This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer File: yp6lFngHtwhbUTEMpg2_K5GYL8c.cer (raw, json) Hash identifier: j+p9sRUXJVQltPx4uB93l30Mg/MyPLIzx0wpsXQfppc= Subject key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8617B6271A48C0B7A3D701A04B545 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197935 IP: 91.227.76.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:61:7b:62:71:a4:8c:0b:7a:3d:70:1a:04:b5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:06:5f:44:d3:ff:96:14:8d:28:88:4d:a0: 52:52:d9:3f:40:e3:28:fa:05:6e:41:f7:db:1a:10: 74:ab:3c:d2:7e:72:7a:9c:b9:a5:32:2c:f7:b8:03: b0:1a:a2:76:e6:ec:65:4c:b0:cd:de:24:5b:7c:61: 3d:24:d9:97:8f:8c:12:b1:bd:87:eb:e5:7b:4b:ce: fb:d9:dc:a9:6f:05:a7:78:88:b7:ae:3f:a0:e6:70: 1b:33:71:76:17:9c:ea:df:bf:9a:c0:06:92:07:ca: 46:17:ef:8b:4c:9c:90:a2:0b:b8:69:e5:d0:4f:72: c8:0e:2c:c9:bc:41:51:1a:e0:7a:85:50:eb:5a:c2: 39:93:a5:d0:2a:ee:c2:dc:fa:c7:bd:6a:2a:5b:bb: 17:aa:d2:61:b7:4f:ce:c4:8e:1e:01:d8:96:0b:b1: 0f:cd:89:42:9e:2f:bc:d6:3e:69:bc:26:65:ae:90: 0d:61:6d:88:6d:08:bf:f7:9a:47:a5:36:6f:5c:11: b9:2b:64:e2:5b:19:c2:c5:22:37:1b:ff:b6:b1:f0: be:12:18:0e:c2:e2:68:0e:21:07:bb:92:02:46:f2: 32:8e:06:ca:82:ae:53:64:c1:a6:fd:2a:62:1c:c0: a3:36:ec:d5:91:6d:39:84:78:87:11:4c:49:ae:43: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.76.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197935 Signature Algorithm: sha256WithRSAEncryption a7:32:f7:b6:ee:c1:13:de:76:69:f3:4e:0f:df:57:6a:6a:5a: 90:95:cc:ff:f9:39:98:69:16:c7:8c:1e:57:fc:89:8a:68:25: 51:20:3b:2b:a0:c8:5c:8a:7b:1f:56:42:97:18:01:4f:8d:bc: 05:f6:b7:df:97:d6:9f:07:e7:71:a9:ef:71:96:89:2f:5a:12: e3:88:56:db:2d:fd:06:7d:ad:2e:74:a1:fb:35:32:a4:a9:fe: c5:fd:4d:d1:cb:e1:34:62:9f:bb:e6:8c:6a:06:aa:88:65:c9: 0b:33:fd:0c:d2:ad:9f:f6:05:73:08:a0:9c:b5:38:24:1d:0f: f0:cc:42:6c:43:03:47:be:04:e9:ee:9a:c2:4f:26:66:c9:ff: f0:5d:2e:14:53:a3:0f:b8:e6:2e:18:3e:27:1c:ec:0c:65:a5: 5c:8c:ce:c2:8e:e7:5f:f9:51:9a:69:f6:f1:83:55:5a:5b:21: 99:f9:70:01:dc:dd:af:c9:29:21:78:c4:0b:7b:51:4f:21:57: d9:73:78:eb:87:1f:99:81:b4:6f:27:ee:58:4b:7f:a5:c5:29: 48:fd:25:82:5b:af:0d:bc:db:c9:31:61:9e:80:39:56:83:91: af:3f:da:bc:cd:a9:3c:cc:b0:c0:0b:c8:13:0b:02:3e:67:62: 80:72:ce:c8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yGF7YnGkjAt6PXAaBLVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTllYTUxNjc4MDdiNzA4NWI1MTMxMGNhNjBkYmYyYjkxOTgyZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+YGX0TT/5YUjSiITaBSUtk/QOMo +gVuQffbGhB0qzzSfnJ6nLmlMiz3uAOwGqJ25uxlTLDN3iRbfGE9JNmXj4wSsb2H 6+V7S8772dypbwWneIi3rj+g5nAbM3F2F5zq37+awAaSB8pGF++LTJyQogu4aeXQ T3LIDizJvEFRGuB6hVDrWsI5k6XQKu7C3PrHvWoqW7sXqtJht0/OxI4eAdiWC7EP zYlCni+81j5pvCZlrpANYW2IbQi/95pHpTZvXBG5K2TiWxnCxSI3G/+2sfC+EhgO wuJoDiEHu5ICRvIyjgbKgq5TZMGm/SpiHMCjNuzVkW05hHiHEUxJrkNvZQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMqepRZ4B7cIW1ExDKYNvyuRmC/HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2JlMjU0 MC00OGJiLTRjNjYtOGIyNC0yNzQxYjM2Yjc1ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvYmUyNTQw LTQ4YmItNGM2Ni04YjI0LTI3NDFiMzZiNzVkZS8xL3lwNmxGbmdIdHdoYlVURU1w ZzJfSzVHWUw4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+NMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFLzANBgkqhkiG9w0BAQsFAAOCAQEApzL3tu7BE952afNOD99XampakJXM//k5 mGkWx4weV/yJimglUSA7K6DIXIp7H1ZClxgBT428Bfa335fWnwfncanvcZaJL1oS 44hW2y39Bn2tLnSh+zUypKn+xf1N0cvhNGKfu+aMagaqiGXJCzP9DNKtn/YFcwig nLU4JB0P8MxCbEMDR74E6e6awk8mZsn/8F0uFFOjD7jmLhg+JxzsDGWlXIzOwo7n X/lRmmn28YNVWlshmflwAdzdr8kpIXjEC3tRTyFX2XN464cfmYG0byfuWEt/pcUp SP0lgluvDbzbyTFhnoA5VoORrz/avM2pPMywwAvIEwsCPmdigHLOyA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:56 2026 by rpki-client