This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer File: dYib2lT4hX2kKQxnebwAYR5z4hI.cer (raw, json) Hash identifier: P5zBg3cccC9ftHKO2NT430v4MWjShDZVcs0fvd0cqWY= Subject key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14E1EE11979998E82F11BF553795A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204999 IP: 185.81.40.0/22 IP: 185.238.92.0/22 IP: 2a05:8540::/29 IP: 2a0c:3880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e1:ee:11:97:99:98:e8:2f:11:bf:55:37:95:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75889bda54f8857da4290c6779bc00611e73e212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:15:77:2e:89:6d:9d:b3:30:9a:e6:23:18: e1:e0:7e:af:7d:47:e7:68:0f:07:f3:88:98:87:34: 95:74:d6:89:7b:0c:c8:43:52:66:e9:1f:63:ab:39: 4e:47:50:ae:89:4b:9b:db:90:c6:aa:3d:0d:9a:f8: 20:4b:14:72:ee:27:11:b1:65:b0:75:76:4f:94:f3: 55:fb:55:4e:a4:52:ad:31:a4:79:e9:d4:c5:07:2b: 6d:65:ed:75:a0:fb:86:de:e9:8d:ca:00:48:96:84: 53:62:eb:b0:da:3d:5e:e9:c5:cd:ea:0b:46:6b:cf: 75:44:1e:ed:74:8c:33:51:44:7d:29:dd:35:0b:3f: 0e:74:a9:20:66:cf:b1:34:50:ea:89:6e:dd:f6:7f: 8b:c4:72:89:60:c0:28:de:f3:30:01:a6:9d:88:e9: bc:9c:e0:e4:60:b3:ac:0a:73:2e:25:91:8e:89:a8: c7:fe:7b:01:39:b0:01:9b:4c:b5:ec:36:ba:9f:8b: ef:54:b5:b4:3b:45:2d:85:30:bb:76:bd:fc:e0:d4: fd:35:6a:75:16:52:27:a2:c8:97:a0:ba:2c:e4:4f: 14:a5:af:9c:48:af:b3:03:bf:be:d3:b5:82:fb:28: 7a:88:24:3a:b0:27:74:07:70:8a:27:b6:f7:95:b3: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.40.0/22 185.238.92.0/22 IPv6: 2a05:8540::/29 2a0c:3880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204999 Signature Algorithm: sha256WithRSAEncryption 62:bd:20:65:c1:df:5e:ef:cf:4a:72:61:a5:6a:35:71:9e:f9: b0:1b:a6:4d:1f:4c:8b:34:3c:33:80:49:ba:5a:f3:6f:4e:3f: 27:8b:26:ac:3e:b9:cd:8f:7e:bb:ec:a2:b5:1c:c8:79:1b:d5: eb:32:6d:ac:29:f3:82:1a:a4:68:27:6b:8b:83:ef:a4:f6:b9: eb:3c:61:bc:92:1e:ba:f1:5d:07:06:9c:a2:2b:d7:9a:c3:ca: 35:8d:02:ef:1f:e9:5b:7f:8f:c5:f4:c3:ed:1b:69:49:d1:4f: 8a:dd:fe:3f:c4:8a:07:2f:fa:0a:ef:19:8e:5b:ac:2d:cf:03: 6d:5d:25:32:52:2a:c5:8b:83:dc:72:78:ee:c2:39:b7:19:b4: 98:ea:0f:1c:d7:63:56:58:ee:11:56:7a:84:48:80:4c:27:f3: 3b:44:45:0e:36:2f:41:7c:1f:5f:b4:c1:3f:ef:28:e0:61:2a: a9:5c:27:be:60:44:d4:4a:03:d4:44:36:6f:f1:37:e1:9d:4c: 3d:b3:fc:e8:7e:b4:c9:39:73:c5:11:95:1c:d1:23:d3:8d:15: 5e:fa:9a:7a:e8:71:8e:eb:5a:9c:49:d7:21:c8:b8:33:cb:4b: 06:e0:89:fc:93:f8:73:00:ef:9e:02:c9:95:ab:c5:f7:67:c5: 83:7a:fa:d1 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt/FOHuEZeZmOgvEb9VN5WiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTg4OWJkYTU0Zjg4NTdkYTQyOTBjNjc3OWJjMDA2MTFlNzNlMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8Vdy6JbZ2zMJrmIxjh4H6vfUfn aA8H84iYhzSVdNaJewzIQ1Jm6R9jqzlOR1CuiUub25DGqj0NmvggSxRy7icRsWWw dXZPlPNV+1VOpFKtMaR56dTFByttZe11oPuG3umNygBIloRTYuuw2j1e6cXN6gtG a891RB7tdIwzUUR9Kd01Cz8OdKkgZs+xNFDqiW7d9n+LxHKJYMAo3vMwAaadiOm8 nODkYLOsCnMuJZGOiajH/nsBObABm0y17Da6n4vvVLW0O0UthTC7dr384NT9NWp1 FlInosiXoLos5E8Upa+cSK+zA7++07WC+yh6iCQ6sCd0B3CKJ7b3lbNLkwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFHWIm9pU+IV9pCkMZ3m8AGEec+ISMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzZkYjJm Ni1lODdiLTRlMWMtODJjNy1lNzg1NTNhMDM3YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNmRiMmY2 LWU4N2ItNGUxYy04MmM3LWU3ODU1M2EwMzdiZC8xL2RZaWIybFQ0aFgya0tReG5l YndBWVI1ejRoSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuVEoAwQCue5cMBQEAgACMA4DBQMqBYVAAwUD Kgw4gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIMcwDQYJKoZIhvcNAQELBQAD ggEBAGK9IGXB317vz0pyYaVqNXGe+bAbpk0fTIs0PDOASbpa829OPyeLJqw+uc2P frvsorUcyHkb1esybawp84IapGgna4uD76T2ues8YbySHrrxXQcGnKIr15rDyjWN Au8f6Vt/j8X0w+0baUnRT4rd/j/Eigcv+grvGY5brC3PA21dJTJSKsWLg9xyeO7C ObcZtJjqDxzXY1ZY7hFWeoRIgEwn8ztERQ42L0F8H1+0wT/vKOBhKqlcJ75gRNRK A9RENm/xN+GdTD2z/Oh+tMk5c8URlRzRI9ONFV76mnrocY7rWpxJ1yHIuDPLSwbg ifyT+HMA754CyZWrxfdnxYN6+tE= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:10 2026 by rpki-client