This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer (raw, json) Hash identifier: QLBygBO24lphB4PRKTme9l0xJTJmHhgfAboIrwz/yKg= Subject key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC8AFC176C1CD9ABE2B5E9DBE605D0C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35071 IP: 31.22.40.0/21 IP: 185.95.76.0/22 IP: 185.147.208.0/22 IP: 2a04:fe80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:af:c1:76:c1:cd:9a:be:2b:5e:9d:be:60:5d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:56:87:b9:4c:58:ea:94:63:3c:e3:1a:c1: 3a:ab:ba:61:c4:37:56:98:c7:79:60:23:8f:f6:cc: e0:57:63:08:29:ac:f4:26:2b:59:fd:0c:77:b5:bd: 25:94:f3:e0:86:52:13:94:cb:c4:e5:e0:d2:1d:60: c8:1f:a5:d3:24:d9:b7:85:c1:98:b6:e8:3d:54:ab: 09:c0:e5:a7:5b:ca:d9:fb:df:0e:5c:3d:e0:ab:f2: 69:d1:69:a4:53:45:38:af:62:7d:23:6c:16:c3:b9: 7b:fd:d6:f6:5b:3b:a5:4a:ce:ba:fa:c1:20:41:c7: e5:3b:41:af:a5:ef:ae:31:30:d2:d9:28:a9:f7:cc: b3:c4:5d:5c:2c:a9:ad:4e:94:f8:6c:70:66:c3:09: db:4a:8f:a7:87:16:7b:b6:27:ec:73:0c:21:77:29: 1f:8a:73:6e:92:21:0d:ea:59:e1:77:a0:94:55:3e: 4d:07:34:d7:b2:15:6d:66:a1:19:c1:1c:1d:42:ca: 66:36:66:1a:a8:fe:0b:e6:e9:2d:4d:62:61:28:b7: 6f:e2:00:49:62:2e:93:53:89:b5:6f:3d:30:f4:7b: 67:03:12:dc:6a:93:3a:a6:5f:4e:46:cf:8a:b4:bd: 47:b6:82:5b:bd:28:4c:68:7d:c1:c7:0b:e3:ae:31: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.40.0/21 185.95.76.0/22 185.147.208.0/22 IPv6: 2a04:fe80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35071 Signature Algorithm: sha256WithRSAEncryption 7e:90:0a:03:2b:d1:83:02:79:88:c9:bf:f9:21:58:48:e9:53: 2c:41:6e:85:7a:67:f8:f1:f1:81:34:0a:80:9f:8b:09:71:fe: ac:2b:e9:46:a8:19:ad:37:ea:5b:f5:cd:b6:87:7c:c1:be:46: 28:ee:c8:9f:5f:70:d3:ff:75:a8:1e:76:76:78:6e:0a:5b:ff: b3:ae:80:06:95:c6:46:60:37:4f:0a:24:26:de:99:0f:e0:4d: a8:14:7f:f4:4b:aa:4c:5f:83:46:42:15:19:ef:63:40:1a:a2: 89:dd:4d:f8:72:38:d3:7a:cb:da:8f:ba:41:74:36:3e:e8:43: 94:e3:5a:70:94:02:1d:b6:52:ab:be:c9:0e:c9:93:24:fc:94: f5:d5:fe:19:d1:a9:23:77:21:af:e1:1b:3a:49:2a:99:41:59: 87:1b:07:fb:4d:90:42:9e:88:7a:5b:3f:57:be:f9:65:2a:24: c3:ab:a6:6f:bd:90:73:07:65:90:1e:71:30:ec:6a:67:de:af: 00:71:e5:35:6f:73:f6:1a:f1:a8:89:2e:27:5d:7f:a2:b7:f1: df:51:21:40:8a:5c:3b:1f:6a:65:50:d3:7f:f5:bb:9e:1e:d3: f0:d7:d1:53:ee:6d:08:e1:15:53:cf:9a:0f:ec:36:bf:6d:69: 99:ed:5d:1a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yK/BdsHNmr4rXp2+YF0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVkNDQzZjg1ZDBlZWM2NjM2NGNkNzUzNmYxODg4OGFjMWY5OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroZWh7lMWOqUYzzjGsE6q7phxDdW mMd5YCOP9szgV2MIKaz0JitZ/Qx3tb0llPPghlITlMvE5eDSHWDIH6XTJNm3hcGY tug9VKsJwOWnW8rZ+98OXD3gq/Jp0WmkU0U4r2J9I2wWw7l7/db2WzulSs66+sEg QcflO0Gvpe+uMTDS2Sip98yzxF1cLKmtTpT4bHBmwwnbSo+nhxZ7tifscwwhdykf inNukiEN6lnhd6CUVT5NBzTXshVtZqEZwRwdQspmNmYaqP4L5uktTWJhKLdv4gBJ Yi6TU4m1bz0w9HtnAxLcapM6pl9ORs+KtL1HtoJbvShMaH3BxwvjrjF7YwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMjtRD+F0O7GY2TNdTbxiIisH5njMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2FjNDll Yi1jNDdhLTRjNWQtODFiZi02ZDA0MzEwZTM0MmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYWM0OWVi LWM0N2EtNGM1ZC04MWJmLTZkMDQzMTBlMzQyYi8xL3lPMUVQNFhRN3NaalpNMTFO dkdJaUt3Zm1lTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDHxYoAwQCuV9MAwQCuZPQMA0EAgACMAcDBQMq BP6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCI/zANBgkqhkiG9w0BAQsFAAOC AQEAfpAKAyvRgwJ5iMm/+SFYSOlTLEFuhXpn+PHxgTQKgJ+LCXH+rCvpRqgZrTfq W/XNtod8wb5GKO7In19w0/91qB52dnhuClv/s66ABpXGRmA3TwokJt6ZD+BNqBR/ 9EuqTF+DRkIVGe9jQBqiid1N+HI403rL2o+6QXQ2PuhDlONacJQCHbZSq77JDsmT JPyU9dX+GdGpI3chr+EbOkkqmUFZhxsH+02QQp6Iels/V775ZSokw6umb72Qcwdl kB5xMOxqZ96vAHHlNW9z9hrxqIkuJ11/orfx31EhQIpcOx9qZVDTf/W7nh7T8NfR U+5tCOEVU8+aD+w2v21pme1dGg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:16 2026 by rpki-client