This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer File: yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer (raw, json) Hash identifier: pm+xef8zMUdB5StcvdveF7UGZr5gltU07ZSOJsmAX+w= Subject key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB66417AA0213B868BAC6BA2A985C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197717 IP: 193.200.54.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b6:64:17:aa:02:13:b8:68:ba:c6:ba:2a:98:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c83c4c9d2fce61665165c05a101e815047b64f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:28:e9:0d:4c:25:26:fc:7e:74:e5:21:e8: c4:40:b7:80:60:d5:98:d1:ca:89:7e:10:6c:13:30: 78:97:33:9f:18:a2:3d:17:6b:a6:6b:1b:63:36:17: aa:30:e0:31:ae:27:42:f8:11:21:7a:d5:dd:f6:ab: 6f:ce:1c:7e:8c:16:2f:d9:22:e3:c3:d9:82:18:82: 63:50:c6:f7:83:ed:89:2b:46:42:35:72:af:64:21: a0:81:e9:34:d5:c4:87:b0:4c:3b:c7:fa:22:05:63: db:52:dd:5e:52:3c:a2:b3:c8:36:94:24:4f:1b:b0: 37:15:22:4f:94:62:83:24:36:37:92:b3:59:34:d1: 85:b1:01:27:8a:1a:51:cb:dc:2d:03:b8:7b:4f:b6: 7b:67:9c:4f:17:19:cb:a6:71:6b:7b:d7:c3:e4:d6: 5c:07:c7:8e:5a:7e:40:2b:89:11:6b:c1:8a:0a:59: 54:10:e6:51:41:d1:5a:ed:f9:55:0c:01:fa:0e:03: ab:87:ce:95:29:22:70:df:3d:b3:30:fa:05:7e:ce: 35:e5:d0:cd:7d:a7:e2:80:84:e7:f0:dd:a9:0b:76: 96:79:84:b7:fd:6b:50:21:c6:3a:be:66:16:0b:41: e2:9b:bd:ff:89:53:82:b7:b6:9e:69:ab:ae:b6:f3: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.54.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197717 Signature Algorithm: sha256WithRSAEncryption 8a:37:39:9a:b6:16:6f:f0:f0:61:75:90:3b:cd:94:bd:c7:9a: 1d:bb:e9:da:ab:26:fd:b7:ec:8f:68:9c:6d:14:39:a0:39:43: 29:de:af:85:6a:3e:bb:28:c0:3f:1e:52:89:97:95:93:ba:c6: 05:ae:08:aa:3e:63:5e:26:b0:f7:27:32:58:ae:07:71:de:71: 43:dc:02:33:45:7c:1a:b0:23:8b:21:a1:e5:21:6f:18:13:17: c5:6f:6a:96:1d:e7:73:13:33:f5:87:33:64:2f:34:cb:fc:1a: 6c:ac:30:cd:4c:d6:56:a3:4b:7c:90:dd:4e:1c:12:2d:48:d3: 69:71:93:6e:63:6f:13:c8:be:0d:16:09:5b:fc:ec:be:40:14: 95:cc:66:b6:29:6e:69:b3:38:91:b1:0f:d9:dc:9c:ac:cf:6d: 25:45:40:6c:70:3f:f8:ec:89:29:6e:f6:bc:bf:54:8d:39:60: 9c:22:52:9e:7f:86:96:42:ed:fd:ab:86:85:ce:c2:6a:9f:a3: c6:eb:ed:b7:3a:fa:5a:73:a9:26:78:57:9d:da:5a:07:29:df: 75:84:e1:fe:52:51:24:5a:41:73:c3:ce:b9:93:4a:21:6f:1a: af:0a:92:8b:f3:65:4b:bc:04:a1:93:8c:78:f6:75:a5:81:60: d9:c1:de:3c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XLZkF6oCE7housa6KphcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODNjNGM5ZDJmY2U2MTY2NTE2NWMwNWExMDFlODE1MDQ3YjY0ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqQo6Q1MJSb8fnTlIejEQLeAYNWY 0cqJfhBsEzB4lzOfGKI9F2umaxtjNheqMOAxridC+BEhetXd9qtvzhx+jBYv2SLj w9mCGIJjUMb3g+2JK0ZCNXKvZCGggek01cSHsEw7x/oiBWPbUt1eUjyis8g2lCRP G7A3FSJPlGKDJDY3krNZNNGFsQEnihpRy9wtA7h7T7Z7Z5xPFxnLpnFre9fD5NZc B8eOWn5AK4kRa8GKCllUEOZRQdFa7flVDAH6DgOrh86VKSJw3z2zMPoFfs415dDN fafigITn8N2pC3aWeYS3/WtQIcY6vmYWC0Him73/iVOCt7aeaauutvMWPQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMg8TJ0vzmFmUWXAWhAegVBHtk9qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzY3NDQw OC00MTYzLTRlN2UtYWFiOS00MmVmMzNhMjZlNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNjc0NDA4 LTQxNjMtNGU3ZS1hYWI5LTQyZWYzM2EyNmU2Ni8xL3lEeE1uU19PWVdaUlpjQmFF QjZCVUVlMlQyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwcg2MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEVTANBgkqhkiG9w0BAQsFAAOCAQEAijc5mrYWb/DwYXWQO82UvceaHbvp2qsm /bfsj2icbRQ5oDlDKd6vhWo+uyjAPx5SiZeVk7rGBa4Iqj5jXiaw9ycyWK4Hcd5x Q9wCM0V8GrAjiyGh5SFvGBMXxW9qlh3ncxMz9YczZC80y/wabKwwzUzWVqNLfJDd ThwSLUjTaXGTbmNvE8i+DRYJW/zsvkAUlcxmtiluabM4kbEP2dycrM9tJUVAbHA/ +OyJKW72vL9UjTlgnCJSnn+GlkLt/auGhc7Cap+jxuvttzr6WnOpJnhXndpaBynf dYTh/lJRJFpBc8POuZNKIW8arwqSi/NlS7wEoZOMePZ1pYFg2cHePA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:07 2026 by rpki-client