This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer File: pYQcxzKsc43B4_5nwS5RBL74Y7o.cer (raw, json) Hash identifier: DDMHeyVnux4HU/SIFbzb/U38oPoikM2cflbLH1eCIm0= Subject key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36CB9FEC4727A9FB3F21E5988801F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206880 IP: 109.104.113.0/24 IP: 193.164.147.0/24 IP: 2a12:6ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cb:9f:ec:47:27:a9:fb:3f:21:e5:98:88:01:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:d9:c3:3d:53:4f:d3:b7:43:1a:9f:e2:c1: a2:2d:7c:a9:ab:6b:6b:30:f1:db:39:16:51:be:ba: 91:c0:53:af:0e:78:a9:c6:e1:fb:99:f7:e2:80:f7: f8:a3:e3:a1:ac:8d:47:dd:64:2e:4d:51:55:dc:bc: d9:6b:e3:6b:7d:f2:eb:67:56:76:4b:e3:d9:89:1f: fb:3b:94:21:dc:0c:f3:b7:ff:bb:f3:41:72:78:e0: b7:ba:a4:8a:4a:15:cd:6f:88:4e:13:39:b3:8f:17: 65:49:7d:f8:33:4c:52:a7:77:cb:d4:dd:61:0c:ac: a5:6e:67:fe:9f:bd:62:07:7f:84:2d:e9:45:61:97: 09:fd:5b:b4:2c:ea:0f:d7:90:59:46:c5:ca:da:9b: 58:02:ef:04:f8:84:04:98:28:2b:bc:e7:c6:7b:14: 65:ba:4d:9a:46:ef:f4:fd:1d:33:d3:32:d9:8b:f4: cf:b5:a3:cc:9f:ed:94:42:61:52:e6:da:a1:39:d3: e8:00:60:f3:d5:15:ff:db:5f:80:99:d0:03:b9:06: 8c:01:4a:39:7b:0f:5f:3c:96:01:ff:3e:59:41:e0: 16:d4:8f:b3:f6:a6:ed:94:6a:44:2e:62:b5:93:90: 57:da:45:3c:f6:a9:ac:c3:9a:14:cc:da:5b:11:df: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.113.0/24 193.164.147.0/24 IPv6: 2a12:6ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206880 Signature Algorithm: sha256WithRSAEncryption 26:eb:b3:f4:61:df:86:79:2a:23:a4:b4:5d:33:cd:34:dc:5d: a8:10:48:cb:8e:da:ae:d2:49:2c:9a:4d:a8:df:2a:7e:16:a3: b9:66:e7:f7:7c:ae:4d:95:8b:36:94:fd:e7:92:a2:70:07:3d: e3:b7:62:2a:b2:12:d6:da:f5:a4:54:e2:55:a3:ae:31:c3:bb: 7e:57:04:17:98:ff:99:23:08:67:b7:8b:ee:4e:e6:f4:2b:d8: 92:ea:98:d2:5e:6e:d8:97:88:b7:25:16:0c:7c:11:47:e1:8a: 25:42:29:0c:f8:40:1f:e6:80:22:95:20:c4:5a:61:42:65:04: 3d:19:cc:67:75:67:6e:13:4e:7a:a3:aa:6b:58:c7:b1:52:2c: c0:3d:35:2b:c7:d0:e8:50:26:de:f8:07:9c:c2:32:98:29:db: 78:b4:e7:56:32:bd:42:cd:f0:23:70:38:4d:7e:a0:c2:59:3d: eb:30:77:b4:34:85:19:4d:80:e0:5c:c6:47:02:9a:74:a4:99: 58:85:4e:7d:ac:46:ae:96:1c:9c:84:a1:2d:83:f7:ec:09:51: c8:23:d7:6b:b7:f9:57:86:98:6d:2f:72:00:1e:19:07:84:c2: 19:6a:a9:fe:8e:91:7a:0f:c6:80:ab:5a:64:10:c9:3f:9a:77: e1:4a:b1:9e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7Nsuf7Ecnqfs/IeWYiAH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTg0MWNjNzMyYWM3MzhkYzFlM2ZlNjdjMTJlNTEwNGJlZjg2M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPHZwz1TT9O3Qxqf4sGiLXypq2tr MPHbORZRvrqRwFOvDnipxuH7mffigPf4o+OhrI1H3WQuTVFV3LzZa+NrffLrZ1Z2 S+PZiR/7O5Qh3Azzt/+780FyeOC3uqSKShXNb4hOEzmzjxdlSX34M0xSp3fL1N1h DKylbmf+n71iB3+ELelFYZcJ/Vu0LOoP15BZRsXK2ptYAu8E+IQEmCgrvOfGexRl uk2aRu/0/R0z0zLZi/TPtaPMn+2UQmFS5tqhOdPoAGDz1RX/21+AmdADuQaMAUo5 ew9fPJYB/z5ZQeAW1I+z9qbtlGpELmK1k5BX2kU89qmsw5oUzNpbEd+6awIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKWEHMcyrHONweP+Z8EuUQS++GO6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzE0MWEy YS0xOTRiLTQwMmItOTJkZC02NjY2MGIyMjJmYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMTQxYTJh LTE5NGItNDAyYi05MmRkLTY2NjYwYjIyMmZiMC8xL3BZUWN4ektzYzQzQjRfNW53 UzVSQkw3NFk3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAbWhxAwQAwaSTMA0EAgACMAcDBQMqEmrAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMoIDANBgkqhkiG9w0BAQsFAAOCAQEAJuuz 9GHfhnkqI6S0XTPNNNxdqBBIy47artJJLJpNqN8qfhajuWbn93yuTZWLNpT955Ki cAc947diKrIS1tr1pFTiVaOuMcO7flcEF5j/mSMIZ7eL7k7m9CvYkuqY0l5u2JeI tyUWDHwRR+GKJUIpDPhAH+aAIpUgxFphQmUEPRnMZ3VnbhNOeqOqa1jHsVIswD01 K8fQ6FAm3vgHnMIymCnbeLTnVjK9Qs3wI3A4TX6gwlk96zB3tDSFGU2A4FzGRwKa dKSZWIVOfaxGrpYcnIShLYP37AlRyCPXa7f5V4aYbS9yAB4ZB4TCGWqp/o6Reg/G gKtaZBDJP5p34Uqxng== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:26 2026 by rpki-client