This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer (raw, json) Hash identifier: ZiwRXwUtCXlmeblwkUa5nOOXGwlNpFeh9W9wG9YBNEg= Subject key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B782DA52DF64D807174396780F2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216438 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b7:82:da:52:df:64:d8:07:17:43:96:78:0f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:08:c5:c0:10:93:b7:b0:f3:fd:4f:6a:17: 38:6c:6b:26:75:e0:fb:73:f5:3f:d2:e2:2b:ce:da: d3:fd:d2:17:61:b0:a6:b0:ff:03:73:de:7d:81:ed: f9:58:94:18:95:4c:7d:49:9b:2c:3c:81:79:c0:cc: 71:59:be:3c:c8:75:59:97:50:53:11:95:ac:c3:fc: 24:56:86:ea:4d:a7:3b:d8:9b:8c:05:e1:9e:72:4c: 1d:72:2b:a5:2c:30:8e:a1:be:13:fb:45:59:94:17: a9:78:ed:ed:1c:b4:75:f6:62:21:2e:98:1c:8e:f1: df:d8:b1:ec:21:08:18:09:3c:d4:14:5c:df:b0:08: ab:48:23:ce:b3:ab:3c:24:32:a9:0e:60:08:03:de: da:74:02:95:09:bf:36:15:80:88:62:be:89:2f:5b: 8f:a0:1a:f3:15:5c:3b:5a:9a:b2:70:4a:f6:12:1c: d1:17:00:c5:b7:6b:c8:b2:8f:3b:1d:8f:5f:85:6d: a7:00:64:a1:9e:77:b3:90:f6:32:23:a9:40:3a:1b: 79:6a:93:b0:00:ff:af:87:f6:7e:42:db:9e:23:76: d0:28:82:08:2b:f4:42:86:95:20:b6:c5:77:c1:6f: ac:c5:35:aa:16:24:8d:73:89:c0:18:25:02:c8:d6: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216438 Signature Algorithm: sha256WithRSAEncryption 02:29:65:f8:67:18:f7:2e:cf:78:5d:29:b8:73:95:16:35:0b: 09:db:9f:34:fd:b2:0d:5e:0c:ea:3e:b6:0a:82:94:4d:b2:62: 1b:33:4a:ff:d8:63:10:55:32:49:e2:d9:7d:bf:d5:f2:e8:2d: 98:b2:24:03:67:8e:d3:6b:55:a4:90:9e:c6:cd:5d:1b:ad:63: df:29:14:da:03:75:6c:6e:b4:03:0f:1a:ee:4d:da:d1:68:6b: 56:35:9f:e7:c0:05:13:fa:95:ee:de:e2:05:1f:5a:ef:63:7b: 3c:1b:45:a8:16:df:7f:9c:6c:71:f7:8f:5e:3d:f1:79:a7:fc: 66:fa:8f:08:45:2e:b0:33:83:43:9c:f6:c8:2c:3b:c8:73:ee: d5:cc:1d:4c:5e:7d:f7:72:fe:15:c6:33:75:a6:e6:17:5b:2d: f2:94:a8:3f:cc:1c:d6:d0:e1:bc:d3:f4:d0:cb:f3:f4:a8:89: 41:a4:1c:8c:1d:a2:8e:ac:a5:47:eb:e7:e4:3b:1f:91:c3:60: 9a:2b:35:d5:ff:1b:80:bf:97:ef:cc:66:76:f0:e3:0c:c9:93: e4:b2:f1:22:95:00:d6:be:a8:5b:e8:ec:a4:69:85:8c:ae:04: 5e:33:10:be:92:47:1a:e4:18:58:fb:a9:15:89:21:29:b9:df: 41:3c:fb:5d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yLeC2lLfZNgHF0OWeA8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmM4YzA2NDZlYjZjYmYyNjk4YmIwYTc2MDUwM2JjZGI5MWYxYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9gIxcAQk7ew8/1Pahc4bGsmdeD7 c/U/0uIrztrT/dIXYbCmsP8Dc959ge35WJQYlUx9SZssPIF5wMxxWb48yHVZl1BT EZWsw/wkVobqTac72JuMBeGeckwdciulLDCOob4T+0VZlBepeO3tHLR19mIhLpgc jvHf2LHsIQgYCTzUFFzfsAirSCPOs6s8JDKpDmAIA97adAKVCb82FYCIYr6JL1uP oBrzFVw7WpqycEr2EhzRFwDFt2vIso87HY9fhW2nAGShnnezkPYyI6lAOht5apOw AP+vh/Z+QtueI3bQKIIIK/RChpUgtsV3wW+sxTWqFiSNc4nAGCUCyNaJQwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMvIwGRutsvyaYuwp2BQO825HxpcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzM3ZDkz ZS1mNWRhLTRlY2YtYTdhOC05MDhlOGIyNzg1NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvMzdkOTNl LWY1ZGEtNGVjZi1hN2E4LTkwOGU4YjI3ODU1Mi8xL3k4akFaRzYyeV9KcGk3Q25Z RkE3emJrZkdsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNdjANBgkqhkiG9w0BAQsFAAOCAQEAAill+GcY9y7P eF0puHOVFjULCdufNP2yDV4M6j62CoKUTbJiGzNK/9hjEFUySeLZfb/V8ugtmLIk A2eO02tVpJCexs1dG61j3ykU2gN1bG60Aw8a7k3a0WhrVjWf58AFE/qV7t7iBR9a 72N7PBtFqBbff5xscfePXj3xeaf8ZvqPCEUusDODQ5z2yCw7yHPu1cwdTF5993L+ FcYzdabmF1st8pSoP8wc1tDhvNP00Mvz9KiJQaQcjB2ijqylR+vn5DsfkcNgmis1 1f8bgL+X78xmdvDjDMmT5LLxIpUA1r6oW+jspGmFjK4EXjMQvpJHGuQYWPupFYkh KbnfQTz7XQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:46 2026 by rpki-client