This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer File: yABBYZAh42MorViY6Jl4cEa48Pk.cer (raw, json) Hash identifier: Jzo7JbKQFKERBb6X/GCwLERtm90ziIJ2DldnaeGp+o4= Subject key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791123C7C41AC070FA1E59BC211EF6BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47411 IP: 195.43.152.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:23:c7:c4:1a:c0:70:fa:1e:59:bc:21:1e:f6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c80041619021e36328ad5898e899787046b8f0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:c8:b2:c8:90:09:8e:40:40:35:6c:6f:d7: 01:41:d5:2b:ae:e6:7f:73:bb:09:11:2d:97:72:b6: 39:16:40:a9:67:12:05:64:91:54:50:db:29:55:e2: 3b:fa:74:0e:3d:7f:70:77:9c:b0:8f:15:bc:a0:7f: df:f5:01:4d:28:ea:94:bf:e3:be:43:0a:2d:36:23: 5b:0f:f1:bb:a2:45:7a:ea:e7:bb:9c:61:7d:da:a3: 38:1f:d9:5f:bf:82:bd:79:61:29:60:b7:8d:6a:1b: ed:91:3a:1d:b4:8a:f9:e1:13:33:d7:0e:86:d6:8a: d9:2c:96:e2:e7:dd:bc:80:b7:14:aa:49:f1:26:2f: 6c:db:37:41:7e:61:91:da:6c:9a:a6:1f:42:38:c5: c8:ec:63:1d:1b:60:1c:20:b0:c2:35:e5:51:3c:70: 2d:c1:a8:29:30:6e:80:18:8f:b2:24:69:01:77:82: 14:2e:8e:53:71:1d:b1:4a:09:c0:71:a9:05:da:41: f0:99:26:b2:d4:a1:e7:72:3d:75:0a:2c:eb:43:d6: 84:2e:df:64:11:52:0b:a4:a8:aa:60:8a:eb:aa:b6: c2:6f:a4:d6:62:42:c8:db:7d:11:22:0a:94:ef:e6: 30:f7:d8:d9:a3:7a:ac:79:d1:ee:9f:bb:b8:a5:f2: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.152.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47411 Signature Algorithm: sha256WithRSAEncryption 44:43:27:25:7a:8d:fa:8e:ab:02:ea:d8:47:69:59:d2:61:0c: da:c0:a3:52:fd:69:4d:37:34:63:fd:01:5c:36:ba:94:05:ee: 68:01:5a:9d:89:73:4f:a9:40:60:39:a2:75:af:f0:c9:dc:f0: 8e:bc:d1:0e:61:c5:64:ef:be:2a:24:64:1f:ae:3e:a4:1a:64: d7:92:39:88:58:5d:b4:78:b8:c2:cf:3a:c2:bd:95:5f:b2:3f: e9:c7:c5:cf:18:1b:a3:20:89:a1:2c:ae:db:68:81:51:f5:42: f3:2c:16:4f:f2:16:f9:87:b8:b3:1c:33:d4:89:54:30:b2:1d: 8d:4f:a3:b9:56:dd:41:5f:02:0a:6b:ca:30:86:bd:ea:db:7c: 1a:39:0f:18:9a:9f:08:e8:a4:06:62:3e:e3:0a:bc:26:87:9a: 39:cc:1b:2e:69:86:98:9d:0f:ff:6e:3b:10:88:36:20:4c:2d: d2:93:51:4b:a8:39:63:c6:a8:c1:af:8b:22:b6:ae:ab:e4:ea: 26:df:1d:eb:35:5d:1b:d9:e1:a0:c5:24:d0:9f:9e:d1:5b:98: 4b:42:80:a3:9b:e8:46:7f:05:9b:c4:7d:89:18:53:fb:9a:d9: a6:37:93:de:c0:60:d2:d9:04:01:45:cd:bf:cc:29:50:f9:d3: 6d:4e:9f:7c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ESPHxBrAcPoeWbwhHva/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODAwNDE2MTkwMjFlMzYzMjhhZDU4OThlODk5Nzg3MDQ2YjhmMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSnIssiQCY5AQDVsb9cBQdUrruZ/ c7sJES2XcrY5FkCpZxIFZJFUUNspVeI7+nQOPX9wd5ywjxW8oH/f9QFNKOqUv+O+ QwotNiNbD/G7okV66ue7nGF92qM4H9lfv4K9eWEpYLeNahvtkTodtIr54RMz1w6G 1orZLJbi5928gLcUqknxJi9s2zdBfmGR2myaph9COMXI7GMdG2AcILDCNeVRPHAt wagpMG6AGI+yJGkBd4IULo5TcR2xSgnAcakF2kHwmSay1KHncj11CizrQ9aELt9k EVILpKiqYIrrqrbCb6TWYkLI230RIgqU7+Yw99jZo3qsedHun7u4pfJUkQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMgAQWGQIeNjKK1YmOiZeHBGuPD5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzY4NWM5 OS1jZmRmLTQyYTAtODQzNi1kMjk3ZGIyMzBhMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNjg1Yzk5 LWNmZGYtNDJhMC04NDM2LWQyOTdkYjIzMGExNC8xL3lBQkJZWkFoNDJNb3JWaVk2 Smw0Y0VhNDhQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwyuYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC5MzANBgkqhkiG9w0BAQsFAAOCAQEAREMnJXqN+o6rAurYR2lZ0mEM2sCjUv1p TTc0Y/0BXDa6lAXuaAFanYlzT6lAYDmida/wydzwjrzRDmHFZO++KiRkH64+pBpk 15I5iFhdtHi4ws86wr2VX7I/6cfFzxgboyCJoSyu22iBUfVC8ywWT/IW+Ye4sxwz 1IlUMLIdjU+juVbdQV8CCmvKMIa96tt8GjkPGJqfCOikBmI+4wq8JoeaOcwbLmmG mJ0P/247EIg2IEwt0pNRS6g5Y8aowa+LIrauq+TqJt8d6zVdG9nhoMUk0J+e0VuY S0KAo5voRn8Fm8R9iRhT+5rZpjeT3sBg0tkEAUXNv8wpUPnTbU6ffA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:11 2026 by rpki-client