This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer File: ypO97sfEJpjfaskM3cbAGzp_LEk.cer (raw, json) Hash identifier: KoEqJpv13xqlT9wRMTe3EP12jjTTBQO9d+oBirtc7Ts= Subject key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75F7411B5697A0BA9AD01956B0D3B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202944 IP: 185.1.71.0/24 IP: 2001:7f8:a2::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:74:11:b5:69:7a:0b:a9:ad:01:95:6b:0d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:22:1c:8c:54:2a:79:b7:69:68:83:c2:d8: af:fd:c8:fa:4b:b1:a8:67:09:cc:25:48:af:13:f5: ef:8b:be:59:e0:67:3b:d8:5a:a3:d1:b9:57:3f:5d: 0a:c6:df:a0:01:d9:c4:8f:8b:ba:60:c2:e9:3c:15: e1:14:03:0c:89:09:6b:a9:df:1f:60:09:28:c5:3e: 13:c0:62:a5:f4:f2:bc:fb:e5:06:6c:3e:a2:38:d3: 7c:da:c7:d7:09:0e:43:4f:ba:1c:fe:9a:93:e1:1f: 14:12:3d:e7:bd:bb:88:ff:da:e3:ed:93:32:2d:d5: fb:bd:4a:36:2f:81:8c:bf:06:ff:39:b7:1e:a8:b1: 6b:8f:d6:8a:bc:b7:c2:f3:53:76:d7:86:0b:f2:41: 0b:17:89:b3:cc:81:32:6e:ba:ae:5b:88:07:6c:6c: 8d:f1:c4:08:da:d5:5d:de:1c:d7:cd:ef:90:23:5e: f4:58:b0:60:29:ad:fb:f8:d8:8d:03:58:6c:9e:c5: af:72:97:e8:0a:63:e0:95:45:4c:07:98:3e:1b:e8: 01:0e:e1:57:84:b4:12:b5:91:e8:1b:ec:ae:25:f4: 56:bd:ea:38:16:3e:5b:d5:a2:ca:65:85:6a:92:e1: f0:eb:26:f4:19:01:8d:65:ba:c8:22:28:26:1f:34: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.71.0/24 IPv6: 2001:7f8:a2::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202944 Signature Algorithm: sha256WithRSAEncryption b1:76:7d:9a:5b:24:dd:d0:3c:55:5f:47:e4:a6:0e:a4:73:76: 6c:33:ad:41:f4:76:0b:1a:b5:55:3e:fa:cd:b3:02:12:2d:22: f7:82:3c:35:e5:85:77:3d:0f:4e:99:41:ca:10:2c:6f:44:be: 62:cd:ed:16:85:f3:ab:ac:95:dc:5c:65:65:05:77:52:2d:26: 22:4a:e6:69:28:42:9f:97:38:52:97:0d:4c:dd:d9:7f:00:65: 17:7d:36:51:eb:91:34:1c:cb:b1:66:b8:5b:e2:a2:fd:23:d9: 06:8b:f6:38:e6:74:c0:b0:28:6b:04:83:8e:51:5e:46:48:be: b5:12:96:36:40:8a:88:5b:bd:ac:b7:bb:b4:fc:62:d7:15:ca: 85:01:10:db:86:51:96:bc:52:13:42:56:04:bb:3c:ed:83:6f: 92:7c:a9:74:f2:d4:4f:45:90:07:b1:c9:e0:39:3b:b3:e6:ee: bb:22:ef:c3:9e:14:3e:a8:a8:2c:f2:3a:96:43:82:1d:16:96: d6:9a:67:a6:7b:17:90:3a:3c:22:4e:64:83:26:fe:16:65:ff: a2:a5:bf:88:e7:ff:b8:b3:5f:d9:6e:92:d6:ae:4c:df:0f:64: ef:10:ce:d1:ac:dc:6c:83:bd:17:5a:2e:aa:af:b4:22:90:05: ed:2f:37:93 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3x190EbVpeguprQGVaw07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTkzYmRlZWM3YzQyNjk4ZGY2YWM5MGNkZGM2YzAxYjNhN2YyYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz44iHIxUKnm3aWiDwtiv/cj6S7Go ZwnMJUivE/Xvi75Z4Gc72Fqj0blXP10Kxt+gAdnEj4u6YMLpPBXhFAMMiQlrqd8f YAkoxT4TwGKl9PK8++UGbD6iONN82sfXCQ5DT7oc/pqT4R8UEj3nvbuI/9rj7ZMy LdX7vUo2L4GMvwb/ObceqLFrj9aKvLfC81N214YL8kELF4mzzIEybrquW4gHbGyN 8cQI2tVd3hzXze+QI170WLBgKa37+NiNA1hsnsWvcpfoCmPglUVMB5g+G+gBDuFX hLQStZHoG+yuJfRWveo4Fj5b1aLKZYVqkuHw6yb0GQGNZbrIIigmHzQaKQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMqTve7HxCaY32rJDN3GwBs6fyxJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzcwNDc0 Ni1jMWMxLTRjYjgtODNmMS1mYWZlMmQyMDYzY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNzA0NzQ2 LWMxYzEtNGNiOC04M2YxLWZhZmUyZDIwNjNjYS8xL3lwTzk3c2ZFSnBqZmFza00z Y2JBR3pwX0xFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAuQFHMA8EAgACMAkDBwAgAQf4AKIwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAxjAMA0GCSqGSIb3DQEBCwUAA4IBAQCxdn2aWyTd 0DxVX0fkpg6kc3ZsM61B9HYLGrVVPvrNswISLSL3gjw15YV3PQ9OmUHKECxvRL5i ze0WhfOrrJXcXGVlBXdSLSYiSuZpKEKflzhSlw1M3dl/AGUXfTZR65E0HMuxZrhb 4qL9I9kGi/Y45nTAsChrBIOOUV5GSL61EpY2QIqIW72st7u0/GLXFcqFARDbhlGW vFITQlYEuzztg2+SfKl08tRPRZAHscngOTuz5u67Iu/DnhQ+qKgs8jqWQ4IdFpbW mmemexeQOjwiTmSDJv4WZf+ipb+I5/+4s1/ZbpLWrkzfD2TvEM7RrNxsg70XWi6q r7QikAXtLzeT -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:19 2026 by rpki-client