This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer File: ypQrJwZ2HCunUyiXg-35heM48Xc.cer (raw, json) Hash identifier: NqW0JlYlvzbb9O6+LLkAn73pGzf21rKzWMfVK7/X2X0= Subject key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B363DB641B09FF0DCD27E7964D479ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212542 AS: 214685 IP: 91.233.100.0/24 IP: 194.42.200.0/24 IP: 195.189.240.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3d:b6:41:b0:9f:f0:dc:d2:7e:79:64:d4:79:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca942b2706761c2ba753289783edf985e338f177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:11:d1:7d:44:06:c9:45:1e:35:01:2f:02: 1e:6b:4d:fd:60:83:95:a2:a2:6c:3f:fa:56:22:c0: 3f:40:07:2d:ef:2e:9e:7c:88:dd:9e:b0:a7:b6:31: 7d:bb:f9:29:7c:fe:92:0c:ae:78:d6:35:18:74:62: ed:b3:c8:94:86:ee:79:ff:9f:a2:9e:c9:b1:45:4e: 6a:0a:d7:75:db:de:26:ef:9b:e4:80:f7:49:f5:c2: 7b:a3:28:51:87:98:1a:a6:eb:37:f8:65:98:02:75: d7:fa:69:cf:2a:dc:fc:0f:85:c4:2b:b1:80:1c:76: d6:bd:7b:74:f5:b1:fd:fa:ad:a1:2a:01:4d:9f:be: 88:f4:38:90:ba:ab:60:05:4b:20:5f:33:98:41:eb: 99:e7:ef:93:a8:01:3d:e1:82:3c:cc:d5:87:2d:09: 7d:68:8c:9d:e4:74:ed:77:e0:7f:05:57:69:b3:05: 39:87:2f:04:7b:fe:98:32:ce:f0:84:c5:96:94:2a: ee:cf:d7:81:31:90:a5:4f:19:5b:4e:83:25:67:6a: a0:84:a0:7c:64:ee:2d:b9:f1:f2:8f:36:e0:2c:0b: 02:6b:c8:32:96:5b:b4:03:fa:b0:7d:00:40:0c:ea: f6:52:0c:31:ab:e0:20:42:0b:9d:43:b6:0f:05:e3: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.100.0/24 194.42.200.0/24 195.189.240.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212542 214685 Signature Algorithm: sha256WithRSAEncryption 43:e8:cc:32:13:ad:3d:f2:81:2c:c9:6c:ee:0f:c0:9d:b1:4b: 01:66:e8:28:65:6f:77:5d:49:b1:89:c7:f0:e9:8a:7c:68:41: 37:31:ac:1c:4b:f5:d2:ce:e8:b2:3a:e9:44:74:29:8b:d4:c2: c3:56:90:54:3e:68:f4:81:a6:0b:53:ca:72:cf:dc:e3:07:1e: 96:c7:9a:be:5a:77:d7:2a:98:64:81:71:45:66:a7:d2:49:94: 3e:8c:d0:fe:4a:99:66:f5:11:90:4a:4c:f2:b6:34:62:a1:32: 70:1a:72:6d:2a:53:be:1b:f7:0f:48:ec:db:e1:03:30:66:12: 76:f5:64:29:f0:c3:5b:ab:dd:39:70:f7:be:28:41:71:c8:2b: 5b:d7:a6:49:e8:e7:83:94:51:d8:f8:78:2b:0b:14:e0:a5:01: b9:7c:76:10:b0:d9:38:f3:0b:1a:1b:9b:5f:eb:36:2f:0a:8d: fa:77:cb:d1:1c:15:0d:5b:4d:1c:00:8f:c8:bd:3f:bc:85:dc: 17:3a:5c:bd:9a:7f:0b:e5:74:6d:fb:dd:d9:8b:e6:4f:fd:a7: aa:e7:c7:cb:e1:4e:3f:f8:43:51:88:fd:0e:0b:5b:0a:32:89: d1:83:b1:53:3b:90:58:ef:37:76:7c:3b:4c:13:81:28:a0:fb: 45:26:9f:87 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7Nj22QbCf8NzSfnlk1HntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTk0MmIyNzA2NzYxYzJiYTc1MzI4OTc4M2VkZjk4NWUzMzhmMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvAR0X1EBslFHjUBLwIea039YIOV oqJsP/pWIsA/QAct7y6efIjdnrCntjF9u/kpfP6SDK541jUYdGLts8iUhu55/5+i nsmxRU5qCtd1294m75vkgPdJ9cJ7oyhRh5gapus3+GWYAnXX+mnPKtz8D4XEK7GA HHbWvXt09bH9+q2hKgFNn76I9DiQuqtgBUsgXzOYQeuZ5++TqAE94YI8zNWHLQl9 aIyd5HTtd+B/BVdpswU5hy8Ee/6YMs7whMWWlCruz9eBMZClTxlbToMlZ2qghKB8 ZO4tufHyjzbgLAsCa8gyllu0A/qwfQBADOr2Ugwxq+AgQgudQ7YPBePF+QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMqUKycGdhwrp1Mol4Pt+YXjOPF3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2I4YzEz ZC1lN2QzLTRhYTktYTkxMS1lZDY0ODA1OTc3ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYjhjMTNk LWU3ZDMtNGFhOS1hOTExLWVkNjQ4MDU5NzdmMC8xL3lwUXJKd1oySEN1blV5aVhn LTM1aGVNNDhYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAW+lkAwQAwirIAwQAw73wMB8GCCsGAQUFBwEI AQH/BBAwDqAMMAoCAwM+PgIDA0adMA0GCSqGSIb3DQEBCwUAA4IBAQBD6MwyE609 8oEsyWzuD8CdsUsBZugoZW93XUmxicfw6Yp8aEE3MawcS/XSzuiyOulEdCmL1MLD VpBUPmj0gaYLU8pyz9zjBx6Wx5q+WnfXKphkgXFFZqfSSZQ+jND+Splm9RGQSkzy tjRioTJwGnJtKlO+G/cPSOzb4QMwZhJ29WQp8MNbq905cPe+KEFxyCtb16ZJ6OeD lFHY+HgrCxTgpQG5fHYQsNk48wsaG5tf6zYvCo36d8vRHBUNW00cAI/IvT+8hdwX Oly9mn8L5XRt+93Zi+ZP/aeq58fL4U4/+ENRiP0OC1sKMonRg7FTO5BY7zd2fDtM E4EooPtFJp+H -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:42 2026 by rpki-client