This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer (raw, json) Hash identifier: 3dneJxHOm7vNBO3KWpP3m0088QJ82sko1hDm/narAX4= Subject key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA4F857F719C74718B7B19134FFC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39384 IP: 45.154.64.0/22 IP: 185.118.112.0/22 IP: 185.240.248.0/22 IP: 2a03:6420::/32 IP: 2a0d:3b80::/29 IP: 2a0f:c700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a4:f8:57:f7:19:c7:47:18:b7:b1:91:34:ff:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1d:7d:1a:10:13:e8:52:3f:2d:be:4c:d8:78: 6f:80:12:36:f2:7f:39:30:9a:f0:2f:24:47:07:e1: 83:57:51:29:d9:fa:ea:73:f9:e5:d8:07:a1:5b:a6: 3a:59:b5:17:c6:be:c3:f6:c9:8a:4a:8b:3f:5f:27: 60:aa:83:3c:03:53:4a:91:e2:8e:92:41:ef:ef:c5: 20:dc:f7:e1:9a:33:25:a1:93:00:c3:6d:f6:59:5e: b9:03:2e:45:5d:d8:ec:70:4c:f8:6e:ba:07:8e:f9: e8:e3:53:fa:82:f3:26:f9:3e:99:2c:e4:07:25:e0: 8b:b2:67:de:b3:6d:32:00:ba:65:80:4b:ae:cc:a9: f7:c2:44:0d:d3:b9:0a:82:ed:3e:e7:cd:5e:1f:e5: 28:4f:c6:e6:7b:f6:b4:83:b6:de:3b:5d:7e:3e:90: 13:84:73:67:10:c9:d3:e7:2d:0a:4f:9b:6f:24:14: 1b:19:8c:ab:36:3f:c7:df:a7:de:69:5e:c4:3b:2d: a6:17:17:3c:5d:59:b0:32:97:72:df:3f:80:29:83: 31:de:7a:15:8e:1c:35:c3:bb:52:ef:24:fa:97:bc: 7e:43:80:74:1b:a3:ef:84:89:08:a4:23:05:ad:4b: 6f:b6:d0:92:e6:13:39:cb:cc:d2:26:81:7a:94:ec: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.64.0/22 185.118.112.0/22 185.240.248.0/22 IPv6: 2a03:6420::/32 2a0d:3b80::/29 2a0f:c700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39384 Signature Algorithm: sha256WithRSAEncryption 94:89:5d:63:39:75:3e:9e:dd:25:87:61:23:c8:62:5e:57:c5: c2:92:63:f8:5c:44:e0:43:a5:1b:b2:d9:fa:84:11:d1:0f:84: 7b:81:2e:76:35:71:df:f7:64:e3:c0:e3:55:96:fe:82:b0:4d: 2b:54:43:1d:ad:e2:0f:74:c6:ea:da:3d:b2:93:40:56:32:ea: ba:cc:fa:72:ec:ef:12:58:39:69:f0:d0:00:6e:37:5a:8b:f3: fb:20:46:ab:9d:12:d6:e3:71:37:66:c2:ed:18:83:60:41:68: 83:2c:7c:34:a8:fe:72:6f:52:e0:b3:d9:43:c6:08:59:e7:98: 36:86:f5:d8:b3:2b:4c:da:1f:73:37:03:a3:10:2d:27:9f:cf: 22:1a:5c:02:89:46:ef:5a:71:be:41:a5:9b:b5:11:62:dd:ff: 0b:f0:30:2a:f4:bb:51:c8:db:e9:4b:2b:b4:2d:dc:79:58:9c: 3e:b4:8a:5f:36:f9:95:2b:35:40:54:1f:50:82:37:87:00:a1: 4b:75:f4:6f:e4:56:f5:b8:8e:ef:fb:47:45:8e:18:05:5b:23: 80:45:81:e1:ce:8d:ae:a1:87:87:20:fb:88:6a:07:61:11:b8: b7:27:46:21:8f:af:a0:00:ec:b6:f6:99:b5:b2:83:07:36:58: 53:1e:76:ae -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt9yqT4V/cZx0cYt7GRNP/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NThlODIzY2YyNzRkMzgxMGNlMDVjMWQxYmY1ZWVmOTVjYjIxMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x19GhAT6FI/Lb5M2HhvgBI28n85 MJrwLyRHB+GDV1Ep2frqc/nl2AehW6Y6WbUXxr7D9smKSos/XydgqoM8A1NKkeKO kkHv78Ug3PfhmjMloZMAw232WV65Ay5FXdjscEz4broHjvno41P6gvMm+T6ZLOQH JeCLsmfes20yALplgEuuzKn3wkQN07kKgu0+581eH+UoT8bme/a0g7beO11+PpAT hHNnEMnT5y0KT5tvJBQbGYyrNj/H36feaV7EOy2mFxc8XVmwMpdy3z+AKYMx3noV jhw1w7tS7yT6l7x+Q4B0G6PvhIkIpCMFrUtvttCS5hM5y8zSJoF6lOyyEQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFHWOgjzydNOBDOBcHRv17vlcshHcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzQzZDY5 ZS1iNjhkLTQxNDktOGIyOS0wM2RiOGIzNmQzMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNDNkNjll LWI2OGQtNDE0OS04YjI5LTAzZGI4YjM2ZDMxOS8xL2RZNkNQUEowMDRFTTRGd2RH X1h1LVZ5eUVkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCLZpAAwQCuXZwAwQCufD4MBsEAgACMBUDBQAq A2QgAwUDKg07gAMFAyoPxwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJnYMA0G CSqGSIb3DQEBCwUAA4IBAQCUiV1jOXU+nt0lh2EjyGJeV8XCkmP4XETgQ6Ubstn6 hBHRD4R7gS52NXHf92TjwONVlv6CsE0rVEMdreIPdMbq2j2yk0BWMuq6zPpy7O8S WDlp8NAAbjdai/P7IEarnRLW43E3ZsLtGINgQWiDLHw0qP5yb1Lgs9lDxghZ55g2 hvXYsytM2h9zNwOjEC0nn88iGlwCiUbvWnG+QaWbtRFi3f8L8DAq9LtRyNvpSyu0 Ldx5WJw+tIpfNvmVKzVAVB9QgjeHAKFLdfRv5Fb1uI7v+0dFjhgFWyOARYHhzo2u oYeHIPuIagdhEbi3J0Yhj6+gAOy29pm1soMHNlhTHnau -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:40 2026 by rpki-client