This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer (raw, json) Hash identifier: 1BIkAj6PS5SdeV5EX6B0ZuoQAz8QDFr9h6m79fLOimw= Subject key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B80D5B78469A0E26BA481CF67EDF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213365 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:80:d5:b7:84:69:a0:e2:6b:a4:81:cf:67:ed:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:2e:91:0c:ec:31:95:6e:83:97:92:b8:52: 7a:22:61:4b:ae:50:bf:97:25:ac:22:59:a1:87:32: 1b:40:c6:78:83:d8:0f:71:85:67:07:f6:67:65:a8: 2d:5f:98:71:24:ff:ca:9a:5e:a9:77:6a:bb:8b:bd: 43:6c:6c:24:4d:8e:5f:40:6c:b1:12:24:06:4e:4a: f7:82:11:fb:c2:70:9c:fd:fe:e7:da:a3:8b:71:05: 3f:2b:a6:24:20:55:5e:15:d0:76:5e:ef:3e:2c:6c: de:87:09:2f:6b:38:7d:2a:64:ea:70:dc:7e:4f:9d: b0:95:f8:ee:aa:5d:94:57:81:68:89:ca:4d:87:40: a6:31:7c:f7:65:13:d7:17:3c:76:d5:ca:16:4c:9b: 4b:4d:36:e3:eb:0e:cf:85:39:bd:85:d7:23:5c:fe: ce:ba:ef:9b:8c:d5:35:8a:7c:ed:db:f1:0b:59:5c: 65:8b:5b:1c:02:91:00:aa:95:5f:25:ae:f5:e9:0f: b0:88:87:7f:ec:3c:ea:98:8b:47:d9:6b:f2:64:8e: d5:e6:11:27:c6:84:df:02:78:e4:f4:5e:55:61:de: 08:cf:e9:83:3a:07:98:3d:77:53:3b:42:b6:7a:73: d3:1a:2f:43:88:9d:c0:f5:3d:4d:06:a4:9d:8e:44: 15:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213365 Signature Algorithm: sha256WithRSAEncryption 16:45:bc:24:25:7a:04:74:a0:ae:dc:4a:f8:04:42:4f:92:7f: 73:b3:5a:0b:ee:6f:bc:4e:d8:b5:81:34:5d:ec:59:30:ed:bb: 82:24:ab:2b:b8:10:f5:b4:72:ba:3a:20:b3:5d:c2:05:7b:2a: 95:2a:d0:9c:e3:eb:61:a6:cc:e7:52:c7:7a:b4:3c:a0:33:4c: 88:e8:b8:b4:c1:35:6c:e1:68:98:9d:03:aa:95:4a:05:b4:e0: 78:15:e6:14:95:67:ce:c2:f8:f1:87:02:e2:7d:95:54:9b:4e: 18:82:24:6f:53:4c:f1:91:c5:05:3f:ba:97:d6:d9:13:30:85: 33:70:88:fa:63:e8:3c:72:5e:e2:dc:07:cc:5b:5f:95:1a:19: d4:7b:dd:ee:d0:eb:eb:13:17:2f:d2:2a:b7:be:54:a6:c4:5c: 10:49:8d:29:23:15:ad:17:12:33:68:ae:f9:9a:91:e7:62:0f: f4:9d:10:aa:49:27:2b:fd:30:24:c0:7e:ab:26:ab:f8:54:82: 5c:c2:31:8f:65:27:2a:e6:16:0b:e1:2a:f5:81:cc:94:06:69: a4:e5:b8:17:08:66:1c:b4:b7:5e:68:e9:7a:80:c4:34:45:2e: cf:45:71:5f:55:c7:9b:db:5c:7a:9d:b5:1e:b1:5b:7e:41:ad: 26:5f:b8:3e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6W4DVt4RpoOJrpIHPZ+3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU1NmFiMTI5OTBmMTg3MWE5ZTFlZTc0Mzk2OWFhOGEyNzk5ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AEukQzsMZVug5eSuFJ6ImFLrlC/ lyWsIlmhhzIbQMZ4g9gPcYVnB/ZnZagtX5hxJP/Kml6pd2q7i71DbGwkTY5fQGyx EiQGTkr3ghH7wnCc/f7n2qOLcQU/K6YkIFVeFdB2Xu8+LGzehwkvazh9KmTqcNx+ T52wlfjuql2UV4FoicpNh0CmMXz3ZRPXFzx21coWTJtLTTbj6w7PhTm9hdcjXP7O uu+bjNU1inzt2/ELWVxli1scApEAqpVfJa716Q+wiId/7DzqmItH2WvyZI7V5hEn xoTfAnjk9F5VYd4Iz+mDOgeYPXdTO0K2enPTGi9DiJ3A9T1NBqSdjkQViQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMtVarEpkPGHGp4e50OWmqiieZ/KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2I5Njg2 ZS02NTgwLTQ1MGQtOWMyMi05YzU4MTU5MWVjOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYjk2ODZl LTY1ODAtNDUwZC05YzIyLTljNTgxNTkxZWM5MS8xL3kxVnFzU21ROFljYW5oN25R NWFhcUtKNW44by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBdTANBgkqhkiG9w0BAQsFAAOCAQEAFkW8JCV6BHSg rtxK+ARCT5J/c7NaC+5vvE7YtYE0XexZMO27giSrK7gQ9bRyujogs13CBXsqlSrQ nOPrYabM51LHerQ8oDNMiOi4tME1bOFomJ0DqpVKBbTgeBXmFJVnzsL48YcC4n2V VJtOGIIkb1NM8ZHFBT+6l9bZEzCFM3CI+mPoPHJe4twHzFtflRoZ1Hvd7tDr6xMX L9Iqt75UpsRcEEmNKSMVrRcSM2iu+ZqR52IP9J0QqkknK/0wJMB+qyar+FSCXMIx j2UnKuYWC+Eq9YHMlAZppOW4FwhmHLS3XmjpeoDENEUuz0VxX1XHm9tcep21HrFb fkGtJl+4Pg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:37 2026 by rpki-client