This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer File: yRh69xD2KF4TVTBxMoudmUhSxHE.cer (raw, json) Hash identifier: xrXURXC8A92CocwowVmwGlmazxfwM7vqqxpR9ltmtac= Subject key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FE37283C6D5671081B21100981DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203009 IP: 185.132.156.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fe:37:28:3c:6d:56:71:08:1b:21:10:09:81:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9187af710f6285e13553071328b9d994852c471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:a3:25:41:1d:a4:cb:f1:64:64:9b:5b:9f: c4:d3:cf:05:33:ca:ba:d2:4d:60:92:d5:8f:ac:37: 0a:49:13:4c:87:55:01:91:43:c4:5e:96:4b:92:94: 7f:d2:ac:3d:ec:ec:cd:48:56:61:4e:ac:27:58:72: ac:d4:ae:7a:77:67:a1:42:51:4b:c3:c9:d6:fe:da: b9:7a:0f:b0:9a:92:d4:0d:f8:e2:4c:8a:f8:d0:7b: 30:3c:0d:1e:22:32:09:06:09:a1:7b:05:80:72:aa: d3:80:61:e2:cb:86:91:9d:09:66:d6:67:6d:07:d2: 84:bb:b9:6c:da:e2:b0:c5:ba:b7:86:7a:d2:c2:30: 6c:13:82:83:29:d1:bb:79:a4:1b:fa:ef:2e:3b:7b: be:1e:53:83:ba:82:74:09:ad:07:7d:31:9f:5d:24: c3:6c:45:42:f0:21:66:e2:27:fa:33:64:ee:bc:f1: b0:46:39:91:f2:98:a0:16:04:79:70:b8:49:1e:44: 15:85:31:d2:54:43:ef:36:19:28:54:46:a0:c9:6b: 90:88:5f:90:90:28:13:11:bd:4d:05:5f:22:0a:28: 4b:f4:46:bb:e6:a9:d4:73:a6:3a:6b:be:54:ca:87: 14:52:25:0f:81:5e:c7:ab:ae:93:d8:33:72:2b:96: dc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.156.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203009 Signature Algorithm: sha256WithRSAEncryption 62:9a:a7:63:b5:83:d5:83:ad:ed:9a:47:15:dd:a4:24:14:20: 2b:58:96:a4:50:8c:d0:33:96:8c:30:1f:2d:fe:4c:07:29:dc: 84:52:01:90:f7:1e:92:5f:e1:4e:1e:51:72:e3:6b:88:00:40: d3:18:c3:28:a6:96:a5:14:b9:22:25:d8:52:3b:90:f1:17:df: 7f:0c:0d:b1:ca:7b:ef:49:72:e2:26:ca:df:39:04:19:38:7a: c1:3d:ce:ed:93:d9:fd:ca:51:3e:fc:e8:71:4d:94:57:56:4e: 34:54:29:7e:17:5c:e8:cf:f6:f9:7c:51:29:0d:12:53:68:ef: fe:91:b7:f4:08:61:2b:7d:8e:c2:c6:32:1d:48:dc:01:3a:09: ee:15:31:21:8a:a8:4c:5c:a3:85:e7:6b:21:cf:21:b2:a0:c1: 68:fe:09:0d:44:85:25:69:5d:65:35:51:d8:a8:aa:3a:da:33: fd:1b:90:32:5e:ae:d2:d7:45:3f:d0:a6:04:e5:cd:f2:15:2c: 8b:5e:d5:e6:62:89:b0:90:1a:f2:e9:09:61:bd:f7:a9:c3:5d: 1d:76:8d:07:96:2e:83:59:4e:8e:2e:33:34:3b:49:d1:fe:10: 08:f6:e0:72:7a:e6:1c:b4:4d:2a:6b:e7:2a:c7:0e:fb:40:2c: 7c:5c:b0:cf -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pv43KDxtVnEIGyEQCYHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTE4N2FmNzEwZjYyODVlMTM1NTMwNzEzMjhiOWQ5OTQ4NTJjNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziKjJUEdpMvxZGSbW5/E088FM8q6 0k1gktWPrDcKSRNMh1UBkUPEXpZLkpR/0qw97OzNSFZhTqwnWHKs1K56d2ehQlFL w8nW/tq5eg+wmpLUDfjiTIr40HswPA0eIjIJBgmhewWAcqrTgGHiy4aRnQlm1mdt B9KEu7ls2uKwxbq3hnrSwjBsE4KDKdG7eaQb+u8uO3u+HlODuoJ0Ca0HfTGfXSTD bEVC8CFm4if6M2TuvPGwRjmR8pigFgR5cLhJHkQVhTHSVEPvNhkoVEagyWuQiF+Q kCgTEb1NBV8iCihL9Ea75qnUc6Y6a75UyocUUiUPgV7Hq66T2DNyK5bcHwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMkYevcQ9iheE1UwcTKLnZlIUsRxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzMzMGY2 Yi0yZWE1LTQ4YTAtODQxNS00NjRlNTljOGY0ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvMzMwZjZi LTJlYTUtNDhhMC04NDE1LTQ2NGU1OWM4ZjQ4NS8xL3lSaDY5eEQyS0Y0VFZUQnhN b3VkbVVoU3hIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuYScMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMZATANBgkqhkiG9w0BAQsFAAOCAQEAYpqnY7WD1YOt7ZpHFd2kJBQgK1iWpFCM 0DOWjDAfLf5MBynchFIBkPcekl/hTh5RcuNriABA0xjDKKaWpRS5IiXYUjuQ8Rff fwwNscp770ly4ibK3zkEGTh6wT3O7ZPZ/cpRPvzocU2UV1ZONFQpfhdc6M/2+XxR KQ0SU2jv/pG39AhhK32OwsYyHUjcAToJ7hUxIYqoTFyjhedrIc8hsqDBaP4JDUSF JWldZTVR2KiqOtoz/RuQMl6u0tdFP9CmBOXN8hUsi17V5mKJsJAa8ukJYb33qcNd HXaNB5Yug1lOji4zNDtJ0f4QCPbgcnrmHLRNKmvnKscO+0AsfFywzw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:05 2026 by rpki-client