This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer File: jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer (raw, json) Hash identifier: dzS876bKmJlq5+X16QPPxC+ALT6FpOkH4QCHYUBaOzc= Subject key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA656446091AA4AD5E22F62BB4474B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42917 IP: 77.75.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:56:44:60:91:aa:4a:d5:e2:2f:62:bb:44:74:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f2ae45c509041a796a968953581f51d45bfce55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:56:63:43:73:66:f9:40:5d:5e:ed:3a:96: 77:68:0e:87:c9:18:3d:76:66:e7:ab:71:26:5b:b0: c8:8a:1b:f6:18:47:22:9f:33:f7:ee:b8:44:8b:be: db:22:6c:bb:28:f0:94:2d:3f:75:af:91:07:c1:8a: 8f:94:e0:c4:b3:b1:ce:b9:48:ca:a7:f6:7d:3f:eb: cd:00:37:4c:4f:99:34:e2:47:6b:35:39:bd:ba:54: 05:f3:4a:70:dd:84:76:a9:a2:7c:b6:c8:43:2b:34: c9:1e:dd:89:73:77:0f:ae:62:89:91:ea:56:cd:22: e6:a4:12:dc:be:88:82:b9:21:57:72:0e:04:22:de: 83:f2:e6:05:cc:c1:69:7d:5f:96:81:66:20:74:fb: 09:7d:7d:64:f4:40:6f:28:82:3b:2c:5c:59:5b:dd: 38:26:f1:a4:7e:37:74:ca:9f:30:bf:d0:5c:fb:7d: c2:dd:c8:83:9a:40:f2:83:d4:d8:83:50:b8:0e:8f: 59:2f:6f:64:af:b0:52:2a:3d:f8:92:53:a7:af:48: 9f:37:8b:b3:ec:9a:e6:38:56:50:65:14:b5:d1:10: 81:91:b4:09:a3:d8:35:95:25:36:26:11:fa:3a:86: 8f:15:c5:3c:f7:fc:60:62:53:85:4b:f8:3c:ae:d6: aa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.112.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42917 Signature Algorithm: sha256WithRSAEncryption 5c:41:c7:4c:33:40:81:9d:c8:2e:ed:b3:66:cb:51:b2:a4:f9: a7:05:85:28:44:9d:d4:bf:d6:fb:d3:0f:3b:fa:5c:0e:0d:54: cc:74:19:26:f1:3c:ad:8e:3f:b9:ea:09:a9:47:d4:b7:da:b5: da:48:dd:03:a5:02:90:da:25:ac:dc:7a:97:58:0d:9d:04:fb: 89:cb:0a:64:02:8e:a2:50:3a:1b:5f:af:7b:f7:9d:6f:1b:63: 4b:3f:a6:16:73:e6:22:8e:57:3d:5c:75:52:39:18:47:50:59: aa:f7:2c:75:b7:a5:85:e4:b1:92:e6:72:f1:eb:02:ab:5d:f0: db:3f:8c:d4:a0:bf:78:33:65:46:4f:9c:42:07:ad:02:c9:b2: 07:95:af:e6:2d:49:6e:5e:78:d4:58:22:d7:4c:35:1c:0e:51: e0:b1:6e:ad:27:74:5a:fd:10:7c:70:93:70:eb:ef:87:db:d6: 26:73:c4:93:5e:3b:7e:cd:6c:2b:62:a5:a0:0a:8a:16:3b:b2: d6:f8:80:7f:a5:89:d2:7d:5e:e8:b6:b9:8a:f5:30:46:8b:bf: d9:b0:33:b6:06:93:82:1c:5b:35:6a:5a:c0:11:75:08:91:30: e4:f7:ed:1b:1c:27:49:92:d5:ad:b3:28:e0:ef:12:3b:e6:c2: 06:a0:01:e3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+plZEYJGqStXiL2K7RHSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjJhZTQ1YzUwOTA0MWE3OTZhOTY4OTUzNTgxZjUxZDQ1YmZjZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjlWY0NzZvlAXV7tOpZ3aA6HyRg9 dmbnq3EmW7DIihv2GEcinzP37rhEi77bImy7KPCULT91r5EHwYqPlODEs7HOuUjK p/Z9P+vNADdMT5k04kdrNTm9ulQF80pw3YR2qaJ8tshDKzTJHt2Jc3cPrmKJkepW zSLmpBLcvoiCuSFXcg4EIt6D8uYFzMFpfV+WgWYgdPsJfX1k9EBvKII7LFxZW904 JvGkfjd0yp8wv9Bc+33C3ciDmkDyg9TYg1C4Do9ZL29kr7BSKj34klOnr0ifN4uz 7JrmOFZQZRS10RCBkbQJo9g1lSU2JhH6OoaPFcU89/xgYlOFS/g8rtaquwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFI8q5FxQkEGnlqlolTWB9R1Fv85VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzkzOTAx YS0wNDNiLTQ5YzgtYWQzNy1hYzdmMjFiNmI3NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvOTM5MDFh LTA0M2ItNDljOC1hZDM3LWFjN2YyMWI2Yjc0ZC8xL2p5cmtYRkNRUWFlV3FXaVZO WUgxSFVXX3psVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDTUtwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnpTANBgkqhkiG9w0BAQsFAAOCAQEAXEHHTDNAgZ3ILu2zZstRsqT5pwWFKESd 1L/W+9MPO/pcDg1UzHQZJvE8rY4/ueoJqUfUt9q12kjdA6UCkNolrNx6l1gNnQT7 icsKZAKOolA6G1+ve/edbxtjSz+mFnPmIo5XPVx1UjkYR1BZqvcsdbelheSxkuZy 8esCq13w2z+M1KC/eDNlRk+cQgetAsmyB5Wv5i1Jbl541Fgi10w1HA5R4LFurSd0 Wv0QfHCTcOvvh9vWJnPEk147fs1sK2KloAqKFjuy1viAf6WJ0n1e6La5ivUwRou/ 2bAztgaTghxbNWpawBF1CJEw5PftGxwnSZLVrbMo4O8SO+bCBqAB4w== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:01 2026 by rpki-client