This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer File: yj7NoA-sC_tjsoVD6itdXx5N9ss.cer (raw, json) Hash identifier: IuVy3V0mZ7K57R7wnkTQ0I3xTjoQKutf0LRnJCMBBC4= Subject key identifier: CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B61046916A2B43DB03041C8439FF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213582 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:61:04:69:16:a2:b4:3d:b0:30:41:c8:43:9f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:94:95:89:dc:c2:9f:41:48:92:55:36:fb: 68:26:e9:11:f9:74:ce:1d:e7:32:0a:62:72:47:b9: a3:e0:ce:cd:2c:e2:88:65:fc:ae:d7:e1:3f:3f:a0: e3:10:44:e8:a5:55:e8:fa:a0:65:65:10:d4:9e:d7: a1:be:b5:37:52:72:f3:4c:bd:b1:62:7c:0e:86:c5: 20:74:34:ab:79:5f:66:b8:45:45:a7:75:15:2c:53: a9:f7:5a:b9:13:8b:f5:c8:1c:77:d6:4b:7c:62:82: 81:12:9f:75:66:37:6b:d4:e8:eb:05:7c:20:b0:8c: df:e8:94:b7:9f:a2:22:ae:b4:76:86:d8:2c:12:a9: 64:1f:89:45:37:d9:e1:9b:cd:6e:b1:0d:cb:04:db: 02:09:16:b4:5f:cc:2e:d5:80:13:ba:9d:05:fd:19: 54:34:84:e1:be:6d:d7:87:c2:38:74:6a:f3:05:20: 92:36:c8:f1:f4:d6:5f:ca:fd:45:0e:9e:89:2f:8b: 0e:a1:12:8a:26:b7:45:c1:07:f0:52:be:42:02:39: 93:57:89:1e:5a:dc:26:78:df:93:63:18:ec:a4:60: f7:5a:a9:74:f2:21:e7:2c:84:59:b4:db:54:35:b2: 9f:82:d8:81:be:d7:a7:5e:39:75:2b:21:2c:5f:d1: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213582 Signature Algorithm: sha256WithRSAEncryption 8c:66:db:36:76:95:dd:b4:8a:de:f3:96:f1:c2:b5:ac:d8:44: 01:d4:25:bc:d5:28:b0:ed:9d:e3:1e:35:3a:c7:e0:25:52:c4: e1:96:66:71:ad:be:c8:7c:96:d4:25:97:17:09:92:0d:30:cc: f8:13:fb:f2:d8:f5:f1:58:33:fc:8a:2f:1c:bb:4b:af:1b:88: fc:3f:c2:44:3c:e7:8f:0e:52:30:e1:12:74:a3:c4:49:a6:50: 99:74:e0:0f:e1:a5:53:8b:ea:ca:c0:51:f2:04:80:12:0f:2e: fe:f4:86:b5:d5:4d:20:be:a2:f5:f5:b0:fd:e2:30:5c:43:fc: 7e:42:32:75:ad:13:9e:be:89:af:14:b5:cb:a0:a9:71:0b:f4: 1a:81:00:a6:96:27:44:5a:3a:96:a9:7e:42:b1:12:ad:68:84: 41:9f:c6:fa:47:8c:4e:f5:93:c0:5b:ea:f9:b9:6a:94:c7:8f: 7a:70:ba:10:f2:73:81:11:8e:e8:c3:96:8f:69:10:52:b6:7e: e6:a3:c2:67:8a:eb:7e:1a:76:1a:03:3a:9c:55:cc:10:dd:25: 57:c3:d7:ae:2e:43:df:71:52:aa:d8:b9:dd:2d:ae:6c:9e:de: 9c:6b:8a:3e:f4:3d:71:de:4f:bf:b4:38:7d:83:3f:f8:5c:d9: e6:04:7d:f1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6W2EEaRaitD2wMEHIQ5/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTNlY2RhMDBmYWMwYmZiNjNiMjg1NDNlYTJiNWQ1ZjFlNGRmNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0aUlYncwp9BSJJVNvtoJukR+XTO HecyCmJyR7mj4M7NLOKIZfyu1+E/P6DjEETopVXo+qBlZRDUntehvrU3UnLzTL2x YnwOhsUgdDSreV9muEVFp3UVLFOp91q5E4v1yBx31kt8YoKBEp91Zjdr1OjrBXwg sIzf6JS3n6IirrR2htgsEqlkH4lFN9nhm81usQ3LBNsCCRa0X8wu1YATup0F/RlU NIThvm3Xh8I4dGrzBSCSNsjx9NZfyv1FDp6JL4sOoRKKJrdFwQfwUr5CAjmTV4ke WtwmeN+TYxjspGD3Wql08iHnLIRZtNtUNbKfgtiBvtenXjl1KyEsX9FYkwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMo+zaAPrAv7Y7KFQ+orXV8eTfbLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzgyZWVk MS1kOWQ1LTQwZDgtYmE1OC0zZjk5NjA4NjVkMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvODJlZWQx LWQ5ZDUtNDBkOC1iYTU4LTNmOTk2MDg2NWQwZi8xL3lqN05vQS1zQ190anNvVkQ2 aXRkWHg1Tjlzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCTjANBgkqhkiG9w0BAQsFAAOCAQEAjGbbNnaV3bSK 3vOW8cK1rNhEAdQlvNUosO2d4x41OsfgJVLE4ZZmca2+yHyW1CWXFwmSDTDM+BP7 8tj18Vgz/IovHLtLrxuI/D/CRDznjw5SMOESdKPESaZQmXTgD+GlU4vqysBR8gSA Eg8u/vSGtdVNIL6i9fWw/eIwXEP8fkIyda0Tnr6JrxS1y6CpcQv0GoEAppYnRFo6 lql+QrESrWiEQZ/G+keMTvWTwFvq+blqlMePenC6EPJzgRGO6MOWj2kQUrZ+5qPC Z4rrfhp2GgM6nFXMEN0lV8PXri5D33FSqti53S2ubJ7enGuKPvQ9cd5Pv7Q4fYM/ +FzZ5gR98Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:11 2026 by rpki-client