This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer File: y9dX6ROqzkNObdbW1Qp-33LOiIw.cer (raw, json) Hash identifier: bmBEGGHpKWeKEma83Qkrxl8vATv6aHtKmvPqV1Fnip0= Subject key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101FBEEE1BBBB4EC32795B0BCD05D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205099 IP: 185.194.202.0/23 IP: 185.230.80.0/22 IP: 2a0c:900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:be:ee:1b:bb:b4:ec:32:79:5b:0b:cd:05:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d2:d1:f7:de:4a:8e:ab:d6:85:ac:b7:22:f2: 87:79:31:61:6e:6e:be:32:91:2c:7d:a6:1e:73:ed: c5:cc:0c:81:32:32:31:6e:ac:2c:be:5c:a9:a0:a4: 30:7f:05:17:7e:56:46:60:8c:84:47:d1:cb:0a:d1: 09:e9:6c:97:4f:6c:66:76:60:0b:ce:bf:ac:f1:c4: 55:3c:d6:c1:0a:f5:c5:20:c5:d8:13:f2:9f:8b:ea: a3:87:35:fd:17:5d:38:dc:8f:11:35:ad:95:b1:73: 10:0e:c2:e4:66:f2:4b:21:9c:61:ed:46:07:43:7c: 0f:d5:d1:f9:5a:07:7d:25:7b:60:d7:b2:88:76:70: cf:27:36:4d:08:82:81:78:5f:5a:a5:04:9a:8b:71: 10:aa:e2:ce:e3:f2:5d:af:f4:64:82:7f:3f:bd:03: 38:65:04:b5:53:f4:26:ca:06:be:30:d0:f3:f9:89: 4d:d3:6c:9a:e5:d9:cd:de:e8:aa:4e:cb:c0:19:48: ef:74:01:c0:5b:ac:4f:76:2b:19:85:01:54:9a:17: a8:10:96:3f:41:d0:cd:d9:8d:ae:28:ce:d4:ba:3f: bc:d7:0b:32:3a:03:9e:c3:2b:2d:d9:39:f5:64:f5: 97:db:86:58:ab:4e:45:35:dd:8e:6c:c4:90:2c:ab: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.202.0/23 185.230.80.0/22 IPv6: 2a0c:900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205099 Signature Algorithm: sha256WithRSAEncryption 11:43:55:c4:6e:99:91:75:03:1f:b8:2a:63:f9:b2:89:1d:79: e3:d0:08:c7:a1:75:3e:29:cf:fb:bc:c1:94:5d:05:4e:e0:56: b1:f7:ad:1c:12:fc:41:2f:27:fe:84:c7:a5:c3:21:de:19:08: ac:35:fc:36:a9:01:df:e8:b1:94:6c:80:39:62:df:47:fe:20: f3:c3:14:41:10:ca:4a:c8:7e:8f:bc:90:e1:7b:05:81:06:c6: 1f:4b:35:8c:c2:49:1e:f5:20:45:3c:51:60:b6:f4:55:8c:90: a1:82:f4:fe:dd:d6:3f:4e:e7:d7:65:f8:e3:ce:3c:c0:34:e2: 87:d4:78:a5:2b:f7:c2:b2:62:e5:28:3e:ca:22:17:09:a2:69: 5c:83:2b:0b:4b:bc:af:10:4e:d2:32:60:08:33:ef:bd:bf:c6: 3b:c2:fa:6b:fe:5b:e0:d2:d3:05:f5:0a:91:77:06:b0:9d:95: 6b:ae:6c:bf:14:86:5d:f4:5a:48:74:63:96:c5:f0:fd:29:8d: 12:40:f6:61:ba:12:90:f4:d8:d2:84:7b:c4:17:12:23:11:e3: 90:4c:39:e8:80:4c:e7:80:50:0c:0e:8a:95:88:9c:7a:4c:77: 7b:1f:e9:68:a3:9f:41:52:b7:c3:52:ab:d5:8b:fa:73:02:c3: 9e:6e:a5:d5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EB++7hu7tOwyeVsLzQXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ3NTdlOTEzYWFjZTQzNGU2ZGQ2ZDZkNTBhN2VkZjcyY2U4ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NLR995KjqvWhay3IvKHeTFhbm6+ MpEsfaYec+3FzAyBMjIxbqwsvlypoKQwfwUXflZGYIyER9HLCtEJ6WyXT2xmdmAL zr+s8cRVPNbBCvXFIMXYE/Kfi+qjhzX9F1043I8RNa2VsXMQDsLkZvJLIZxh7UYH Q3wP1dH5Wgd9JXtg17KIdnDPJzZNCIKBeF9apQSai3EQquLO4/Jdr/Rkgn8/vQM4 ZQS1U/Qmyga+MNDz+YlN02ya5dnN3uiqTsvAGUjvdAHAW6xPdisZhQFUmheoEJY/ QdDN2Y2uKM7Uuj+81wsyOgOewyst2Tn1ZPWX24ZYq05FNd2ObMSQLKtAiwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMvXV+kTqs5DTm3W1tUKft9yzoiMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2JkYzA5 YS0yYjJhLTQ3OTctYTI5Ni05Y2ZkZjNjMmIzNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYmRjMDlh LTJiMmEtNDc5Ny1hMjk2LTljZmRmM2MyYjM0OC8xL3k5ZFg2Uk9xemtOT2JkYlcx UXAtMzNMT2lJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBucLKAwQCueZQMA0EAgACMAcDBQMqDAkAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhKzANBgkqhkiG9w0BAQsFAAOCAQEAEUNV xG6ZkXUDH7gqY/myiR1549AIx6F1PinP+7zBlF0FTuBWsfetHBL8QS8n/oTHpcMh 3hkIrDX8NqkB3+ixlGyAOWLfR/4g88MUQRDKSsh+j7yQ4XsFgQbGH0s1jMJJHvUg RTxRYLb0VYyQoYL0/t3WP07n12X44848wDTih9R4pSv3wrJi5Sg+yiIXCaJpXIMr C0u8rxBO0jJgCDPvvb/GO8L6a/5b4NLTBfUKkXcGsJ2Va65svxSGXfRaSHRjlsXw /SmNEkD2YboSkPTY0oR7xBcSIxHjkEw56IBM54BQDA6KlYicekx3ex/paKOfQVK3 w1Kr1Yv6cwLDnm6l1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:37 2026 by rpki-client