This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer (raw, json) Hash identifier: r6vSRWIWf9DDeipRiX9go/NT8O5hsudIZ1SUKIAJC3c= Subject key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E21D34BAD5842AAFE5872D5CCE5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.201.128.0/22 IP: 195.93.158.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e2:1d:34:ba:d5:84:2a:af:e5:87:2d:5c:ce:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca2ded27751f291c0b55b79457207cb3a255197c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:39:3f:59:db:64:c6:25:86:3a:c6:d1:39: e3:25:7f:b8:7a:d3:ef:8a:76:6c:63:5c:3f:9a:ff: 67:1a:ec:fb:44:b2:73:bb:85:6f:0d:cf:c3:5f:f4: e2:f3:eb:cf:6d:5d:03:54:4c:e4:45:7c:09:02:ab: c6:9c:0f:79:29:38:0e:db:5b:19:8c:f8:6c:6e:11: a9:5f:93:36:ab:1e:bd:f5:63:9f:c2:e6:2b:44:24: 6c:7b:28:8c:2f:a2:9f:18:33:8b:77:a7:13:ac:65: 13:00:69:73:3e:e5:85:55:af:53:3d:ba:a8:1d:65: eb:5d:b0:3c:49:9a:64:74:25:05:3d:bf:79:b1:05: 55:51:1e:7d:c4:a1:a4:6f:c8:19:8d:18:61:e6:af: 79:41:a1:40:e6:08:2d:72:77:4c:c3:62:0d:b8:3b: 46:2a:4d:52:22:02:f1:ac:44:e4:81:a4:1e:08:af: 10:e5:b1:da:37:55:21:6b:38:04:75:65:f4:d4:d4: 05:95:db:db:d7:45:cd:11:36:bc:34:71:36:df:20: 3f:cd:64:71:d1:95:fb:ef:49:93:54:5e:74:34:e7: 2e:da:91:e8:04:8b:f6:a8:2d:74:ab:c5:82:65:58: 93:14:b3:d0:e2:74:da:63:79:2b:32:e3:83:e5:0c: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.128.0/22 195.93.158.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:0a:8d:1f:84:df:4e:89:85:24:57:2a:34:4b:0c:01:02:27: e5:78:57:84:7d:5e:22:f6:15:00:f7:25:a1:37:a6:b3:96:1b: a6:5a:9b:0b:ec:c7:20:83:91:64:ef:ec:60:1b:9b:51:5e:69: df:8e:5a:a9:37:3e:f0:c3:cd:2d:6c:63:0d:0f:6c:67:6b:9f: 14:44:0d:77:10:ea:f0:59:d3:73:47:be:b2:0b:57:99:8f:e0: 42:26:82:f4:3c:8a:6f:dc:52:fa:4d:13:ba:c5:e3:44:75:65: 9b:ea:ea:38:78:33:d4:0e:2a:ad:a7:59:02:3f:06:ac:8e:d4: 9d:82:59:7f:1b:eb:84:c1:8e:04:f2:23:3f:91:14:28:8f:4f: ca:9a:ed:09:f3:cb:34:e3:5c:ff:54:f1:65:60:da:d3:2a:97: c0:17:63:4f:f2:3e:70:c5:46:70:fc:e3:2d:d7:2a:21:e0:a3: bb:cc:5f:39:33:eb:71:e4:37:cf:14:f6:a8:02:98:1d:59:e3: 27:d8:49:33:82:73:48:03:e7:07:00:41:d6:3f:ec:aa:f8:77: 4c:0d:34:44:aa:e0:c5:be:51:4f:fc:d9:2e:54:ce:f3:37:ce: b6:d8:30:e9:98:e1:35:88:91:a6:06:15:cf:1e:01:3d:a6:79: 3d:04:e1:40 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7NuIdNLrVhCqv5YctXM5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTJkZWQyNzc1MWYyOTFjMGI1NWI3OTQ1NzIwN2NiM2EyNTUxOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm05P1nbZMYlhjrG0TnjJX+4etPv inZsY1w/mv9nGuz7RLJzu4VvDc/DX/Ti8+vPbV0DVEzkRXwJAqvGnA95KTgO21sZ jPhsbhGpX5M2qx699WOfwuYrRCRseyiML6KfGDOLd6cTrGUTAGlzPuWFVa9TPbqo HWXrXbA8SZpkdCUFPb95sQVVUR59xKGkb8gZjRhh5q95QaFA5ggtcndMw2INuDtG Kk1SIgLxrETkgaQeCK8Q5bHaN1UhazgEdWX01NQFldvb10XNETa8NHE23yA/zWRx 0ZX770mTVF50NOcu2pHoBIv2qC10q8WCZViTFLPQ4nTaY3krMuOD5QzqPQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFMot7Sd1HykcC1W3lFcgfLOiVRl8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzA3YWQz Yy1lY2FkLTRmNmQtYmM1MS1hNTkxZWFhY2NlNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvMDdhZDNj LWVjYWQtNGY2ZC1iYzUxLWE1OTFlYWFjY2U0Zi8xL3lpM3RKM1VmS1J3TFZiZVVW eUI4czZKVkdYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8mAAwQBw12eMA0GCSqGSIb3DQEBCwUAA4IB AQCLCo0fhN9OiYUkVyo0SwwBAifleFeEfV4i9hUA9yWhN6azlhumWpsL7Mcgg5Fk 7+xgG5tRXmnfjlqpNz7ww80tbGMND2xna58URA13EOrwWdNzR76yC1eZj+BCJoL0 PIpv3FL6TRO6xeNEdWWb6uo4eDPUDiqtp1kCPwasjtSdgll/G+uEwY4E8iM/kRQo j0/Kmu0J88s041z/VPFlYNrTKpfAF2NP8j5wxUZw/OMt1yoh4KO7zF85M+tx5DfP FPaoApgdWeMn2EkzgnNIA+cHAEHWP+yq+HdMDTREquDFvlFP/NkuVM7zN8622DDp mOE1iJGmBhXPHgE9pnk9BOFA -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:03 2026 by rpki-client