This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer File: yWncvDPoAQQ4EpKC03rU6L-EuB8.cer (raw, json) Hash identifier: Vtgu3tJLBmJq0vP2XEWHTjFZ7UEDE7uT4CbawCVtYtM= Subject key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED130EDE22A35E7951F45EAADF3FCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42818 IP: 77.244.80.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:13:0e:de:22:a3:5e:79:51:f4:5e:aa:df:3f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:71:29:f7:6f:7a:1b:42:e1:d3:a8:43:61: ca:2e:b1:48:a9:44:a5:39:f0:a6:22:b9:a1:c5:bf: d2:e2:5d:d4:56:09:c3:c2:84:3b:28:52:a4:fb:c9: 9d:27:e0:c3:d8:07:bb:77:f2:1e:6c:45:cc:4c:d6: 1c:12:f4:89:b4:e3:59:e7:34:57:e7:63:d2:80:d7: 04:b1:05:a7:79:25:9f:57:c3:4d:9b:7d:b6:b9:d0: 8a:d0:3e:41:37:af:db:72:9c:dd:51:2b:9a:27:d9: ed:c3:58:60:03:54:67:a7:11:17:e3:47:b2:cb:2a: f2:b2:dc:26:36:cd:1d:e5:3a:82:94:cb:e0:39:58: 47:b1:ed:61:e0:0a:f1:aa:33:55:d6:de:bf:f5:4e: 00:66:4d:f9:fa:50:5f:c8:69:98:3c:03:99:4f:91: 8b:d8:79:ff:5a:5a:43:eb:7a:37:7c:6e:52:e9:f9: fc:0c:bf:5a:eb:47:7f:c6:eb:bc:ad:de:3e:77:ff: 67:bd:9f:0b:29:e0:7c:d1:84:e5:c8:e2:7d:d0:3a: a2:ab:83:d8:6b:54:63:14:54:7c:1c:40:1f:01:87: 21:63:53:1a:20:45:44:ac:52:2b:cc:a0:e8:bb:d2: dc:c7:6c:65:7a:95:3a:76:62:5d:92:f1:1e:47:1c: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.244.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42818 Signature Algorithm: sha256WithRSAEncryption 70:8b:58:74:a9:15:7f:bd:89:b7:81:c0:29:83:0f:de:5d:44: 73:a0:13:53:d0:40:c3:ac:38:18:29:44:2a:77:ef:32:6d:54: 4d:fc:1a:d4:7c:78:82:da:16:4c:35:9b:7c:d0:a2:61:2d:71: 2f:79:15:89:cd:ca:6b:b3:b1:78:37:60:02:f4:21:d9:93:6e: a1:83:72:3f:f3:9b:eb:34:2d:d3:a2:f6:9d:33:3e:48:9f:2e: 9b:dc:3c:94:c9:ab:59:6a:bc:67:2d:2c:99:5d:59:27:43:d9: 7e:07:89:31:99:d9:0c:d7:4f:08:e3:f1:82:de:43:67:bf:9e: 17:65:7c:5e:7a:06:d4:fc:22:e9:25:e9:59:f3:d2:69:6c:83: 75:31:26:3c:42:f4:d2:72:e2:ad:6c:39:e1:35:c0:93:13:68: 70:e2:cf:64:ce:19:a5:6e:c3:a0:c4:89:1a:4d:88:dd:63:76: 9c:87:55:c6:d8:f2:72:5f:6a:2b:a4:1a:06:f5:17:69:5e:a0: fd:ba:fa:92:b7:24:50:b4:58:cf:f4:8b:4f:56:c1:c2:c5:4b: 88:90:15:9b:64:7e:e4:8e:72:5a:df:79:d3:67:96:0c:e6:18: a6:ae:88:3c:94:34:81:77:3f:98:9f:ea:78:29:b9:a3:ec:fd: 3a:24:c7:37 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57RMO3iKjXnlR9F6q3z/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTY5ZGNiYzMzZTgwMTA0MzgxMjkyODJkMzdhZDRlOGJmODRiODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/pxKfdvehtC4dOoQ2HKLrFIqUSl OfCmIrmhxb/S4l3UVgnDwoQ7KFKk+8mdJ+DD2Ae7d/IebEXMTNYcEvSJtONZ5zRX 52PSgNcEsQWneSWfV8NNm322udCK0D5BN6/bcpzdUSuaJ9ntw1hgA1RnpxEX40ey yyrystwmNs0d5TqClMvgOVhHse1h4ArxqjNV1t6/9U4AZk35+lBfyGmYPAOZT5GL 2Hn/WlpD63o3fG5S6fn8DL9a60d/xuu8rd4+d/9nvZ8LKeB80YTlyOJ90Dqiq4PY a1RjFFR8HEAfAYchY1MaIEVErFIrzKDou9Lcx2xlepU6dmJdkvEeRxzlXQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMlp3Lwz6AEEOBKSgtN61Oi/hLgfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzE5NTg5 My02OTliLTQ1YjQtYTAzZC0wZGI1MGJmZjk0NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMTk1ODkz LTY5OWItNDViNC1hMDNkLTBkYjUwYmZmOTQ0YS8xL3lXbmN2RFBvQVFRNEVwS0Mw M3JVNkwtRXVCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQETfRQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnQjANBgkqhkiG9w0BAQsFAAOCAQEAcItYdKkVf72Jt4HAKYMP3l1Ec6ATU9BA w6w4GClEKnfvMm1UTfwa1Hx4gtoWTDWbfNCiYS1xL3kVic3Ka7OxeDdgAvQh2ZNu oYNyP/Ob6zQt06L2nTM+SJ8um9w8lMmrWWq8Zy0smV1ZJ0PZfgeJMZnZDNdPCOPx gt5DZ7+eF2V8XnoG1Pwi6SXpWfPSaWyDdTEmPEL00nLirWw54TXAkxNocOLPZM4Z pW7DoMSJGk2I3WN2nIdVxtjycl9qK6QaBvUXaV6g/br6krckULRYz/SLT1bBwsVL iJAVm2R+5I5yWt9502eWDOYYpq6IPJQ0gXc/mJ/qeCm5o+z9OiTHNw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:02 2026 by rpki-client