This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer File: c_yJAj6sdKsphWP5ndtx9vFflTg.cer (raw, json) Hash identifier: z06nCPZ5Uncgh+hD135QI+v4eXAstQslpBEinfPX65E= Subject key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F829174F760A30D4B1A34A2A4C28DDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201987 IP: 159.255.148.0/24 IP: 185.130.51.0/24 IP: 2a13:e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:91:74:f7:60:a3:0d:4b:1a:34:a2:a4:c2:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73fc89023eac74ab298563f99ddb71f6f15f9538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:df:fa:da:e1:1a:3e:3c:61:ed:0d:19:1c: d4:9b:30:76:0f:4a:52:7b:19:24:f8:c6:e6:96:c4: c9:35:1d:53:1c:29:fe:54:69:13:3b:56:55:00:6b: b3:bf:0b:54:c9:e1:fb:2d:70:8e:f4:1f:fc:f6:f8: 70:4e:ad:58:d1:b0:b1:8d:4e:fb:48:ce:ae:72:f9: f1:f7:5a:9c:4f:81:5a:86:79:99:3b:79:f3:15:17: 01:64:c8:ce:84:a8:8b:2f:90:31:c1:6e:de:c4:53: 5b:e2:7d:31:f3:72:13:ab:fe:1b:ad:b2:40:1c:3d: de:27:14:f9:50:ae:6e:5f:d2:d5:7c:5a:cf:c8:50: 18:9b:c6:7e:c1:bd:56:7b:86:f3:25:60:96:c7:59: b5:84:ff:e9:32:51:98:c6:fe:66:45:bf:33:c9:27: ae:a8:e4:3b:e4:de:89:f8:8d:c5:f4:7a:17:19:f0: 75:54:5a:9e:e9:7f:55:5f:ac:36:45:09:f7:ad:d5: 69:87:91:2d:92:9b:46:30:88:55:51:48:d9:a4:fd: ab:29:85:96:e5:dd:7f:37:e2:54:98:91:c7:fc:72: eb:03:1f:3e:70:8e:c0:67:56:6d:d6:fe:62:37:a2: c8:e8:6f:5f:94:c8:56:3c:9f:72:23:f5:9f:74:19: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.148.0/24 185.130.51.0/24 IPv6: 2a13:e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201987 Signature Algorithm: sha256WithRSAEncryption 6f:d2:47:74:ef:81:2f:80:26:b5:27:20:d3:bb:c2:e9:71:39: 1b:76:59:da:8e:4e:be:6f:de:94:9e:a9:f4:ea:0c:f6:92:15: 1e:71:c7:0e:db:d3:49:19:81:cc:35:05:ec:54:0c:96:3d:f7: dc:9e:c8:62:22:d5:84:f4:13:0e:b6:50:ba:11:b4:c9:72:43: f9:0b:6a:e2:40:0a:45:8e:b1:71:1b:65:2d:59:2b:51:75:a1: 11:96:70:36:37:c4:e8:8a:1e:46:e0:30:82:00:f7:d8:1b:67: e8:36:47:6a:99:bc:bd:23:57:f7:ff:83:99:26:3b:51:46:ce: b0:13:4c:d6:46:1a:15:f8:7c:c0:84:80:1b:20:de:a3:13:ab: af:ca:72:cd:df:be:39:b1:e9:94:f3:e6:7e:2f:5b:c8:e7:f8: be:6a:c1:c6:a9:53:3f:1d:08:a0:5b:7d:d7:20:d8:21:72:da: 3c:66:47:a3:8b:33:58:c7:6f:cd:a9:e0:a6:dc:e9:9c:46:c6: 26:6c:78:7a:47:d7:dd:cb:61:79:92:3f:b3:2d:78:55:9c:c4: ca:fc:13:f7:1d:0b:4d:e2:d6:46:a9:77:48:3e:f7:10:d0:95: cc:d9:3b:6b:0c:a0:da:39:a7:81:cb:b7:e2:60:a3:55:1e:15: 62:ae:51:ec -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gpF092CjDUsaNKKkwo3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2ZjODkwMjNlYWM3NGFiMjk4NTYzZjk5ZGRiNzFmNmYxNWY5NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkvf+trhGj48Ye0NGRzUmzB2D0pS exkk+MbmlsTJNR1THCn+VGkTO1ZVAGuzvwtUyeH7LXCO9B/89vhwTq1Y0bCxjU77 SM6ucvnx91qcT4FahnmZO3nzFRcBZMjOhKiLL5AxwW7exFNb4n0x83ITq/4brbJA HD3eJxT5UK5uX9LVfFrPyFAYm8Z+wb1We4bzJWCWx1m1hP/pMlGYxv5mRb8zySeu qOQ75N6J+I3F9HoXGfB1VFqe6X9VX6w2RQn3rdVph5EtkptGMIhVUUjZpP2rKYWW 5d1/N+JUmJHH/HLrAx8+cI7AZ1Zt1v5iN6LI6G9flMhWPJ9yI/WfdBlHHwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHP8iQI+rHSrKYVj+Z3bcfbxX5U4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzU1MzAz YS1mMjI1LTRhM2YtODI1Zi01ZGNkODJkZWY4NGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNTUzMDNh LWYyMjUtNGEzZi04MjVmLTVkY2Q4MmRlZjg0Zi8xL2NfeUpBajZzZEtzcGhXUDVu ZHR4OXZGZmxUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAn/+UAwQAuYIzMA0EAgACMAcDBQMqEw5AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVAzANBgkqhkiG9w0BAQsFAAOCAQEAb9JH dO+BL4AmtScg07vC6XE5G3ZZ2o5Ovm/elJ6p9OoM9pIVHnHHDtvTSRmBzDUF7FQM lj333J7IYiLVhPQTDrZQuhG0yXJD+Qtq4kAKRY6xcRtlLVkrUXWhEZZwNjfE6Ioe RuAwggD32Btn6DZHapm8vSNX9/+DmSY7UUbOsBNM1kYaFfh8wISAGyDeoxOrr8py zd++ObHplPPmfi9byOf4vmrBxqlTPx0IoFt91yDYIXLaPGZHo4szWMdvzangptzp nEbGJmx4ekfX3ctheZI/sy14VZzEyvwT9x0LTeLWRql3SD73ENCVzNk7awyg2jmn gcu34mCjVR4VYq5R7A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:42 2026 by rpki-client