This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer File: yVJqou_HA-knkAcfgubuUpuV6x4.cer (raw, json) Hash identifier: +6ZVsXOGKFlShVTyanY18tkbgczM5o4x03vf2f/xnQM= Subject key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791144AD9E1695166CB3686AE7953EB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202458 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:44:ad:9e:16:95:16:6c:b3:68:6a:e7:95:3e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:43:f6:75:58:af:f0:10:5a:37:08:81:8b: b3:31:3a:9e:54:a0:41:71:da:15:a9:ca:3e:ba:39: e7:22:6d:3f:65:b5:e6:36:1b:76:a0:5c:10:18:88: 80:2e:1a:18:3d:e2:78:b8:51:56:11:9a:d2:02:7b: 02:12:81:25:b6:c6:ae:a5:b9:0e:95:15:25:8f:e9: 74:21:49:83:0e:97:ff:d9:54:e8:b9:9c:9f:1b:47: 19:fb:e4:a0:7f:7f:90:44:ea:52:96:b9:5a:1c:9e: f1:e2:0f:f5:e7:5c:a0:7f:7e:fa:01:c7:bf:78:f6: 0e:1c:1b:ff:85:89:86:9f:2c:46:24:a7:a2:7b:94: 00:d2:8a:73:20:92:25:1b:15:6c:c5:f4:37:5b:12: 31:78:bd:b7:a4:a8:85:a8:ad:a3:7d:cd:ab:ea:f3: 70:bb:b5:e0:a0:c4:07:c5:60:ef:49:73:01:de:94: cd:34:82:8b:6e:3f:a9:9a:34:56:6d:41:24:42:e6: 60:ac:94:39:e8:7e:7f:54:00:42:dd:da:cd:6e:f6: d0:b7:01:d1:e6:ef:29:49:df:b9:6d:f9:2d:85:2f: f8:64:07:1b:79:35:42:2e:4d:40:56:8a:4d:ee:d9: 77:cf:ef:cb:e3:cb:b0:5b:62:42:99:ba:35:3a:1e: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202458 Signature Algorithm: sha256WithRSAEncryption 1b:11:49:d3:c5:f2:9a:19:cb:52:cc:ac:48:43:d9:f6:db:38: 38:de:f6:a8:4d:04:0c:05:3f:94:1a:6b:f1:09:74:d3:3e:4a: d1:aa:2d:cf:95:d7:ed:4a:fe:5b:20:cd:ee:4e:49:1d:0c:18: 30:5d:c6:ec:58:ac:b3:3e:74:10:63:32:57:17:84:a9:96:60: 4f:29:47:57:5b:21:6d:5c:32:9b:73:c4:a3:d7:44:cb:1d:9f: 59:74:24:04:e8:3a:69:ae:dd:65:b3:03:4d:53:46:f0:ab:6c: c1:b8:24:32:71:e6:97:91:7a:7a:0d:94:36:c0:50:7a:84:de: f3:e4:ca:7c:37:d2:b5:39:18:84:e4:57:f7:01:b0:45:41:50: 8d:7f:fa:5e:53:bc:aa:8e:24:23:28:3c:94:97:16:b1:50:1f: 28:de:57:de:0e:fe:f0:1f:de:be:f4:44:b7:d5:06:70:d4:6d: 23:5c:7c:56:e5:7b:59:58:94:9d:8f:ec:d8:e8:31:e9:6c:a3: d2:15:7f:2b:d3:42:9b:de:80:0a:54:2f:63:9a:18:36:97:5a: 7d:25:8d:21:9a:cd:7b:27:91:3d:bd:5c:c0:e6:0b:99:aa:c3: c8:22:4c:2b:b3:9f:0d:d5:f1:ba:52:13:68:b8:a9:a2:4e:d7: 0a:1d:c0:90 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EUStnhaVFmyzaGrnlT62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTUyNmFhMmVmYzcwM2U5Mjc5MDA3MWY4MmU2ZWU1MjliOTVlYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp1D9nVYr/AQWjcIgYuzMTqeVKBB cdoVqco+ujnnIm0/ZbXmNht2oFwQGIiALhoYPeJ4uFFWEZrSAnsCEoEltsaupbkO lRUlj+l0IUmDDpf/2VTouZyfG0cZ++Sgf3+QROpSlrlaHJ7x4g/151ygf376Ace/ ePYOHBv/hYmGnyxGJKeie5QA0opzIJIlGxVsxfQ3WxIxeL23pKiFqK2jfc2r6vNw u7XgoMQHxWDvSXMB3pTNNIKLbj+pmjRWbUEkQuZgrJQ56H5/VABC3drNbvbQtwHR 5u8pSd+5bfkthS/4ZAcbeTVCLk1AVopN7tl3z+/L48uwW2JCmbo1Oh5+nQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMlSaqLvxwPpJ5AHH4Lm7lKbleseMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzdjZjNi My02MTZmLTQ0ZWUtYTIxNC1mN2Y2OTBjMGFmNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvN2NmM2Iz LTYxNmYtNDRlZS1hMjE0LWY3ZjY5MGMwYWY1Ny8xL3lWSnFvdV9IQS1rbmtBY2Zn dWJ1VXB1VjZ4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMW2jANBgkqhkiG9w0BAQsFAAOCAQEAGxFJ08XymhnL UsysSEPZ9ts4ON72qE0EDAU/lBpr8Ql00z5K0aotz5XX7Ur+WyDN7k5JHQwYMF3G 7Fissz50EGMyVxeEqZZgTylHV1shbVwym3PEo9dEyx2fWXQkBOg6aa7dZbMDTVNG 8KtswbgkMnHml5F6eg2UNsBQeoTe8+TKfDfStTkYhORX9wGwRUFQjX/6XlO8qo4k Iyg8lJcWsVAfKN5X3g7+8B/evvREt9UGcNRtI1x8VuV7WViUnY/s2Ogx6Wyj0hV/ K9NCm96AClQvY5oYNpdafSWNIZrNeyeRPb1cwOYLmarDyCJMK7OfDdXxulITaLip ok7XCh3AkA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:27 2026 by rpki-client