This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer File: rY6Ff8AL4U7ZK554zDymm4rcJIU.cer (raw, json) Hash identifier: NlDQdBrYlpkSG4PFWe56l5rlMT1+xY+n0P4nhyl52YM= Subject key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE8AA93218A3F526C427CF2BB7CAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59439 IP: 91.240.178.0/24 IP: 185.168.52.0/22 IP: 2a0d:c0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e8:aa:93:21:8a:3f:52:6c:42:7c:f2:bb:7c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fe:e5:97:ce:ac:5b:6d:13:b9:74:95:97:5c: 9f:67:3f:23:15:10:22:3a:ee:12:5b:40:2c:5f:3e: d3:c3:a6:71:3d:4c:28:5e:bf:29:a9:09:a6:85:7f: d1:a4:82:65:6f:d1:50:70:51:4d:92:4c:98:17:b0: 6e:40:a0:5d:40:85:0b:55:74:03:7e:91:af:d6:76: ea:f2:d3:41:45:9e:a8:69:be:ac:68:04:77:37:a8: d3:32:80:3b:c5:cc:c0:86:12:48:5b:89:f0:bf:11: fb:b6:48:39:69:c0:e0:36:4d:13:2b:43:93:c5:2c: 61:27:a7:71:d2:14:63:4a:a1:5d:b3:0f:f0:aa:da: 02:13:3e:4d:b1:3f:32:d8:e9:0b:d9:ab:7c:ed:b3: 4f:67:aa:03:01:3a:75:a7:00:80:63:bb:4a:44:6e: fe:8e:e2:72:6a:63:a7:b8:00:12:51:9d:e6:6b:71: e2:82:d5:02:56:13:d2:47:76:b4:ea:99:76:c8:f5: 92:b9:c4:e7:66:04:b0:14:3c:d3:a2:dc:5d:96:b5: 3b:b5:02:8d:a4:c9:d3:21:91:df:05:1f:70:b1:b4: c7:0e:04:41:e4:22:94:e8:e4:87:14:87:42:ee:64: 83:cd:51:e1:c3:9d:c7:78:fb:37:27:68:be:98:06: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.178.0/24 185.168.52.0/22 IPv6: 2a0d:c0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59439 Signature Algorithm: sha256WithRSAEncryption 3c:f6:a1:39:b7:08:04:f0:23:5a:55:41:19:d2:c2:b1:ad:52: b5:a7:e6:c0:17:af:41:f7:db:80:e7:46:1e:dc:99:8d:e9:7f: 26:ae:c7:a1:f4:1e:6b:66:de:a6:3f:37:6c:e2:37:e8:b8:d5: 4c:02:a1:a3:d3:d8:48:cd:ea:bd:5c:dd:19:44:42:d8:a6:18: eb:40:46:33:cc:2d:ba:64:ee:98:ad:be:13:73:46:1b:8e:58: 17:a6:d7:b2:9d:91:54:df:ab:91:aa:c5:41:8e:a8:b5:2d:b6: 41:05:54:68:ef:b4:94:25:48:fb:56:77:a9:8e:e5:ec:d1:ae: e2:07:63:72:41:6c:93:63:39:56:6c:0d:98:0f:e6:1b:a0:1f: 5e:3a:35:2f:ba:5a:1e:d6:ad:54:50:60:28:b5:5e:02:aa:92: 8c:36:a9:63:7d:c2:24:16:d2:ba:c6:23:10:7c:56:f0:4f:ab: 58:f0:51:1d:78:a5:ec:17:46:cf:02:a5:bf:c5:1c:13:4a:17: 9d:c4:e7:5d:9e:23:f5:60:85:3e:63:80:54:2a:22:d1:54:58: ee:47:72:60:a1:7f:15:57:bc:48:73:af:11:95:f6:aa:6c:a3: 44:0c:c6:cf:19:87:10:57:53:58:f6:79:a9:d9:85:8e:4c:69: 68:10:68:8d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6WuiqkyGKP1JsQnzyu3ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDhlODU3ZmMwMGJlMTRlZDkyYjllNzhjYzNjYTY5YjhhZGMyNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P7ll86sW20TuXSVl1yfZz8jFRAi Ou4SW0AsXz7Tw6ZxPUwoXr8pqQmmhX/RpIJlb9FQcFFNkkyYF7BuQKBdQIULVXQD fpGv1nbq8tNBRZ6oab6saAR3N6jTMoA7xczAhhJIW4nwvxH7tkg5acDgNk0TK0OT xSxhJ6dx0hRjSqFdsw/wqtoCEz5NsT8y2OkL2at87bNPZ6oDATp1pwCAY7tKRG7+ juJyamOnuAASUZ3ma3HigtUCVhPSR3a06pl2yPWSucTnZgSwFDzTotxdlrU7tQKN pMnTIZHfBR9wsbTHDgRB5CKU6OSHFIdC7mSDzVHhw53HePs3J2i+mAZSKQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK2OhX/AC+FO2SueeMw8ppuK3CSFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2I4YzNi ZC0xNmVmLTRmMmMtOTQwMC1kYjA5OWU1ODVlNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYjhjM2Jk LTE2ZWYtNGYyYy05NDAwLWRiMDk5ZTU4NWU0Yi8xL3JZNkZmOEFMNFU3Wks1NTR6 RHltbTRyY0pJVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW/CyAwQCuag0MA0EAgACMAcDBQMqDcDAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoLzANBgkqhkiG9w0BAQsFAAOCAQEAPPah ObcIBPAjWlVBGdLCsa1StafmwBevQffbgOdGHtyZjel/Jq7HofQea2bepj83bOI3 6LjVTAKho9PYSM3qvVzdGURC2KYY60BGM8wtumTumK2+E3NGG45YF6bXsp2RVN+r karFQY6otS22QQVUaO+0lCVI+1Z3qY7l7NGu4gdjckFsk2M5VmwNmA/mG6AfXjo1 L7paHtatVFBgKLVeAqqSjDapY33CJBbSusYjEHxW8E+rWPBRHXil7BdGzwKlv8Uc E0oXncTnXZ4j9WCFPmOAVCoi0VRY7kdyYKF/FVe8SHOvEZX2qmyjRAzGzxmHEFdT WPZ5qdmFjkxpaBBojQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:08 2026 by rpki-client