This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer (raw, json) Hash identifier: Bof5KQ1RBQZzNazJjb3FwbC63fghyUSD0bI70n4UjDU= Subject key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E1D9237F57FF6768DD5599FA0CE23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47220 IP: 194.152.42.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1d:92:37:f5:7f:f6:76:8d:d5:59:9f:a0:ce:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:93:13:69:85:2f:7c:f4:e5:dc:b7:93:b6: ef:b7:c1:f7:42:bd:d5:c4:8e:ce:ca:d8:d5:85:45: e1:eb:ed:79:83:5b:e0:ae:e3:85:b1:fd:e1:73:bb: 35:b3:39:0c:13:13:44:9b:da:32:aa:cc:f6:1d:e6: b3:59:a7:97:ce:53:08:62:46:8e:e0:19:73:01:78: 10:41:2d:71:8c:82:83:36:d3:86:8a:52:50:0c:b3: 2f:05:be:81:41:df:7e:36:e6:cc:2b:2b:28:40:20: c0:05:3c:75:52:ad:be:d7:32:cc:1a:f1:af:a2:a6: a7:5e:da:27:c0:c0:66:e3:34:71:28:cb:b5:88:4e: 31:ae:98:42:4b:58:ec:b9:09:a7:f9:85:e5:38:aa: 74:b1:eb:e2:ea:93:81:08:93:6e:09:f2:10:56:e2: 7f:5a:b1:aa:33:40:97:16:5d:e2:6d:42:4a:88:9f: c8:c7:c2:74:de:48:fa:12:67:c3:f0:ee:4c:7b:4d: f2:b0:59:b7:d0:b4:89:d5:b7:34:e6:9a:e5:2c:69: b8:85:ac:76:f4:9e:9b:35:61:84:39:13:4a:d0:91: 84:55:49:cf:cd:36:f0:4e:9a:f1:77:68:99:b4:eb: 36:71:81:4d:8e:1d:7f:e3:c1:f2:4d:ec:d4:1b:fc: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.152.42.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47220 Signature Algorithm: sha256WithRSAEncryption 61:d3:33:1f:8d:f3:9a:83:44:fb:3f:a6:41:f7:ee:82:30:31: 65:6b:7d:c7:73:aa:c6:f0:7e:7b:ba:74:8c:18:f9:10:9d:d7: ff:25:50:ae:9a:10:a8:c1:04:31:93:1b:67:0a:fb:17:28:82: 36:44:61:c4:86:1a:02:5a:ca:55:ef:b4:e8:16:a9:b6:ce:0e: 5d:63:8e:04:77:1e:11:b5:be:ad:29:f2:62:b2:41:ce:7f:73: 72:98:40:33:24:9a:1c:c5:9f:53:39:31:46:95:32:f3:78:f1: 89:a3:b2:d0:06:80:7b:cc:4e:39:1c:48:31:9a:15:cc:f3:2a: 31:ec:5c:e9:f9:2c:fe:74:d0:58:33:d9:f2:5e:71:06:00:4a: ad:54:08:af:18:f8:5a:fd:fa:18:66:37:6e:bf:60:48:6f:9e: 87:ee:6f:6c:b4:c4:de:a8:58:b9:bc:b0:88:63:d2:e3:05:0f: 7f:0f:31:50:33:aa:68:43:c2:92:6b:fd:ad:cc:57:9d:60:b6: 89:9d:11:af:a5:af:5a:49:df:6d:0a:c4:76:57:72:51:e7:db: a8:59:ac:0e:4e:60:68:f3:61:9c:e1:89:0d:eb:ea:68:77:ba: cf:a6:e5:11:04:2d:05:d6:d4:14:91:3f:4f:c1:13:77:4d:b8: 7d:e9:13:1d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fh2SN/V/9naN1VmfoM4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Y2MjkxNjE5N2Y3Nzk2Y2VjNTc4ZWE0MzUyZmFlNGVmODlhZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX+TE2mFL3z05dy3k7bvt8H3Qr3V xI7OytjVhUXh6+15g1vgruOFsf3hc7s1szkMExNEm9oyqsz2HeazWaeXzlMIYkaO 4BlzAXgQQS1xjIKDNtOGilJQDLMvBb6BQd9+NubMKysoQCDABTx1Uq2+1zLMGvGv oqanXtonwMBm4zRxKMu1iE4xrphCS1jsuQmn+YXlOKp0sevi6pOBCJNuCfIQVuJ/ WrGqM0CXFl3ibUJKiJ/Ix8J03kj6EmfD8O5Me03ysFm30LSJ1bc05prlLGm4hax2 9J6bNWGEORNK0JGEVUnPzTbwTprxd2iZtOs2cYFNjh1/48HyTezUG/wvtQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKf2KRYZf3eWzsV46kNS+uTvia7CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2I3MWNh Ny01MDcwLTRiY2MtYTAwZC1lYzk3ZjE4YTc5NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvYjcxY2E3 LTUwNzAtNGJjYy1hMDBkLWVjOTdmMThhNzk0YS8xL3BfWXBGaGxfZDViT3hYanFR MUw2NU8tSnJzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwpgqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC4dDANBgkqhkiG9w0BAQsFAAOCAQEAYdMzH43zmoNE+z+mQffugjAxZWt9x3Oq xvB+e7p0jBj5EJ3X/yVQrpoQqMEEMZMbZwr7FyiCNkRhxIYaAlrKVe+06Bapts4O XWOOBHceEbW+rSnyYrJBzn9zcphAMySaHMWfUzkxRpUy83jxiaOy0AaAe8xOORxI MZoVzPMqMexc6fks/nTQWDPZ8l5xBgBKrVQIrxj4Wv36GGY3br9gSG+eh+5vbLTE 3qhYubywiGPS4wUPfw8xUDOqaEPCkmv9rcxXnWC2iZ0Rr6WvWknfbQrEdldyUefb qFmsDk5gaPNhnOGJDevqaHe6z6blEQQtBdbUFJE/T8ETd024fekTHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:29 2026 by rpki-client