This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer File: yGEQ5MdkHRgOjxkgrGX7788G18c.cer (raw, json) Hash identifier: a0Sj/C2OIikOKRe5Pwj1zae7X+mlv8jFEBkC7h3Koh4= Subject key identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1E0A964386B4D41DFA2D59E30D6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207635 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1e:0a:96:43:86:b4:d4:1d:fa:2d:59:e3:0d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:20:eb:54:4e:46:9b:8f:81:d0:be:b3:c4: 88:20:01:fd:3d:26:e6:8e:12:84:a5:78:6c:0f:c2: 33:18:58:b4:4a:c9:c3:5d:8e:39:9c:5b:fe:2b:06: 33:84:f7:21:56:c6:2b:72:5d:53:72:32:36:1c:11: cf:52:96:69:dd:66:fa:f9:5b:4c:81:2e:55:e0:f3: 1d:0b:57:4f:da:53:59:e9:e8:53:30:a5:3c:22:ec: ea:c7:c3:92:46:6e:c7:8e:b4:d6:9f:d2:b1:d5:b4: 01:82:96:bb:79:d4:d7:7f:4a:d2:57:1e:8a:62:e5: 1f:af:ec:27:1b:3a:82:76:19:5d:0c:fe:1e:e2:95: f7:fa:be:95:3c:58:a4:ef:dd:27:4a:18:7f:df:f2: 37:b6:c8:e6:56:a2:c6:45:26:4c:6b:9c:fa:88:3f: 76:2a:88:bf:33:28:44:61:3a:e1:5e:d3:97:43:25: 42:5c:cb:e8:78:70:bb:bc:d4:30:2e:df:38:69:f1: a9:d4:5f:ec:58:7d:1e:8a:41:ad:32:38:5a:14:07: 3c:da:60:ea:88:00:64:98:8d:5b:64:03:ae:28:2b: 6c:d1:54:94:7d:59:20:f6:c9:74:ba:73:4b:39:ab: 94:31:82:da:f0:dc:83:e3:7e:5e:51:6e:58:f8:42: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207635 Signature Algorithm: sha256WithRSAEncryption 7e:77:07:bf:4b:cb:59:79:0d:2d:64:ac:9d:a5:c7:03:e8:d5: 1c:d3:35:f9:a4:81:b1:57:ad:e2:f3:5e:55:5e:5e:eb:28:d5: c4:30:1b:6d:d5:c0:57:5e:2f:5d:91:69:c7:c3:64:80:8c:dc: 8c:7a:bc:41:c8:96:80:07:0e:74:ee:5c:1e:97:00:0a:1a:14: 5a:c3:5b:59:b7:af:59:9f:b9:21:e5:44:e8:1c:3c:d2:47:af: 04:21:c0:8e:d1:48:98:5e:ab:9b:b7:2f:5e:b9:16:71:f4:75: 8b:a7:96:c6:9a:eb:52:9c:7f:7b:56:1b:58:0a:5f:35:ca:4f: f8:4e:b4:da:e9:94:61:0d:55:3b:07:6e:b8:d7:45:b3:e8:31: c5:02:82:24:3b:b6:40:eb:02:c9:81:bc:0e:ce:ec:c7:b7:ac: ed:e5:60:fd:83:c2:6c:d3:e5:da:c5:81:9b:a5:15:a0:f5:da: 43:b9:6a:34:45:ee:9e:3c:be:5a:75:b9:e5:8b:5e:6d:be:7b: 00:d4:e0:80:88:78:d0:31:37:ac:85:47:e7:5e:2f:64:56:3e: 21:cb:8e:67:42:33:e5:96:24:98:12:03:3a:41:7a:4f:24:4e: b3:9f:02:e3:83:20:46:45:d9:e1:ad:83:fe:93:3a:fd:de:45: 0c:d4:0f:ea -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26x4KlkOGtNQd+i1Z4w1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODYxMTBlNGM3NjQxZDE4MGU4ZjE5MjBhYzY1ZmJlZmNmMDZkN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx98g61RORpuPgdC+s8SIIAH9PSbm jhKEpXhsD8IzGFi0SsnDXY45nFv+KwYzhPchVsYrcl1TcjI2HBHPUpZp3Wb6+VtM gS5V4PMdC1dP2lNZ6ehTMKU8Iuzqx8OSRm7HjrTWn9Kx1bQBgpa7edTXf0rSVx6K YuUfr+wnGzqCdhldDP4e4pX3+r6VPFik790nShh/3/I3tsjmVqLGRSZMa5z6iD92 Koi/MyhEYTrhXtOXQyVCXMvoeHC7vNQwLt84afGp1F/sWH0eikGtMjhaFAc82mDq iABkmI1bZAOuKCts0VSUfVkg9sl0unNLOauUMYLa8NyD435eUW5Y+EKgfQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMhhEOTHZB0YDo8ZIKxl++/PBtfHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzIwOGMy NS1lZGNlLTQxMzEtYjMxYi02NmE1MmM3YzhjMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMjA4YzI1 LWVkY2UtNDEzMS1iMzFiLTY2YTUyYzdjOGMwMC8xL3lHRVE1TWRrSFJnT2p4a2dy R1g3Nzg4RzE4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMrEzANBgkqhkiG9w0BAQsFAAOCAQEAfncHv0vLWXkN LWSsnaXHA+jVHNM1+aSBsVet4vNeVV5e6yjVxDAbbdXAV14vXZFpx8NkgIzcjHq8 QciWgAcOdO5cHpcAChoUWsNbWbevWZ+5IeVE6Bw80kevBCHAjtFImF6rm7cvXrkW cfR1i6eWxprrUpx/e1YbWApfNcpP+E602umUYQ1VOwduuNdFs+gxxQKCJDu2QOsC yYG8Ds7sx7es7eVg/YPCbNPl2sWBm6UVoPXaQ7lqNEXunjy+WnW55Ytebb57ANTg gIh40DE3rIVH514vZFY+IcuOZ0Iz5ZYkmBIDOkF6TyROs58C44MgRkXZ4a2D/pM6 /d5FDNQP6g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:54 2026 by rpki-client