This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer File: y6AXGgLV5KdftAY1VFrgBkyMzK0.cer (raw, json) Hash identifier: Ax5zcxmh3Xe8LZGHjfSyfGaXJAd9F0YrNcuI2uqtfiA= Subject key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3444B99EC3B5F974C548DC5672BDE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.68.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:44:4b:99:ec:3b:5f:97:4c:54:8d:c5:67:2b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:c8:78:62:1b:9e:06:4a:84:cd:6f:dd:9c: 58:0a:d7:59:9e:09:6a:b1:7b:a5:93:ef:1a:28:f9: 82:0a:e3:3e:8b:25:2c:68:4e:fd:c5:f6:b8:30:24: 58:3e:0d:ec:6a:9c:75:a2:6f:64:8a:b5:55:63:e7: c2:01:16:86:8f:a8:00:49:e8:28:b2:61:78:9e:6b: 85:a5:19:f4:93:54:56:91:09:ea:35:72:60:2a:7e: af:c4:8f:1d:03:30:96:af:e3:5a:4a:17:0a:ad:31: 94:da:a7:6e:9c:15:c0:14:b6:17:95:02:64:e6:59: 0f:c6:9d:03:1a:2a:cd:70:9c:40:d0:1c:ec:13:46: 53:df:51:b8:37:59:9e:f5:c8:4f:d5:79:a1:57:0b: e3:f8:97:75:3c:66:62:94:64:50:9f:97:b2:9e:6e: 36:1d:85:8f:7d:77:dd:85:2e:6c:56:14:7f:79:2a: f9:c4:ba:b8:17:04:a6:bf:d5:e0:d6:41:f7:ae:02: 55:1c:a0:e7:fd:19:02:51:1a:fb:ae:97:2e:97:76: f5:8f:18:a1:86:b9:c8:f1:d2:d5:e1:03:43:63:ba: 9d:27:d4:b0:0b:6a:ae:51:e1:00:27:56:bd:5b:b8: d2:78:7a:4d:a2:a7:af:ed:6f:7e:4e:f7:a0:33:ba: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.68.0/24 Signature Algorithm: sha256WithRSAEncryption 10:0c:68:36:fb:f5:35:35:87:1b:bc:53:4c:30:dd:ef:77:cb: 48:fb:a3:ed:bd:b1:3f:05:6e:5c:78:ac:60:15:67:e4:25:f6: 36:ae:18:4e:c9:70:e2:3f:86:de:21:84:28:d4:7c:39:be:bc: a1:b6:54:d3:d2:ec:a6:f4:b5:16:f8:a9:16:b9:a1:e9:b2:89: 88:49:cd:44:49:f8:d2:7d:cb:19:01:62:20:fd:ee:06:81:a9: c1:c9:10:35:21:b5:05:e3:a9:4d:73:03:da:66:59:c7:4b:a2: e9:51:c4:60:b2:6f:29:1d:4a:ef:e2:62:12:b7:9f:77:24:bf: ad:0d:0b:a5:75:2e:46:20:23:45:b0:c3:41:11:64:c8:e7:82: 4b:e3:45:fb:69:5f:09:25:63:7e:21:c6:20:1f:f8:fb:b9:ff: 11:b9:b8:08:45:db:16:ee:a3:3a:36:ff:a9:67:9c:e5:f3:f3: f6:f0:54:53:4d:b2:c2:55:a2:56:b0:74:74:aa:4d:d3:4e:36: 63:bf:dc:91:48:0b:81:dd:8b:5a:44:76:2e:47:8a:5c:cf:a8: be:23:b7:c7:cd:2f:94:a3:9d:68:12:59:50:ba:6b:29:c3:32: b8:9d:0c:a3:84:b6:40:ef:a3:76:aa:50:6b:b1:4c:4c:ca:1c: 20:a3:b5:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o0RLmew7X5dMVI3FZyveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmEwMTcxYTAyZDVlNGE3NWZiNDA2MzU1NDVhZTAwNjRjOGNjY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7jIeGIbngZKhM1v3ZxYCtdZnglq sXulk+8aKPmCCuM+iyUsaE79xfa4MCRYPg3sapx1om9kirVVY+fCARaGj6gASego smF4nmuFpRn0k1RWkQnqNXJgKn6vxI8dAzCWr+NaShcKrTGU2qdunBXAFLYXlQJk 5lkPxp0DGirNcJxA0BzsE0ZT31G4N1me9chP1XmhVwvj+Jd1PGZilGRQn5eynm42 HYWPfXfdhS5sVhR/eSr5xLq4FwSmv9Xg1kH3rgJVHKDn/RkCURr7rpcul3b1jxih hrnI8dLV4QNDY7qdJ9SwC2quUeEAJ1a9W7jSeHpNoqev7W9+TvegM7oWlQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMugFxoC1eSnX7QGNVRa4AZMjMytMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzY1NDQz My1lMzIwLTQyYWUtYmI2MS01NzBiMTQ4MzM1MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvNjU0NDMz LWUzMjAtNDJhZS1iYjYxLTU3MGIxNDgzMzUzNC8xL3k2QVhHZ0xWNUtkZnRBWTFW RnJnQmt5TXpLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VEMA0GCSqGSIb3DQEBCwUAA4IBAQAQDGg2 +/U1NYcbvFNMMN3vd8tI+6PtvbE/BW5ceKxgFWfkJfY2rhhOyXDiP4beIYQo1Hw5 vryhtlTT0uym9LUW+KkWuaHpsomISc1ESfjSfcsZAWIg/e4GganByRA1IbUF46lN cwPaZlnHS6LpUcRgsm8pHUrv4mISt593JL+tDQuldS5GICNFsMNBEWTI54JL40X7 aV8JJWN+IcYgH/j7uf8RubgIRdsW7qM6Nv+pZ5zl8/P28FRTTbLCVaJWsHR0qk3T TjZjv9yRSAuB3YtaRHYuR4pcz6i+I7fHzS+Uo51oEllQumspwzK4nQyjhLZA76N2 qlBrsUxMyhwgo7Va -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:06 2026 by rpki-client