This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer File: eYCaQAStlYNQpkbViavLPP3z7S4.cer (raw, json) Hash identifier: 9Sge6Sx4nAeyUiZ/bE9z1r3zvT0wJZZMoqo00ZxYFrA= Subject key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A20E6E35E9FD3E411C491CF710348D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197477 AS: 216474 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:0e:6e:35:e9:fd:3e:41:1c:49:1c:f7:10:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:2c:72:71:e0:0e:c2:02:99:68:67:41:b4: 4f:d0:b3:ae:93:d7:43:c1:9c:e4:1c:15:51:5a:94: 36:54:36:f9:dd:dc:8d:08:13:be:f6:66:d8:dd:91: d1:43:c7:55:30:35:28:47:d1:5b:15:1e:7f:fb:21: 34:1f:6c:2c:07:50:5f:40:10:14:73:df:f9:eb:ec: 53:2a:b2:6b:18:5d:98:48:b9:63:d5:20:46:f1:15: 15:1b:45:e6:af:9f:f6:22:c4:ed:b6:02:80:e1:78: e5:14:35:ef:44:03:64:b4:ce:7c:02:63:ed:cf:ed: fc:f4:b8:20:9c:86:ec:d0:23:1a:b3:99:90:d1:e6: 3c:a1:25:bc:59:79:74:e3:63:f9:96:28:4d:9d:42: 5a:b6:ad:2f:c9:88:84:c2:ca:52:46:7d:85:b8:44: bf:c2:e9:24:96:3e:b4:93:f4:b3:fe:a8:68:cd:f6: 1c:c0:c8:00:74:1a:f5:04:e1:0d:5d:f1:aa:ec:4d: 8c:7a:f2:9b:ca:63:cd:ab:2e:d8:0b:91:81:25:da: 3f:d7:65:cc:3a:d0:0a:1f:96:4a:df:4f:75:d1:3a: 98:30:1a:77:3f:c8:06:ea:ef:18:d8:5d:a9:1c:56: 25:05:cb:da:03:e1:6f:13:c9:b8:f0:26:57:4f:e8: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197477 216474 Signature Algorithm: sha256WithRSAEncryption b0:27:22:b1:c4:74:70:0f:8d:8c:e9:e7:20:25:2f:8f:4c:8e: 97:f6:8e:f5:d4:b0:c8:52:36:63:52:94:f9:be:dd:4c:0c:48: 7f:cf:fb:84:de:9a:48:3f:5d:97:40:9a:ae:7c:a1:3b:5f:b3: b4:22:ba:90:67:46:ff:2e:15:0d:c9:35:20:2f:52:f2:85:1d: d7:88:a2:94:09:e5:44:70:da:e3:55:6b:44:b0:65:71:fb:ee: b6:b8:fe:aa:b0:aa:8b:d3:4c:a7:af:e5:6d:a3:31:1b:b9:bc: 58:7a:ea:b7:57:93:aa:d6:50:c7:d0:b2:24:41:04:46:bd:35: e7:c0:ec:53:cc:0f:54:8c:01:d7:11:9b:10:58:10:9d:8d:16: e4:6a:65:ce:eb:b6:90:8e:d8:42:49:8d:cc:64:19:a2:73:72: d3:a2:be:2d:67:e3:6c:f1:c5:d7:4d:2f:d4:7c:7d:e2:51:4f: 1f:a0:27:53:23:38:cd:a4:47:fe:6a:5d:02:cc:a3:b5:44:26: 12:95:ad:64:39:71:8c:5b:13:b4:4d:6a:11:a3:df:50:a5:b6: 29:a6:f7:0c:0d:bf:82:07:2b:34:18:6c:9c:84:87:98:46:6c: 0d:e7:84:31:aa:61:81:7d:90:30:36:15:c7:67:41:fc:65:c7: de:cf:84:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4og5uNen9PkEcSRz3EDSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTgwOWE0MDA0YWQ5NTgzNTBhNjQ2ZDU4OWFiY2IzY2ZkZjNlZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJMscnHgDsICmWhnQbRP0LOuk9dD wZzkHBVRWpQ2VDb53dyNCBO+9mbY3ZHRQ8dVMDUoR9FbFR5/+yE0H2wsB1BfQBAU c9/56+xTKrJrGF2YSLlj1SBG8RUVG0Xmr5/2IsTttgKA4XjlFDXvRANktM58AmPt z+389LggnIbs0CMas5mQ0eY8oSW8WXl042P5lihNnUJatq0vyYiEwspSRn2FuES/ wukklj60k/Sz/qhozfYcwMgAdBr1BOENXfGq7E2MevKbymPNqy7YC5GBJdo/12XM OtAKH5ZK30910TqYMBp3P8gG6u8Y2F2pHFYlBcvaA+FvE8m48CZXT+jD3QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHmAmkAErZWDUKZG1Ymryzz98+0uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzViNDVm OC05YTMwLTQxZDMtYjYxMS1kNWFhNjQ3N2VmZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvNWI0NWY4 LTlhMzAtNDFkMy1iNjExLWQ1YWE2NDc3ZWZkZS8xL2VZQ2FRQVN0bFlOUXBrYlZp YXZMUFAzejdTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMDZQIDA02aMA0GCSqGSIb3DQEBCwUAA4IBAQCwJyKx xHRwD42M6ecgJS+PTI6X9o711LDIUjZjUpT5vt1MDEh/z/uE3ppIP12XQJqufKE7 X7O0IrqQZ0b/LhUNyTUgL1LyhR3XiKKUCeVEcNrjVWtEsGVx++62uP6qsKqL00yn r+VtozEbubxYeuq3V5Oq1lDH0LIkQQRGvTXnwOxTzA9UjAHXEZsQWBCdjRbkamXO 67aQjthCSY3MZBmic3LTor4tZ+Ns8cXXTS/UfH3iUU8foCdTIzjNpEf+al0CzKO1 RCYSla1kOXGMWxO0TWoRo99QpbYppvcMDb+CBys0GGychIeYRmwN54QxqmGBfZAw NhXHZ0H8Zcfez4SQ -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:22 2026 by rpki-client