This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer (raw, json) Hash identifier: QPQwfRM51RX1fefZw2VoaJzFMznaVQS0LxCTDTGlexA= Subject key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1225843E9E93AC36045DD401B014A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.47.206.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:25:84:3e:9e:93:ac:36:04:5d:d4:01:b0:14:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:ba:cc:a3:b8:43:35:97:f6:04:c3:12:8e: 85:f1:99:a9:46:3f:91:c6:12:37:14:fe:ca:93:c6: 6d:ec:e3:2c:de:b1:19:65:49:2a:eb:85:54:ed:2b: d0:c4:ac:6c:0b:e8:6c:f9:e6:a3:ae:a6:4e:0d:11: da:32:ad:87:96:85:1c:3e:17:a9:6b:0d:7e:76:44: 8b:15:3e:30:c7:66:7f:6d:59:86:f3:d1:ba:76:ee: 4e:06:78:ae:f7:7d:ea:27:27:dd:cf:46:7f:c8:54: 70:04:25:ff:d5:b1:22:d5:5d:8b:d7:89:2c:dc:6b: 10:ca:74:83:3b:90:e8:91:d7:e5:ca:6b:3e:ea:ed: ce:70:1a:b0:81:08:03:60:3b:5d:53:34:c9:90:47: 0c:a1:be:81:06:a5:f0:d3:a7:9f:c8:18:07:15:b3: 6e:dd:0d:eb:7b:20:7a:58:0a:96:e0:9e:ad:7d:1c: fb:51:98:0c:e1:17:ee:eb:f0:0d:58:a4:f1:f7:9a: 7e:98:99:52:57:94:9e:d9:fb:7d:3f:f0:b2:88:ca: 78:8d:68:a9:34:78:96:86:f0:74:a2:61:02:58:32: ff:5c:2e:82:7f:b5:ef:ec:4d:62:e5:21:31:76:61: 88:79:6a:21:ac:49:90:39:89:7a:a6:65:a7:0d:e3: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.206.0/24 Signature Algorithm: sha256WithRSAEncryption 49:0f:5b:83:22:0a:c0:7a:50:3f:d9:7c:f5:81:ae:ba:c4:5d: 56:f5:61:bc:03:a7:61:3b:ef:5c:ff:59:5a:33:65:21:5a:da: e4:a8:3e:c7:9f:a7:1a:ef:36:54:99:34:6a:f1:62:c3:52:f5: ad:b5:cc:b0:bc:23:5d:8d:e2:30:2b:90:ed:77:ce:49:48:55: 32:61:04:77:ae:50:9a:39:e9:09:a4:d3:f1:d6:ce:0b:eb:90: 3a:1a:1e:ac:01:cc:b0:64:3f:8b:53:4b:c0:3a:cc:4a:c9:f4: c9:3a:98:58:63:80:8e:83:2a:4d:fe:d8:41:56:47:44:e1:90: b7:00:30:ac:7c:f2:1e:2a:d9:c5:0a:62:cc:ca:82:9d:f0:c0: 2c:80:bb:c0:b9:64:f7:90:37:50:eb:2f:08:71:4c:68:8f:ed: 55:19:44:b9:0f:6c:f5:01:f9:ef:a6:c7:ab:e5:8c:a6:10:d0: 49:c9:93:11:63:11:6b:be:e3:5b:2a:44:e0:ae:2d:89:92:19: 6a:3a:7f:6a:58:2f:be:6f:04:4c:17:35:5c:d5:07:07:fd:ad: d3:e2:02:eb:2d:a0:6d:2e:fd:65:7d:4b:f4:5d:a3:2c:d7:c7: 44:72:9e:80:d9:42:93:04:75:3c:b6:21:42:af:14:01:a0:b0: b9:eb:e2:39 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EiWEPp6TrDYEXdQBsBSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjIxZGQyZjc3MmE1YmI0NzkyNWMyOGJiNWQxNmNkOTMwZjIwNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Em6zKO4QzWX9gTDEo6F8ZmpRj+R xhI3FP7Kk8Zt7OMs3rEZZUkq64VU7SvQxKxsC+hs+eajrqZODRHaMq2HloUcPhep aw1+dkSLFT4wx2Z/bVmG89G6du5OBniu933qJyfdz0Z/yFRwBCX/1bEi1V2L14ks 3GsQynSDO5Dokdflyms+6u3OcBqwgQgDYDtdUzTJkEcMob6BBqXw06efyBgHFbNu 3Q3reyB6WAqW4J6tfRz7UZgM4Rfu6/ANWKTx95p+mJlSV5Se2ft9P/CyiMp4jWip NHiWhvB0omECWDL/XC6Cf7Xv7E1i5SExdmGIeWohrEmQOYl6pmWnDeP+MQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFK8h3S93Klu0eSXCi7XRbNkw8gaxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzA3YmFk ZC1mZjNmLTQ4ODYtYWJmMS01NTJlNTE1NDJkNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMDdiYWRk LWZmM2YtNDg4Ni1hYmYxLTU1MmU1MTU0MmQ0ZC8xL3J5SGRMM2NxVzdSNUpjS0x0 ZEZzMlREeUJyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwy/OMA0GCSqGSIb3DQEBCwUAA4IBAQBJD1uD IgrAelA/2Xz1ga66xF1W9WG8A6dhO+9c/1laM2UhWtrkqD7Hn6ca7zZUmTRq8WLD UvWttcywvCNdjeIwK5Dtd85JSFUyYQR3rlCaOekJpNPx1s4L65A6Gh6sAcywZD+L U0vAOsxKyfTJOphYY4COgypN/thBVkdE4ZC3ADCsfPIeKtnFCmLMyoKd8MAsgLvA uWT3kDdQ6y8IcUxoj+1VGUS5D2z1Afnvpser5YymENBJyZMRYxFrvuNbKkTgri2J khlqOn9qWC++bwRMFzVc1QcH/a3T4gLrLaBtLv1lfUv0XaMs18dEcp6A2UKTBHU8 tiFCrxQBoLC56+I5 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:35 2026 by rpki-client