This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer File: nyjbpUvBou6fd-Br-AglbdyTh-g.cer (raw, json) Hash identifier: jCWun+tRIr4rqrxakVZfjgXOKBH7vOnxFWjITg2CJ5A= Subject key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A598FFC1EBDB58698DAF04742046981 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57202 IP: 194.180.244.0/24 IP: 2a14:6200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:8f:fc:1e:bd:b5:86:98:da:f0:47:42:04:69:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:f5:d9:47:8b:92:5b:39:63:95:29:1a:d9: 25:fd:0d:18:82:98:70:60:1d:15:ae:81:d9:04:dd: 89:51:18:50:a8:8e:9f:0c:92:18:d9:7f:d8:75:81: f1:35:12:3a:8e:2a:1f:04:44:3d:d4:47:f5:9a:17: 51:cc:62:a8:a0:fd:0c:79:f6:27:e8:d8:85:a1:6d: fd:de:b6:87:af:49:0a:52:85:c6:19:0c:04:cc:ce: c9:11:b3:f5:68:2e:e1:c6:a1:2e:81:4f:b7:43:2b: 68:2b:75:3c:3f:cf:44:24:6f:fd:25:65:fb:61:f5: 80:15:4d:7a:68:49:74:1a:4e:69:59:10:ab:7e:71: 83:62:8e:88:20:5b:f0:7c:4f:2c:05:06:87:35:28: 7f:ff:dc:22:99:df:ec:26:84:b7:f9:a0:ac:bd:ca: 32:61:74:ed:9e:03:84:49:7e:f6:3f:1f:37:a0:08: a3:70:6a:bd:6a:73:89:5b:aa:ba:a3:a2:f9:3f:ef: 16:d4:82:ea:64:c0:b7:ea:47:6a:b4:b9:d4:8a:db: 1d:55:04:13:a7:ad:43:40:24:b2:f5:8a:81:2a:b7: e4:70:28:4d:ff:1b:1e:58:5a:be:bf:b0:3e:eb:f0: 6d:a4:4f:94:2f:c2:b2:4d:64:ef:6a:4f:57:e0:f8: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.244.0/24 IPv6: 2a14:6200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57202 Signature Algorithm: sha256WithRSAEncryption 92:6c:c4:56:39:28:b7:10:d3:fe:d7:42:b8:54:33:c8:23:0a: 1e:07:3a:b8:1c:c3:4b:22:fa:28:bc:f1:a2:75:61:3d:f0:e0: 4e:1f:71:fd:47:bb:a8:0b:75:d9:5e:62:b9:d4:3a:a2:68:57: fe:19:65:6d:38:4f:ba:e2:85:9e:6f:c5:8c:ee:e1:a3:bb:02: 29:bc:54:4c:87:97:af:9b:e1:71:93:91:61:32:18:31:6e:c7: 3d:b3:1a:16:4a:4d:ff:10:3c:11:46:34:f9:65:d3:49:05:87: e8:b5:af:d4:5a:77:53:c4:0e:cd:ae:83:97:61:5f:f2:b0:c1: 12:04:5e:f6:e5:9a:3a:c2:45:64:84:72:ea:29:97:ce:9a:28: 37:3f:f1:ce:b1:ca:f7:01:96:61:bb:0c:61:92:0c:7f:23:6f: 77:3c:ca:3e:84:c7:ba:f0:2e:51:da:2d:53:a2:70:8a:92:60: 02:84:09:12:e8:c7:cb:85:04:6d:ce:4d:f0:c2:86:13:92:bb: 11:99:05:83:41:77:f3:aa:d6:62:85:94:a6:c8:56:5c:04:82: db:e1:5a:91:92:37:63:e9:09:34:d1:bb:46:06:27:13:63:a4: 0d:29:61:69:24:03:dc:65:bd:5f:13:47:a7:bc:12:9c:ea:f7: 10:27:2e:f7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WY/8Hr21hpja8EdCBGmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI4ZGJhNTRiYzFhMmVlOWY3N2UwNmJmODA4MjU2ZGRjOTM4N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswz12UeLkls5Y5UpGtkl/Q0Ygphw YB0VroHZBN2JURhQqI6fDJIY2X/YdYHxNRI6jiofBEQ91Ef1mhdRzGKooP0MefYn 6NiFoW393raHr0kKUoXGGQwEzM7JEbP1aC7hxqEugU+3QytoK3U8P89EJG/9JWX7 YfWAFU16aEl0Gk5pWRCrfnGDYo6IIFvwfE8sBQaHNSh//9wimd/sJoS3+aCsvcoy YXTtngOESX72Px83oAijcGq9anOJW6q6o6L5P+8W1ILqZMC36kdqtLnUitsdVQQT p61DQCSy9YqBKrfkcChN/xseWFq+v7A+6/BtpE+UL8KyTWTvak9X4PjmbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJ8o26VLwaLun3fga/gIJW3ck4foMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzdhOGZi Ni1lNmE5LTRiYzgtYWIwMi1kZjNlNTgzNTRiODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvN2E4ZmI2 LWU2YTktNGJjOC1hYjAyLWRmM2U1ODM1NGI4MS8xL255amJwVXZCb3U2ZmQtQnIt QWdsYmR5VGgtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwrT0MA0EAgACMAcDBQMqFGIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDfcjANBgkqhkiG9w0BAQsFAAOCAQEAkmzEVjkotxDT /tdCuFQzyCMKHgc6uBzDSyL6KLzxonVhPfDgTh9x/Ue7qAt12V5iudQ6omhX/hll bThPuuKFnm/FjO7ho7sCKbxUTIeXr5vhcZORYTIYMW7HPbMaFkpN/xA8EUY0+WXT SQWH6LWv1Fp3U8QOza6Dl2Ff8rDBEgRe9uWaOsJFZIRy6imXzpooNz/xzrHK9wGW YbsMYZIMfyNvdzzKPoTHuvAuUdotU6JwipJgAoQJEujHy4UEbc5N8MKGE5K7EZkF g0F386rWYoWUpshWXASC2+FakZI3Y+kJNNG7RgYnE2OkDSlhaSQD3GW9XxNHp7wS nOr3ECcu9w== -----END CERTIFICATE-----Generated at Tue Jan 27 05:39:17 2026 by rpki-client