This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer File: _yNu-MNnK1qw0si3J_fkUU6EV0s.cer (raw, json) Hash identifier: 0tWqmiDNzLgCZ9rudvYVQJtqBmIaev0NDJm3wMMLmBk= Subject key identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C07D9107C03D4B5C072C085E4F387758B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 29 Jan 2026 03:43:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48529 IP: 212.47.42.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:07:d9:10:7c:03:d4:b5:c0:72:c0:85:e4:f3:87:75:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 29 03:43:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:df:fa:b1:da:42:27:a0:ec:04:20:b2:e3: 77:df:30:35:ef:2f:49:9d:3d:f1:1c:c7:f7:01:e4: cf:84:09:56:72:8d:3f:b5:5b:40:84:a5:64:68:b8: 48:88:a6:ce:c0:43:12:17:c3:a0:40:41:0d:75:75: b2:f2:4f:01:cb:ad:c8:33:32:d8:eb:19:23:0b:39: 86:5b:eb:35:6c:2f:f7:66:ae:85:22:ac:e6:28:8d: 27:e8:6b:6b:ea:1d:ef:c6:12:b3:fd:ed:35:95:d8: fc:9b:de:31:5c:19:b5:f8:9b:71:28:64:d4:db:d7: c9:77:c8:6c:cb:9d:55:d4:b5:28:e3:c5:0e:33:c3: fa:23:c7:a2:7d:e0:dd:1b:26:1d:62:97:6f:18:bc: 19:1d:50:b4:8b:4b:6f:22:a7:78:c2:5a:dc:3b:20: 75:86:f7:db:39:af:9a:f0:e0:df:c5:a1:eb:f8:52: 23:1c:a8:f7:e3:e9:6d:f2:70:c0:da:6a:59:38:e5: 61:93:5f:30:37:49:f4:89:51:e6:77:d1:9b:91:b5: 74:22:4c:d6:bd:5e:f9:0a:4f:8b:f2:fe:b6:f4:2f: df:17:5d:c7:3b:61:27:5d:aa:e0:3d:e1:bf:c8:a6: 17:3c:d6:56:a1:a2:ef:43:4b:c9:bd:61:4f:8b:ae: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.47.42.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48529 Signature Algorithm: sha256WithRSAEncryption 0e:5d:b6:bc:6c:88:e8:e0:86:7b:bd:62:e7:0b:14:79:48:8d: 7a:29:5a:b3:9d:14:bf:3f:bf:55:78:54:70:86:5c:12:af:23: a9:d0:da:46:1b:d1:81:62:d2:bc:d5:96:c2:ff:ef:2f:fb:4f: fa:0d:23:57:27:ed:a8:bf:ca:e3:ae:91:9d:cc:bb:6e:2e:49: d6:28:2e:d9:1a:2a:ee:58:44:5f:3d:e0:5b:06:8e:9d:ac:85: 33:72:e5:54:7b:03:1b:f6:dd:48:ce:af:f8:24:72:cd:39:4f: 94:f2:6b:09:e2:26:d3:60:23:a0:6e:9f:cf:c5:96:8e:41:75: 93:17:95:fc:bb:83:db:b6:1e:fa:ea:fd:4b:74:1d:cd:85:f2: 15:31:f2:b6:70:42:39:45:8a:54:7c:85:06:7e:0a:12:07:14: f7:42:24:ea:0e:6b:52:ca:41:24:20:a2:d6:fd:10:04:4f:79: 41:8e:0c:89:51:bf:03:be:89:a8:fe:8b:95:84:ed:42:17:90: e3:b9:ca:da:ad:15:7a:1f:17:67:e6:f8:af:0c:28:67:48:6b: a1:b3:c9:01:0e:a7:9b:89:3c:10:4c:a6:3b:56:a0:91:55:1b: 82:ef:a9:62:f1:fb:12:87:41:2d:81:db:db:26:14:0d:24:ae: c1:f5:84:d1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZwH2RB8A9S1wHLAheTzh3WLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI5MDM0MzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjIzNmVmOGMzNjcyYjVhYjBkMmM4YjcyN2Y3ZTQ1MTRlODQ1NzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLf+rHaQieg7AQgsuN33zA17y9J nT3xHMf3AeTPhAlWco0/tVtAhKVkaLhIiKbOwEMSF8OgQEENdXWy8k8By63IMzLY 6xkjCzmGW+s1bC/3Zq6FIqzmKI0n6Gtr6h3vxhKz/e01ldj8m94xXBm1+JtxKGTU 29fJd8hsy51V1LUo48UOM8P6I8eifeDdGyYdYpdvGLwZHVC0i0tvIqd4wlrcOyB1 hvfbOa+a8ODfxaHr+FIjHKj34+lt8nDA2mpZOOVhk18wN0n0iVHmd9GbkbV0IkzW vV75Ck+L8v629C/fF13HO2EnXargPeG/yKYXPNZWoaLvQ0vJvWFPi66LWQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP8jbvjDZytasNLItyf35FFOhFdLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2JhZTY0 Ny04MmZiLTRhYTktOTAyOS0yM2EwNTZlMWQyZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvYmFlNjQ3 LTgyZmItNGFhOS05MDI5LTIzYTA1NmUxZDJmMS8xL195TnUtTU5uSzFxdzBzaTNK X2ZrVVU2RVYwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1C8qMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9kTANBgkqhkiG9w0BAQsFAAOCAQEADl22vGyI6OCGe71i5wsUeUiNeilas50U vz+/VXhUcIZcEq8jqdDaRhvRgWLSvNWWwv/vL/tP+g0jVyftqL/K466Rncy7bi5J 1igu2Roq7lhEXz3gWwaOnayFM3LlVHsDG/bdSM6v+CRyzTlPlPJrCeIm02AjoG6f z8WWjkF1kxeV/LuD27Ye+ur9S3QdzYXyFTHytnBCOUWKVHyFBn4KEgcU90Ik6g5r UspBJCCi1v0QBE95QY4MiVG/A76JqP6LlYTtQheQ47nK2q0Veh8XZ+b4rwwoZ0hr obPJAQ6nm4k8EEymO1agkVUbgu+pYvH7EodBLYHb2yYUDSSuwfWE0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:26 2026 by rpki-client