This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer File: tbYylyVHZz3w91qryDmiQihUoio.cer (raw, json) Hash identifier: HMI55fVNlisi7uEdcYGxQ90JCJr2WysahCDlRNJvzAU= Subject key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB05459C8C0D7187A2E8522E4DDC1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 137.193.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:05:45:9c:8c:0d:71:87:a2:e8:52:2e:4d:dc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5b632972547673df0f75aabc839a2422854a22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:d3:a8:ec:62:05:0d:f0:1e:a6:6e:11:f3: 8c:87:14:0d:e8:13:d0:b0:15:2b:26:d4:80:ca:13: 9a:77:06:1b:50:dd:88:8f:fd:d2:c0:0f:df:be:44: 8c:99:d5:c7:06:e6:65:46:c3:cd:eb:b9:18:42:78: e1:74:de:23:2b:2e:69:62:f1:55:d3:7c:42:26:3d: 4e:ee:99:08:ab:60:2e:12:8e:50:59:98:fc:fb:3b: e8:03:4e:a4:5e:fc:0e:4e:0d:51:cf:78:95:37:d4: cf:f7:af:c2:c9:6f:09:1d:74:ca:b1:9b:82:b5:3a: 61:12:db:4d:e2:69:01:bc:4e:10:d9:7b:d9:d0:01: bc:01:98:66:e5:0f:45:45:00:d8:22:98:50:6a:09: 91:a8:2c:0d:50:ef:05:d2:cc:52:1c:6c:ea:b0:14: 66:b0:fd:d1:7f:4d:bb:62:68:8e:9e:74:a1:45:89: 4b:45:6e:f0:4e:b8:4e:6d:8b:6d:19:3d:2f:66:94: 18:83:f1:3c:02:63:98:0a:da:2d:f6:2e:aa:5e:05: 64:3d:cb:b5:8f:63:63:11:d7:7e:93:de:d9:dd:66: 99:62:fc:c1:fb:11:18:78:a0:1b:8b:0f:8d:94:8e: 44:84:71:b6:2f:65:63:56:5c:9c:8f:b5:d6:41:c9: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:28:3d:d8:5e:a5:84:f3:c1:67:2f:5e:e6:5d:a4:df:db:c0: 46:e4:fa:ee:c4:6a:8c:5e:57:08:0a:7f:20:9e:be:9c:88:c3: ad:01:a1:32:c2:aa:ce:05:1c:11:c0:6e:a1:5a:4e:08:b1:f1: 8e:53:b9:86:05:db:97:64:e2:d4:91:3d:f4:be:56:27:8a:69: b1:bf:83:6a:50:f6:1a:d0:70:d8:05:88:ce:35:1f:0f:d7:46: 47:c6:56:6e:2a:a9:0f:6a:9a:eb:32:2c:3e:2a:1c:15:22:fb: fb:a8:14:39:62:f4:f8:59:01:ff:7f:da:47:29:f9:92:6c:0d: eb:6a:5b:19:59:08:15:ba:cd:ad:bc:7b:bd:1f:1b:e4:37:01: f8:a4:ff:e1:69:45:bb:94:3e:c1:0c:d2:f2:f9:08:54:2e:ac: 44:5a:32:42:5a:d4:f9:4e:17:1e:28:44:d7:af:20:37:f8:da: f6:90:d3:0b:48:e7:3c:55:09:3f:97:51:0a:81:e2:fa:27:20: 1d:96:c6:ca:36:83:92:4e:c5:0f:69:22:cb:a3:ea:08:78:18: c6:98:c2:16:0e:df:54:9d:df:45:36:1d:78:af:14:04:2c:97: 7c:e3:31:22:3a:92:81:62:75:95:a8:e6:67:63:f9:01:76:2b: 1c:2e:5e:5e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt9ywVFnIwNcYei6FIuTdwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWI2MzI5NzI1NDc2NzNkZjBmNzVhYWJjODM5YTI0MjI4NTRhMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvfTqOxiBQ3wHqZuEfOMhxQN6BPQ sBUrJtSAyhOadwYbUN2Ij/3SwA/fvkSMmdXHBuZlRsPN67kYQnjhdN4jKy5pYvFV 03xCJj1O7pkIq2AuEo5QWZj8+zvoA06kXvwOTg1Rz3iVN9TP96/CyW8JHXTKsZuC tTphEttN4mkBvE4Q2XvZ0AG8AZhm5Q9FRQDYIphQagmRqCwNUO8F0sxSHGzqsBRm sP3Rf027YmiOnnShRYlLRW7wTrhObYttGT0vZpQYg/E8AmOYCtot9i6qXgVkPcu1 j2NjEdd+k97Z3WaZYvzB+xEYeKAbiw+NlI5EhHG2L2VjVlycj7XWQclb5wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLW2MpclR2c98Pdaq8g5okIoVKIqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzFjMDY4 ZS04ODljLTQyYmUtYmQ4Yi1hNmFiYjEyMTVkZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMWMwNjhl LTg4OWMtNDJiZS1iZDhiLWE2YWJiMTIxNWRlYy8xL3RiWXlseVZIWnozdzkxcXJ5 RG1pUWloVW9pby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAicEwDQYJKoZIhvcNAQELBQADggEBAIUoPdhe pYTzwWcvXuZdpN/bwEbk+u7EaoxeVwgKfyCevpyIw60BoTLCqs4FHBHAbqFaTgix 8Y5TuYYF25dk4tSRPfS+VieKabG/g2pQ9hrQcNgFiM41Hw/XRkfGVm4qqQ9qmusy LD4qHBUi+/uoFDli9PhZAf9/2kcp+ZJsDetqWxlZCBW6za28e70fG+Q3Afik/+Fp RbuUPsEM0vL5CFQurERaMkJa1PlOFx4oRNevIDf42vaQ0wtI5zxVCT+XUQqB4von IB2Wxso2g5JOxQ9pIsuj6gh4GMaYwhYO31Sd30U2HXivFAQsl3zjMSI6koFidZWo 5mdj+QF2KxwuXl4= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:18 2026 by rpki-client