This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer File: YxkpXTrafm6zKYRJYcqhACyqTYY.cer (raw, json) Hash identifier: nWApvQsaTiEcuLT9iGrXS6tDPKO02GdpJFB1FQt5Oow= Subject key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80646539FAFE649816EEF8F962D3C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199131 IP: 91.244.229.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:65:39:fa:fe:64:98:16:ee:f8:f9:62:d3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6319295d3ada7e6eb329844961caa1002caa4d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:71:59:ae:50:2e:a5:5f:e7:cf:54:b3:05: e5:e3:28:9b:9a:f6:5d:16:40:4d:5b:4b:b5:0c:76: 1a:10:1a:0e:18:0f:28:61:b1:c4:0e:e7:50:3c:96: eb:fc:e0:d4:8c:a6:16:d6:9b:66:96:c0:dd:e8:ed: a4:0c:76:74:0f:6e:01:5d:22:94:82:61:2b:ed:d1: 53:49:c7:28:c0:86:b8:5a:eb:0a:f0:fc:b4:76:0a: e8:cb:35:af:e8:70:fe:6c:63:56:ea:a7:b1:06:5e: a6:72:f4:9c:bc:fb:d9:31:e1:e5:6e:a9:86:63:b8: 58:be:9a:fb:28:26:f4:b5:27:3e:f5:3f:c1:32:1e: fc:a8:1c:fe:a6:18:11:ec:0d:dd:52:47:69:ba:51: 1e:c1:18:05:17:cc:f6:b7:d7:da:ca:c1:01:d2:de: 2d:43:d5:1d:ae:aa:3a:e2:79:c0:dd:1c:ef:0f:1e: ea:1a:0e:29:0d:1a:83:5d:dd:0b:68:cf:1a:3d:a5: ee:f8:a5:6d:bc:c8:b5:1d:3f:00:a5:06:4f:81:75: 4b:df:87:41:63:d6:70:e2:c2:0a:d3:52:dd:9f:4e: dc:5e:c0:ac:21:9b:0e:68:cd:74:56:97:e0:5d:bb: 18:09:2b:47:9b:59:88:c8:f6:07:ac:3a:5a:13:0d: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.229.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199131 Signature Algorithm: sha256WithRSAEncryption 4d:e6:d0:0e:31:68:d6:ea:ea:35:a1:f8:79:3a:67:1c:f3:1f: aa:72:5b:18:44:0a:e4:75:fa:3a:02:d3:2a:d2:0e:ef:16:0f: d5:e9:2c:3e:bd:b0:e4:41:c8:8a:1e:5d:d1:29:03:43:af:2a: 09:7d:30:87:4d:fd:0a:38:38:43:98:f7:56:60:7a:3d:ed:ae: f7:2e:c3:c6:ad:06:12:78:39:68:84:bc:92:65:b0:df:d0:cb: 36:10:3d:37:5a:b4:ca:29:4a:1c:10:95:49:61:32:ba:af:b3: 22:6b:e0:74:15:03:2b:7e:9b:f4:c1:12:1c:af:9d:d9:e1:0f: 42:22:b3:22:74:33:1d:38:1d:30:54:17:82:a8:34:20:20:bb: f4:27:cf:6c:6b:9b:ab:4d:e8:82:19:f8:b2:d6:af:cd:19:15: ba:8c:0f:ef:be:0f:53:ed:48:40:75:5d:46:e0:f2:00:dd:58: a3:00:b5:31:75:3d:75:c0:07:56:eb:05:fe:9e:d9:c4:90:91: 29:72:1e:86:1b:64:a4:2d:fc:13:c7:e2:04:25:2c:0f:99:cd: eb:ac:d3:ed:e8:1a:70:4f:3f:a3:8a:9f:58:7e:8d:5c:f8:2d: 2b:8d:cf:b6:77:a4:9e:4b:46:cd:09:62:ab:34:4f:65:33:56: ab:27:f5:7e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gGRlOfr+ZJgW7vj5YtPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzE5Mjk1ZDNhZGE3ZTZlYjMyOTg0NDk2MWNhYTEwMDJjYWE0ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw5xWa5QLqVf589UswXl4yibmvZd FkBNW0u1DHYaEBoOGA8oYbHEDudQPJbr/ODUjKYW1ptmlsDd6O2kDHZ0D24BXSKU gmEr7dFTSccowIa4WusK8Py0dgroyzWv6HD+bGNW6qexBl6mcvScvPvZMeHlbqmG Y7hYvpr7KCb0tSc+9T/BMh78qBz+phgR7A3dUkdpulEewRgFF8z2t9faysEB0t4t Q9Udrqo64nnA3RzvDx7qGg4pDRqDXd0LaM8aPaXu+KVtvMi1HT8ApQZPgXVL34dB Y9Zw4sIK01Ldn07cXsCsIZsOaM10VpfgXbsYCStHm1mIyPYHrDpaEw0PywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGMZKV062n5usymESWHKoQAsqk2GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzI2Y2M5 Mi04YmY3LTQ4ZTAtOTM3YS03ZTRlMmY4YjViMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMjZjYzky LThiZjctNDhlMC05MzdhLTdlNGUyZjhiNWIxNi8xL1l4a3BYVHJhZm02ektZUkpZ Y3FoQUN5cVRZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/TlMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMJ2zANBgkqhkiG9w0BAQsFAAOCAQEATebQDjFo1urqNaH4eTpnHPMfqnJbGEQK 5HX6OgLTKtIO7xYP1eksPr2w5EHIih5d0SkDQ68qCX0wh039Cjg4Q5j3VmB6Pe2u 9y7Dxq0GEng5aIS8kmWw39DLNhA9N1q0yilKHBCVSWEyuq+zImvgdBUDK36b9MES HK+d2eEPQiKzInQzHTgdMFQXgqg0ICC79CfPbGubq03oghn4stavzRkVuowP774P U+1IQHVdRuDyAN1YowC1MXU9dcAHVusF/p7ZxJCRKXIehhtkpC38E8fiBCUsD5nN 66zT7egacE8/o4qfWH6NXPgtK43PtneknktGzQliqzRPZTNWqyf1fg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:47 2026 by rpki-client