This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer File: yErFLitXLMKpmnQSV-VpqjceNWg.cer (raw, json) Hash identifier: iRfex7u5OSm75apuTyBNTg65/wVPJx3C1h6tNNFSSeo= Subject key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4F283A05078B8EB448C3E1DD8C755 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196651 IP: 195.246.244.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f2:83:a0:50:78:b8:eb:44:8c:3e:1d:d8:c7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:01:b5:74:73:ea:5b:aa:62:02:47:6a:ee:80: c5:76:2c:8d:81:7f:27:56:64:5c:5b:8d:34:27:e5: 25:18:c1:ec:71:3d:e4:66:31:ad:b6:69:cd:87:dd: e0:ad:ec:76:a6:f3:1e:74:27:ef:34:ad:5c:8f:78: 37:7c:35:2c:0c:11:ae:c5:a9:40:9d:88:22:e7:a8: 68:1f:71:44:b0:a4:1b:13:10:2f:fd:b2:f7:18:96: 72:32:a1:3a:17:b9:eb:25:19:43:fc:5a:3b:03:3a: fd:03:6c:52:34:78:ae:51:ce:cb:b8:f2:d2:20:b6: d9:cb:de:6a:27:64:c1:cf:d2:a8:35:e7:7a:ef:90: 56:64:93:c5:ab:c8:93:95:35:df:23:db:2c:f4:ca: c3:c0:35:12:f8:2c:64:c0:41:da:7f:75:fa:48:6e: 06:52:7b:ea:02:50:59:4d:ae:7b:ac:df:8c:fd:85: d0:c0:ec:64:b2:ec:7f:28:b6:7f:f6:6c:3d:23:11: 64:e6:44:88:0d:09:4e:03:b9:fb:fb:73:8e:51:80: 19:60:6c:01:d8:6d:d1:21:0f:35:75:05:86:dd:1a: 2d:c3:26:2b:4b:84:26:37:80:41:4f:7a:fc:e8:87: 20:0f:61:ad:9a:c9:eb:41:5b:0b:28:c7:95:d2:9d: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.244.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196651 Signature Algorithm: sha256WithRSAEncryption 29:db:d1:a9:e0:20:f4:af:78:38:bf:31:09:53:f1:cf:51:c9: 36:4d:a3:b1:0e:ae:3f:32:c2:de:ec:8a:c4:95:53:02:dd:a3: 49:f6:b5:cb:f6:1e:ad:69:6f:be:6d:d9:62:fb:05:ed:ba:05: 71:f7:d1:81:cf:7a:6c:fa:8e:c2:3a:a2:86:46:e3:66:5b:6f: 3b:85:0f:df:b5:c7:19:9e:b2:78:68:18:0a:3c:2f:37:e6:0a: 86:20:7b:f3:bd:24:d4:b1:2d:83:83:23:d5:49:bf:84:b1:3f: 1e:19:fe:cd:e2:e0:71:97:ec:a9:7a:ed:d7:1b:59:22:3a:5a: 1d:9d:9e:8c:d7:c6:1b:86:ec:e7:87:b9:87:4f:d1:ae:e6:d0: ef:3b:3c:c0:99:3b:ad:1f:7e:ff:8c:4e:ae:f2:14:16:35:e0: 71:7d:d3:81:bf:09:de:2b:09:6c:0e:2f:78:95:b9:62:d8:04: 32:b2:3d:84:eb:73:a3:0f:d8:59:ad:ee:6c:f1:5b:e0:fc:c7: c8:56:c0:11:49:bd:18:b4:f2:e6:c8:b4:48:20:83:29:e1:2d: 73:31:bc:dd:7e:64:31:45:7c:43:fe:a5:84:0b:1f:21:3e:d2: 4d:69:36:ab:8c:63:87:6d:50:9a:fa:2b:b4:07:a8:d3:64:9b: 43:c5:e0:1b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pPKDoFB4uOtEjD4d2MdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODRhYzUyZTJiNTcyY2MyYTk5YTc0MTI1N2U1NjlhYTM3MWUzNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AG1dHPqW6piAkdq7oDFdiyNgX8n VmRcW400J+UlGMHscT3kZjGttmnNh93grex2pvMedCfvNK1cj3g3fDUsDBGuxalA nYgi56hoH3FEsKQbExAv/bL3GJZyMqE6F7nrJRlD/Fo7Azr9A2xSNHiuUc7LuPLS ILbZy95qJ2TBz9KoNed675BWZJPFq8iTlTXfI9ss9MrDwDUS+CxkwEHaf3X6SG4G UnvqAlBZTa57rN+M/YXQwOxksux/KLZ/9mw9IxFk5kSIDQlOA7n7+3OOUYAZYGwB 2G3RIQ81dQWG3RotwyYrS4QmN4BBT3r86IcgD2GtmsnrQVsLKMeV0p2wHQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMhKxS4rVyzCqZp0Elflaao3HjVoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2FiZGFm Yy1iMzg5LTQ1MTgtYjEyZC0yY2MzNDJiMDA1MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvYWJkYWZj LWIzODktNDUxOC1iMTJkLTJjYzM0MmIwMDUxOS8xL3lFckZMaXRYTE1LcG1uUVNW LVZwcWpjZU5XZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw/b0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMAKzANBgkqhkiG9w0BAQsFAAOCAQEAKdvRqeAg9K94OL8xCVPxz1HJNk2jsQ6u PzLC3uyKxJVTAt2jSfa1y/YerWlvvm3ZYvsF7boFcffRgc96bPqOwjqihkbjZltv O4UP37XHGZ6yeGgYCjwvN+YKhiB7870k1LEtg4Mj1Um/hLE/Hhn+zeLgcZfsqXrt 1xtZIjpaHZ2ejNfGG4bs54e5h0/RrubQ7zs8wJk7rR9+/4xOrvIUFjXgcX3Tgb8J 3isJbA4veJW5YtgEMrI9hOtzow/YWa3ubPFb4PzHyFbAEUm9GLTy5si0SCCDKeEt czG83X5kMUV8Q/6lhAsfIT7STWk2q4xjh21QmvortAeo02SbQ8XgGw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:29 2026 by rpki-client