This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer File: eYuFtR4z3wxpTb13vIwro-q01Rk.cer (raw, json) Hash identifier: HXWbt2dQ7zEnBKfuKn2tHegeU4BUYal8snmJ3RL1szA= Subject key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14D4A6AD2D13967A6B73A3565A203D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209646 IP: 185.63.160.0/24 IP: 2a09:a180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d4:a6:ad:2d:13:96:7a:6b:73:a3:56:5a:20:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:db:c8:5d:2e:25:3d:99:74:9e:28:14:b8: 6f:b5:de:27:d7:37:0a:7d:e5:5a:e3:12:0e:f0:64: 56:0d:96:2c:77:6d:1b:f8:e5:ab:71:9e:54:ae:6b: 3c:df:46:4a:55:b6:eb:a5:31:39:08:51:c3:cb:a2: 4f:8a:7a:c6:fe:dd:42:a0:40:1a:9e:1c:ed:74:24: 05:26:06:54:1a:2f:e4:27:3d:66:d0:27:b3:83:84: 01:fa:7a:78:94:bd:de:fc:8d:f3:45:00:7c:5f:9c: c5:b5:b9:14:92:f2:6b:67:89:3a:fc:ab:0e:f4:fe: 07:90:4d:6c:14:3b:37:21:93:a6:3d:e2:f1:ca:34: 8c:5d:cd:da:bc:ff:51:9e:56:be:e1:46:ba:3d:16: 41:1e:9c:94:3d:d6:e1:ac:29:e5:b4:33:73:23:88: 05:af:79:90:f8:de:ac:5e:3c:d5:34:25:73:aa:46: 35:e0:2b:47:86:be:9d:6e:7e:5b:4b:df:43:81:dd: 48:90:15:56:25:9c:55:0b:c3:25:0a:1c:25:b2:e7: 49:db:69:cf:83:62:cb:4c:8d:70:0e:8c:6f:19:d2: d6:44:b9:46:e3:a4:88:f5:5e:99:a5:a9:f5:7f:36: 9f:22:f5:23:af:16:70:d8:2d:00:e0:4c:5f:91:ca: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.160.0/24 IPv6: 2a09:a180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209646 Signature Algorithm: sha256WithRSAEncryption 92:ac:87:56:af:38:8e:8f:35:a7:9a:21:19:b3:9a:95:b6:47: 44:a6:5d:0f:5c:98:92:58:da:8c:5e:ac:8a:4b:a8:02:8a:02: 4f:2c:f0:16:3a:1a:8a:4d:71:b9:e5:fc:5a:62:a6:cd:3f:57: 11:9c:0d:bb:a9:7e:7d:4d:65:f9:08:c4:37:b1:6c:1c:f5:35: 49:0c:39:40:95:ff:3e:9c:ef:39:8c:51:0b:b6:f8:81:a0:1e: bf:48:e3:36:84:3e:4b:d3:20:cb:6d:22:b8:a6:38:89:a6:14: 43:2e:9d:e8:63:73:f4:17:41:cc:78:71:14:af:2f:49:ef:7d: 31:d0:ef:1f:31:52:6b:45:61:37:c3:d0:8c:0c:41:50:e6:4e: 31:0a:81:ce:25:47:fd:47:bf:7d:5d:9e:46:b9:0c:41:2f:b8: 5a:5d:c7:e1:bd:28:27:5e:d3:be:0c:4f:80:da:f3:ba:ba:f3: 93:96:6f:b9:f0:35:d0:ff:d4:2c:30:6d:38:9b:9b:f7:af:5d: 8e:d5:93:75:55:21:54:ff:69:fa:a4:f1:47:f1:d6:49:32:58: d7:f1:b2:4f:89:84:31:0c:e0:e0:5f:98:b6:d0:84:0b:2d:7c: a2:e5:f3:db:89:21:1e:d9:f0:fd:54:06:94:dc:e4:e2:78:61: bb:90:23:bc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FNSmrS0Tlnprc6NWWiA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OThiODViNTFlMzNkZjBjNjk0ZGJkNzdiYzhjMmJhM2VhYjRkNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuvbyF0uJT2ZdJ4oFLhvtd4n1zcK feVa4xIO8GRWDZYsd20b+OWrcZ5Urms830ZKVbbrpTE5CFHDy6JPinrG/t1CoEAa nhztdCQFJgZUGi/kJz1m0Cezg4QB+np4lL3e/I3zRQB8X5zFtbkUkvJrZ4k6/KsO 9P4HkE1sFDs3IZOmPeLxyjSMXc3avP9Rnla+4Ua6PRZBHpyUPdbhrCnltDNzI4gF r3mQ+N6sXjzVNCVzqkY14CtHhr6dbn5bS99Dgd1IkBVWJZxVC8MlChwlsudJ22nP g2LLTI1wDoxvGdLWRLlG46SI9V6Zpan1fzafIvUjrxZw2C0A4Exfkcow8wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHmLhbUeM98MaU29d7yMK6PqtNUZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzJlZGU4 ZS1mN2Y1LTQwNDUtOTM0MS05NDBkZmI5NjE2MzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMmVkZThl LWY3ZjUtNDA0NS05MzQxLTk0MGRmYjk2MTYzMC8xL2VZdUZ0UjR6M3d4cFRiMTN2 SXdyby1xMDFSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuT+gMA0EAgACMAcDBQMqCaGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMy7jANBgkqhkiG9w0BAQsFAAOCAQEAkqyHVq84jo81 p5ohGbOalbZHRKZdD1yYkljajF6sikuoAooCTyzwFjoaik1xueX8WmKmzT9XEZwN u6l+fU1l+QjEN7FsHPU1SQw5QJX/PpzvOYxRC7b4gaAev0jjNoQ+S9Mgy20iuKY4 iaYUQy6d6GNz9BdBzHhxFK8vSe99MdDvHzFSa0VhN8PQjAxBUOZOMQqBziVH/Ue/ fV2eRrkMQS+4Wl3H4b0oJ17TvgxPgNrzurrzk5ZvufA10P/ULDBtOJub969djtWT dVUhVP9p+qTxR/HWSTJY1/GyT4mEMQzg4F+YttCECy18ouXz24khHtnw/VQGlNzk 4nhhu5AjvA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:50 2026 by rpki-client