This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer (raw, json) Hash identifier: lwG2UactZ8ZH8sMF5oT/5MJgcBuhF1Sbe2t6DThj4r8= Subject key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF220882391F5E44237EEBCCCEF8636 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.97.48.0/22 IP: 185.144.113.0/24 IP: 203.25.190.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:20:88:23:91:f5:e4:42:37:ee:bc:cc:ef:86:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb4d83a67fb35af88de83c1304c6743a51531361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:33:50:4b:94:b2:5d:8e:d7:f7:e6:78:92: 7b:15:e0:e2:99:d3:27:79:fd:b7:78:6b:f1:65:c7: cd:79:a4:2c:e3:ea:33:8f:25:23:11:6a:ed:30:38: 6d:fc:3f:be:5b:04:85:35:07:a5:07:e4:5c:00:9d: 47:30:62:7a:65:2f:dc:6d:59:1e:39:78:06:0b:29: 3d:2e:78:f3:b2:48:9a:00:22:e6:8f:a5:b7:a5:14: b6:49:9a:0f:af:a0:f6:8c:4c:6f:99:7b:43:51:22: f3:65:7e:a4:65:5c:05:c6:33:51:74:e1:16:b4:42: a3:c9:7a:ad:94:5c:63:a3:8a:94:ce:d2:d9:42:a4: f0:03:97:4f:c8:65:f5:c4:30:aa:5e:5a:e2:4a:23: d4:fb:b2:19:de:3a:5c:fb:2f:dc:37:7f:13:b2:0d: 9c:f4:6e:7a:31:d7:75:fc:79:77:a5:95:4b:c1:2e: bd:c4:35:d0:3d:25:9f:21:eb:ec:b2:04:4c:28:a6: 16:5e:53:96:a7:f9:8f:3c:be:89:f9:a7:b1:af:d8: 19:32:34:73:03:20:49:4f:57:df:18:08:a2:f8:3e: e9:05:41:c2:8a:71:56:e0:a3:38:8d:b4:c0:86:55: f9:40:de:60:50:f3:ca:7f:b8:6d:fd:3b:c0:98:a6: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.48.0/22 185.144.113.0/24 203.25.190.0/24 Signature Algorithm: sha256WithRSAEncryption 67:28:9a:f3:91:1b:15:3f:66:44:b9:a3:06:dc:af:f5:72:09: 2b:d9:11:0e:0b:64:a1:28:a9:70:19:00:84:00:c3:6c:a5:64: d6:6a:48:4d:92:44:87:48:63:0e:28:c5:ef:d2:7a:36:d8:57: b9:20:56:6c:95:42:ff:b1:f0:48:6a:0a:06:21:5e:40:48:40: 7c:05:ed:91:92:6b:09:b4:68:3a:f4:82:3d:11:38:fa:f7:7a: 6c:f1:05:b7:62:2b:08:96:2a:c3:b2:6b:03:19:7a:b6:e1:e4: da:e1:5e:08:79:ef:3a:77:a0:2a:d7:91:6f:b5:0d:f8:b5:2e: d8:df:50:b8:2e:bf:ba:a2:21:61:b9:b8:9a:7f:17:0e:bb:fc: 3a:b9:43:6d:c7:11:2c:0e:22:b3:4f:42:6a:0a:4f:03:e8:84: c4:d3:da:cb:23:10:26:93:a8:39:fb:4e:6a:42:00:8e:33:fe: 1e:15:dd:4f:b5:fb:17:d8:e6:f8:77:01:6a:92:0c:b4:f4:a0: 0a:b9:f9:b0:fc:87:83:17:26:23:e1:1c:d3:b0:e8:52:4a:6d: 9b:a0:85:c3:46:0d:15:93:8b:b7:17:59:d7:18:34:f6:2c:d9: 4f:b9:c0:75:89:4f:00:20:d2:c1:00:10:df:b4:a9:50:9e:09: 7d:cf:db:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt/8iCII5H15EI37rzM74Y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjRkODNhNjdmYjM1YWY4OGRlODNjMTMwNGM2NzQzYTUxNTMxMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUQzUEuUsl2O1/fmeJJ7FeDimdMn ef23eGvxZcfNeaQs4+ozjyUjEWrtMDht/D++WwSFNQelB+RcAJ1HMGJ6ZS/cbVke OXgGCyk9LnjzskiaACLmj6W3pRS2SZoPr6D2jExvmXtDUSLzZX6kZVwFxjNRdOEW tEKjyXqtlFxjo4qUztLZQqTwA5dPyGX1xDCqXlriSiPU+7IZ3jpc+y/cN38Tsg2c 9G56Mdd1/Hl3pZVLwS69xDXQPSWfIevssgRMKKYWXlOWp/mPPL6J+aexr9gZMjRz AyBJT1ffGAii+D7pBUHCinFW4KM4jbTAhlX5QN5gUPPKf7ht/TvAmKZ/OwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzdlOTBh Yy05MGNmLTQ1MjMtOGY5Ny0zMTY2MGMyMmQxOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvN2U5MGFj LTkwY2YtNDUyMy04Zjk3LTMxNjYwYzIyZDE5ZS8xL3kwMkRwbi16V3ZpTjZEd1RC TVowT2xGVEUyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCsGEwAwQAuZBxAwQAyxm+MA0GCSqGSIb3DQEB CwUAA4IBAQBnKJrzkRsVP2ZEuaMG3K/1cgkr2REOC2ShKKlwGQCEAMNspWTWakhN kkSHSGMOKMXv0no22Fe5IFZslUL/sfBIagoGIV5ASEB8Be2RkmsJtGg69II9ETj6 93ps8QW3YisIlirDsmsDGXq24eTa4V4Iee86d6Aq15FvtQ34tS7Y31C4Lr+6oiFh ubiafxcOu/w6uUNtxxEsDiKzT0JqCk8D6ITE09rLIxAmk6g5+05qQgCOM/4eFd1P tfsX2Ob4dwFqkgy09KAKufmw/IeDFyYj4RzTsOhSSm2boIXDRg0Vk4u3F1nXGDT2 LNlPucB1iU8AINLBABDftKlQngl9z9uP -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:51 2026 by rpki-client