This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer File: yDOgOJWSdW5BXN40irvCQxKwLfY.cer (raw, json) Hash identifier: xPBurCd5eTEy9QvzyKolHaZDatrIVufYOOxtFbqRdLQ= Subject key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910DA6D8337B1F785FCD93FCB90E7B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204254 IP: 2001:67c:754::/48 IP: 2001:67c:758::/48 IP: 2001:67c:75c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:da:6d:83:37:b1:f7:85:fc:d9:3f:cb:90:e7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c833a0389592756e415cde348abbc24312b02df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:6b:7c:91:a7:a4:d1:17:1b:7a:b6:1a:d4: d9:a3:a1:93:f1:9c:0b:60:54:c5:7a:fc:a8:87:a4: 88:e4:be:42:53:1d:65:88:a9:c2:0e:1f:d3:7c:d8: 96:b7:e1:f8:26:c1:d2:30:6c:e7:e5:b4:0b:8a:5f: 3d:95:d8:60:09:f9:16:cd:20:3e:15:b9:ca:05:cd: 6e:04:8c:f6:f3:64:75:f7:e8:f7:cd:da:e5:cd:22: 85:0f:69:32:0e:5c:74:b8:b3:44:d5:e7:61:94:93: 27:3c:ae:7e:17:3e:31:a5:8a:6f:98:13:75:3c:d8: ef:e4:c4:52:b8:67:10:bf:2a:fd:c6:bc:1c:25:17: cb:ec:82:96:47:5e:2a:69:7b:a3:9f:0f:90:9d:60: 06:83:01:62:ea:1c:fa:85:8c:87:d6:5f:5c:f3:1e: 66:e4:8b:60:59:40:ac:6c:67:93:3f:2b:0a:db:ef: 63:a2:63:f5:a8:82:81:01:31:e4:ed:15:40:6a:00: 14:95:45:de:10:48:a4:60:39:f8:28:6c:40:e9:a9: f0:e1:62:ec:c5:5a:43:67:0a:e4:52:81:34:94:99: 16:9b:9c:f8:bc:62:4a:93:36:22:6a:89:47:a0:92: 5b:ef:b7:87:0f:52:a3:77:36:ff:25:a4:e2:ea:e2: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:754::/48 2001:67c:758::/48 2001:67c:75c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204254 Signature Algorithm: sha256WithRSAEncryption 33:3b:db:7f:08:73:7c:47:10:45:06:e5:5d:04:5a:db:15:08: 14:a5:04:d7:e3:1c:fc:ba:6a:9a:af:0f:1e:b2:38:5c:87:ef: 43:7a:02:6d:b7:d3:3b:90:de:3a:56:9d:4e:50:b2:7d:08:42: 2f:b4:e7:de:64:6b:8e:0b:51:de:75:a5:c4:15:88:0a:ce:be: ab:51:4f:ce:7f:8e:4d:58:ac:7a:58:b6:ac:0a:ec:5e:f1:4c: e9:67:e0:5f:68:9d:68:93:98:b7:f0:02:5f:12:10:a4:01:41: ad:2f:6e:c2:7e:57:d6:95:29:34:6b:7a:f8:51:74:0c:4d:89: 50:14:57:9d:0b:4a:ed:81:68:5d:94:95:97:c8:c3:26:31:a3: 3a:29:69:f7:c9:94:69:dd:7c:4a:41:41:07:59:ab:f7:0b:95: 4c:5f:7f:69:73:d7:79:15:40:b6:58:ff:ee:8d:5a:66:a9:2f: 69:8d:21:42:a3:ec:02:3f:23:6b:5f:66:91:8f:4a:b1:1a:12: 6f:11:45:b3:37:84:29:24:38:fb:35:bf:42:b7:68:ab:41:ea: 49:c7:86:de:b8:9f:b8:bd:a0:d7:de:c3:fa:1b:d0:fd:37:a0: 92:9c:c8:c6:77:2a:bf:ee:37:16:15:c0:66:f6:4e:07:8d:5c: c1:87:58:c1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5ENptgzex94X82T/LkOewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODMzYTAzODk1OTI3NTZlNDE1Y2RlMzQ4YWJiYzI0MzEyYjAyZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+5rfJGnpNEXG3q2GtTZo6GT8ZwL YFTFevyoh6SI5L5CUx1liKnCDh/TfNiWt+H4JsHSMGzn5bQLil89ldhgCfkWzSA+ FbnKBc1uBIz282R19+j3zdrlzSKFD2kyDlx0uLNE1edhlJMnPK5+Fz4xpYpvmBN1 PNjv5MRSuGcQvyr9xrwcJRfL7IKWR14qaXujnw+QnWAGgwFi6hz6hYyH1l9c8x5m 5ItgWUCsbGeTPysK2+9jomP1qIKBATHk7RVAagAUlUXeEEikYDn4KGxA6anw4WLs xVpDZwrkUoE0lJkWm5z4vGJKkzYiaolHoJJb77eHD1Kjdzb/JaTi6uKngQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMgzoDiVknVuQVzeNIq7wkMSsC32MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2NlY2Qz YS1lOTJhLTQ1MDktYjU5MC05ZjMwNzU3NDA1MWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvY2VjZDNh LWU5MmEtNDUwOS1iNTkwLTlmMzA3NTc0MDUxZS8xL3lET2dPSldTZFc1QlhONDBp cnZDUXhLd0xmWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGfAdUAwcAIAEGfAdYAwcAIAEGfAdcMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMd3jANBgkqhkiG9w0BAQsFAAOCAQEAMzvb fwhzfEcQRQblXQRa2xUIFKUE1+Mc/Lpqmq8PHrI4XIfvQ3oCbbfTO5DeOladTlCy fQhCL7Tn3mRrjgtR3nWlxBWICs6+q1FPzn+OTViseli2rArsXvFM6WfgX2idaJOY t/ACXxIQpAFBrS9uwn5X1pUpNGt6+FF0DE2JUBRXnQtK7YFoXZSVl8jDJjGjOilp 98mUad18SkFBB1mr9wuVTF9/aXPXeRVAtlj/7o1aZqkvaY0hQqPsAj8ja19mkY9K sRoSbxFFszeEKSQ4+zW/Qrdoq0HqSceG3rifuL2g197D+hvQ/TegkpzIxncqv+43 FhXAZvZOB41cwYdYwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:57 2026 by rpki-client