This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer File: jYdAeZyRwmMKgJIXjbgk86iJp18.cer (raw, json) Hash identifier: 8Z4GJi8y3PSJCYaBV/gEtOugwmK3xjk0sBqXZ6pfV24= Subject key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B15A57F872673EBD4C4684F6924EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8666 AS: 33890 IP: 77.72.160.0/21 IP: 144.208.0.0/18 IP: 144.208.128.0/18 IP: 176.96.96.0/19 IP: 185.121.52.0/22 IP: 194.88.8.0/24 IP: 2a02:af0::/32 IP: 2a06:9cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:15:a5:7f:87:26:73:eb:d4:c4:68:4f:69:24:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d8740799c91c2630a8092178db824f3a889a75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:dc:58:17:8c:35:de:34:9c:72:94:80:4b: 40:27:00:d3:00:80:0c:e8:0e:2e:94:6c:b9:be:08: 3c:d0:24:36:b9:e1:33:c7:b2:88:d5:74:75:3c:79: 07:c1:5d:0c:dd:97:5b:5f:ee:4b:2b:aa:d8:11:28: 44:25:47:4c:71:c1:b0:62:7f:37:72:f0:22:c9:09: 80:15:8f:57:fc:02:2f:5f:de:33:2c:a4:43:07:88: f2:80:f5:61:a5:c6:44:a3:99:6f:b9:71:6f:c2:a2: 6a:24:f8:51:64:c7:0a:68:09:54:31:5b:fc:d1:ce: ab:be:aa:a5:a3:c1:d6:7b:ff:b8:7f:a8:02:4f:ee: 3a:24:dd:ea:c9:a5:8a:e0:33:a4:4d:a7:2f:eb:ea: 0f:ff:4d:60:51:8f:35:32:43:9b:b6:09:ef:96:1e: 14:39:16:c2:c8:b3:88:04:32:0b:3d:85:19:25:44: 43:cf:ac:e7:fb:f8:aa:bc:8e:cf:22:b7:1d:30:93: 1d:6c:19:47:8a:a1:09:61:da:1e:41:a5:ca:3e:ff: 6e:44:7d:a5:f4:64:c7:28:97:92:85:aa:2b:2c:e1: f5:f2:b6:3c:02:0a:2b:eb:18:13:cd:da:6f:f8:7a: b5:09:1b:d8:6f:ac:75:f2:d9:5c:1b:2b:8e:f3:10: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.160.0/21 144.208.0.0/18 144.208.128.0/18 176.96.96.0/19 185.121.52.0/22 194.88.8.0/24 IPv6: 2a02:af0::/32 2a06:9cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8666 33890 Signature Algorithm: sha256WithRSAEncryption a3:6b:f8:32:46:52:32:1d:70:68:d4:af:6b:ba:df:5a:ac:02: 68:ac:88:33:19:00:64:98:90:6a:3e:60:27:d3:e9:4d:29:1d: 73:1a:a4:e3:f7:1d:df:cc:1a:f8:de:85:5a:45:d7:c3:61:ea: 2d:47:68:32:3a:11:8f:c3:23:97:52:1f:19:54:14:0c:91:2c: 83:e4:d1:df:ce:4e:5b:1d:56:d2:83:73:31:c4:5b:22:06:7d: 16:77:58:9e:cd:83:5e:a5:66:e0:40:55:3f:ab:06:c0:62:c0: 75:1a:9d:de:20:4c:0b:e5:49:13:63:6a:ad:f5:da:75:81:ff: 10:b6:5e:7d:8d:9b:c6:80:30:af:18:8b:1f:28:5e:2e:35:33: f4:a8:43:e9:76:64:80:2d:76:44:25:fc:e8:f7:68:cc:50:e9: e6:b1:d2:1b:0a:dd:53:39:18:6c:f5:81:c9:f6:bd:47:47:d1: bb:33:b5:34:b9:8d:20:48:09:0e:75:08:81:c1:fa:e0:38:bc: 40:ac:40:08:76:e4:19:e4:14:24:f0:88:a9:a4:0f:1c:4b:0f: b1:6e:fa:c7:2f:7c:ff:35:dd:5d:08:fc:ce:7a:aa:1b:c1:5c: ff:c5:94:86:c9:fc:d1:cf:bb:43:c9:c6:5f:82:b6:72:d6:34: ca:1a:e4:3e -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt6WxWlf4cmc+vUxGhPaSTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDg3NDA3OTljOTFjMjYzMGE4MDkyMTc4ZGI4MjRmM2E4ODlhNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXTcWBeMNd40nHKUgEtAJwDTAIAM 6A4ulGy5vgg80CQ2ueEzx7KI1XR1PHkHwV0M3ZdbX+5LK6rYEShEJUdMccGwYn83 cvAiyQmAFY9X/AIvX94zLKRDB4jygPVhpcZEo5lvuXFvwqJqJPhRZMcKaAlUMVv8 0c6rvqqlo8HWe/+4f6gCT+46JN3qyaWK4DOkTacv6+oP/01gUY81MkObtgnvlh4U ORbCyLOIBDILPYUZJURDz6zn+/iqvI7PIrcdMJMdbBlHiqEJYdoeQaXKPv9uRH2l 9GTHKJeShaorLOH18rY8Agor6xgTzdpv+Hq1CRvYb6x18tlcGyuO8xB6CQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFI2HQHmckcJjCoCSF424JPOoiadfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzViN2M5 NC1hNjBkLTQzOTktOTgyOS01MmI4MTY2ODI5ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvNWI3Yzk0 LWE2MGQtNDM5OS05ODI5LTUyYjgxNjY4MjlkNy8xL2pZZEFlWnlSd21NS2dKSVhq YmdrODZpSnAxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQDTUigAwQGkNAAAwQGkNCAAwQFsGBgAwQCuXk0 AwQAwlgIMBQEAgACMA4DBQAqAgrwAwUDKgacwDAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgIh2gIDAIRiMA0GCSqGSIb3DQEBCwUAA4IBAQCja/gyRlIyHXBo1K9rut9a rAJorIgzGQBkmJBqPmAn0+lNKR1zGqTj9x3fzBr43oVaRdfDYeotR2gyOhGPwyOX Uh8ZVBQMkSyD5NHfzk5bHVbSg3MxxFsiBn0Wd1iezYNepWbgQFU/qwbAYsB1Gp3e IEwL5UkTY2qt9dp1gf8Qtl59jZvGgDCvGIsfKF4uNTP0qEPpdmSALXZEJfzo92jM UOnmsdIbCt1TORhs9YHJ9r1HR9G7M7U0uY0gSAkOdQiBwfrgOLxArEAIduQZ5BQk 8IippA8cSw+xbvrHL3z/Nd1dCPzOeqobwVz/xZSGyfzRz7tDycZfgrZy1jTKGuQ+ -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:16 2026 by rpki-client