This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer File: y1VBA5WqtJkUDDplzh90DvBw0-Y.cer (raw, json) Hash identifier: S8DN0EHDYn8q0h7mfW1IhNkDQ1x+p8r6qqviIQ5Kntk= Subject key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12EA8AE6E0065872280FA11C6EBD93 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213127 IP: 158.94.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ea:8a:e6:e0:06:58:72:28:0f:a1:1c:6e:bd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb55410395aab499140c3a65ce1f740ef070d3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:34:84:09:b2:d0:64:18:5b:e8:02:cb:e6: 9f:b2:ae:6e:f5:ea:d5:c9:53:a1:71:37:d1:b5:df: 81:bd:8e:48:0a:9f:bf:28:e2:56:e4:27:be:85:96: 25:88:84:f2:ad:e8:a2:89:0d:e1:31:bd:29:3f:b3: 5a:69:5e:33:bd:7e:cb:c2:31:e3:56:0e:c0:d5:29: 22:bc:66:7e:44:f0:35:31:1d:fd:9c:5d:2e:8a:37: d9:22:58:e5:0b:51:98:79:fd:b8:3e:b6:0b:05:7e: 6b:4e:0e:5a:8c:1c:7c:9e:2b:f7:e6:62:74:17:54: ec:7f:d2:0a:11:73:24:60:e4:68:13:aa:99:79:ff: 75:4d:e8:63:85:b5:ca:d7:a1:e2:5b:39:1d:34:99: 45:90:47:49:d2:2e:b5:9f:85:8d:27:36:bb:6a:f4: d5:e2:46:7d:e3:7c:79:44:0f:0e:c8:91:39:fb:33: 87:9a:e5:41:1f:2f:f7:0f:52:2f:81:9c:b6:71:10: e8:83:bc:2e:87:aa:1a:c6:d6:04:aa:6e:a6:bb:dd: 19:09:5c:87:25:42:e3:2c:f6:6b:7a:0b:d5:62:53: ee:7f:79:19:ee:dc:68:2b:06:a0:32:fc:65:c4:d9: 5b:b1:fe:2b:1c:b4:4d:e8:5f:56:fb:08:c2:4c:71: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.223.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213127 Signature Algorithm: sha256WithRSAEncryption 07:22:c8:4b:71:da:5d:07:72:b4:b3:59:d6:1a:f6:06:dd:49: 70:50:20:c4:51:7b:e9:57:d3:4d:f2:2a:e3:29:8f:28:14:5d: 4f:34:45:d1:84:1e:11:a0:1c:11:ae:4b:94:15:98:35:75:b1: 08:2b:fa:fa:a1:3e:3c:11:a1:6d:16:35:1a:50:59:75:46:52: e4:12:ed:92:62:38:19:b0:d9:3c:17:cd:d6:99:10:d0:93:0d: 85:69:30:4d:5f:0f:bc:63:35:2d:3e:43:bc:35:69:f5:8c:ef: 61:75:8c:52:53:9c:72:b7:12:57:eb:ca:dd:47:62:bd:37:dc: 8b:ff:73:24:81:1c:63:9f:3a:b7:d6:80:e1:23:1a:bf:e8:df: 40:87:6c:58:e2:fc:16:13:5b:df:a7:c9:e2:0c:15:4f:27:67: dc:6a:67:73:fa:d6:d7:80:a3:c1:de:89:29:ad:f2:52:a5:f9: a8:2e:88:e5:61:8e:1f:ae:6c:ec:2c:ce:7b:f1:57:3a:5a:c4: 12:53:3c:f8:1f:4d:a2:4c:21:e4:7a:0a:73:49:43:90:b4:8e: f6:e2:f1:e9:b2:92:45:8e:b1:a3:63:75:38:f8:ad:6b:45:17: fd:38:d0:0e:e7:91:15:c4:7a:f8:83:f1:dc:16:8f:8e:4b:21: ae:a3:87:e5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EuqK5uAGWHIoD6Ecbr2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU1NDEwMzk1YWFiNDk5MTQwYzNhNjVjZTFmNzQwZWYwNzBkM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuec0hAmy0GQYW+gCy+afsq5u9erV yVOhcTfRtd+BvY5ICp+/KOJW5Ce+hZYliITyreiiiQ3hMb0pP7NaaV4zvX7LwjHj Vg7A1SkivGZ+RPA1MR39nF0uijfZIljlC1GYef24PrYLBX5rTg5ajBx8niv35mJ0 F1Tsf9IKEXMkYORoE6qZef91TehjhbXK16HiWzkdNJlFkEdJ0i61n4WNJza7avTV 4kZ943x5RA8OyJE5+zOHmuVBHy/3D1IvgZy2cRDog7wuh6oaxtYEqm6mu90ZCVyH JULjLPZregvVYlPuf3kZ7txoKwagMvxlxNlbsf4rHLRN6F9W+wjCTHGnnwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMtVQQOVqrSZFAw6Zc4fdA7wcNPmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzEyN2Yy OS1jMWQ2LTRjZTEtOWE3NC02MmM3Njk0YjU3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMTI3ZjI5 LWMxZDYtNGNlMS05YTc0LTYyYzc2OTRiNTdlZS8xL3kxVkJBNVdxdEprVUREcGx6 aDkwRHZCdzAtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAnl7fMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNAhzANBgkqhkiG9w0BAQsFAAOCAQEAByLIS3HaXQdytLNZ1hr2Bt1JcFAgxFF7 6VfTTfIq4ymPKBRdTzRF0YQeEaAcEa5LlBWYNXWxCCv6+qE+PBGhbRY1GlBZdUZS 5BLtkmI4GbDZPBfN1pkQ0JMNhWkwTV8PvGM1LT5DvDVp9YzvYXWMUlOccrcSV+vK 3UdivTfci/9zJIEcY586t9aA4SMav+jfQIdsWOL8FhNb36fJ4gwVTydn3Gpnc/rW 14Cjwd6JKa3yUqX5qC6I5WGOH65s7CzOe/FXOlrEElM8+B9Nokwh5HoKc0lDkLSO 9uLx6bKSRY6xo2N1OPita0UX/TjQDueRFcR6+IPx3BaPjkshrqOH5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:21 2026 by rpki-client