b:c5: 59:d4:78:67:d0:11:4a:94:d4:c3:2d:a4:45:4f:3d: 91:a9:42:d6:18:2d:81:95:54:da:5a:85:59:fb:ea: 5c:4d:29:81:40:01:4b:db:4e:01:39:0c:dd:10:64: 44:04:ea:3f:41:cf:20:0e:44:3e:36:1e:1b:3a:b9: f8:d1:ce:ff:e2:f2:07:73:8e:83:70:be:8e:ce:d0: 2d:9b:1e:76:2d:b4:33:2f:b2:7b:78:09:04:b9:89: ac:a4:93:a9:83:fb:85:cf:af:eb:eb:c6:a9:20:60: f5:fc:16:15:50:c0:49:b7:9d:57:3e:40:b2:40:f9: 53:1c:80:71:3f:04:58:e9:30:ef:09:1a:71:b1:f5: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.142.216.0/21 91.201.88.0/22 176.115.80.0/21 193.0.192.0-193.0.197.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43371 199494 Signature Algorithm: sha256WithRSAEncryption 9a:10:72:5c:c5:63:66:85:dc:68:9a:61:60:c6:d5:79:97:f4: ff:bc:39:81:99:29:16:b5:8e:3e:3e:a0:1c:40:54:d9:c6:3a: 69:14:27:0d:ba:9c:3e:8a:23:fd:3f:a2:0a:de:f8:cf:cb:ba: 3b:da:62:9c:72:fc:ef:8a:1b:d3:ac:fb:b6:b6:2f:9e:e9:13: 83:0d:d8:4e:02:86:87:00:99:9d:86:e6:56:5e:28:07:73:17: 94:c1:82:0d:8a:0d:df:82:c1:25:8b:5a:83:ef:94:da:e2:47: 64:36:60:fb:b1:ae:6f:c7:37:2b:9b:fb:46:01:9e:43:d9:8a: f8:4b:b9:19:18:24:bc:e9:e0:98:48:60:1a:e0:66:3b:21:03: 41:12:86:06:83:29:8e:ab:bb:cc:12:6b:0e:42:9e:1b:e3:e3: 73:f5:2f:da:d9:52:55:a1:5e:32:97:bf:38:69:5b:dd:05:ab: 81:97:23:f1:31:4a:1f:9d:36:a8:2e:31:0a:21:01:fd:0b:b5: 7c:3e:8c:a7:94:c0:b6:43:e6:ec:11:47:74:ed:8d:e9:0f:09: 06:d5:98:33:fa:f3:3a:3e:0d:b7:01:ea:0f:e9:78:d1:26:ed: c6:da:13:79:0f:2d:f5:51:8e:e3:b4:e9:bb:fa:f0:25:d2:5f: 90:55:03:0b -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt7o5QalfwqRV1p+uY5WAEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjhhMDhlMjhiMzFiYmU1YzE4MTJmZGE5MGU3ZThjOGE0ODMzNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAwaL5CAjoR6acG+kDN+OtbFfSoc FKYLcf5UocDqhu88SsuvAyFky1Jv4ydRKc/fTO/hKkdRerzs727K1YsUAM/7ni+k Ow2CET5mDJSlDrNZnYj4camrcgY+9HIxr/QQi+pdUvbBrrc9ZlQqxUsBzojhMmoN i8VZ1Hhn0BFKlNTDLaRFTz2RqULWGC2BlVTaWoVZ++pcTSmBQAFL204BOQzdEGRE BOo/Qc8gDkQ+Nh4bOrn40c7/4vIHc46DcL6OztAtmx52LbQzL7J7eAkEuYmspJOp g/uFz6/r68apIGD1/BYVUMBJt51XPkCyQPlTHIBxPwRY6TDvCRpxsfUHpwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFGKKCOKLMbvlwYEv2pDn6MikgzXoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5Lzg2OTMy NS0xMmMyLTRmYzAtYjE5Yi0wYTFkNGMwMjJlNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvODY5MzI1 LTEyYzItNGZjMC1iMTliLTBhMWQ0YzAyMmU1MS8xL1lvb0k0b3N4dS1YQmdTX2Fr T2ZveUtTRE5lZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAmBAIAATAgAwQDU47YAwQCW8lYAwQDsHNQMAwDBAbBAMADBAHB AMQwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAKlrAgMDC0YwDQYJKoZIhvcNAQEL BQADggEBAJoQclzFY2aF3GiaYWDG1XmX9P+8OYGZKRa1jj4+oBxAVNnGOmkUJw26 nD6KI/0/ogre+M/LujvaYpxy/O+KG9Os+7a2L57pE4MN2E4ChocAmZ2G5lZeKAdz F5TBgg2KDd+CwSWLWoPvlNriR2Q2YPuxrm/HNyub+0YBnkPZivhLuRkYJLzp4JhI YBrgZjshA0EShgaDKY6ru8wSaw5Cnhvj43P1L9rZUlWhXjKXvzhpW90Fq4GXI/Ex Sh+dNqguMQohAf0LtXw+jKeUwLZD5uwRR3TtjekPCQbVmDP68zo+DbcB6g/peNEm 7cbaE3kPLfVRjuO06bv68CXSX5BVAws= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:14 2026 by rpki-client