This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer File: yTLAXdVS5YBU2FWljWFhlVP1HGM.cer (raw, json) Hash identifier: ehtpcv4ruCNStBvGiV5w70KPK1SuACDxK7gFFMOM0ho= Subject key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAAAD9B54B3CE0158114EB663EDAEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210724 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:aa:d9:b5:4b:3c:e0:15:81:14:eb:66:3e:da:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c932c05dd552e58054d855a58d61619553f51c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:07:0b:b9:44:23:63:bc:40:ad:16:dc:0e:52: 5b:e4:42:52:0b:24:16:2a:d6:0f:dd:06:73:f9:c2: 95:0a:ff:7d:3d:61:5f:19:fc:f7:7a:85:e8:16:57: c3:e6:fd:83:18:63:7b:6f:98:ae:ad:3e:b5:b5:58: 26:15:52:b3:26:f2:66:f2:9f:11:fd:5f:6b:b6:60: bf:4d:40:c3:e6:a1:a2:8c:b1:98:7a:81:df:9b:c5: 39:6d:e8:a3:8b:41:52:cf:d8:f2:cf:47:9a:2c:fa: b6:2f:ad:40:19:cb:74:7c:f3:11:3f:ef:6d:84:36: 71:d8:55:35:b4:97:9c:e3:89:2b:ab:13:30:d2:80: 03:70:1c:9a:a3:46:0c:c0:c9:44:89:4a:dc:9f:a4: 16:4d:38:9a:7b:ba:64:13:2f:6c:66:a0:88:3c:56: dc:79:a8:06:de:05:09:f4:98:c0:f4:08:28:75:9f: eb:e3:d3:47:4d:f2:c6:c4:d5:3c:1c:54:13:56:e1: 9e:83:fc:ca:97:53:4f:de:15:31:c6:a0:8a:43:a5: 0b:f2:9c:9a:5f:94:bb:ba:d2:a4:97:2d:35:95:0f: c7:a4:bb:11:ed:16:f9:68:82:84:cd:79:07:4d:bc: 37:9f:27:7b:86:e4:a8:d5:c1:4e:1d:63:33:20:1d: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210724 Signature Algorithm: sha256WithRSAEncryption 08:38:3d:97:51:c1:37:23:35:28:b2:25:e9:0e:f1:fd:87:0e: c0:4b:fe:8d:06:60:87:ca:58:1a:00:d3:80:a6:71:b2:a5:e1: 8c:4e:ec:18:c5:c5:0a:68:4f:4f:56:49:52:4a:91:9b:08:58: 3d:aa:59:0f:e8:56:ec:e6:91:47:f2:0b:2d:1f:a7:2e:50:4e: 08:cd:fb:e9:51:e6:db:e3:75:57:0d:da:fc:61:f0:2f:f1:60: e5:ea:51:32:1d:a3:1d:a6:e3:8e:54:6f:d3:bb:02:b3:ae:07: 78:92:d0:00:60:8b:0d:b4:48:94:78:ee:f6:ed:3b:28:6a:f3: 9d:11:03:16:fc:7f:8e:1b:29:5e:61:9a:65:d9:6b:3b:59:3d: 65:35:62:86:99:46:14:00:42:f3:ea:34:56:22:e3:2f:7f:56: 14:82:1d:36:3a:0d:dd:87:0a:8f:85:e3:41:33:58:7a:e8:95: 3e:80:5f:c1:42:d3:8f:69:42:7e:76:51:5f:af:44:0b:25:44: 94:4e:42:43:13:ce:7c:f1:5b:2e:c0:ba:f6:22:64:26:43:98: 9f:87:ce:e0:0a:49:f8:c9:9c:d3:25:df:2a:0c:3c:e9:de:4b: 3a:a3:13:88:27:d0:fc:af:ca:a1:f8:36:66:13:54:39:9c:60: 72:d2:0d:9e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26qrZtUs84BWBFOtmPtruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTMyYzA1ZGQ1NTJlNTgwNTRkODU1YTU4ZDYxNjE5NTUzZjUxYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wcLuUQjY7xArRbcDlJb5EJSCyQW KtYP3QZz+cKVCv99PWFfGfz3eoXoFlfD5v2DGGN7b5iurT61tVgmFVKzJvJm8p8R /V9rtmC/TUDD5qGijLGYeoHfm8U5beiji0FSz9jyz0eaLPq2L61AGct0fPMRP+9t hDZx2FU1tJec44krqxMw0oADcByao0YMwMlEiUrcn6QWTTiae7pkEy9sZqCIPFbc eagG3gUJ9JjA9AgodZ/r49NHTfLGxNU8HFQTVuGeg/zKl1NP3hUxxqCKQ6UL8pya X5S7utKkly01lQ/HpLsR7Rb5aIKEzXkHTbw3nyd7huSo1cFOHWMzIB2U/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMkywF3VUuWAVNhVpY1hYZVT9RxjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5LzkxMzMy Yi0zNDU2LTQ2NTEtOTMwNS1mYTZiOThmODQ3MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOTEzMzJi LTM0NTYtNDY1MS05MzA1LWZhNmI5OGY4NDcwZS8xL3lUTEFYZFZTNVlCVTJGV2xq V0ZobFZQMUhHTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3JDANBgkqhkiG9w0BAQsFAAOCAQEACDg9l1HBNyM1 KLIl6Q7x/YcOwEv+jQZgh8pYGgDTgKZxsqXhjE7sGMXFCmhPT1ZJUkqRmwhYPapZ D+hW7OaRR/ILLR+nLlBOCM376VHm2+N1Vw3a/GHwL/Fg5epRMh2jHabjjlRv07sC s64HeJLQAGCLDbRIlHju9u07KGrznREDFvx/jhspXmGaZdlrO1k9ZTVihplGFABC 8+o0ViLjL39WFIIdNjoN3YcKj4XjQTNYeuiVPoBfwULTj2lCfnZRX69ECyVElE5C QxPOfPFbLsC69iJkJkOYn4fO4ApJ+Mmc0yXfKgw86d5LOqMTiCfQ/K/Kofg2ZhNU OZxgctINng== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:29 2026 by rpki-client