This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer File: yfcvcKzNptLmEzWoFzDm9u5RPMU.cer (raw, json) Hash identifier: htCZ/Cn1Sfa/md4hTv3EbibERKvj22CRGJhsqQuIkZY= Subject key identifier: C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B7E9F5CFB71BCEDA664C6057B3E29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47867 IP: 2001:67c:2cd8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:9f:5c:fb:71:bc:ed:a6:64:c6:05:7b:3e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:6b:b4:c4:0e:17:34:1b:94:85:46:b2:ae: 92:8d:f6:b3:d5:b2:6b:50:e4:41:31:9e:06:d3:a2: ce:fd:2f:c5:da:49:09:46:1d:94:83:e6:8b:65:22: 9d:94:a0:26:ae:33:a9:8a:7d:09:fe:bc:94:f3:d9: 98:2c:27:b4:7e:0b:3c:9e:34:2f:95:54:d6:ae:2e: 3b:8a:96:da:cd:94:bd:56:0c:af:b6:c3:d1:cb:8f: 59:1a:20:3a:f2:44:d0:a4:a5:04:35:63:e5:f9:1c: c7:31:2f:fe:f1:07:b0:92:00:f1:1b:78:d9:16:28: 53:b0:44:0b:f3:dc:f8:b8:bb:5e:f6:14:61:d6:7b: 22:9f:0a:40:9a:bb:8e:c2:ac:46:5a:ad:2b:ff:25: c9:7c:a3:c2:0c:48:ad:cf:be:93:24:d8:25:94:cf: 9e:d5:99:76:36:52:2e:76:17:67:90:35:15:42:76: 4d:ca:cb:74:b0:54:72:27:7f:5e:58:18:73:7f:b4: 38:9b:9f:ba:75:2e:b9:e9:e9:8f:ae:5e:c6:30:23: c8:a7:5f:43:ac:b4:df:13:38:28:55:63:d2:9f:d4: 08:12:f8:7b:c7:8b:49:6a:46:69:c8:bf:10:c8:0d: 51:3e:10:cc:10:af:f0:9f:9d:c1:79:71:6e:3e:e5: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2cd8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47867 Signature Algorithm: sha256WithRSAEncryption 9e:6d:5c:2f:59:08:b5:62:1f:d5:9b:02:85:7d:e6:9b:32:14: 1b:ee:b8:8e:8c:06:a0:b1:18:09:27:80:b5:7f:1f:34:63:cf: 04:d1:39:cc:12:b3:a4:48:40:b0:d0:0a:16:70:2f:9a:27:38: af:75:24:04:a0:a2:3b:48:76:6d:74:39:42:12:29:fe:a3:a9: 79:9d:da:de:2b:73:57:d6:ec:58:83:e3:5f:09:1c:19:c8:9c: c0:fb:d5:a2:b7:f0:fb:e2:96:fa:6e:70:39:52:44:33:f3:df: 1a:e9:51:25:79:80:c0:b2:d1:88:80:90:89:a3:4d:35:92:60: 72:7f:1c:f8:7c:18:a9:fb:6f:c8:5e:66:d2:50:f5:22:84:39: 3a:a8:e2:37:d0:34:7c:24:22:01:14:04:73:32:80:23:0e:24: 64:1b:c0:5b:2e:b3:7c:63:15:1e:67:e5:5c:da:72:7f:94:b7: e2:d5:e5:99:85:cb:7c:14:4c:26:74:29:90:04:30:01:72:b9: b6:59:10:9e:da:67:e4:2f:9e:b9:96:2d:e9:86:af:0d:a4:b0: 44:b5:bc:e6:f0:8e:42:13:e6:0a:b0:7a:72:5b:c2:95:ee:14: 55:43:d5:81:42:50:a8:6d:b4:7d:2a:3b:dd:c7:4b:91:2a:da: 97:b3:80:92 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6W36fXPtxvO2mZMYFez4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWY3MmY3MGFjY2RhNmQyZTYxMzM1YTgxNzMwZTZmNmVlNTEzY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFrtMQOFzQblIVGsq6Sjfaz1bJr UORBMZ4G06LO/S/F2kkJRh2Ug+aLZSKdlKAmrjOpin0J/ryU89mYLCe0fgs8njQv lVTWri47ipbazZS9VgyvtsPRy49ZGiA68kTQpKUENWPl+RzHMS/+8QewkgDxG3jZ FihTsEQL89z4uLte9hRh1nsinwpAmruOwqxGWq0r/yXJfKPCDEitz76TJNgllM+e 1Zl2NlIudhdnkDUVQnZNyst0sFRyJ39eWBhzf7Q4m5+6dS656emPrl7GMCPIp19D rLTfEzgoVWPSn9QIEvh7x4tJakZpyL8QyA1RPhDMEK/wn53BeXFuPuUydQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMn3L3CszabS5hM1qBcw5vbuUTzFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2E3YjI2 NS01NDc2LTQ5ZjQtYmQ0YS0yZjlmODFlOTMyOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYTdiMjY1 LTU0NzYtNDlmNC1iZDRhLTJmOWY4MWU5MzI5OC8xL3lmY3ZjS3pOcHRMbUV6V29G ekRtOXU1UlBNVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCzYMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwC6+zANBgkqhkiG9w0BAQsFAAOCAQEAnm1cL1kItWIf1ZsChX3mmzIUG+64 jowGoLEYCSeAtX8fNGPPBNE5zBKzpEhAsNAKFnAvmic4r3UkBKCiO0h2bXQ5QhIp /qOpeZ3a3itzV9bsWIPjXwkcGcicwPvVorfw++KW+m5wOVJEM/PfGulRJXmAwLLR iICQiaNNNZJgcn8c+HwYqftvyF5m0lD1IoQ5OqjiN9A0fCQiARQEczKAIw4kZBvA Wy6zfGMVHmflXNpyf5S34tXlmYXLfBRMJnQpkAQwAXK5tlkQntpn5C+euZYt6Yav DaSwRLW85vCOQhPmCrB6clvCle4UVUPVgUJQqG20fSo73cdLkSral7OAkg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:29 2026 by rpki-client