This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yQDj7qi7474R-IxoK9E4wmUH99w.cer File: yQDj7qi7474R-IxoK9E4wmUH99w.cer (raw, json) Hash identifier: B2dqvhJfOyV+pjZMSsMHCL7eZisKpiqQaqYnWIhfcQ8= Subject key identifier: C9:00:E3:EE:A8:BB:E3:BE:11:F8:8C:68:2B:D1:38:C2:65:07:F7:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED6CC161F752EA9F30C388F178E7A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209880 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6c:c1:61:f7:52:ea:9f:30:c3:88:f1:78:e7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c900e3eea8bbe3be11f88c682bd138c26507f7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:d8:cb:58:84:4f:b1:dc:68:83:ba:65:86: a6:24:e2:11:44:86:6b:d5:ef:00:c4:e8:16:ad:e6: 2a:f9:e8:4b:30:d4:ba:13:ca:ba:03:85:78:bb:82: 14:cd:64:5e:f8:51:1d:6f:a7:b5:3e:2c:fa:61:ef: ed:71:bd:e8:a2:98:2a:f1:b5:a3:92:23:15:bc:e8: c3:e3:f1:2d:f2:a2:72:df:5b:ba:88:d5:15:d2:9b: c6:18:37:78:9a:43:6a:b7:f8:87:30:a4:58:7f:4c: d4:52:d4:7a:7a:ce:ea:77:51:2b:31:ed:42:a1:64: c5:8a:9a:df:72:86:27:5a:e0:fa:34:11:42:49:79: db:8b:95:86:92:9c:f8:02:78:2d:68:53:0f:ec:1a: 3b:66:75:f3:e2:ba:ac:07:f5:1e:ec:75:9f:21:69: 85:92:6f:02:0c:ca:54:d7:05:4a:2b:d1:83:b2:82: ff:87:7e:2e:cd:a4:25:e1:0f:7b:06:10:6e:c5:d4: 16:75:3d:05:88:d3:7f:ff:63:bc:3c:4a:1b:4b:c0: dc:4f:60:c4:4a:31:90:45:6a:21:5d:b8:87:37:64: 93:ca:82:a9:2b:fe:e9:ad:5c:e6:41:36:ab:7f:ea: 3b:d8:a1:4b:cd:4b:1d:dc:9e:1e:ef:8d:c7:95:e1: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:E3:EE:A8:BB:E3:BE:11:F8:8C:68:2B:D1:38:C2:65:07:F7:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209880 Signature Algorithm: sha256WithRSAEncryption 24:fe:07:bf:93:f3:aa:bb:3c:c8:04:8f:de:87:ec:86:9f:d8: 37:41:b0:4f:aa:03:12:97:49:3c:87:d1:8e:55:4d:ac:ad:92: 61:4a:bf:a9:06:c3:e6:4e:36:17:cd:f5:cb:12:72:d7:21:c3: 3c:ec:6e:8c:4a:92:81:51:18:a1:bd:b2:b1:c4:dc:ab:8d:d4: ce:e6:8c:92:d8:02:08:f2:25:3a:70:46:14:78:10:38:2d:54: 00:d4:04:66:88:34:b9:25:11:79:0d:81:d6:c0:44:6c:d2:33: 93:9c:10:32:01:b4:6d:f0:0e:c1:8c:44:d6:12:df:b3:7a:86: b4:2a:9b:13:d3:6c:e5:6b:95:da:21:ea:7b:3b:a2:b3:7b:55: 58:0e:f4:06:00:e9:05:f2:52:e3:36:be:a1:9b:cd:e4:22:4d: 11:60:bc:d6:95:79:7f:33:db:ba:e5:be:6b:42:fa:da:0f:78: 5c:fe:ed:6a:e0:ec:db:91:b0:35:18:e6:31:db:11:07:ff:f0: 30:62:df:14:db:f1:3c:96:56:b1:8e:7e:ad:95:35:d4:ab:e0: 88:26:86:63:da:38:77:f6:91:11:4e:d0:76:21:e6:43:ad:b8: 96:a9:e2:ce:04:ff:3b:5e:28:97:ba:23:6d:dc:f2:2f:cb:20: d3:e5:30:a5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87WzBYfdS6p8ww4jxeOekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTAwZTNlZWE4YmJlM2JlMTFmODhjNjgyYmQxMzhjMjY1MDdmN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRjYy1iET7HcaIO6ZYamJOIRRIZr 1e8AxOgWreYq+ehLMNS6E8q6A4V4u4IUzWRe+FEdb6e1Piz6Ye/tcb3oopgq8bWj kiMVvOjD4/Et8qJy31u6iNUV0pvGGDd4mkNqt/iHMKRYf0zUUtR6es7qd1ErMe1C oWTFiprfcoYnWuD6NBFCSXnbi5WGkpz4AngtaFMP7Bo7ZnXz4rqsB/Ue7HWfIWmF km8CDMpU1wVKK9GDsoL/h34uzaQl4Q97BhBuxdQWdT0FiNN//2O8PEobS8DcT2DE SjGQRWohXbiHN2STyoKpK/7prVzmQTarf+o72KFLzUsd3J4e743HleFtzQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMkA4+6ou+O+EfiMaCvROMJlB/fcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzFmNDMx ZS0zN2M4LTQwODAtOWJiMy00MTYyMDRhMDI3MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMWY0MzFl LTM3YzgtNDA4MC05YmIzLTQxNjIwNGEwMjczNy8xL3lRRGo3cWk3NDc0Ui1JeG9L OUU0d21VSDk5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMz2DANBgkqhkiG9w0BAQsFAAOCAQEAJP4Hv5Pzqrs8 yASP3ofshp/YN0GwT6oDEpdJPIfRjlVNrK2SYUq/qQbD5k42F831yxJy1yHDPOxu jEqSgVEYob2yscTcq43UzuaMktgCCPIlOnBGFHgQOC1UANQEZog0uSUReQ2B1sBE bNIzk5wQMgG0bfAOwYxE1hLfs3qGtCqbE9Ns5WuV2iHqezuis3tVWA70BgDpBfJS 4za+oZvN5CJNEWC81pV5fzPbuuW+a0L62g94XP7tauDs25GwNRjmMdsRB//wMGLf FNvxPJZWsY5+rZU11KvgiCaGY9o4d/aREU7QdiHmQ624lqnizgT/O14ol7ojbdzy L8sg0+UwpQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:12 2026 by rpki-client