This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer File: yCIG9QbIJusQV-XCabNxDjiraWw.cer (raw, json) Hash identifier: w5l6MBWUIlt5qGBdd1CLXdexOO8gUUIeA7Ko1IBwG2s= Subject key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CD5AA6A787B5FB41F402204088635 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.123.51.0/24 IP: 194.139.6.0/23 IP: 194.173.47.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d5:aa:6a:78:7b:5f:b4:1f:40:22:04:08:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c82206f506c826eb1057e5c269b3710e38ab696c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:49:4b:ca:7c:be:dd:37:00:ac:db:0e:3a: 01:b3:81:71:15:a2:19:f5:ef:03:89:47:6d:6b:0e: b9:81:b3:13:44:b2:c4:77:8a:fe:b3:3c:96:cd:13: 7b:82:ce:b1:b8:54:d9:06:ac:e0:4d:b7:cd:a9:7e: e3:00:1d:5b:d3:a1:df:49:f0:65:bd:e1:21:82:c8: a6:87:6f:07:b9:4e:ed:0c:1e:25:5d:48:93:11:f1: 2e:24:7d:96:e8:fd:41:45:37:d3:4b:ec:8e:ec:b8: 98:72:57:a3:6a:e1:56:4c:c9:9f:53:7b:08:09:ed: 56:fd:de:16:0b:f2:fd:ac:c7:bd:f4:f2:e3:c4:ba: 4d:c6:7d:8a:05:63:46:32:86:11:9c:02:92:16:4c: 8d:52:e5:83:66:c6:d8:13:85:46:5c:fa:32:84:0e: 19:12:2d:d0:90:1c:1a:43:7e:67:7a:8b:1b:1c:26: 07:1a:06:40:f6:ca:98:af:e5:48:15:83:26:bf:bc: 1a:e8:2f:4c:0c:d3:db:b6:b2:85:b3:4d:5d:d4:50: d2:5d:25:a9:03:88:2c:65:d4:ab:f2:2e:f4:8f:af: 60:32:6b:30:ba:4d:da:30:c8:78:f5:ff:81:77:c7: d3:7f:34:8f:23:94:a8:b9:3b:64:a1:49:97:78:95: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.123.51.0/24 194.139.6.0/23 194.173.47.0/24 Signature Algorithm: sha256WithRSAEncryption 89:99:b1:5a:41:b1:22:32:d2:e8:fc:c6:78:f4:1d:44:d5:07: 4b:d4:18:f0:95:7e:5c:bf:41:a0:93:21:b6:c6:7a:f6:6e:83: 73:7c:4e:a4:ea:a9:40:85:96:d4:e1:20:96:b6:d6:95:bb:3f: 2a:7a:ea:ec:87:6d:06:21:1d:95:5a:be:07:23:2a:8e:67:f9: 98:da:8f:f1:af:5f:fb:fd:b7:4b:f3:91:c2:6c:9d:52:82:a0: c4:0c:fd:85:7b:ed:6f:4c:c4:7b:23:8e:19:4d:31:ff:17:71: 28:8b:a6:6b:f1:cd:6c:73:d7:c1:68:23:0f:eb:b6:7f:99:ad: d1:18:b3:ff:46:1c:50:cf:21:bb:9d:e6:e7:e5:91:7b:88:12: c1:eb:46:02:f7:df:60:ef:bd:29:2f:ae:97:48:a1:8f:e8:3d: f5:f5:07:55:fc:50:c5:00:e7:b6:6f:f7:45:0a:51:25:07:91: 63:c3:7f:8e:81:a9:fe:5d:e2:70:72:32:11:5c:ab:d4:ce:7d: e0:89:de:e9:f4:16:7d:60:4c:25:19:69:00:62:97:2e:8b:18: 41:8e:37:91:18:c8:8e:3c:ba:d2:11:13:5f:03:c6:b1:a6:dd: cf:49:53:3b:9d:eb:50:bb:73:8e:c6:c5:54:fe:8e:5a:95:53: fe:99:5b:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt9XNWqanh7X7QfQCIECIY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODIyMDZmNTA2YzgyNmViMTA1N2U1YzI2OWIzNzEwZTM4YWI2OTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYlJS8p8vt03AKzbDjoBs4FxFaIZ 9e8DiUdtaw65gbMTRLLEd4r+szyWzRN7gs6xuFTZBqzgTbfNqX7jAB1b06HfSfBl veEhgsimh28HuU7tDB4lXUiTEfEuJH2W6P1BRTfTS+yO7LiYclejauFWTMmfU3sI Ce1W/d4WC/L9rMe99PLjxLpNxn2KBWNGMoYRnAKSFkyNUuWDZsbYE4VGXPoyhA4Z Ei3QkBwaQ35neosbHCYHGgZA9sqYr+VIFYMmv7wa6C9MDNPbtrKFs01d1FDSXSWp A4gsZdSr8i70j69gMmswuk3aMMh49f+Bd8fTfzSPI5SouTtkoUmXeJVfswIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFMgiBvUGyCbrEFflwmmzcQ44q2lsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzI5YjA4 Mi1kNmQxLTQxNDctYWYxYy02MWIwYzdmZjJlNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMjliMDgy LWQ2ZDEtNDE0Ny1hZjFjLTYxYjBjN2ZmMmU0ZS8xL3lDSUc5UWJJSnVzUVYtWENh Yk54RGppcmFXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAsHszAwQBwosGAwQAwq0vMA0GCSqGSIb3DQEB CwUAA4IBAQCJmbFaQbEiMtLo/MZ49B1E1QdL1BjwlX5cv0GgkyG2xnr2boNzfE6k 6qlAhZbU4SCWttaVuz8qeursh20GIR2VWr4HIyqOZ/mY2o/xr1/7/bdL85HCbJ1S gqDEDP2Fe+1vTMR7I44ZTTH/F3Eoi6Zr8c1sc9fBaCMP67Z/ma3RGLP/RhxQzyG7 nebn5ZF7iBLB60YC999g770pL66XSKGP6D319QdV/FDFAOe2b/dFClElB5Fjw3+O gan+XeJwcjIRXKvUzn3gid7p9BZ9YEwlGWkAYpcuixhBjjeRGMiOPLrSERNfA8ax pt3PSVM7netQu3OOxsVU/o5alVP+mVu3 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:49 2026 by rpki-client