This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer File: yeDkyay_cB-TAUmzJc4ELPn5Klk.cer (raw, json) Hash identifier: IRI1eocu3ZaZrr/3Dcy7gaZUC46mVA/Np/ZijAAQtsM= Subject key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE61311A9CE47CF0C9DBBDA5CE05C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.126.0/24 IP: 2a12:7280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e6:13:11:a9:ce:47:cf:0c:9d:bb:da:5c:e0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:91:12:66:96:28:d3:b8:9b:4e:99:40:b0: 58:88:8a:13:9c:f1:a6:7a:04:fa:6c:d0:8e:4f:4d: 9d:d9:40:0b:ce:dc:3f:82:61:7d:89:23:70:e3:3c: f0:bc:09:5f:ee:6e:18:22:7f:6e:3e:67:49:6b:62: 49:de:25:8a:95:ba:77:b4:3f:f5:aa:a0:81:f3:b1: 8b:0d:1c:dc:6b:3c:1a:ed:f3:3b:f5:9f:0c:b4:a0: 6c:8f:64:0d:6b:43:13:e1:ad:7c:ae:0e:a8:e3:dc: e6:7a:5e:5b:5a:66:36:6c:72:7a:40:1b:61:65:37: 6b:60:90:4c:18:ab:3d:de:38:4f:0a:ca:9f:db:f7: 9d:83:13:9c:d8:73:32:82:f8:55:1a:20:a6:2d:10: c5:56:30:d0:5d:bf:d9:91:6a:c0:15:cc:b7:f8:92: a6:93:bc:9f:3d:39:51:27:1a:d6:90:b3:8c:43:d6: 77:63:b4:a6:bf:f4:1c:1a:59:95:7c:c6:a2:b4:bb: 6f:69:2b:b0:33:3d:2d:f4:e3:c1:a8:5c:4b:a5:3e: e9:c1:75:e9:d0:da:32:3d:7a:18:6f:9b:9a:01:69: 37:90:a1:cc:06:ed:41:3c:c9:e3:16:23:fe:14:8a: 21:95:5b:1c:06:4b:32:f4:83:14:0b:38:86:2a:b8: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.126.0/24 IPv6: 2a12:7280::/29 Signature Algorithm: sha256WithRSAEncryption 09:bf:8d:9a:9c:0b:d0:fe:d3:c4:e0:3a:40:31:fb:7e:e7:dc: 77:b1:b5:10:0a:60:31:1b:11:1a:f9:c2:7b:35:84:2f:36:1f: 8d:73:a2:ca:7b:b1:ea:88:10:b6:8b:34:dc:c6:82:44:e3:df: d4:01:67:7a:c9:81:7a:c7:d6:62:b4:9a:c9:46:09:d5:cc:3c: 2d:61:ba:c3:66:61:37:ed:72:bd:e9:be:57:fb:ee:9d:f5:0d: b1:45:04:29:7c:39:57:9b:06:ad:aa:06:42:1d:57:ec:2f:99: 42:f4:da:be:18:ed:b4:11:46:e9:39:11:aa:7d:68:9f:69:6b: 9e:00:cc:40:9d:01:4c:1c:34:5f:a9:fd:2b:a8:ca:3d:05:42: a5:43:d3:e5:1f:3d:a7:67:33:51:d3:cf:dd:07:aa:d4:b0:95: 02:57:44:42:40:06:2a:64:e7:8a:7b:34:f9:79:9c:f3:88:d0: af:da:89:7f:91:f9:78:51:ef:d0:79:55:46:8c:77:69:d0:af: 8e:38:af:be:51:71:d7:04:3e:45:ad:fa:1e:70:58:2a:cf:60: 8e:56:b0:6e:11:3d:ba:17:9e:ee:b5:06:10:72:b8:62:bf:8d: fa:a8:23:f6:1c:f2:0d:9f:ce:3e:14:d3:64:3a:46:74:45:11: 78:89:3c:39 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57OYTEanOR88MnbvaXOBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWUwZTRjOWFjYmY3MDFmOTMwMTQ5YjMyNWNlMDQyY2Y5ZjkyYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ2REmaWKNO4m06ZQLBYiIoTnPGm egT6bNCOT02d2UALztw/gmF9iSNw4zzwvAlf7m4YIn9uPmdJa2JJ3iWKlbp3tD/1 qqCB87GLDRzcazwa7fM79Z8MtKBsj2QNa0MT4a18rg6o49zmel5bWmY2bHJ6QBth ZTdrYJBMGKs93jhPCsqf2/edgxOc2HMygvhVGiCmLRDFVjDQXb/ZkWrAFcy3+JKm k7yfPTlRJxrWkLOMQ9Z3Y7Smv/QcGlmVfMaitLtvaSuwMz0t9OPBqFxLpT7pwXXp 0NoyPXoYb5uaAWk3kKHMBu1BPMnjFiP+FIohlVscBksy9IMUCziGKrgdzQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMng5Mmsv3AfkwFJsyXOBCz5+SpZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2ZkYjY0 MS1kMWEzLTRkZGEtYmY5MS1iZTdjODI4YzM2OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZmRiNjQx LWQxYTMtNGRkYS1iZjkxLWJlN2M4MjhjMzY5My8xL3llRGt5YXlfY0ItVEFVbXpK YzRFTFBuNUtsay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9V+MA0EAgACMAcDBQMqEnKAMA0GCSqGSIb3 DQEBCwUAA4IBAQAJv42anAvQ/tPE4DpAMft+59x3sbUQCmAxGxEa+cJ7NYQvNh+N c6LKe7HqiBC2izTcxoJE49/UAWd6yYF6x9ZitJrJRgnVzDwtYbrDZmE37XK96b5X ++6d9Q2xRQQpfDlXmwatqgZCHVfsL5lC9Nq+GO20EUbpORGqfWifaWueAMxAnQFM HDRfqf0rqMo9BUKlQ9PlHz2nZzNR08/dB6rUsJUCV0RCQAYqZOeKezT5eZzziNCv 2ol/kfl4Ue/QeVVGjHdp0K+OOK++UXHXBD5FrfoecFgqz2COVrBuET26F57utQYQ crhiv436qCP2HPINn84+FNNkOkZ0RRF4iTw5 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:57 2026 by rpki-client