This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer File: ySi2NBei54heM4gakkqsnUCqymA.cer (raw, json) Hash identifier: 8ayP3ZrnUHf6s/EcJ+ajCZnBeUyQreJ8c+jQ1qmnvjI= Subject key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F3FB916F19FB252E83ADCF6028E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25039 IP: 145.225.0.0/16 IP: 2a12:2f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:fb:91:6f:19:fb:25:2e:83:ad:cf:60:28:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c928b63417a2e7885e33881a924aac9d40aaca60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6b:71:38:b8:69:11:cc:39:67:76:68:e5:f6: f6:d8:84:dd:ba:92:fd:67:a7:46:be:ff:b5:cb:06: 32:ac:5a:bc:6c:c3:05:30:e2:32:77:1b:60:6d:c2: 46:d4:3d:fd:ad:bc:5b:e8:28:da:f2:b8:ef:66:89: ce:16:cf:d7:24:64:26:37:f8:d5:73:25:52:2b:00: 18:79:c4:94:0f:43:81:11:55:ca:e0:3a:fc:2f:60: 80:2b:0f:9c:d0:8f:b8:0f:29:77:6f:16:77:83:a0: e3:13:80:fa:51:72:93:5e:0c:29:9d:06:6e:20:0b: ff:98:40:9f:53:14:b0:3c:c6:e6:85:4c:5e:42:39: 6a:ee:9b:df:73:f2:0d:d8:4f:70:5e:fa:14:8b:cb: ec:8f:e1:09:cd:0e:29:4f:8b:47:fe:8a:60:cb:1e: bd:f9:48:6e:1c:6e:51:a6:9f:ce:b8:6a:87:5a:fd: 36:a0:79:d8:8e:f4:c2:fb:e8:96:37:80:fc:34:3a: 26:a5:62:d6:35:8c:14:51:7d:21:c4:21:bc:f3:16: fc:f4:80:01:8d:a3:8e:db:61:fc:67:7a:74:a2:bc: b1:04:e8:19:63:2b:1a:91:99:8e:e7:2e:0e:9b:de: 83:26:ca:c4:3a:3b:57:9b:15:d1:86:df:17:67:6a: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.225.0.0/16 IPv6: 2a12:2f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25039 Signature Algorithm: sha256WithRSAEncryption 98:b4:e9:96:72:84:98:b1:53:23:db:52:4e:37:03:cb:99:e8: 30:0e:c2:90:a9:0d:ff:2c:ec:04:ec:08:7b:c2:ab:9a:f4:66: 9b:1e:be:cf:10:39:72:41:b9:f7:00:3b:19:d3:2b:6c:2a:79: 9a:9f:23:d8:8f:a9:e8:36:d4:01:f0:df:25:af:8f:a0:74:77: 8b:ac:f9:46:06:61:ae:29:ec:65:6b:f1:8b:4d:d6:6e:1e:e8: 10:1f:5d:d1:d9:a8:4d:44:a3:0d:43:da:0c:df:c5:03:cb:56: 83:d5:c4:b4:4b:08:de:6f:40:92:5b:53:c3:dc:69:d5:d5:8a: e7:39:c1:58:e6:36:ba:12:48:5a:3d:67:7a:d8:cc:3f:b8:06: dd:9e:62:06:e8:d8:5f:6e:91:8d:5e:8c:b4:49:5a:df:10:45: cb:df:48:95:86:d9:04:72:29:b6:6a:99:cd:b8:5a:fc:d4:57: 44:07:4c:df:36:1f:2d:09:2e:21:af:80:5e:87:22:80:2d:cd: 4c:6c:31:b2:6f:fd:8d:81:14:38:fd:27:9b:c9:92:03:0f:a6: 71:3d:34:e5:2f:fa:2b:02:4e:15:87:07:c1:9b:02:e4:10:6d: 60:7f:6b:29:87:59:6d:1e:32:ce:bd:ee:61:2d:05:c8:14:d7: bd:18:c0:80 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZt5EPP7kW8Z+yUug63PYCjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTI4YjYzNDE3YTJlNzg4NWUzMzg4MWE5MjRhYWM5ZDQwYWFjYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92txOLhpEcw5Z3Zo5fb22ITdupL9 Z6dGvv+1ywYyrFq8bMMFMOIydxtgbcJG1D39rbxb6Cja8rjvZonOFs/XJGQmN/jV cyVSKwAYecSUD0OBEVXK4Dr8L2CAKw+c0I+4Dyl3bxZ3g6DjE4D6UXKTXgwpnQZu IAv/mECfUxSwPMbmhUxeQjlq7pvfc/IN2E9wXvoUi8vsj+EJzQ4pT4tH/opgyx69 +UhuHG5Rpp/OuGqHWv02oHnYjvTC++iWN4D8NDompWLWNYwUUX0hxCG88xb89IAB jaOO22H8Z3p0oryxBOgZYysakZmO5y4Om96DJsrEOjtXmxXRht8XZ2qmbQIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFMkotjQXoueIXjOIGpJKrJ1AqspgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzlkN2U2 YS0wZWFlLTQzNGYtOWEzNS04Yzk3MTYxZTA2MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvOWQ3ZTZh LTBlYWUtNDM0Zi05YTM1LThjOTcxNjFlMDYyZi8xL3lTaTJOQmVpNTRoZU00Z2Fr a3FzblVDcXltQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDALBAIAATAFAwMAkeEwDQQCAAIwBwMFAyoSL0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICYc8wDQYJKoZIhvcNAQELBQADggEBAJi06ZZyhJixUyPb Uk43A8uZ6DAOwpCpDf8s7ATsCHvCq5r0Zpsevs8QOXJBufcAOxnTK2wqeZqfI9iP qeg21AHw3yWvj6B0d4us+UYGYa4p7GVr8YtN1m4e6BAfXdHZqE1Eow1D2gzfxQPL VoPVxLRLCN5vQJJbU8PcadXViuc5wVjmNroSSFo9Z3rYzD+4Bt2eYgbo2F9ukY1e jLRJWt8QRcvfSJWG2QRyKbZqmc24WvzUV0QHTN82Hy0JLiGvgF6HIoAtzUxsMbJv /Y2BFDj9J5vJkgMPpnE9NOUv+isCThWHB8GbAuQQbWB/aymHWW0eMs697mEtBcgU 170YwIA= -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:29 2026 by rpki-client