This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer File: rvy2RB1w0usQ12M9pzGaPT_5d64.cer (raw, json) Hash identifier: 0osIM2I6uk1RGRXNvLceOckdjFWlhBmIe/Sew5xliTU= Subject key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8CD52682CC210ADBAC8AB654899AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199822 IP: 194.48.242.0/24 IP: 2a13:d500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cd:52:68:2c:c2:10:ad:ba:c8:ab:65:48:99:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:a6:31:30:14:24:c8:d9:04:76:31:a5:f0: 1a:77:a6:bb:5b:c8:f5:a3:fc:05:59:86:b2:fa:91: a0:0a:3f:a0:8b:fc:50:32:dc:0d:b7:a5:91:5d:78: 51:87:96:f0:a5:97:9f:63:cb:91:47:f8:e6:88:f7: ec:90:80:83:c8:9d:d9:24:52:88:c1:6b:7b:28:c5: 58:ed:1e:59:54:f0:7c:a4:c6:51:01:3b:76:80:2c: 17:76:79:53:43:79:0e:36:27:2b:5e:fa:4d:83:91: c9:2f:01:73:e8:81:04:3d:78:44:28:56:bb:71:af: d1:56:66:80:8e:08:47:08:6d:71:4f:87:c3:65:25: 81:4b:f6:84:29:e4:ae:43:9d:2e:73:95:e5:66:c0: 11:00:9e:f8:7b:b0:aa:17:d1:c5:a1:17:6b:78:79: 3e:68:70:75:ad:19:0b:48:e9:15:fd:b7:0f:f5:8a: e9:85:f1:85:cf:4c:30:2c:49:c9:9b:c9:f5:cf:ae: c8:04:34:93:06:94:67:8f:7f:96:e6:50:0a:71:77: 42:40:85:2d:a3:17:9f:e1:2c:d2:8e:7a:db:2b:50: ff:4b:79:82:cd:b2:ea:17:4f:f3:ce:64:43:5b:84: 5d:1d:b6:a0:ef:fe:ac:84:bc:e3:ce:56:80:67:4b: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.242.0/24 IPv6: 2a13:d500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199822 Signature Algorithm: sha256WithRSAEncryption 52:47:af:b5:1f:f8:af:27:24:78:04:63:d1:ac:dd:cb:42:a9: 02:3f:2c:a0:73:5d:f9:42:2d:b9:f6:cd:bc:ff:f0:41:6f:cd: 0e:5c:1e:28:bf:e5:75:25:87:ed:36:8d:e7:e5:9b:c0:38:ac: 51:04:8c:1d:27:6a:92:1d:1c:97:86:c5:b1:9a:d3:63:5c:6b: ed:ec:62:08:26:e6:46:fb:2f:48:a7:95:17:53:61:e9:af:3b: 93:d5:1b:8f:a7:65:4f:d2:5a:a9:3a:31:8f:0f:08:36:19:c2: d1:00:1e:e3:82:bd:c8:8e:ef:8c:1a:22:56:28:73:7c:4d:85: 2b:ba:ce:04:9f:17:2a:ae:ef:76:b9:c8:13:fa:26:1c:64:9b: 08:fe:2c:c0:77:a3:74:24:ac:6c:fe:c2:1e:d0:d6:1d:47:fe: 4d:75:6f:63:71:d5:10:a3:e5:87:da:01:ff:28:35:6b:d9:c9: 65:e5:65:73:ca:f7:05:07:8b:a8:97:d5:78:be:fd:8d:c4:d5: 25:0c:61:5d:f3:07:23:c0:ba:8c:c7:6d:65:6e:e6:25:aa:be: a9:42:21:aa:47:f9:3c:64:04:55:f6:58:77:27:b4:21:2f:fc: b8:6e:90:a2:5e:5f:36:3b:fb:63:c5:db:2b:17:3c:2f:e0:d8: 18:09:3c:fb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yM1SaCzCEK26yKtlSJmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWZjYjY0NDFkNzBkMmViMTBkNzYzM2RhNzMxOWEzZDNmZjk3N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyKmMTAUJMjZBHYxpfAad6a7W8j1 o/wFWYay+pGgCj+gi/xQMtwNt6WRXXhRh5bwpZefY8uRR/jmiPfskICDyJ3ZJFKI wWt7KMVY7R5ZVPB8pMZRATt2gCwXdnlTQ3kONicrXvpNg5HJLwFz6IEEPXhEKFa7 ca/RVmaAjghHCG1xT4fDZSWBS/aEKeSuQ50uc5XlZsARAJ74e7CqF9HFoRdreHk+ aHB1rRkLSOkV/bcP9YrphfGFz0wwLEnJm8n1z67IBDSTBpRnj3+W5lAKcXdCQIUt oxef4SzSjnrbK1D/S3mCzbLqF0/zzmRDW4RdHbag7/6shLzjzlaAZ0v0rwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK78tkQdcNLrENdjPacxmj0/+XeuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzMzYWQ0 NC03ODZjLTQ2NDMtOWRlMi0zNGY3MjJiMDhkZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzNhZDQ0 LTc4NmMtNDY0My05ZGUyLTM0ZjcyMmIwOGRlZi8xL3J2eTJSQjF3MHVzUTEyTTlw ekdhUFRfNWQ2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwjDyMA0EAgACMAcDBQMqE9UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMjjANBgkqhkiG9w0BAQsFAAOCAQEAUkevtR/4ryck eARj0azdy0KpAj8soHNd+UItufbNvP/wQW/NDlweKL/ldSWH7TaN5+WbwDisUQSM HSdqkh0cl4bFsZrTY1xr7exiCCbmRvsvSKeVF1Nh6a87k9Ubj6dlT9JaqToxjw8I NhnC0QAe44K9yI7vjBoiVihzfE2FK7rOBJ8XKq7vdrnIE/omHGSbCP4swHejdCSs bP7CHtDWHUf+TXVvY3HVEKPlh9oB/yg1a9nJZeVlc8r3BQeLqJfVeL79jcTVJQxh XfMHI8C6jMdtZW7mJaq+qUIhqkf5PGQEVfZYdye0IS/8uG6Qol5fNjv7Y8XbKxc8 L+DYGAk8+w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:48 2026 by rpki-client