This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer File: tYe8Eust4poQJrj1a-jUafL1jPM.cer (raw, json) Hash identifier: fta3GWLCq0xgzTPT1XodX5/eb2TirVSgmNHqkXgQeRI= Subject key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81F2812959DCE55ED63B920DBA4657 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31481 IP: 195.225.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:f2:81:29:59:dc:e5:5e:d6:3b:92:0d:ba:46:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:4f:ac:c2:20:b4:a7:cd:09:da:04:4b:d3: 1d:c8:78:a9:c9:a5:4f:fb:f8:b4:d6:c3:22:c2:6e: be:16:e7:66:dc:11:48:15:c8:34:d4:20:e8:b2:cc: 4b:03:f5:8c:84:a7:a7:07:63:41:c2:1b:30:fe:3d: fb:c1:9e:a2:5b:aa:ad:c8:59:ed:1b:80:b5:b6:69: 9a:f1:fc:3a:3e:4b:35:96:c7:e6:6e:7b:82:66:e1: 1f:ed:df:c7:60:c6:42:1f:23:58:b2:e2:aa:99:1e: b5:b0:e4:3e:78:44:c6:f5:7b:19:3f:1a:19:63:57: 0d:33:a2:db:2a:c6:50:6f:e1:79:58:27:ad:52:55: 24:3d:31:c9:20:4b:17:02:09:8c:24:61:99:5e:d7: e9:ff:aa:38:6b:3f:0e:5d:f0:ce:63:70:2a:3f:16: a8:67:ff:86:7a:d5:ba:5c:b5:89:f0:9b:c2:00:99: cd:68:12:ad:64:b5:44:23:63:05:f1:4c:c2:9a:62: 35:6a:96:f4:21:19:15:58:44:08:e4:ea:8b:d7:ac: 26:88:97:c3:99:9b:30:38:bb:77:e4:24:4e:27:8f: 22:fd:48:ff:32:e3:9b:9b:40:1d:e8:83:8d:c0:4d: fe:27:ee:b5:a2:6d:c6:19:d3:3f:61:e3:69:34:49: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31481 Signature Algorithm: sha256WithRSAEncryption 79:17:37:fe:73:b6:af:95:56:5d:92:bc:c3:2d:ba:f0:79:a2: 04:86:76:5c:0a:0c:61:48:df:0d:80:69:25:4c:66:d6:af:15: 2a:02:c8:ab:11:cc:99:16:21:fa:61:56:cd:72:2a:70:79:61: a6:8a:ff:96:38:23:af:a8:a7:5a:18:d9:8f:6b:65:96:38:ce: 11:3c:53:59:0f:a8:9b:bd:8a:fc:03:fb:16:4c:57:57:c5:8c: 63:d0:ad:88:81:34:02:3e:82:be:88:7a:5a:c7:45:49:b0:49: 8a:65:6c:10:f6:67:ba:6a:25:7a:cf:32:41:a0:72:05:07:f0: 8b:80:9e:ec:13:22:45:9b:8d:a5:01:dd:fd:bf:08:dd:4b:b5: 69:6e:f7:0b:0e:6e:47:1b:f7:d9:48:29:42:92:6c:dc:62:99: 18:27:38:42:57:76:ca:3c:34:18:f9:73:71:a3:77:6e:04:ce: 17:be:dd:09:14:80:0c:cc:31:59:b3:de:bc:9c:53:68:8b:3d: 9a:4b:8e:c7:b9:7f:ee:e8:1e:13:ad:63:26:01:01:62:00:2e: 93:5c:d7:55:ac:67:84:13:6f:49:ff:3d:8b:d2:6e:99:60:35: 78:3c:53:ac:4c:7e:43:8e:52:11:93:c5:41:47:d7:dd:4b:3b: c0:0e:e7:4b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/gfKBKVnc5V7WO5INukZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTg3YmMxMmViMmRlMjlhMTAyNmI4ZjU2YmU4ZDQ2OWYyZjU4Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwVPrMIgtKfNCdoES9MdyHipyaVP +/i01sMiwm6+Fudm3BFIFcg01CDossxLA/WMhKenB2NBwhsw/j37wZ6iW6qtyFnt G4C1tmma8fw6Pks1lsfmbnuCZuEf7d/HYMZCHyNYsuKqmR61sOQ+eETG9XsZPxoZ Y1cNM6LbKsZQb+F5WCetUlUkPTHJIEsXAgmMJGGZXtfp/6o4az8OXfDOY3AqPxao Z/+GetW6XLWJ8JvCAJnNaBKtZLVEI2MF8UzCmmI1apb0IRkVWEQI5OqL16wmiJfD mZswOLt35CROJ48i/Uj/MuObm0Ad6IONwE3+J+61om3GGdM/YeNpNElc7wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLWHvBLrLeKaECa49Wvo1Gny9YzzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzRjM2Ux OS1hNDg5LTRlM2EtYTNhMi03ZTUyZTc0OWMzYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNGMzZTE5 LWE0ODktNGUzYS1hM2EyLTdlNTJlNzQ5YzNhZC8xL3RZZThFdXN0NHBvUUpyajFh LWpVYWZMMWpQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw+GYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Anr5MA0GCSqGSIb3DQEBCwUAA4IBAQB5Fzf+c7avlVZdkrzDLbrweaIEhnZcCgxh SN8NgGklTGbWrxUqAsirEcyZFiH6YVbNcipweWGmiv+WOCOvqKdaGNmPa2WWOM4R PFNZD6ibvYr8A/sWTFdXxYxj0K2IgTQCPoK+iHpax0VJsEmKZWwQ9me6aiV6zzJB oHIFB/CLgJ7sEyJFm42lAd39vwjdS7VpbvcLDm5HG/fZSClCkmzcYpkYJzhCV3bK PDQY+XNxo3duBM4Xvt0JFIAMzDFZs968nFNoiz2aS47HuX/u6B4TrWMmAQFiAC6T XNdVrGeEE29J/z2L0m6ZYDV4PFOsTH5DjlIRk8VBR9fdSzvADudL -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:50 2026 by rpki-client