This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer File: nCyytL7GAbPppHQCFeHe0hFyLWQ.cer (raw, json) Hash identifier: Zya3IyIyk+YufcGRczOndPtQcshkrAg5zAWLrNZIxwk= Subject key identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C013F4D0BD00A6583F2F9191D25C43A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:00:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204871 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:01:3f:4d:0b:d0:0a:65:83:f2:f9:19:1d:25:c4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:00:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:99:5f:56:7e:dc:f0:c4:fc:12:46:9b:7d: 9c:b0:ed:2d:92:8d:f5:2e:2f:47:2f:19:f8:18:e0: 78:37:55:9f:bb:17:85:ea:e9:4e:c9:71:44:ba:2e: 37:0a:86:80:d5:05:07:7c:29:53:d5:76:37:af:fd: c2:f3:c8:3b:4f:52:d1:03:c2:b4:79:08:88:81:e0: 41:55:17:bb:34:7f:2d:84:8b:4e:1a:77:51:72:8e: ea:51:bc:ea:bd:cd:9f:e0:7b:25:7d:56:36:6b:bb: 12:29:cf:49:a3:58:d4:62:58:d6:89:9c:25:a2:fb: 25:9a:d0:d5:c4:67:cc:e0:9a:97:a2:7b:0b:d3:c7: 49:4f:74:0a:80:b8:7f:27:e6:d2:e9:28:a1:ba:bb: 0d:38:27:a3:90:be:7f:13:bb:2d:79:47:bb:65:ae: a5:95:d0:03:93:fb:2e:ae:9e:18:92:8b:ae:1c:77: 1a:cb:1a:c8:67:00:c4:5c:b9:91:42:71:66:53:6a: 50:3b:f4:ac:ac:de:d5:bc:60:02:bd:a8:7c:c3:61: 46:59:e1:64:fa:af:63:60:c3:80:75:62:3b:ce:d3: 76:4d:ac:93:b4:05:6c:14:b5:12:72:b2:29:11:f5: b4:92:64:9a:8f:28:a3:57:17:f3:8e:78:c9:c1:65: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204871 Signature Algorithm: sha256WithRSAEncryption 05:18:a1:13:27:c6:c6:ae:d1:fc:c9:97:7f:c3:cf:13:eb:dc: 1c:ec:5a:d8:24:d9:66:e1:fc:c3:0d:6a:2a:f2:6b:0e:99:e0: 03:49:39:bb:bd:31:59:45:93:cc:b7:11:83:96:4a:58:e8:84: 01:f9:e2:1d:6b:2a:99:07:9c:63:f6:13:6e:84:56:c8:d5:b9: 8d:91:b7:d7:98:6c:e6:6c:64:d7:00:c6:d8:06:57:38:0e:ae: 94:31:fe:5b:24:43:4f:37:13:66:0b:d7:0b:64:fb:ad:3e:4f: 19:60:fa:48:b1:b0:82:78:6a:df:64:35:17:11:37:55:e6:59: 21:fd:63:2b:7e:1e:1d:57:89:d9:8f:3b:1e:ca:20:dd:58:b9: a7:d7:9d:3c:7e:9a:98:10:72:9d:2e:cd:e3:f1:b2:bc:c8:26: d1:57:18:b8:90:f5:78:f7:6e:6d:db:b3:03:7d:66:21:c6:6c: 61:f0:c0:b5:a2:e3:05:b9:4a:1c:39:77:7d:55:a0:48:f3:77: 6c:c9:ae:6a:f0:b5:48:8e:b6:da:68:cc:d9:12:fd:22:22:b6: f0:91:45:45:5e:e6:45:9f:69:ef:c8:b4:93:ca:a2:46:f1:6a: c0:b8:13:1c:69:4e:9b:74:19:78:8d:1a:d3:1c:98:17:28:61: 97:c4:9e:4b -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt8AT9NC9AKZYPy+RkdJcQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAwMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzJjYjJiNGJlYzYwMWIzZTlhNDc0MDIxNWUxZGVkMjExNzIyZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2qZX1Z+3PDE/BJGm32csO0tko31 Li9HLxn4GOB4N1WfuxeF6ulOyXFEui43CoaA1QUHfClT1XY3r/3C88g7T1LRA8K0 eQiIgeBBVRe7NH8thItOGndRco7qUbzqvc2f4HslfVY2a7sSKc9Jo1jUYljWiZwl ovslmtDVxGfM4JqXonsL08dJT3QKgLh/J+bS6SihursNOCejkL5/E7steUe7Za6l ldADk/surp4YkouuHHcayxrIZwDEXLmRQnFmU2pQO/SsrN7VvGACvah8w2FGWeFk +q9jYMOAdWI7ztN2TayTtAVsFLUScrIpEfW0kmSajyijVxfzjnjJwWUB1wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFJwssrS+xgGz6aR0AhXh3tIRci1kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ViYjY4 OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWJi Njg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2FlNjRkLzEvOUMyQ0IyQjRCRUM2 MDFCM0U5QTQ3NDAyMTVFMURFRDIxMTcyMkQ2NC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIEcw DQYJKoZIhvcNAQELBQADggEBAAUYoRMnxsau0fzJl3/DzxPr3BzsWtgk2Wbh/MMN airyaw6Z4ANJObu9MVlFk8y3EYOWSljohAH54h1rKpkHnGP2E26EVsjVuY2Rt9eY bOZsZNcAxtgGVzgOrpQx/lskQ083E2YL1wtk+60+Txlg+kixsIJ4at9kNRcRN1Xm WSH9Yyt+Hh1XidmPOx7KIN1YuafXnTx+mpgQcp0uzePxsrzIJtFXGLiQ9Xj3bm3b swN9ZiHGbGHwwLWi4wW5Shw5d31VoEjzd2zJrmrwtUiOttpozNkS/SIitvCRRUVe 5kWfae/ItJPKokbxasC4ExxpTpt0GXiNGtMcmBcoYZfEnks= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:26 2026 by rpki-client