This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer (raw, json) Hash identifier: 4+97JONRlYUjZLv7fJ8iU54fuh7sdOlvRNIdOr/RfXc= Subject key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1242B5A8B35D41A0348BAE1585F0EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30839 IP: 91.213.90.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:42:b5:a8:b3:5d:41:a0:34:8b:ae:15:85:f0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7186e64b5823c4c61287858d9770c70df706b0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:3d:f2:b2:d6:5f:06:a2:cd:b9:94:cc:5a: d9:2c:bf:e8:84:30:21:ae:3d:a4:e2:8c:3c:e9:82: 98:db:75:30:9b:8d:0c:0f:6b:93:93:bb:88:61:ec: 2b:76:8c:d6:a2:bb:53:5c:1e:ed:4f:1e:35:66:d4: e9:0f:8b:b9:0c:8c:fb:f5:c1:02:f0:2a:57:5b:8c: d0:cf:5d:64:03:7a:40:44:8a:d2:fb:1a:53:90:1e: dd:2d:c5:e2:00:70:7f:08:b5:ad:66:54:e8:99:bf: 0c:1d:c6:d7:90:90:7d:4a:d8:a7:ca:2b:1a:ea:51: fb:d5:81:87:5c:5f:1e:6b:b2:8a:f3:4f:98:85:79: 0e:f6:10:d6:a3:06:c9:98:f5:dd:a0:00:76:ed:64: 2d:ef:c0:ca:49:ed:5c:82:71:2d:fe:38:df:1b:ea: b7:67:4d:50:c7:d0:a4:a4:84:af:09:c3:7e:8e:0f: 1e:d5:e8:20:46:5c:2f:43:b6:43:79:b9:6b:f9:24: 97:7b:6f:55:2f:91:bc:39:3b:1d:d4:42:1b:0d:fe: 01:aa:79:3a:56:2d:07:24:73:fc:51:09:6e:96:ac: a5:80:b5:79:bc:45:76:c7:46:83:52:e4:7b:91:9f: cd:21:ef:9e:cf:f9:a0:0a:ac:4c:06:bc:64:ed:f2: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.90.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30839 Signature Algorithm: sha256WithRSAEncryption 49:6b:3b:a5:2c:86:63:b9:c5:a9:8b:33:f1:41:14:55:b1:4d: 20:1a:70:3f:76:a0:bf:aa:af:62:31:b8:ca:74:00:f3:4f:c7: 11:95:98:bc:31:b9:31:7a:5b:eb:d0:ac:48:ae:fb:07:c8:9c: 38:32:f6:af:c6:31:c7:25:5b:6f:f7:12:6d:4e:e2:bb:7f:f9: 96:31:68:ba:b5:38:f4:d0:c6:6c:61:4d:ed:33:68:6a:a5:9f: ac:44:d7:15:61:3f:aa:a8:cb:16:e9:1c:99:66:00:27:44:db: df:8b:d7:59:98:a2:74:57:22:b1:7d:49:e4:67:ad:6b:0c:cf: 9a:30:fe:41:d8:a8:f1:03:ea:f5:ba:39:13:68:f7:d4:6b:9d: ce:f0:8b:f1:64:32:e0:cd:a3:4c:84:3e:c1:57:72:61:98:1a: 7f:ce:98:07:f1:36:66:3f:47:bb:51:6e:39:1a:a8:f1:45:65: 6c:53:00:78:07:ae:36:9f:b7:6c:39:46:94:a9:c4:0e:3e:86: 53:04:12:ba:c8:c1:64:7b:3c:9b:3d:4c:66:2d:08:4a:1d:1a: 8f:ee:26:8a:ce:66:75:89:f4:96:23:52:26:bd:59:5b:25:ad: 18:d1:b6:a6:b4:78:46:8e:5f:08:3b:d7:2a:c0:2e:2e:a9:0c: 27:7a:03:4c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8EkK1qLNdQaA0i64VhfDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTg2ZTY0YjU4MjNjNGM2MTI4Nzg1OGQ5NzcwYzcwZGY3MDZiMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonk98rLWXwaizbmUzFrZLL/ohDAh rj2k4ow86YKY23Uwm40MD2uTk7uIYewrdozWortTXB7tTx41ZtTpD4u5DIz79cEC 8CpXW4zQz11kA3pARIrS+xpTkB7dLcXiAHB/CLWtZlTomb8MHcbXkJB9Stinyisa 6lH71YGHXF8ea7KK80+YhXkO9hDWowbJmPXdoAB27WQt78DKSe1cgnEt/jjfG+q3 Z01Qx9CkpISvCcN+jg8e1eggRlwvQ7ZDeblr+SSXe29VL5G8OTsd1EIbDf4Bqnk6 Vi0HJHP8UQlulqylgLV5vEV2x0aDUuR7kZ/NIe+ez/mgCqxMBrxk7fLENwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHGG5ktYI8TGEoeFjZdwxw33BrDMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2EyMDk2 My1mYWQ3LTRlMzQtYmYxZS02NThiODAwYTVkNjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYTIwOTYz LWZhZDctNGUzNC1iZjFlLTY1OGI4MDBhNWQ2MS8xL2NZYm1TMWdqeE1ZU2g0V05s M0RIRGZjR3NNdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VaMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Anh3MA0GCSqGSIb3DQEBCwUAA4IBAQBJazulLIZjucWpizPxQRRVsU0gGnA/dqC/ qq9iMbjKdADzT8cRlZi8Mbkxelvr0KxIrvsHyJw4MvavxjHHJVtv9xJtTuK7f/mW MWi6tTj00MZsYU3tM2hqpZ+sRNcVYT+qqMsW6RyZZgAnRNvfi9dZmKJ0VyKxfUnk Z61rDM+aMP5B2KjxA+r1ujkTaPfUa53O8IvxZDLgzaNMhD7BV3JhmBp/zpgH8TZm P0e7UW45GqjxRWVsUwB4B642n7dsOUaUqcQOPoZTBBK6yMFkezybPUxmLQhKHRqP 7iaKzmZ1ifSWI1ImvVlbJa0Y0bamtHhGjl8IO9cqwC4uqQwnegNM -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:33 2026 by rpki-client