This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer File: sda67LY65G_uowyrhiHUbFn3KAg.cer (raw, json) Hash identifier: Kk57j86rULjodrX5NLM2l3YFVkzufMpxXMszQEC8/Gg= Subject key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F244839962952F5D6290455691E30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212777 IP: 91.194.111.0/24 IP: 2a0b:c400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:24:48:39:96:29:52:f5:d6:29:04:55:69:1e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d6baecb63ae46feea30cab8621d46c59f72808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:53:5b:22:da:46:3b:ce:81:43:c6:2c:da: fd:07:a7:c9:e8:a4:49:ec:38:97:53:bb:d7:1e:8e: c7:3f:b7:b0:10:ae:8b:13:4d:87:f2:19:ed:b7:ac: f7:ec:2a:f6:f0:34:83:6e:49:1f:a4:85:15:b9:c9: 60:fc:71:c9:d2:f3:72:6c:d3:49:aa:c1:56:29:5c: e2:83:f1:fe:0f:f2:00:fb:2d:69:6b:d9:ae:fa:38: e1:96:23:b4:73:45:31:04:3c:f9:0f:2d:ca:e0:4b: 27:40:e4:22:c3:41:c5:6f:53:d3:78:a3:00:9b:b7: 78:98:0d:12:c1:1f:59:4c:87:f8:2b:59:f4:c8:09: 03:5f:a4:c2:7b:2f:50:cd:7b:27:f1:6e:6c:8e:b6: 07:1b:0c:28:11:b0:97:e1:06:12:2d:73:d9:14:2e: 7a:ec:64:1a:25:14:f0:5d:81:77:2c:ee:be:2f:ee: 0a:c6:1e:89:19:43:08:6f:0c:c0:b2:e2:e3:8a:dd: ea:d1:55:54:b5:0e:6f:97:38:f8:a2:68:70:56:e9: ef:14:24:1f:f3:78:aa:7c:7a:05:14:94:af:07:c3: 04:29:4e:d6:5f:3a:5e:6b:1a:3d:63:6f:6d:b6:28: fe:a3:dd:16:5a:3c:aa:94:1e:63:b0:96:49:59:7b: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.111.0/24 IPv6: 2a0b:c400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212777 Signature Algorithm: sha256WithRSAEncryption a7:e0:50:63:e6:54:8e:01:66:21:bb:54:20:dd:b8:1d:45:0b: 3c:82:f0:ba:a6:aa:b8:73:9b:98:7b:fd:e0:20:d6:6d:da:2b: 8a:f1:c8:06:6f:71:eb:61:de:e6:4e:bb:67:46:65:e1:d0:15: e5:9e:68:dd:d7:29:f5:7e:6d:e5:17:f6:8a:41:4b:c2:07:ad: 76:ed:7d:96:fa:f9:0e:c3:27:4c:7f:63:8a:62:f3:ab:10:9c: c7:f5:5f:de:ec:9e:5b:a6:ef:fa:99:68:2c:4c:6b:49:77:37: e0:4c:16:63:98:54:0d:9f:f0:ea:b5:90:fd:94:ab:da:07:9f: 44:b4:0b:24:24:93:3a:9f:fd:ab:b5:1b:b1:c0:10:65:11:df: e4:10:22:90:1e:9a:4a:cb:19:63:ad:c7:2a:8e:07:0b:60:42: 9f:13:ab:3d:ff:58:6a:03:ff:7b:c3:6b:47:35:b4:c7:8a:f8: a6:9a:c3:6a:a1:72:76:5c:e5:4b:49:bc:e5:13:07:61:a2:df: 7a:63:7a:19:2b:b1:71:a9:05:b2:60:c6:cb:05:e7:ef:ea:09: bd:9e:a2:ea:bc:ff:30:bc:49:09:a2:6d:a8:7f:72:14:95:56: 3d:38:88:a8:a8:ad:b9:38:38:18:10:e9:97:db:92:d5:c7:84: 6b:f1:ae:94 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8fyRIOZYpUvXWKQRVaR4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ2YmFlY2I2M2FlNDZmZWVhMzBjYWI4NjIxZDQ2YzU5ZjcyODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyNTWyLaRjvOgUPGLNr9B6fJ6KRJ 7DiXU7vXHo7HP7ewEK6LE02H8hntt6z37Cr28DSDbkkfpIUVuclg/HHJ0vNybNNJ qsFWKVzig/H+D/IA+y1pa9mu+jjhliO0c0UxBDz5Dy3K4EsnQOQiw0HFb1PTeKMA m7d4mA0SwR9ZTIf4K1n0yAkDX6TCey9QzXsn8W5sjrYHGwwoEbCX4QYSLXPZFC56 7GQaJRTwXYF3LO6+L+4Kxh6JGUMIbwzAsuLjit3q0VVUtQ5vlzj4omhwVunvFCQf 83iqfHoFFJSvB8MEKU7WXzpeaxo9Y29ttij+o90WWjyqlB5jsJZJWXthZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLHWuuy2OuRv7qMMq4Yh1GxZ9ygIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzcwM2Q5 Ni1lMzRiLTRjMjQtOWM5Yy03YWY3OWRhYTY5YjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNzAzZDk2 LWUzNGItNGMyNC05YzljLTdhZjc5ZGFhNjliOS8xL3NkYTY3TFk2NUdfdW93eXJo aUhVYkZuM0tBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8JvMA0EAgACMAcDBQMqC8QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/KTANBgkqhkiG9w0BAQsFAAOCAQEAp+BQY+ZUjgFm IbtUIN24HUULPILwuqaquHObmHv94CDWbdorivHIBm9x62He5k67Z0Zl4dAV5Z5o 3dcp9X5t5Rf2ikFLwgetdu19lvr5DsMnTH9jimLzqxCcx/Vf3uyeW6bv+ploLExr SXc34EwWY5hUDZ/w6rWQ/ZSr2gefRLQLJCSTOp/9q7UbscAQZRHf5BAikB6aSssZ Y63HKo4HC2BCnxOrPf9YagP/e8NrRzW0x4r4pprDaqFydlzlS0m85RMHYaLfemN6 GSuxcakFsmDGywXn7+oJvZ6i6rz/MLxJCaJtqH9yFJVWPTiIqKituTg4GBDpl9uS 1ceEa/GulA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:53 2026 by rpki-client