This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer File: y3yVUPThoer5UHL7G5q7JpVNJj0.cer (raw, json) Hash identifier: S75vaNC+2eVAqltw49eBNGG0mpWfrtHNjMxRplk3Pjg= Subject key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB60C5712074B4D332A7B8C5DFB778 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57428 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:60:c5:71:20:74:b4:d3:32:a7:b8:c5:df:b7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:16:95:39:8e:e2:f0:4c:25:0c:5b:04:cd: 64:cd:27:5c:f3:54:d3:f3:63:a6:77:17:03:f5:8e: b7:51:27:26:c5:c6:13:77:5f:72:c1:3e:9e:35:8d: 0d:cd:35:a9:62:42:de:c1:54:7b:be:42:6f:f4:be: a1:fe:70:d6:79:d5:3c:89:00:12:6d:26:98:b8:cf: 0d:e5:54:f8:7f:73:a4:54:2a:b3:8b:a8:cd:ff:ab: 65:77:86:df:4e:5a:48:ed:78:96:67:62:19:12:82: 4e:f9:ce:b3:77:4d:6b:51:ab:68:90:c5:46:e9:e9: a4:ce:07:af:08:c6:ab:98:c2:d1:22:32:0c:4d:00: 63:59:6f:f1:55:c0:bb:56:e7:5a:e2:75:01:ec:1d: c0:1d:31:ab:00:b8:51:0e:a7:9e:fb:8b:28:85:e1: a7:51:61:2e:0e:ae:0e:a0:a3:01:5d:d5:b4:50:21: 38:84:33:ef:41:eb:d9:52:9e:b3:8b:52:85:fa:5a: 57:a3:e5:07:18:77:83:46:b2:b4:b7:64:3f:77:64: 14:5d:9e:b4:a3:63:cb:71:e0:94:4c:c3:25:69:69: 12:f2:97:f3:4b:6a:9b:ec:7b:a2:c4:9e:b1:03:8e: 2e:73:fd:5d:ac:67:fc:0a:b3:d0:9e:00:fa:98:d3: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 57428 Signature Algorithm: sha256WithRSAEncryption 6e:36:2a:4a:e4:10:d0:94:d3:4c:95:81:5d:b4:51:da:61:19: 32:58:67:5c:0c:35:17:ee:e5:ec:c8:1d:c0:56:31:e8:93:23: da:89:f7:2b:06:2d:98:71:85:a7:2e:7d:66:ce:a3:65:63:a9: ad:ac:40:f6:c2:2b:d3:c2:68:7b:fc:58:ac:94:53:3f:d1:cb: 04:a4:03:4b:39:c3:f9:e8:37:28:63:64:1f:de:03:4c:dc:32: dd:ff:5f:60:d2:d1:5f:0e:f4:eb:cf:3d:41:9d:2a:65:b4:89: 40:af:45:65:db:49:2f:9e:5a:50:a4:1e:71:e9:ce:66:fc:51: b5:32:34:ed:ad:ac:59:dd:c6:68:c3:71:de:87:e2:c9:1f:2f: c6:2c:88:44:cf:9a:e6:b8:69:d1:20:31:e0:c1:3f:5d:c7:94: 2a:d8:b8:90:c8:5e:4e:f7:4e:e4:a4:7b:b0:a2:7e:9b:fe:2c: f1:1a:ab:b9:44:b1:88:34:2c:6c:43:f7:21:a2:9e:0b:c4:25: f5:2b:97:23:5d:60:e2:c0:4f:64:6d:79:fa:88:0a:fd:ce:af: 65:77:3a:49:70:34:f5:08:14:0b:7b:64:b0:21:55:01:3a:a2: b9:7e:2f:f3:a8:71:e1:1e:6d:47:6a:7c:20:b2:34:23:10:52: b7:a1:7c:f2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9y2DFcSB0tNMyp7jF37d4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjdjOTU1MGY0ZTFhMWVhZjk1MDcyZmIxYjlhYmIyNjk1NGQyNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4WlTmO4vBMJQxbBM1kzSdc81TT 82OmdxcD9Y63UScmxcYTd19ywT6eNY0NzTWpYkLewVR7vkJv9L6h/nDWedU8iQAS bSaYuM8N5VT4f3OkVCqzi6jN/6tld4bfTlpI7XiWZ2IZEoJO+c6zd01rUatokMVG 6emkzgevCMarmMLRIjIMTQBjWW/xVcC7Vuda4nUB7B3AHTGrALhRDqee+4soheGn UWEuDq4OoKMBXdW0UCE4hDPvQevZUp6zi1KF+lpXo+UHGHeDRrK0t2Q/d2QUXZ60 o2PLceCUTMMlaWkS8pfzS2qb7HuixJ6xA44uc/1drGf8CrPQngD6mNPdKQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMt8lVD04aHq+VBy+xuauyaVTSY9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzY4OWIx OS00OTU4LTQ0MjMtODVhOS05NjI2ZjlmNmNkYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjg5YjE5 LTQ5NTgtNDQyMy04NWE5LTk2MjZmOWY2Y2RhMi8xL3kzeVZVUFRob2VyNVVITDdH NXE3SnBWTkpqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDgVDANBgkqhkiG9w0BAQsFAAOCAQEAbjYqSuQQ0JTT TJWBXbRR2mEZMlhnXAw1F+7l7MgdwFYx6JMj2on3KwYtmHGFpy59Zs6jZWOpraxA 9sIr08Joe/xYrJRTP9HLBKQDSznD+eg3KGNkH94DTNwy3f9fYNLRXw706889QZ0q ZbSJQK9FZdtJL55aUKQecenOZvxRtTI07a2sWd3GaMNx3ofiyR8vxiyIRM+a5rhp 0SAx4ME/XceUKti4kMheTvdO5KR7sKJ+m/4s8RqruUSxiDQsbEP3IaKeC8Ql9SuX I11g4sBPZG15+ogK/c6vZXc6SXA09QgUC3tksCFVATqiuX4v86hx4R5tR2p8ILI0 IxBSt6F88g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:58 2026 by rpki-client