This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer File: y5idLhUgGyDjQIjdHARVslRE-Pw.cer (raw, json) Hash identifier: 4+I68AzDihP/Ndzb/pZ6Qdvf7HFw8lnQZ8qCfG+PRP8= Subject key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1C3CA825D1081B1234FBF7AE1BB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209279 IP: 31.41.35.0/24 IP: 195.182.38.0/24 IP: 2a12:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1c:3c:a8:25:d1:08:1b:12:34:fb:f7:ae:1b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:da:2e:c0:03:09:0f:bd:eb:24:8d:ee:dd: cf:3b:eb:4f:8d:58:e3:a8:81:a4:ca:32:95:6f:2e: 9d:8d:90:00:be:4f:06:25:d9:6d:f6:db:2a:6b:b4: bb:26:f1:14:f0:8c:a0:db:f8:8b:fc:3a:8d:41:ad: 8e:a5:49:f0:de:b6:b9:ee:45:6b:c0:49:e1:b4:98: ec:94:79:ec:aa:b7:36:91:5c:f0:f7:d7:75:ef:d3: 9d:b2:62:94:ed:6b:b5:39:85:5c:9e:b1:a0:02:ae: 01:db:12:57:65:0f:1e:6f:c9:98:28:8a:4d:85:d7: 80:c4:d0:87:79:c5:7c:26:f1:54:f7:6c:c8:4c:89: ef:12:b0:e7:05:2a:a8:c7:9f:a3:0d:6c:ca:68:58: 1d:3e:28:ee:f6:5d:6a:5a:5f:ed:40:b2:de:25:16: fe:d7:87:8f:03:a1:31:76:af:67:6a:ac:39:4a:7e: 80:42:96:0c:54:1a:4f:30:96:6b:c9:ac:d9:c9:0e: 29:28:dc:19:d7:75:c8:e3:e7:87:2c:c7:9d:d0:a0: 07:7a:f0:11:1e:02:5f:3a:6d:46:e6:af:29:da:d9: aa:11:31:67:13:4e:fd:d0:71:ec:45:7a:99:db:0a: 88:9d:11:1c:08:c6:6e:4c:73:f5:b1:c9:8b:a4:ce: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.35.0/24 195.182.38.0/24 IPv6: 2a12:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209279 Signature Algorithm: sha256WithRSAEncryption 78:51:90:67:47:7d:3d:a1:1a:cd:31:6e:7d:ca:71:06:9e:85: f4:bf:41:95:9b:ae:99:f1:7a:46:06:a5:a7:b1:61:a2:e0:ce: 54:b2:69:38:20:08:95:7c:26:5a:ff:28:2c:7b:d1:d6:09:7c: 26:ce:01:3e:65:b9:c4:00:7e:68:a1:72:44:0a:71:13:0d:19: 55:d1:ac:dd:69:63:6e:76:f0:67:07:e0:c0:c1:04:09:bd:6f: c9:8a:12:0b:e3:e7:1c:f0:ae:f2:15:a0:5c:3c:7e:32:fc:c2: 36:9f:24:3b:0d:ab:28:de:1e:ba:66:e4:61:f1:46:90:49:3b: 58:c4:a6:13:ca:a3:5e:16:91:b7:6c:41:4c:4d:51:12:7b:db: a7:b3:cf:e9:11:cf:cf:4c:2e:d5:c6:80:fe:1f:06:91:07:6c: 16:e4:34:7a:1f:86:fb:c2:c8:e3:48:7e:b5:42:d0:f6:ef:ab: 70:99:4c:5c:64:58:dd:90:22:2b:4e:fe:12:08:b4:68:b7:14: bb:c1:24:e8:89:7f:d4:93:f9:b3:a0:ff:82:0e:93:eb:02:6d: 96:b8:40:60:67:cb:b2:3d:7e:f4:ae:53:e4:e3:b3:1a:c8:74: 23:5c:2d:7b:a3:5e:64:0c:e4:c3:56:13:6c:24:22:c1:8f:5b: 37:bc:f2:6e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87hw8qCXRCBsSNPv3rhuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjk4OWQyZTE1MjAxYjIwZTM0MDg4ZGQxYzA0NTViMjU0NDRmOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC7aLsADCQ+96ySN7t3PO+tPjVjj qIGkyjKVby6djZAAvk8GJdlt9tsqa7S7JvEU8Iyg2/iL/DqNQa2OpUnw3ra57kVr wEnhtJjslHnsqrc2kVzw99d179OdsmKU7Wu1OYVcnrGgAq4B2xJXZQ8eb8mYKIpN hdeAxNCHecV8JvFU92zITInvErDnBSqox5+jDWzKaFgdPiju9l1qWl/tQLLeJRb+ 14ePA6Exdq9naqw5Sn6AQpYMVBpPMJZryazZyQ4pKNwZ13XI4+eHLMed0KAHevAR HgJfOm1G5q8p2tmqETFnE0790HHsRXqZ2wqInREcCMZuTHP1scmLpM7u/QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMuYnS4VIBsg40CI3RwEVbJURPj8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2JlNTZk NC04ZGU2LTQ0YTItOTY5MS0zNjkyNjM0NDMwMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYmU1NmQ0 LThkZTYtNDRhMi05NjkxLTM2OTI2MzQ0MzAyNS8xL3k1aWRMaFVnR3lEalFJamRI QVJWc2xSRS1Qdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAHykjAwQAw7YmMA0EAgACMAcDBQMqEj7AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMxfzANBgkqhkiG9w0BAQsFAAOCAQEAeFGQ Z0d9PaEazTFufcpxBp6F9L9BlZuumfF6Rgalp7FhouDOVLJpOCAIlXwmWv8oLHvR 1gl8Js4BPmW5xAB+aKFyRApxEw0ZVdGs3WljbnbwZwfgwMEECb1vyYoSC+PnHPCu 8hWgXDx+MvzCNp8kOw2rKN4eumbkYfFGkEk7WMSmE8qjXhaRt2xBTE1REnvbp7PP 6RHPz0wu1caA/h8GkQdsFuQ0eh+G+8LI40h+tULQ9u+rcJlMXGRY3ZAiK07+Egi0 aLcUu8Ek6Il/1JP5s6D/gg6T6wJtlrhAYGfLsj1+9K5T5OOzGsh0I1wte6NeZAzk w1YTbCQiwY9bN7zybg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:39 2026 by rpki-client