This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer File: tYUi2sa83oxIEzNZkTKhYgDmpb4.cer (raw, json) Hash identifier: t0uzGmDMC/7EnZkeNhriG/0gUPWNV2VXq9RwKMsUjhM= Subject key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECCE2174DE107015E233A4051BB098 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199678 IP: 2001:67c:12d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ce:21:74:de:10:70:15:e2:33:a4:05:1b:b0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58522dac6bcde8c481333599132a16200e6a5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:08:87:af:48:56:bd:7c:86:a1:c3:16:7e: 42:fb:10:a4:87:6d:25:f8:76:7e:8b:d7:3c:2c:21: 4c:f7:a0:4c:60:34:a2:b3:0d:f4:0d:d3:20:e5:4e: cd:b5:ed:b5:d4:92:09:ef:2a:ea:ed:c2:32:3b:83: 48:4e:c7:65:5b:a0:a2:a3:e5:5d:ec:b8:cb:5d:03: 29:d8:1d:19:a7:2d:89:b1:ba:6d:52:1a:97:5d:39: bf:23:de:2e:fc:6f:79:45:d4:50:eb:c9:a2:26:80: 7a:68:59:75:e1:47:02:e6:c0:7f:c5:4b:aa:0c:8a: a2:20:84:d2:b6:44:08:40:fb:f4:aa:fd:b1:aa:74: a0:b8:bc:ad:fa:43:96:55:05:f7:e9:c7:1b:5e:ef: fd:47:48:6c:fe:50:53:20:35:d6:42:e0:de:c4:c8: f2:57:30:42:7a:14:0f:51:00:3f:aa:97:28:38:96: fb:35:2e:08:2a:46:79:4c:4d:44:a0:fd:52:b8:29: cb:32:7f:f1:e4:5f:6b:e6:8d:4b:57:54:3f:b4:b5: f7:96:9e:be:7e:40:6a:5e:6d:8c:64:dd:be:73:89: c2:55:c9:e5:29:1d:cc:c8:c7:1c:8f:a7:7b:41:55: fc:69:68:cd:a0:27:2b:da:33:81:dc:38:bd:6e:b5: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:12d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199678 Signature Algorithm: sha256WithRSAEncryption 33:a1:33:ea:4c:e2:b8:08:81:b4:b1:ba:37:fa:39:b3:e0:72: 28:cf:2f:df:1b:4f:33:3f:00:80:8a:83:3c:e6:41:2b:9e:78: 49:47:39:9e:7a:40:b3:07:06:04:ba:1d:68:e0:21:5e:d8:91: dc:d5:dd:a6:17:48:73:8f:a1:a1:e0:fa:b8:ce:15:92:08:09: ea:aa:59:68:a6:77:26:80:7f:a5:c2:45:cd:ad:d3:32:65:8b: a8:e2:7c:d9:df:2d:00:47:a8:73:f1:32:5f:ab:53:d8:5b:bd: 61:47:8c:f0:ec:ab:f8:d8:3e:2c:ba:9d:f2:cd:e8:ed:b3:3e: e9:89:12:cf:d4:b5:56:36:df:33:0f:37:52:e0:12:e7:91:37: 18:4f:d0:9e:4f:b4:f0:cd:18:1d:23:6c:98:6d:06:f9:94:8a: bb:22:b5:b5:92:66:cb:38:72:31:8d:07:0e:ab:59:f3:3e:5e: 01:be:f5:ab:30:d8:a6:57:dd:15:21:8b:4c:be:b8:26:ee:fa: 38:e1:8b:03:29:88:ae:98:98:6c:04:df:76:ff:6d:ab:77:a5: 00:51:00:4e:c7:17:f5:ff:c7:84:28:66:8a:d9:8e:85:33:eb: 73:61:0a:28:c7:7d:34:07:18:b8:4f:8d:89:63:ad:84:44:92: 81:41:12:c4 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt87M4hdN4QcBXiM6QFG7CYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTg1MjJkYWM2YmNkZThjNDgxMzMzNTk5MTMyYTE2MjAwZTZhNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrAIh69IVr18hqHDFn5C+xCkh20l +HZ+i9c8LCFM96BMYDSisw30DdMg5U7Nte211JIJ7yrq7cIyO4NITsdlW6Cio+Vd 7LjLXQMp2B0Zpy2JsbptUhqXXTm/I94u/G95RdRQ68miJoB6aFl14UcC5sB/xUuq DIqiIITStkQIQPv0qv2xqnSguLyt+kOWVQX36ccbXu/9R0hs/lBTIDXWQuDexMjy VzBCehQPUQA/qpcoOJb7NS4IKkZ5TE1EoP1SuCnLMn/x5F9r5o1LV1Q/tLX3lp6+ fkBqXm2MZN2+c4nCVcnlKR3MyMccj6d7QVX8aWjNoCcr2jOB3Di9brXYwwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLWFItrGvN6MSBMzWZEyoWIA5qW+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzhiNWQy YS00YmM0LTQwNmYtOTdkNS1iYTM5NDdjOWIyMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvOGI1ZDJh LTRiYzQtNDA2Zi05N2Q1LWJhMzk0N2M5YjIyYi8xL3RZVWkyc2E4M294SUV6Tlpr VEtoWWdEbXBiNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBLUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwML/jANBgkqhkiG9w0BAQsFAAOCAQEAM6Ez6kziuAiBtLG6N/o5s+ByKM8v 3xtPMz8AgIqDPOZBK554SUc5nnpAswcGBLodaOAhXtiR3NXdphdIc4+hoeD6uM4V kggJ6qpZaKZ3JoB/pcJFza3TMmWLqOJ82d8tAEeoc/EyX6tT2Fu9YUeM8Oyr+Ng+ LLqd8s3o7bM+6YkSz9S1VjbfMw83UuAS55E3GE/Qnk+08M0YHSNsmG0G+ZSKuyK1 tZJmyzhyMY0HDqtZ8z5eAb71qzDYplfdFSGLTL64Ju76OOGLAymIrpiYbATfdv9t q3elAFEATscX9f/HhChmitmOhTPrc2EKKMd9NAcYuE+NiWOthESSgUESxA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:18 2026 by rpki-client