This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer File: pyDgfSiyYVg7b_sWSYzefUfjQlw.cer (raw, json) Hash identifier: 3SSBWSpqNE2EehveGOFS+4Co1bYs8s7GvjhQY8nUL5s= Subject key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80855622956BA425B463603BC97D7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210975 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:85:56:22:95:6b:a4:25:b4:63:60:3b:c9:7d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a720e07d28b261583b6ffb16498cde7d47e3425c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:09:16:90:5e:a4:8a:ab:f9:0c:93:9c:f1: 17:8d:bc:55:bc:53:7d:78:df:5a:39:f1:8e:14:90: 04:da:a0:28:27:82:40:5b:17:55:be:ea:2a:62:5b: 26:e6:50:af:92:f1:5d:8f:17:bb:96:41:3b:06:fe: 01:45:8a:d7:3e:7e:85:56:99:6c:05:d5:f8:e5:99: eb:16:d8:af:1a:dd:9c:29:0e:b1:4b:ea:24:5a:11: 5e:4e:2d:53:9d:7b:41:b2:70:98:71:df:66:31:6b: 00:53:80:d1:97:e4:b4:d0:39:05:1d:47:16:ee:e3: ac:81:b6:e3:d4:23:24:27:65:e0:59:45:22:ec:5e: eb:d8:e7:11:66:97:4e:48:d2:e9:92:62:59:c4:1e: f2:5e:a3:a7:71:a2:b3:7b:aa:a6:b5:ea:61:1d:f5: 11:ec:17:8d:f7:e2:00:52:03:82:a0:62:fc:94:69: bb:4f:ae:0f:2d:23:4b:19:65:5d:cc:d0:72:4b:6d: 9d:04:07:00:fc:d6:02:18:86:c4:19:a7:ba:ee:60: eb:9f:01:44:e9:0f:07:fb:06:d4:05:08:4e:9b:a8: 3a:49:55:f1:1a:21:8c:53:f5:21:65:87:70:06:99: d0:bc:14:21:90:85:b0:e4:15:bf:0f:02:91:01:89: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210975 Signature Algorithm: sha256WithRSAEncryption 85:cc:9b:4e:a2:78:fc:bf:2b:60:c5:1b:85:52:13:1b:50:b7: 7b:b1:a5:d5:82:b0:36:fc:21:e6:8e:72:6e:47:b4:64:f1:c4: 9c:86:ec:7e:76:e3:eb:e1:77:38:15:a0:9f:03:de:07:0b:2b: af:5f:c2:34:d1:69:44:49:af:5a:9a:95:9a:69:a8:a6:dc:65: 84:31:e6:a7:ad:09:28:fe:0f:9a:6b:b2:7a:97:d0:19:50:a3: 35:8a:84:2b:a5:46:e9:b6:42:fa:8f:a7:5c:08:08:24:c8:b4: 1b:36:4d:44:27:8a:cc:16:34:9d:5f:3f:6b:e4:dc:8f:23:07: 59:f0:12:d5:d8:e7:ae:aa:8c:01:51:2e:89:b7:f0:bd:ad:d1: 69:ec:e3:6a:56:24:7c:9d:e3:9b:aa:1c:99:75:ad:52:4c:78: fa:0b:16:4d:f3:03:5b:66:21:86:42:25:ae:1b:e2:62:96:53: 3f:86:6b:63:c1:bd:16:61:14:ac:5e:f4:d4:96:30:fb:aa:8c: 07:da:30:fe:bd:43:01:63:94:80:54:07:42:dc:69:db:d8:f4: f9:79:a9:57:23:0a:36:13:df:e7:8a:dd:63:89:14:43:73:21: 13:dc:ec:d2:b9:5a:44:8f:60:7c:35:9f:66:03:cf:89:3b:a6: 73:94:76:3d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8gIVWIpVrpCW0Y2A7yX1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzIwZTA3ZDI4YjI2MTU4M2I2ZmZiMTY0OThjZGU3ZDQ3ZTM0MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJgJFpBepIqr+QyTnPEXjbxVvFN9 eN9aOfGOFJAE2qAoJ4JAWxdVvuoqYlsm5lCvkvFdjxe7lkE7Bv4BRYrXPn6FVpls BdX45ZnrFtivGt2cKQ6xS+okWhFeTi1TnXtBsnCYcd9mMWsAU4DRl+S00DkFHUcW 7uOsgbbj1CMkJ2XgWUUi7F7r2OcRZpdOSNLpkmJZxB7yXqOncaKze6qmtephHfUR 7BeN9+IAUgOCoGL8lGm7T64PLSNLGWVdzNByS22dBAcA/NYCGIbEGae67mDrnwFE 6Q8H+wbUBQhOm6g6SVXxGiGMU/UhZYdwBpnQvBQhkIWw5BW/DwKRAYnlhwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKcg4H0osmFYO2/7FkmM3n1H40JcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzM2YWY2 OS05ZmI0LTQ2MjAtYWFhYi1kZWM5NGRlODU4Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMzZhZjY5 LTlmYjQtNDYyMC1hYWFiLWRlYzk0ZGU4NThjZi8xL3B5RGdmU2l5WVZnN2Jfc1dT WXplZlVmalFsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4HzANBgkqhkiG9w0BAQsFAAOCAQEAhcybTqJ4/L8r YMUbhVITG1C3e7Gl1YKwNvwh5o5ybke0ZPHEnIbsfnbj6+F3OBWgnwPeBwsrr1/C NNFpREmvWpqVmmmoptxlhDHmp60JKP4PmmuyepfQGVCjNYqEK6VG6bZC+o+nXAgI JMi0GzZNRCeKzBY0nV8/a+TcjyMHWfAS1djnrqqMAVEuibfwva3RaezjalYkfJ3j m6ocmXWtUkx4+gsWTfMDW2YhhkIlrhviYpZTP4ZrY8G9FmEUrF701JYw+6qMB9ow /r1DAWOUgFQHQtxp29j0+XmpVyMKNhPf54rdY4kUQ3MhE9zs0rlaRI9gfDWfZgPP iTumc5R2PQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:08 2026 by rpki-client