This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer File: dHyzZv9uI99sCX9grcf6gHVZgZE.cer (raw, json) Hash identifier: M4fsq+qbVWZdcl7sIBsdIz2KkekiG0jYfp4fit42QvQ= Subject key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4BDB39A2542BEA684D6C7E5D501D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200232 IP: 45.88.226.0/24 IP: 194.31.131.0/24 IP: 2a13:6ec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:bd:b3:9a:25:42:be:a6:84:d6:c7:e5:d5:01:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=747cb366ff6e23df6c097f60adc7fa8075598191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:b3:06:f5:4d:02:c2:75:80:d9:3b:5d:5c: 2f:c0:d8:09:d7:1c:14:9d:b1:9f:7d:50:6d:1d:e7: 10:a5:3b:62:44:a4:1c:ab:77:88:8d:db:77:5b:cb: fd:2e:eb:44:84:1a:13:36:4c:ac:2b:a6:0d:59:65: e7:86:5b:57:34:02:f8:42:3a:3c:f6:21:29:48:da: ae:f9:e2:5c:e0:54:8b:6f:f7:71:20:e9:d4:bf:d6: 82:32:94:79:b7:d1:48:40:99:48:31:97:6e:3f:88: 92:ac:90:42:09:7c:b9:4d:94:b0:b8:bf:a5:f7:c9: fb:10:b6:d0:70:bf:0f:18:17:8a:f7:0d:0d:59:7e: d5:ec:65:7e:75:80:f1:f1:18:73:1d:9b:b7:61:1e: d7:1b:e7:09:ac:b2:31:1f:9a:e0:21:ea:46:5c:3f: fc:7c:a9:cb:9a:32:4a:bb:06:ea:12:d6:64:ed:ed: 0a:eb:92:f0:c5:b4:4b:a0:72:6d:63:6b:6c:a0:fd: 69:c0:ee:26:28:d7:34:f5:b0:56:6c:0c:ac:b4:2a: be:6a:4e:58:cc:a0:88:74:9e:c1:a7:f3:59:6a:45: a2:71:73:3b:9b:62:5f:70:3a:6b:64:0c:cd:85:db: 84:0b:b9:0e:a3:b1:28:25:42:2e:d8:21:08:20:17: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.226.0/24 194.31.131.0/24 IPv6: 2a13:6ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200232 Signature Algorithm: sha256WithRSAEncryption 00:72:d2:7f:20:72:55:7f:ff:9a:b4:76:a0:68:3f:51:67:bf: 89:d4:11:93:d4:cf:09:98:8d:3d:1c:3e:ea:44:eb:51:07:45: d0:cb:7f:e0:b7:a8:d3:23:0b:b1:5a:ab:56:05:e4:e8:9e:3b: 69:ef:fc:c9:fe:5a:02:dc:59:b8:08:04:c9:2c:b1:98:cd:fc: c1:c0:e4:86:d8:89:3a:98:c0:4f:3e:d9:46:c0:df:a0:01:48: a1:1e:f9:30:80:6c:1b:08:a5:2f:f1:28:60:28:a3:1e:cf:85: a3:63:b0:4c:11:02:54:ef:7c:c2:44:d2:6a:04:12:87:45:2f: 0b:29:af:e7:67:dc:fa:5a:fd:89:5b:d0:b6:ae:4d:b2:07:4f: 8a:80:bf:41:ac:40:0b:a1:ca:d7:9f:40:cd:b2:fd:c1:72:57: 37:93:3b:83:b3:43:e8:13:21:75:c5:d5:38:e6:7a:7d:ed:88: 5a:4b:92:a8:78:c4:99:b5:46:c7:a6:2e:dc:1e:af:6e:c8:c7: e5:a1:3c:22:06:1b:07:a3:17:09:ad:ab:c2:78:50:ff:70:5e: e6:d4:24:ae:fb:bf:8e:a2:37:10:26:33:b0:e7:06:88:df:f0: 23:9c:33:23:46:22:0b:04:1d:7a:7d:88:32:01:71:56:b1:6f: 01:3b:1a:4d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pL2zmiVCvqaE1sfl1QHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDdjYjM2NmZmNmUyM2RmNmMwOTdmNjBhZGM3ZmE4MDc1NTk4MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FGzBvVNAsJ1gNk7XVwvwNgJ1xwU nbGffVBtHecQpTtiRKQcq3eIjdt3W8v9LutEhBoTNkysK6YNWWXnhltXNAL4Qjo8 9iEpSNqu+eJc4FSLb/dxIOnUv9aCMpR5t9FIQJlIMZduP4iSrJBCCXy5TZSwuL+l 98n7ELbQcL8PGBeK9w0NWX7V7GV+dYDx8RhzHZu3YR7XG+cJrLIxH5rgIepGXD/8 fKnLmjJKuwbqEtZk7e0K65LwxbRLoHJtY2tsoP1pwO4mKNc09bBWbAystCq+ak5Y zKCIdJ7Bp/NZakWicXM7m2JfcDprZAzNhduEC7kOo7EoJUIu2CEIIBfznQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHR8s2b/biPfbAl/YK3H+oB1WYGRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzNhYjU1 ZC04NTJmLTQ5NWItYjJiMy1lMDJkNzMwZmU4NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvM2FiNTVk LTg1MmYtNDk1Yi1iMmIzLWUwMmQ3MzBmZTg0ZS8xL2RIeXpadjl1STk5c0NYOWdy Y2Y2Z0hWWmdaRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALVjiAwQAwh+DMA0EAgACMAcDBQAqE27AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOKDANBgkqhkiG9w0BAQsFAAOCAQEAAHLS fyByVX//mrR2oGg/UWe/idQRk9TPCZiNPRw+6kTrUQdF0Mt/4Leo0yMLsVqrVgXk 6J47ae/8yf5aAtxZuAgEySyxmM38wcDkhtiJOpjATz7ZRsDfoAFIoR75MIBsGwil L/EoYCijHs+Fo2OwTBECVO98wkTSagQSh0UvCymv52fc+lr9iVvQtq5NsgdPioC/ QaxAC6HK159AzbL9wXJXN5M7g7ND6BMhdcXVOOZ6fe2IWkuSqHjEmbVGx6Yu3B6v bsjH5aE8IgYbB6MXCa2rwnhQ/3Be5tQkrvu/jqI3ECYzsOcGiN/wI5wzI0YiCwQd en2IMgFxVrFvATsaTQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:42 2026 by rpki-client