This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer File: ryfUX8GLqRerHomhfvC2NgmEgiQ.cer (raw, json) Hash identifier: g/j7QLUnZo44iBIS8zIJCly45y83/6xvfqx84bs73Rc= Subject key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6EAA48086AF251C2DFF776A72AAD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.81.140.0/22 IP: 91.188.216.0/22 IP: 185.182.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ea:a4:80:86:af:25:1c:2d:ff:77:6a:72:aa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af27d45fc18ba917ab1e89a17ef0b63609848224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:63:1c:da:83:48:60:8b:ae:35:09:68:98: ee:d4:92:c6:c2:d8:50:bb:2a:e9:72:04:61:bb:12: 5b:1a:a0:7c:c6:e2:14:a0:0e:73:f1:54:b4:95:6f: f4:33:62:f2:56:bd:08:d2:c5:86:87:3d:b6:b4:34: e9:6d:79:2d:0f:25:e6:f6:1e:64:04:7b:36:b3:88: 9c:bd:a8:85:8d:1f:5d:0a:3e:ad:7c:91:d8:61:b7: b0:f7:a6:c6:5f:d2:2e:e6:00:d1:ba:d9:7d:1a:51: 0a:3b:c0:a0:d5:9a:26:70:88:fb:15:0b:e6:53:09: 74:bf:be:03:81:65:ac:b3:81:cb:53:d3:07:ab:da: a6:6f:26:86:40:6e:c5:4a:81:6d:94:53:bf:fa:d9: a4:99:39:15:29:c8:f2:fb:81:7e:ae:0e:ca:2b:2b: 85:2b:bf:6b:36:ff:e9:c0:cd:d1:7b:22:1f:26:75: 78:a6:09:1d:21:33:43:ad:01:bb:0a:58:29:21:21: 8d:05:26:5f:12:05:34:d7:e0:cc:af:bf:dd:ef:65: 51:ed:c2:32:c8:c1:b2:c7:0f:46:b6:5a:a1:0f:28: fc:98:93:94:40:9c:f9:c2:ed:14:25:39:8b:8a:af: fb:9a:ab:06:90:b0:fe:1c:6f:cf:96:7e:63:c1:ba: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.140.0/22 91.188.216.0/22 185.182.188.0/22 Signature Algorithm: sha256WithRSAEncryption a7:0e:6b:8d:28:a5:02:cb:7f:28:3a:12:1b:3c:e1:c0:25:11: f6:1e:70:ad:e2:8f:41:25:87:7a:71:ab:d3:a4:78:ca:72:45: 4f:f5:b0:78:4c:73:39:a2:21:39:54:69:ed:34:84:17:1b:2e: eb:01:0c:78:99:96:24:7f:86:e1:c9:8a:a9:05:73:bb:fb:bb: 46:ac:c6:ed:0c:2d:4f:bb:01:1e:9f:d6:ed:11:ee:29:6f:b1: b7:66:a2:c0:07:5a:9f:32:df:01:0f:e8:ce:92:7f:6a:0b:ae: f0:d6:6e:03:8c:6c:72:c4:14:81:ef:2a:7d:8b:43:08:7e:0b: 87:7a:55:d7:66:21:b8:78:7f:04:be:ea:d6:af:06:64:46:de: 13:6e:62:1d:a2:f4:67:28:ca:dd:56:bc:83:f7:92:82:50:50: c5:7f:38:d3:98:2b:4b:1a:fd:13:27:a4:44:1b:f9:65:74:4b: 80:0a:c4:0a:f9:ec:51:12:d6:85:49:0a:52:d8:f5:05:47:9e: 5f:a4:da:03:ea:40:3d:6e:26:8e:28:cd:16:65:1e:12:20:11: dd:a5:66:90:7a:9f:9b:42:3e:f7:87:7b:a0:34:fc:3f:6d:bc: c9:f6:b9:0f:10:3a:6a:c2:ac:38:28:9d:c0:ae:7d:90:1a:4c: 22:17:e4:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt3xuqkgIavJRwt/3dqcqrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjI3ZDQ1ZmMxOGJhOTE3YWIxZTg5YTE3ZWYwYjYzNjA5ODQ4MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFljHNqDSGCLrjUJaJju1JLGwthQ uyrpcgRhuxJbGqB8xuIUoA5z8VS0lW/0M2LyVr0I0sWGhz22tDTpbXktDyXm9h5k BHs2s4icvaiFjR9dCj6tfJHYYbew96bGX9Iu5gDRutl9GlEKO8Cg1ZomcIj7FQvm Uwl0v74DgWWss4HLU9MHq9qmbyaGQG7FSoFtlFO/+tmkmTkVKcjy+4F+rg7KKyuF K79rNv/pwM3ReyIfJnV4pgkdITNDrQG7ClgpISGNBSZfEgU01+DMr7/d72VR7cIy yMGyxw9GtlqhDyj8mJOUQJz5wu0UJTmLiq/7mqsGkLD+HG/Pln5jwboEEwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFK8n1F/Bi6kXqx6JoX7wtjYJhIIkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzQ0MTc1 NS1iNTJmLTRmYjYtYjNlZi03YWNiYzZjOWY5ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNDQxNzU1 LWI1MmYtNGZiNi1iM2VmLTdhY2JjNmM5Zjk4NS8xL3J5ZlVYOEdMcVJlckhvbWhm dkMyTmdtRWdpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCLVGMAwQCW7zYAwQCuba8MA0GCSqGSIb3DQEB CwUAA4IBAQCnDmuNKKUCy38oOhIbPOHAJRH2HnCt4o9BJYd6cavTpHjKckVP9bB4 THM5oiE5VGntNIQXGy7rAQx4mZYkf4bhyYqpBXO7+7tGrMbtDC1PuwEen9btEe4p b7G3ZqLAB1qfMt8BD+jOkn9qC67w1m4DjGxyxBSB7yp9i0MIfguHelXXZiG4eH8E vurWrwZkRt4TbmIdovRnKMrdVryD95KCUFDFfzjTmCtLGv0TJ6REG/lldEuACsQK +exREtaFSQpS2PUFR55fpNoD6kA9biaOKM0WZR4SIBHdpWaQep+bQj73h3ugNPw/ bbzJ9rkPEDpqwqw4KJ3Arn2QGkwiF+Tx -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:01 2026 by rpki-client