This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer File: yciBJHytvL9SqirXYsx0VKeocm4.cer (raw, json) Hash identifier: c3HK2RgQXQNM0N7pGWan4hFILCQX4TztLcKm7wt2Lh4= Subject key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4CE180B9FF4408ACA43AC31F7ED64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206405 IP: 37.122.192.0/21 IP: 185.156.188.0/22 IP: 2a00:9e40::/32 IP: 2a0d:5400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ce:18:0b:9f:f4:40:8a:ca:43:ac:31:f7:ed:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:f8:ba:df:f0:1e:5c:3e:ea:78:f2:90:8e: 42:79:e8:c1:1a:c8:05:78:f9:46:46:79:2f:fe:17: 40:24:ee:ec:79:4e:2a:29:be:b1:99:5a:d0:cf:a4: 02:e4:1b:aa:04:d3:fe:35:00:35:86:d1:4b:60:49: c5:9e:17:45:72:5d:23:a3:d1:1d:98:46:ce:0c:05: 67:dd:89:8e:e8:cb:9f:9d:dc:0f:37:7b:be:e2:ac: d2:d8:9e:e4:38:1a:d3:a7:05:eb:99:56:a0:c8:04: c0:8a:18:f7:36:07:da:62:48:ff:72:2e:4c:4d:b3: 79:4d:a8:f8:41:2d:52:c2:e1:72:46:54:e4:8e:64: 90:8d:01:f9:a7:9c:8d:06:00:c1:2a:ea:7c:b9:82: 4c:5c:30:e9:54:ce:4e:3f:53:f3:6e:07:18:ee:d1: 8d:ff:6c:00:89:f5:6d:64:96:a9:70:26:e8:18:9c: 7c:80:fa:39:c5:4c:b3:e0:8a:80:e4:c1:c1:b6:17: 75:ba:34:6e:0e:04:7f:5b:06:b4:e0:2f:a5:d9:9a: 6e:d4:89:52:67:9a:68:b7:7d:0e:04:39:34:50:fb: 16:08:b0:56:28:1a:ac:76:63:c0:69:01:b2:1b:21: c7:43:c1:e8:ba:02:9e:d2:b4:56:3c:29:a1:90:7c: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.192.0/21 185.156.188.0/22 IPv6: 2a00:9e40::/32 2a0d:5400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206405 Signature Algorithm: sha256WithRSAEncryption a4:34:49:ad:6f:08:da:3c:06:a9:b3:cb:40:94:df:3a:5f:b6: a0:93:d1:b2:7f:13:4d:26:da:d4:04:1f:b2:8d:25:ca:d9:7c: ef:a3:70:db:58:30:bd:ba:0d:52:51:c0:a0:42:8b:71:10:ba: df:74:eb:e0:86:7a:fb:12:f0:76:c7:ba:d2:9b:36:d1:ab:6e: 84:ba:54:92:9e:36:86:91:a3:92:cb:5d:04:cd:ee:b2:a8:77: 4c:56:6a:c8:a6:a1:08:36:24:fb:cd:fb:80:e9:c4:5b:ec:8f: 02:51:8f:75:70:03:57:54:8c:3d:69:a5:d8:be:41:08:3e:a9: 15:70:98:7c:0c:b0:b4:53:85:0e:a8:23:51:ce:f6:14:0a:62: 5c:4c:5c:89:41:9a:ca:d2:82:5a:74:ff:aa:a4:51:40:d6:f0: 82:ba:a8:9d:70:55:97:0b:40:1f:86:48:4a:ce:4d:6a:dd:42: b2:c3:42:eb:5d:62:41:06:3a:a4:1b:c2:58:c0:dd:e0:e9:f2: b3:2d:13:82:d5:8a:2f:ee:0b:df:33:4d:a4:ca:21:3c:d1:3d: 4d:3b:3e:08:19:70:b2:a6:ab:82:0a:6f:a4:52:db:63:de:0a: da:ab:8b:01:8c:88:68:6d:65:ba:8b:af:7c:76:6c:73:92:a5: 78:d9:7d:14 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt7pM4YC5/0QIrKQ6wx9+1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM4ODEyNDdjYWRiY2JmNTJhYTJhZDc2MmNjNzQ1NGE3YTg3MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxer4ut/wHlw+6njykI5CeejBGsgF ePlGRnkv/hdAJO7seU4qKb6xmVrQz6QC5BuqBNP+NQA1htFLYEnFnhdFcl0jo9Ed mEbODAVn3YmO6MufndwPN3u+4qzS2J7kOBrTpwXrmVagyATAihj3NgfaYkj/ci5M TbN5Taj4QS1SwuFyRlTkjmSQjQH5p5yNBgDBKup8uYJMXDDpVM5OP1PzbgcY7tGN /2wAifVtZJapcCboGJx8gPo5xUyz4IqA5MHBthd1ujRuDgR/Wwa04C+l2Zpu1IlS Z5pot30OBDk0UPsWCLBWKBqsdmPAaQGyGyHHQ8HougKe0rRWPCmhkHzb8wIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFMnIgSR8rby/Uqoq12LMdFSnqHJuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzZkNmI1 My05NWE5LTRkNjAtYjQ2ZC03ZWZlOTA1ZmYyOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNmQ2YjUz LTk1YTktNGQ2MC1iNDZkLTdlZmU5MDVmZjI5MS8xL3ljaUJKSHl0dkw5U3FpclhZ c3gwVktlb2NtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQDJXrAAwQCuZy8MBQEAgACMA4DBQAqAJ5AAwUD Kg1UADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJkUwDQYJKoZIhvcNAQELBQAD ggEBAKQ0Sa1vCNo8Bqmzy0CU3zpftqCT0bJ/E00m2tQEH7KNJcrZfO+jcNtYML26 DVJRwKBCi3EQut906+CGevsS8HbHutKbNtGrboS6VJKeNoaRo5LLXQTN7rKod0xW asimoQg2JPvN+4DpxFvsjwJRj3VwA1dUjD1ppdi+QQg+qRVwmHwMsLRThQ6oI1HO 9hQKYlxMXIlBmsrSglp0/6qkUUDW8IK6qJ1wVZcLQB+GSErOTWrdQrLDQutdYkEG OqQbwljA3eDp8rMtE4LVii/uC98zTaTKITzRPU07PggZcLKmq4IKb6RS22PeCtqr iwGMiGhtZbqLr3x2bHOSpXjZfRQ= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:54 2026 by rpki-client