This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer File: _9YayMVuOP32EjgDbHNUcnADRjE.cer (raw, json) Hash identifier: eXVAxg8pdHJWSOTWHGzrybbH4kY7oUV1B84aThFcKHQ= Subject key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFA36B96482163F7F76F1591E9552 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58117 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fa:36:b9:64:82:16:3f:7f:76:f1:59:1e:95:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd61ac8c56e38fdf61238036c73547270034631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:e3:f2:63:ee:a4:ed:fa:e8:e9:f2:67:cd: b0:8a:84:bc:09:4d:a8:01:b9:ae:57:90:49:5c:9c: 51:a2:4c:92:dd:b9:fe:e6:ad:b5:92:27:b6:9f:e1: f6:20:f6:27:f5:2c:5d:0f:d0:df:f5:46:68:62:79: 02:76:b1:4b:d3:1d:50:5d:bc:32:9c:fb:da:cf:65: 52:b1:d6:69:2f:f6:b2:e8:08:17:c4:ec:9b:5d:5c: 5a:fc:d5:1e:5f:1f:7b:d3:e5:c5:fe:84:13:8a:08: 1b:f5:e5:f1:99:01:90:fd:b1:af:b8:b1:5e:64:42: f1:c2:9c:c1:49:f9:6c:42:9b:ab:9a:14:17:6a:e2: 3b:34:26:33:5e:9b:fc:ca:43:ff:ba:a9:fe:72:4f: 21:1a:7a:6f:53:f9:a3:a4:61:01:be:c6:96:14:15: e4:fe:81:6a:0f:bc:a6:1b:17:a8:d2:21:f5:6e:34: ea:97:84:48:5a:53:8a:44:a8:16:e2:6c:91:75:82: 21:27:e0:70:e6:0b:35:a7:4a:f6:20:5c:f7:8c:55: 4f:f9:e6:f8:87:88:3e:ac:9a:05:1a:03:ba:4f:ab: 3a:7a:04:27:c5:21:ce:81:ca:04:8c:19:dc:3b:b0: 05:6a:62:54:76:bc:38:25:63:0c:1b:25:a0:0b:b6: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 58117 Signature Algorithm: sha256WithRSAEncryption a7:ed:b9:8d:fe:3a:e1:66:c2:1d:66:3d:40:38:0d:41:06:4b: ab:a4:5b:d7:41:c0:89:f1:09:64:9a:b8:35:50:16:9f:e5:d7: cd:d2:ce:63:88:d3:6a:e3:78:c8:35:00:e6:0c:c8:13:c9:26: d7:1b:6a:b1:1d:af:89:4c:80:73:04:0b:a3:a7:1d:63:9e:c4: b3:a0:1f:e6:93:32:1a:92:2d:ee:26:c4:cc:20:d3:ec:f1:65: fd:f4:61:4e:94:81:9a:18:1f:17:8b:47:9a:2a:76:f2:8e:ce: 85:25:13:09:fd:ea:16:87:1f:94:71:8d:82:f9:74:be:52:44: 12:53:23:5b:7b:2c:7f:83:3d:2a:d6:aa:34:75:95:41:70:e9: 65:ed:77:e0:bf:70:ad:2f:d4:30:1e:23:c5:8b:f2:bc:23:dd: c9:99:a3:87:74:09:00:e0:07:fc:6f:c0:75:a8:81:74:25:6c: 3e:10:6d:6a:87:e3:58:09:bc:93:2e:d1:29:f5:38:97:d3:65: 0d:26:72:ae:ef:de:c9:cb:b9:67:85:60:f1:55:f9:0c:73:d5: 3e:73:1f:3d:c2:4b:aa:13:23:32:f1:bb:15:33:cb:7f:6f:99: 47:b9:9f:94:21:09:20:a5:b4:3a:a8:60:1d:83:50:ec:99:1b: b3:4d:43:2f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fvo2uWSCFj9/dvFZHpVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQ2MWFjOGM1NmUzOGZkZjYxMjM4MDM2YzczNTQ3MjcwMDM0NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArATj8mPupO366OnyZ82wioS8CU2o AbmuV5BJXJxRokyS3bn+5q21kie2n+H2IPYn9SxdD9Df9UZoYnkCdrFL0x1QXbwy nPvaz2VSsdZpL/ay6AgXxOybXVxa/NUeXx970+XF/oQTiggb9eXxmQGQ/bGvuLFe ZELxwpzBSflsQpurmhQXauI7NCYzXpv8ykP/uqn+ck8hGnpvU/mjpGEBvsaWFBXk /oFqD7ymGxeo0iH1bjTql4RIWlOKRKgW4myRdYIhJ+Bw5gs1p0r2IFz3jFVP+eb4 h4g+rJoFGgO6T6s6egQnxSHOgcoEjBncO7AFamJUdrw4JWMMGyWgC7ZXswIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP/WGsjFbjj99hI4A2xzVHJwA0YxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzE0ZDdi OC1hZmNlLTQ1YTEtYjI3Mi0wNGQ5NmZhODNkMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvMTRkN2I4 LWFmY2UtNDVhMS1iMjcyLTA0ZDk2ZmE4M2QwNy8xL185WWF5TVZ1T1AzMkVqZ0Ri SE5VY25BRFJqRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDjBTANBgkqhkiG9w0BAQsFAAOCAQEAp+25jf464WbC HWY9QDgNQQZLq6Rb10HAifEJZJq4NVAWn+XXzdLOY4jTauN4yDUA5gzIE8km1xtq sR2viUyAcwQLo6cdY57Es6Af5pMyGpIt7ibEzCDT7PFl/fRhTpSBmhgfF4tHmip2 8o7OhSUTCf3qFocflHGNgvl0vlJEElMjW3ssf4M9KtaqNHWVQXDpZe134L9wrS/U MB4jxYvyvCPdyZmjh3QJAOAH/G/AdaiBdCVsPhBtaofjWAm8ky7RKfU4l9NlDSZy ru/eycu5Z4Vg8VX5DHPVPnMfPcJLqhMjMvG7FTPLf2+ZR7mflCEJIKW0OqhgHYNQ 7Jkbs01DLw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:35 2026 by rpki-client