This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer File: y0ANSAMtEp2UvQjtJxepofTPL0s.cer (raw, json) Hash identifier: GNG22ImcadW5FSclGrHd+f/uKY/8mcmorXvqtKfecZc= Subject key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB07C8994FE0D2204753DC61EEDCE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202488 AS: 203421 IP: 185.135.104.0/22 IP: 193.160.188.0/22 IP: 2a06:f300::/29 IP: 2a0c:9ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:07:c8:99:4f:e0:d2:20:47:53:dc:61:ee:dc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:c9:bc:4e:73:c7:12:9e:8a:62:d7:7b:d5: e6:9e:e6:28:50:e8:ad:be:11:15:e7:a8:08:e9:cb: c2:7c:0b:17:f0:2f:fd:4a:bd:f8:27:7a:0e:f5:4d: b4:66:40:4d:92:bd:67:87:4f:b5:f0:f3:dc:6e:e0: e3:cf:cb:f5:13:fd:ae:c3:28:2e:e5:1a:4a:b7:c4: 6a:ff:98:f5:1a:dc:a0:7d:96:38:81:5d:b0:f0:41: 0f:ee:8c:0d:de:42:e2:c7:59:28:8d:3e:57:4d:25: d7:4a:ad:13:12:a9:b5:f7:80:21:f7:2e:72:49:77: 49:76:5b:5b:78:ef:46:38:57:aa:a2:b6:3a:4a:ea: 20:3e:d1:07:bd:21:3b:8a:d7:20:b6:10:73:f4:62: 09:7f:a2:c1:a4:b1:87:0b:66:c4:84:fc:08:65:5a: c3:3b:15:8c:b6:36:92:aa:59:83:e8:f0:39:d7:99: 31:1e:87:85:0c:de:ec:39:58:ec:f9:02:20:f7:cd: 7b:1c:cd:c3:fc:c7:6b:05:9c:42:8f:d3:08:8c:3a: 4e:72:5d:3b:0d:17:41:a5:fb:5d:21:ba:e8:a2:b9: 41:7c:17:cb:02:52:ec:e6:de:bc:7a:01:a9:89:b5: e1:5f:f0:1b:e1:b5:19:48:d0:d8:b1:7f:a6:dd:4b: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.104.0/22 193.160.188.0/22 IPv6: 2a06:f300::/29 2a0c:9ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202488 203421 Signature Algorithm: sha256WithRSAEncryption 50:f3:ad:86:2c:80:23:8b:aa:27:5f:a6:6c:f9:14:94:10:d8: 31:54:60:77:90:2b:bb:8e:8b:7b:af:c7:f6:9d:dd:7e:23:41: b9:06:f2:6c:e9:02:f6:fd:aa:5c:ad:9a:7d:c0:34:a0:14:03: 20:9a:e5:ee:bd:18:c0:09:70:ff:a0:b8:f4:c2:b7:10:40:ae: 04:94:b6:09:37:46:4c:c2:ec:da:ca:0f:00:55:ce:67:ff:a0: 00:6c:10:03:6e:83:ee:89:68:9f:98:f4:00:8d:17:3a:5f:dc: 98:d8:a0:a5:f4:33:88:8f:a5:97:d3:64:11:c5:69:63:55:23: 1d:81:3e:b0:85:85:a5:26:27:62:79:85:f1:0d:9e:4b:34:cc: c2:54:b2:7c:fe:c5:ec:8d:c3:bc:ce:17:67:34:e7:0b:ec:b3: 70:a2:8a:e4:a8:b5:f9:5e:33:c9:ef:7f:bc:3d:89:14:74:75: b5:c0:f7:c2:06:f9:28:6b:d1:35:ba:68:6d:d1:cc:0e:f8:21: 26:12:9f:55:c6:81:e7:e9:5c:4e:6e:94:6a:40:25:5f:94:38: 29:96:48:33:ad:35:b2:14:b4:17:4b:ed:7d:bf:7c:40:26:82: ad:ae:9e:4f:a2:29:f2:f9:02:f6:e5:ab:5d:06:7e:7d:7c:9a: f7:74:fd:ee -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt9ywfImU/g0iBHU9xh7tzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjQwMGQ0ODAzMmQxMjlkOTRiZDA4ZWQyNzE3YTlhMWY0Y2YyZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dPJvE5zxxKeimLXe9XmnuYoUOit vhEV56gI6cvCfAsX8C/9Sr34J3oO9U20ZkBNkr1nh0+18PPcbuDjz8v1E/2uwygu 5RpKt8Rq/5j1GtygfZY4gV2w8EEP7owN3kLix1kojT5XTSXXSq0TEqm194Ah9y5y SXdJdltbeO9GOFeqorY6SuogPtEHvSE7itcgthBz9GIJf6LBpLGHC2bEhPwIZVrD OxWMtjaSqlmD6PA515kxHoeFDN7sOVjs+QIg9817HM3D/MdrBZxCj9MIjDpOcl07 DRdBpftdIbroorlBfBfLAlLs5t68egGpibXhX/Ab4bUZSNDYsX+m3UvghQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMtADUgDLRKdlL0I7ScXqaH0zy9LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzNlZDM2 MS0xMzEwLTQ5MGQtOTMzNS03MmNiNmJhZTRhM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvM2VkMzYx LTEzMTAtNDkwZC05MzM1LTcyY2I2YmFlNGEzZC8xL3kwQU5TQU10RXAyVXZRanRK eGVwb2ZUUEwwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuYdoAwQCwaC8MBQEAgACMA4DBQMqBvMAAwUD KgyewDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDFvgCAwManTANBgkqhkiG9w0B AQsFAAOCAQEAUPOthiyAI4uqJ1+mbPkUlBDYMVRgd5Aru46Le6/H9p3dfiNBuQby bOkC9v2qXK2afcA0oBQDIJrl7r0YwAlw/6C49MK3EECuBJS2CTdGTMLs2soPAFXO Z/+gAGwQA26D7olon5j0AI0XOl/cmNigpfQziI+ll9NkEcVpY1UjHYE+sIWFpSYn YnmF8Q2eSzTMwlSyfP7F7I3DvM4XZzTnC+yzcKKK5Ki1+V4zye9/vD2JFHR1tcD3 wgb5KGvRNbpobdHMDvghJhKfVcaB5+lcTm6UakAlX5Q4KZZIM601shS0F0vtfb98 QCaCra6eT6Ip8vkC9uWrXQZ+fXya93T97g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:40 2026 by rpki-client