This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer (raw, json) Hash identifier: LZXQeNMGA1gmQU3Lbj/xOD4I9TLw0pzpADJAsYm/vi0= Subject key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA542ACF014C9EA411DFBA8CD33AB3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59478 IP: 91.241.192.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:ac:f0:14:c9:ea:41:1d:fb:a8:cd:33:ab:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:9d:8a:63:80:77:43:f3:bd:37:70:1f:64: 04:92:db:b7:0f:7b:5a:c4:fa:b3:ee:26:be:8b:1e: 18:51:6b:65:82:07:f7:17:f3:54:cd:d7:c0:06:dd: 78:5c:b0:74:62:6b:95:fa:a1:47:5a:03:b7:06:5b: e9:63:8c:12:99:3b:ca:0b:c0:3a:13:8a:b7:89:b0: 0f:ab:f7:ae:11:00:03:79:01:4e:c6:bd:7a:74:d9: b4:ed:32:97:6b:09:2e:7e:f8:45:cd:16:da:b7:f2: 86:96:2c:70:17:7d:f1:e9:bd:bf:99:66:3c:43:b3: bd:81:84:50:cf:4f:6a:56:eb:be:6d:a1:33:3b:d6: 02:89:d6:3d:ed:d1:ae:68:64:0d:aa:73:c9:9c:f3: dd:a3:02:bc:9e:19:51:29:a3:ec:06:7b:67:87:6c: 68:13:ee:d1:68:49:18:cc:90:e9:12:db:32:b2:41: 74:48:2b:f0:f0:ea:c8:99:6d:1f:54:91:f2:4a:22: 4c:12:87:4c:85:9d:82:f2:4b:b2:40:97:ba:23:a1: a2:eb:b0:95:b7:cd:60:b3:0a:9f:d3:2d:04:49:c2: 33:b0:bd:30:ac:00:17:e2:39:d8:90:90:41:a8:16: c4:8d:45:77:84:9e:b8:d7:bc:72:81:90:fa:45:4d: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.192.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59478 Signature Algorithm: sha256WithRSAEncryption 50:8e:0b:40:bd:88:15:6c:11:f8:4e:80:2a:f7:56:58:b9:15: 21:40:ba:5f:ed:98:e3:55:51:82:ee:8c:f1:ce:28:b9:13:d7: f5:41:b6:37:04:85:30:01:85:3e:b9:28:df:82:7d:e2:4e:d2: f3:b1:82:9b:24:25:41:ca:80:ff:67:95:3a:75:8e:36:b1:4a: 01:35:3c:9c:c1:75:7f:80:c6:8c:ff:a5:f0:d6:d6:c4:50:f1: 57:7f:b5:5b:f1:2c:6e:45:01:07:9f:7d:b7:ae:da:68:34:ab: 16:9d:75:fb:cd:93:32:19:a5:04:6a:12:26:cb:d6:f2:c8:09: 5c:0f:04:a2:9e:9b:b5:cc:38:8c:0d:62:17:0b:b5:f9:d4:12: 23:8f:75:b8:b0:09:f4:2a:25:92:6c:e1:98:69:37:93:be:bf: 71:ef:77:48:ef:cc:8b:d2:18:0f:f5:6b:fb:f5:c4:7c:bf:4a: bf:f9:f7:17:5d:72:4d:15:3a:b8:c2:15:7c:9c:5a:4e:e1:58: a0:5a:41:d2:d7:fa:b8:bb:78:5e:4d:c5:dd:90:ac:92:7c:2f: 9a:57:f6:38:70:ea:a3:e1:ef:c9:0f:9e:59:a7:61:51:13:5c: 8f:0b:9e:f3:c4:5b:16:85:fa:08:ec:6f:c3:06:a5:ba:08:fa: b6:25:f1:b7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pUKs8BTJ6kEd+6jNM6s6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGYyMzQ1YTNmZWE0YjNkYmYyNWNiMTIwZjFiNzg0MjUzNjI2OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpKdimOAd0PzvTdwH2QEktu3D3ta xPqz7ia+ix4YUWtlggf3F/NUzdfABt14XLB0YmuV+qFHWgO3BlvpY4wSmTvKC8A6 E4q3ibAPq/euEQADeQFOxr16dNm07TKXawkufvhFzRbat/KGlixwF33x6b2/mWY8 Q7O9gYRQz09qVuu+baEzO9YCidY97dGuaGQNqnPJnPPdowK8nhlRKaPsBntnh2xo E+7RaEkYzJDpEtsyskF0SCvw8OrImW0fVJHySiJMEodMhZ2C8kuyQJe6I6Gi67CV t81gswqf0y0EScIzsL0wrAAX4jnYkJBBqBbEjUV3hJ6417xygZD6RU0o0wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMjyNFo/6ks9vyXLEg8beEJTYmjNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzQ4YzI4 YS0wODQ4LTRiMGItOTE0YS0wZWExZTEyMzQxN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNDhjMjhh LTA4NDgtNGIwYi05MTRhLTBlYTFlMTIzNDE3YS8xL3lQSTBXal9xU3oyX0pjc1NE eHQ0UWxOaWFNMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQGW/HAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDoVjANBgkqhkiG9w0BAQsFAAOCAQEAUI4LQL2IFWwR+E6AKvdWWLkVIUC6X+2Y 41VRgu6M8c4ouRPX9UG2NwSFMAGFPrko34J94k7S87GCmyQlQcqA/2eVOnWONrFK ATU8nMF1f4DGjP+l8NbWxFDxV3+1W/EsbkUBB599t67aaDSrFp11+82TMhmlBGoS JsvW8sgJXA8Eop6btcw4jA1iFwu1+dQSI491uLAJ9ColkmzhmGk3k76/ce93SO/M i9IYD/Vr+/XEfL9Kv/n3F11yTRU6uMIVfJxaTuFYoFpB0tf6uLt4Xk3F3ZCsknwv mlf2OHDqo+HvyQ+eWadhURNcjwue88RbFoX6COxvwwalugj6tiXxtw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:50 2026 by rpki-client