This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer File: ySynGDiuM8zsxfEKtU7D_HG_u4I.cer (raw, json) Hash identifier: 0Kfe+yg3Y8RTSl31uPaqQ2GPIud4DRJvLhlwau/b1T4= Subject key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F85888FFF1CB341A301447C5A40760A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208496 IP: 81.25.72.0/22 IP: 2a0d:18c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:88:8f:ff:1c:b3:41:a3:01:44:7c:5a:40:76:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:de:14:d5:1d:34:e5:f7:65:63:51:71:e4: 71:4b:05:ce:c0:9e:49:5c:23:c1:af:f6:fc:57:95: 04:90:06:7a:00:87:4e:dd:56:2e:bf:40:3e:09:8d: ef:13:8b:a7:31:1e:3b:a5:33:81:65:6a:71:cc:b0: 3e:3a:d3:f0:77:94:0c:d4:7b:a5:fd:f2:bb:e3:84: 88:9f:bb:c1:15:4d:55:16:7b:d9:d6:50:5a:2d:77: 5e:8c:20:ed:63:a1:a9:40:4f:44:3e:51:11:a3:9d: d3:39:5e:d2:4f:6b:28:85:b0:1a:9c:bb:8b:4f:93: c2:b9:53:ff:a9:59:62:89:d0:28:52:6a:bd:bb:e3: 65:3d:3d:33:db:b1:70:94:82:f2:7d:f7:cf:2f:7f: 78:3f:02:49:a4:82:88:7c:17:9a:e9:d1:cf:b3:9e: 58:a0:c7:e8:9a:91:ad:8a:2f:96:f5:c8:cb:ca:8b: c0:62:78:e0:dc:74:30:9a:28:c5:91:2a:79:79:93: c6:ba:92:3c:f1:f9:ac:86:d8:df:7f:80:f3:88:09: c3:72:2b:40:da:b7:5b:a0:30:00:ee:bb:ba:8c:30: 19:55:5a:ed:67:b3:e7:20:5d:02:ec:4d:d4:0f:43: de:8b:93:35:18:40:97:f8:ff:ce:93:d2:e7:4d:10: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.25.72.0/22 IPv6: 2a0d:18c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208496 Signature Algorithm: sha256WithRSAEncryption 2c:4a:15:26:c1:f9:e5:60:92:8c:93:f4:a6:47:9d:22:23:02: 77:4d:a1:90:b4:a1:46:db:f4:5a:bf:47:34:30:5e:aa:42:27: 52:fc:65:19:32:3f:cd:2e:c7:81:04:74:4e:ed:07:03:93:6a: df:0f:a9:60:94:7a:c8:5f:36:b3:76:41:cb:d5:be:27:fc:9c: 59:35:e7:a2:fd:5c:05:56:57:be:8f:e4:ab:48:ba:c4:10:8e: cb:c8:2e:93:50:ab:2f:2d:35:89:97:b5:ad:d8:80:c3:8b:30: 62:b7:0a:70:27:5b:32:64:3d:69:8d:da:34:7e:5b:ec:83:92: e9:3e:53:ef:3b:dd:96:57:ab:12:fe:8a:17:76:a6:f6:1a:7f: 99:2c:c6:62:a5:40:a3:3d:76:e4:a6:85:d2:5d:ba:f2:36:6f: 64:fd:d9:0d:7e:d0:ff:cd:1b:40:bc:51:05:06:a8:f1:ca:d3: d2:e5:fc:53:1f:b7:c7:a9:7b:98:78:ab:f6:25:bf:24:ce:73: 79:fe:97:36:e3:ed:12:6b:db:99:13:10:ae:3f:a0:4d:5f:80: cc:17:94:ee:a7:37:9b:8a:3c:96:ed:9b:d4:bc:61:91:fe:4b: bb:fd:00:0a:da:c2:dd:17:e6:44:5a:c5:95:37:6f:02:be:41: 83:bc:53:a4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hYiP/xyzQaMBRHxaQHYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJjYTcxODM4YWUzM2NjZWNjNWYxMGFiNTRlYzNmYzcxYmZiYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyveFNUdNOX3ZWNRceRxSwXOwJ5J XCPBr/b8V5UEkAZ6AIdO3VYuv0A+CY3vE4unMR47pTOBZWpxzLA+OtPwd5QM1Hul /fK744SIn7vBFU1VFnvZ1lBaLXdejCDtY6GpQE9EPlERo53TOV7ST2sohbAanLuL T5PCuVP/qVliidAoUmq9u+NlPT0z27FwlILyfffPL394PwJJpIKIfBea6dHPs55Y oMfompGtii+W9cjLyovAYnjg3HQwmijFkSp5eZPGupI88fmshtjff4DziAnDcitA 2rdboDAA7ru6jDAZVVrtZ7PnIF0C7E3UD0Pei5M1GECX+P/Ok9LnTRBP3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMkspxg4rjPM7MXxCrVOw/xxv7uCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2E0NmUz YS1hOGM2LTQ1OTctOTI4MS05ZDI0YjQwZjhmNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYTQ2ZTNh LWE4YzYtNDU5Ny05MjgxLTlkMjRiNDBmOGY3Mi8xL3lTeW5HRGl1TTh6c3hmRUt0 VTdEX0hHX3U0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCURlIMA0EAgACMAcDBQMqDRjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMucDANBgkqhkiG9w0BAQsFAAOCAQEALEoVJsH55WCS jJP0pkedIiMCd02hkLShRtv0Wr9HNDBeqkInUvxlGTI/zS7HgQR0Tu0HA5Nq3w+p YJR6yF82s3ZBy9W+J/ycWTXnov1cBVZXvo/kq0i6xBCOy8guk1CrLy01iZe1rdiA w4swYrcKcCdbMmQ9aY3aNH5b7IOS6T5T7zvdllerEv6KF3am9hp/mSzGYqVAoz12 5KaF0l268jZvZP3ZDX7Q/80bQLxRBQao8crT0uX8Ux+3x6l7mHir9iW/JM5zef6X NuPtEmvbmRMQrj+gTV+AzBeU7qc3m4o8lu2b1Lxhkf5Lu/0ACtrC3RfmRFrFlTdv Ar5Bg7xTpA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:50 2026 by rpki-client