This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer File: y1eZ2NBfSgIAEdyoAxdivqASJV0.cer (raw, json) Hash identifier: LV62/RQX9ocFd/eUfcLWaGBSElTYllxePXpgBP0UwYo= Subject key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA54DF44E1E0C6AE06582575B23B946 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201975 IP: 31.210.19.0/24 IP: 45.86.176.0/22 IP: 86.58.208.0/21 IP: 93.90.64.0/22 IP: 157.97.112.0/21 IP: 185.54.180.0/22 IP: 193.148.20.0/22 IP: 2a02:4660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4d:f4:4e:1e:0c:6a:e0:65:82:57:5b:23:b9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb5799d8d05f4a020011dca8031762bea012255d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:01:28:04:c8:fe:0a:4d:c6:8c:a3:0c:3e: 2a:4d:80:5b:43:90:36:09:4a:00:59:08:52:73:9f: cc:f0:c4:07:b1:a2:95:19:1c:2f:d2:69:bb:15:b9: 99:63:ac:ba:68:7b:0c:9a:f0:e2:a9:64:6e:3b:93: 84:29:04:3e:13:fb:60:97:9d:e0:d8:01:5d:61:ae: 69:ca:9a:9f:1f:ca:2a:95:f5:be:aa:79:fd:e7:a6: 0e:20:d3:88:34:0a:bb:de:44:ac:80:7b:40:8e:f5: 29:48:21:40:cd:15:7f:c0:84:0b:96:e7:a4:85:22: af:cc:c9:10:e8:57:6a:4e:60:0a:c7:a4:81:28:73: 0e:29:b1:37:2d:d7:76:96:47:42:76:2a:3c:8a:d3: e8:1a:ff:d2:af:a4:4b:47:ef:6c:12:5c:d9:6a:2f: 6c:e5:11:1f:72:b4:a6:ad:bd:d0:51:0a:cb:83:fa: d2:c5:5e:76:d5:f6:94:37:e7:03:9e:aa:ce:d8:7f: 01:f1:f8:29:c3:9b:69:29:b4:bf:10:e1:f9:6a:fa: 47:e6:15:8b:f2:b7:b4:4f:c6:71:30:7f:8a:a4:48: de:a1:57:2d:11:b3:f2:ff:53:fe:bd:8e:51:bf:c0: 72:a9:1a:d1:34:77:bc:28:1f:21:36:8d:38:ff:e8: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.19.0/24 45.86.176.0/22 86.58.208.0/21 93.90.64.0/22 157.97.112.0/21 185.54.180.0/22 193.148.20.0/22 IPv6: 2a02:4660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201975 Signature Algorithm: sha256WithRSAEncryption 31:76:02:58:92:d2:b9:23:c8:60:0c:b8:a2:27:1e:be:01:fa: bb:71:cc:62:57:c7:da:4e:ac:bc:75:cc:f8:52:ad:e6:fc:ca: 5f:dc:87:b5:3e:a2:55:70:87:c3:5b:d8:04:66:64:18:03:ba: e2:40:e2:01:79:97:8f:cc:36:2a:a9:8f:a9:0a:63:fb:fa:a0: 92:bd:51:c4:f9:98:dd:5f:52:28:c2:5b:5b:4c:ce:a1:92:01: 6d:fe:00:eb:84:02:a1:04:ff:77:70:75:44:28:56:bf:f1:21: a1:5d:12:34:7f:00:8e:4c:ed:c0:ef:f7:fd:4e:8d:e8:7e:e3: b0:af:fa:51:b1:ef:2a:f7:cd:86:93:73:18:44:b7:9b:34:a9: a9:e0:35:c9:3f:76:1a:fb:e1:b7:d9:c5:f6:45:16:61:9b:9f: f9:38:b1:5a:5e:23:89:d1:09:bf:36:69:9c:81:b3:4d:17:1d: af:b4:3a:dd:84:d8:b4:b9:32:b4:1e:4e:13:a8:43:0a:68:88: c7:9f:a6:24:21:37:97:28:8b:57:9b:e8:e4:60:b8:6c:e0:f4: 0a:30:7f:0e:d2:78:da:a4:ee:e9:31:f3:42:14:8e:1e:55:b9: d5:1e:16:18:de:67:a1:e3:e8:8f:5c:52:42:97:23:4a:2c:ff: c3:6d:73:28 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt+pU30Th4MauBlgldbI7lGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU3OTlkOGQwNWY0YTAyMDAxMWRjYTgwMzE3NjJiZWEwMTIyNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQUBKATI/gpNxoyjDD4qTYBbQ5A2 CUoAWQhSc5/M8MQHsaKVGRwv0mm7FbmZY6y6aHsMmvDiqWRuO5OEKQQ+E/tgl53g 2AFdYa5pypqfH8oqlfW+qnn956YOINOINAq73kSsgHtAjvUpSCFAzRV/wIQLluek hSKvzMkQ6FdqTmAKx6SBKHMOKbE3Ldd2lkdCdio8itPoGv/Sr6RLR+9sElzZai9s 5REfcrSmrb3QUQrLg/rSxV521faUN+cDnqrO2H8B8fgpw5tpKbS/EOH5avpH5hWL 8re0T8ZxMH+KpEjeoVctEbPy/1P+vY5Rv8ByqRrRNHe8KB8hNo04/+iuOwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFMtXmdjQX0oCABHcqAMXYr6gEiVdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2M3ODAy MC1mYTMyLTQ5ODgtOWUxNC01YzYwMmZkZTk2M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvYzc4MDIw LWZhMzItNDk4OC05ZTE0LTVjNjAyZmRlOTYzYi8xL3kxZVoyTkJmU2dJQUVkeW9B eGRpdnFBU0pWMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQAH9ITAwQCLVawAwQDVjrQAwQCXVpAAwQDnWFw AwQCuTa0AwQCwZQUMA0EAgACMAcDBQAqAkZgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMU9zANBgkqhkiG9w0BAQsFAAOCAQEAMXYCWJLSuSPIYAy4oicevgH6u3HM YlfH2k6svHXM+FKt5vzKX9yHtT6iVXCHw1vYBGZkGAO64kDiAXmXj8w2KqmPqQpj +/qgkr1RxPmY3V9SKMJbW0zOoZIBbf4A64QCoQT/d3B1RChWv/EhoV0SNH8Ajkzt wO/3/U6N6H7jsK/6UbHvKvfNhpNzGES3mzSpqeA1yT92Gvvht9nF9kUWYZuf+Tix Wl4jidEJvzZpnIGzTRcdr7Q63YTYtLkytB5OE6hDCmiIx5+mJCE3lyiLV5vo5GC4 bOD0CjB/DtJ42qTu6THzQhSOHlW51R4WGN5noePoj1xSQpcjSiz/w21zKA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:08 2026 by rpki-client