This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer File: ny83TJpzj63o-FDKq11507kARYQ.cer (raw, json) Hash identifier: prGXOzYUGl0fCoDQbx5KPZ+AZ3P4x27CxmeNMDQ9YZ0= Subject key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED161A9A599AE1FC6D1E19A41C766C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199988 IP: 2001:67c:18b4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:16:1a:9a:59:9a:e1:fc:6d:1e:19:a4:1c:76:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f2f374c9a738fade8f850caab5d79d3b9004584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:88:31:36:e6:84:db:ac:e3:ef:17:a0:c0: 7d:fa:c6:fe:cf:ae:a0:e2:94:85:ad:d2:62:f1:9e: 46:a6:50:56:df:aa:63:9c:4a:0a:bc:b5:de:8d:f3: 68:5d:8a:54:a8:72:77:67:fc:99:1d:4f:6b:08:50: d9:f9:76:54:19:8c:42:3d:1a:c7:51:d8:2a:bc:4a: 3b:bb:96:34:58:05:82:b8:3f:58:9f:97:b3:08:0c: 36:02:b5:10:9e:2d:60:d8:b4:f4:0f:92:57:37:ac: 6d:fd:4d:a1:1e:c0:07:0f:32:e7:27:2d:69:58:e9: 2d:43:b5:0a:f1:a9:bf:3f:e4:51:ef:53:f5:25:55: 6d:f2:a5:ba:d8:8a:14:94:c1:18:fe:53:92:b9:0c: dd:66:55:14:fc:f6:f4:07:93:2a:25:05:18:a1:9f: b1:f4:79:5f:08:94:c1:dd:7f:d8:27:9d:e5:21:91: 06:e3:18:62:48:11:26:34:d9:31:b0:44:a1:17:d6: 6c:9d:85:28:90:cd:b7:1a:c6:6b:6c:a2:d2:ba:31: 4c:b2:2e:e8:55:0a:da:2f:33:7f:ab:52:7f:47:ef: dc:01:8f:56:f3:e3:84:6e:70:ac:36:59:20:72:45: 2c:24:4c:f0:8c:37:62:5c:5c:15:3a:72:8f:c8:25: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:18b4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199988 Signature Algorithm: sha256WithRSAEncryption 83:31:7c:e4:78:3a:70:98:3d:cd:ee:e9:ba:bb:f9:b9:06:67: e7:1b:a6:38:c7:99:b7:83:50:d6:5b:c4:95:f6:ef:c2:54:cc: 79:92:74:77:08:97:4a:59:ef:30:31:41:49:ed:e9:a9:be:9c: 56:85:39:74:5f:1a:1e:f9:8d:8c:a9:e8:cf:89:52:1d:a4:3a: 7a:66:b3:34:f0:d3:a4:53:cd:19:4a:f5:d4:07:5f:63:38:a0: 0c:14:9a:80:06:7b:26:a8:bc:71:3c:a7:bf:b4:32:28:ca:ad: 01:3c:a2:d1:28:97:97:e9:68:4a:a1:5f:42:91:60:83:09:49: 34:11:f4:7b:7f:65:6c:b7:a1:00:d5:86:dc:5a:57:f1:4a:d8: 5b:11:e6:90:34:d0:e4:e6:87:7f:ff:c5:b7:c3:87:0f:dc:c7: 74:9b:81:e3:be:95:f4:a1:a1:1e:10:0c:74:b4:17:a6:33:93: b2:77:fe:72:89:2a:7f:5e:da:d9:09:96:31:bb:e8:34:38:d0: 1c:f5:f9:48:80:72:e6:4a:61:43:5c:f7:5b:23:cc:21:b0:40: f1:92:a9:ea:19:63:60:df:09:f7:77:3f:79:47:86:19:18:0f: 1e:eb:a3:ef:5d:9f:9a:40:28:2a:c1:45:c7:50:2e:4d:2b:6f: b6:f1:42:38 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt87RYamlma4fxtHhmkHHZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjJmMzc0YzlhNzM4ZmFkZThmODUwY2FhYjVkNzlkM2I5MDA0NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1GIMTbmhNus4+8XoMB9+sb+z66g 4pSFrdJi8Z5GplBW36pjnEoKvLXejfNoXYpUqHJ3Z/yZHU9rCFDZ+XZUGYxCPRrH UdgqvEo7u5Y0WAWCuD9Yn5ezCAw2ArUQni1g2LT0D5JXN6xt/U2hHsAHDzLnJy1p WOktQ7UK8am/P+RR71P1JVVt8qW62IoUlMEY/lOSuQzdZlUU/Pb0B5MqJQUYoZ+x 9HlfCJTB3X/YJ53lIZEG4xhiSBEmNNkxsEShF9ZsnYUokM23GsZrbKLSujFMsi7o VQraLzN/q1J/R+/cAY9W8+OEbnCsNlkgckUsJEzwjDdiXFwVOnKPyCXNxwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJ8vN0yac4+t6PhQyqtdedO5AEWEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzYzNGU3 Ni01YzVmLTQ0YzQtYjhhNC01MjRlOTMwZTVmZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvNjM0ZTc2 LTVjNWYtNDRjNC1iOGE0LTUyNGU5MzBlNWZkMS8xL255ODNUSnB6ajYzby1GREtx MTE1MDdrQVJZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBi0MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMNNDANBgkqhkiG9w0BAQsFAAOCAQEAgzF85Hg6cJg9ze7purv5uQZn5xum OMeZt4NQ1lvElfbvwlTMeZJ0dwiXSlnvMDFBSe3pqb6cVoU5dF8aHvmNjKnoz4lS HaQ6emazNPDTpFPNGUr11AdfYzigDBSagAZ7Jqi8cTynv7QyKMqtATyi0SiXl+lo SqFfQpFggwlJNBH0e39lbLehANWG3FpX8UrYWxHmkDTQ5OaHf//Ft8OHD9zHdJuB 476V9KGhHhAMdLQXpjOTsnf+cokqf17a2QmWMbvoNDjQHPX5SIBy5kphQ1z3WyPM IbBA8ZKp6hljYN8J93c/eUeGGRgPHuuj712fmkAoKsFFx1AuTStvtvFCOA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:48 2026 by rpki-client