This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer File: nYwI9K2P6tNx2j58ArbP1on8pbo.cer (raw, json) Hash identifier: msJB6D+YfkNTNfWVw1E3B4eV4QhBAdbgOpy5oE3gsbQ= Subject key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8261DC20AF8D686C06B89873BD70A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210391 IP: 185.147.252.0/22 IP: 2a07:5a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:61:dc:20:af:8d:68:6c:06:b8:98:73:bd:70:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:33:6f:97:56:8d:b1:48:17:f2:0e:4a:6e: b5:4d:f7:d0:7d:ab:87:8e:bc:f5:ef:32:51:84:cd: 24:bf:e4:1a:ad:5a:e7:5e:c1:b6:5f:a7:b9:93:e2: 4e:66:1f:d9:f8:a4:b5:8d:66:f0:ed:44:2c:8b:35: ff:c1:f4:90:51:98:f1:0f:7b:3e:00:78:13:29:06: 78:e4:a1:2e:b1:ee:b4:0a:e8:aa:85:f4:d3:e3:54: da:a2:aa:ee:4c:4f:da:20:fa:27:0b:6d:12:bb:0b: 6c:9f:f6:1c:d6:f2:97:72:db:a3:62:03:7e:d5:04: c8:16:3d:17:10:69:27:92:c4:da:42:96:73:b3:d1: 99:11:a5:31:57:d2:bd:f8:1d:97:5a:c3:59:46:7e: 20:21:d2:e6:3e:95:30:7a:fc:55:56:df:63:55:71: da:da:69:6b:91:8c:8a:4a:a2:8d:a2:eb:a9:67:d1: 37:36:ae:33:2e:2c:ec:a9:84:f5:1e:78:4a:42:16: 8e:f0:8e:da:51:dd:7c:56:b3:3e:1f:3b:3a:ef:43: 10:77:c2:82:dc:98:9a:01:43:37:df:b2:67:39:e3: 3c:0e:4b:17:9e:ff:ea:c4:fe:b2:3b:ce:2c:9f:ab: 59:bb:be:5c:32:f9:9c:1e:77:3d:fb:75:98:44:85: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.252.0/22 IPv6: 2a07:5a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210391 Signature Algorithm: sha256WithRSAEncryption 7b:bb:5d:fd:1d:5f:70:eb:34:8f:7a:54:47:f9:c7:cc:09:5a: 60:05:42:72:48:22:c7:49:85:b5:85:66:66:e5:e7:11:30:94: a0:b7:30:6f:d6:90:dd:73:28:dd:88:a9:21:c3:7b:ab:22:be: bc:ad:c4:98:58:c3:da:fc:7d:f1:f6:1f:68:e9:40:d4:cd:c0: f5:ea:e8:64:33:ba:c5:eb:9d:3f:06:7d:0a:01:00:54:7f:32: e5:33:2a:d3:c4:2a:da:9d:79:f6:83:de:4a:c9:6e:6e:0a:e7: 9b:34:82:30:01:92:a2:21:1e:45:89:f5:0a:fb:d5:68:6e:b2: a8:42:1a:f0:16:9e:72:fe:01:0e:44:fc:38:67:5c:47:b5:c1: a1:47:d7:03:3b:d9:f5:13:be:99:ae:08:76:a1:17:e4:ba:69: 3c:d3:85:f7:7e:47:5c:2b:08:75:0a:00:fb:b9:c4:e8:e7:78: ac:51:04:87:30:dd:8a:24:9f:4e:f0:13:63:6a:f2:37:41:9a: 98:20:e9:8a:6e:71:24:63:3c:01:d4:c8:52:86:1e:48:4a:b4: c8:ca:3b:30:1c:d3:95:b3:c6:ba:8b:25:74:57:0c:12:04:9b: c7:88:e6:26:ee:1e:43:33:45:21:7b:f8:19:21:bc:cf:d6:3a: 8d:95:41:af -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/gmHcIK+NaGwGuJhzvXClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDhjMDhmNGFkOGZlYWQzNzFkYTNlN2MwMmI2Y2ZkNjg5ZmNhNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4zb5dWjbFIF/IOSm61TffQfauH jrz17zJRhM0kv+QarVrnXsG2X6e5k+JOZh/Z+KS1jWbw7UQsizX/wfSQUZjxD3s+ AHgTKQZ45KEuse60CuiqhfTT41TaoqruTE/aIPonC20Suwtsn/Yc1vKXctujYgN+ 1QTIFj0XEGknksTaQpZzs9GZEaUxV9K9+B2XWsNZRn4gIdLmPpUwevxVVt9jVXHa 2mlrkYyKSqKNouupZ9E3Nq4zLizsqYT1HnhKQhaO8I7aUd18VrM+Hzs670MQd8KC 3JiaAUM337JnOeM8DksXnv/qxP6yO84sn6tZu75cMvmcHnc9+3WYRIVOrwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ2MCPStj+rTcdo+fAK2z9aJ/KW6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2ZhYTUw Zi00ZGUxLTRkMWMtYjgwMy0xOWJmNzgxMDk2MWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvZmFhNTBm LTRkZTEtNGQxYy1iODAzLTE5YmY3ODEwOTYxYi8xL25Zd0k5SzJQNnROeDJqNThB cmJQMW9uOHBiby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZP8MA0EAgACMAcDBQMqB1pAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM11zANBgkqhkiG9w0BAQsFAAOCAQEAe7td/R1fcOs0 j3pUR/nHzAlaYAVCckgix0mFtYVmZuXnETCUoLcwb9aQ3XMo3YipIcN7qyK+vK3E mFjD2vx98fYfaOlA1M3A9eroZDO6xeudPwZ9CgEAVH8y5TMq08Qq2p159oPeSslu bgrnmzSCMAGSoiEeRYn1CvvVaG6yqEIa8Baecv4BDkT8OGdcR7XBoUfXAzvZ9RO+ ma4IdqEX5LppPNOF935HXCsIdQoA+7nE6Od4rFEEhzDdiiSfTvATY2ryN0GamCDp im5xJGM8AdTIUoYeSEq0yMo7MBzTlbPGuosldFcMEgSbx4jmJu4eQzNFIXv4GSG8 z9Y6jZVBrw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:06 2026 by rpki-client