This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer File: y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer (raw, json) Hash identifier: ovsXxjNcvmDq+0naOAZOhhUcTV3j7reHKYQbjaHG8wo= Subject key identifier: CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9CEB3120FFAA8E928AEAA750533C810 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 10:17:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50824 IP: 91.205.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:ce:b3:12:0f:fa:a8:e9:28:ae:aa:75:05:33:c8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 10:17:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:f5:fc:b0:00:ea:19:34:ad:73:4d:50:70: b5:7d:0b:9c:79:63:1e:a0:95:76:99:54:98:71:89: 97:eb:6f:3c:72:18:53:07:e9:83:14:09:c9:db:26: b7:85:ba:76:e8:6e:1c:ab:20:29:eb:55:f2:14:41: fa:7c:fa:3d:9b:25:79:0b:4d:34:c7:e9:be:ec:2d: 0d:68:ba:b9:30:b5:a6:65:ae:55:9f:10:32:db:b2: 57:e2:a4:e0:97:a8:1b:12:00:43:8f:84:6e:ed:0e: 04:5f:b1:ed:bd:96:d8:b1:63:f0:fc:7e:c3:35:7f: 5a:4e:13:8d:70:ee:15:cc:1b:c4:2b:a6:9e:7d:04: 11:15:14:4d:70:c8:1d:f4:57:b4:1a:af:cb:74:d6: 42:2f:d5:b6:20:12:84:fd:e2:53:2a:6d:91:cc:07: e6:5e:87:29:78:a8:01:ae:71:89:ac:bf:b4:83:05: 51:53:2d:02:ba:bc:2a:ab:5e:a9:9b:1e:85:c8:8f: 89:41:c0:ec:05:24:df:12:23:f1:3c:e1:18:38:e1: f4:d1:96:68:1a:4c:06:39:06:38:ac:09:56:f0:33: 92:d3:e6:df:f4:a5:f8:1c:97:0a:c7:c8:60:91:92: 9e:f8:3a:cf:86:af:27:11:98:b9:10:20:3f:37:90: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.36.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50824 Signature Algorithm: sha256WithRSAEncryption 2b:9b:27:54:75:74:af:6f:03:40:2d:4b:2d:0d:4f:d8:7d:3b: a0:69:08:7e:ca:0d:4a:1c:f4:f9:e6:2b:ff:35:1e:8b:f2:82: e7:ed:14:60:16:63:87:80:26:a6:8f:b7:69:ee:89:71:34:dd: 4c:5b:40:60:aa:db:fc:7c:e7:de:54:17:6b:d0:50:2d:ce:0a: 32:79:85:8d:1e:63:ad:99:cc:73:f1:38:a1:a4:e3:2d:2a:09: 42:6f:2e:3e:6b:cf:1e:d2:51:25:a1:d5:99:2e:f2:f3:39:9d: 4c:ec:dd:1d:78:71:8a:0e:5e:c8:8e:72:b8:4b:60:63:a2:4d: 65:0d:97:c0:b3:99:ca:79:4b:96:13:e2:ce:98:2a:a5:b3:b5: 65:6a:60:2d:49:0a:62:26:67:f5:43:06:ab:a4:b1:bf:88:93: f3:25:e0:f7:94:2d:4f:dd:26:b2:6e:51:b9:7d:66:02:67:61: 2e:a2:e6:fa:c1:e9:16:56:02:e3:e7:b8:40:14:2e:5a:d6:aa: c7:5b:9d:0f:70:fb:29:fb:41:81:37:97:85:54:25:c9:66:f0: 4e:39:7c:e6:eb:36:82:9a:35:e4:81:39:81:74:44:42:de:1c: d2:e5:5f:46:da:d9:7c:e0:dc:6c:1d:75:ba:0b:72:3c:c3:c8: 96:ac:0a:b3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZv5zrMSD/qo6SiuqnUFM8gQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTAxNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjdhZWJjNGU4NWI4Y2I5ODI0YWU0ODdhYTE0NDRlZWY0MzgyNmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/X1/LAA6hk0rXNNUHC1fQuceWMe oJV2mVSYcYmX6288chhTB+mDFAnJ2ya3hbp26G4cqyAp61XyFEH6fPo9myV5C000 x+m+7C0NaLq5MLWmZa5VnxAy27JX4qTgl6gbEgBDj4Ru7Q4EX7HtvZbYsWPw/H7D NX9aThONcO4VzBvEK6aefQQRFRRNcMgd9Fe0Gq/LdNZCL9W2IBKE/eJTKm2RzAfm XocpeKgBrnGJrL+0gwVRUy0Curwqq16pmx6FyI+JQcDsBSTfEiPxPOEYOOH00ZZo GkwGOQY4rAlW8DOS0+bf9KX4HJcKx8hgkZKe+DrPhq8nEZi5ECA/N5D5lwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMt668ToW4y5gkrkh6oURO70OCajMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzI1Yjc5 YS00YzYyLTQ0MTgtYjJjYi03NzczZmRlM2ZhN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvMjViNzlh LTRjNjItNDQxOC1iMmNiLTc3NzNmZGUzZmE3YS8xL3kzcnJ4T2hiakxtQ1N1U0hx aFJFN3ZRNEpxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW80kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDGiDANBgkqhkiG9w0BAQsFAAOCAQEAK5snVHV0r28DQC1LLQ1P2H07oGkIfsoN Shz0+eYr/zUei/KC5+0UYBZjh4Ampo+3ae6JcTTdTFtAYKrb/Hzn3lQXa9BQLc4K MnmFjR5jrZnMc/E4oaTjLSoJQm8uPmvPHtJRJaHVmS7y8zmdTOzdHXhxig5eyI5y uEtgY6JNZQ2XwLOZynlLlhPizpgqpbO1ZWpgLUkKYiZn9UMGq6Sxv4iT8yXg95Qt T90msm5RuX1mAmdhLqLm+sHpFlYC4+e4QBQuWtaqx1udD3D7KftBgTeXhVQlyWbw Tjl85us2gpo15IE5gXREQt4c0uVfRtrZfODcbB11ugtyPMPIlqwKsw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:26 2026 by rpki-client