This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer File: yq7leeATIY9XE4ZBPixbK8JFqDY.cer (raw, json) Hash identifier: 9eD9ZR6HjgW+7GZW/L7hz02XP3LDJ3Bi59sAokHH6nc= Subject key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783431B5CA0F651EBB498E4E78771E8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208349 AS: 211933 IP: 5.35.120.0/22 IP: 31.10.6.0/23 IP: 45.134.124.0/22 IP: 77.105.156.0/22 IP: 185.31.133.0/24 IP: 2a0e:7e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:31:b5:ca:0f:65:1e:bb:49:8e:4e:78:77:1e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caaee579e013218f571386413e2c5b2bc245a836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:ed:9b:10:a6:4f:0d:ac:87:e3:02:ce:4d: 69:db:13:59:ad:48:ac:1f:9f:fd:42:8a:ff:0b:2a: d9:ce:8a:25:f9:d8:5b:e2:5e:e7:88:87:c7:e5:0a: 2d:9d:12:f9:46:ef:16:fb:c9:6f:20:ed:80:c1:93: 42:d2:58:51:1d:53:e3:69:fd:f1:d5:ac:5a:e4:78: 52:b0:08:50:26:a1:1e:b0:87:82:9f:9b:fc:fb:93: a5:46:4d:b3:4c:07:77:30:6e:47:24:42:c7:93:81: d9:95:31:5d:e1:b9:f3:fe:91:fa:92:d6:35:c2:59: de:17:43:82:3c:5e:77:e7:e2:1f:af:ff:3a:7e:a4: d5:45:0b:d3:dc:16:50:d8:83:a6:df:1c:a1:85:27: ad:e2:b1:a0:11:ee:98:bf:b3:20:c7:2d:4c:a2:ec: 31:f0:e4:df:32:41:fe:98:af:cd:20:67:54:15:eb: cf:ea:b8:09:99:56:0a:93:4b:db:01:7e:94:a6:57: a1:ff:7e:81:fd:9b:36:6e:55:38:d2:22:e0:56:f3: 59:a7:8e:a8:d3:a6:7e:e6:9b:52:e6:f1:e9:21:8a: 75:34:c7:0e:44:74:86:e5:d5:47:12:fa:00:e1:39: 55:a0:a2:27:99:a7:bb:9c:82:10:a8:28:cd:11:8a: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.120.0/22 31.10.6.0/23 45.134.124.0/22 77.105.156.0/22 185.31.133.0/24 IPv6: 2a0e:7e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208349 211933 Signature Algorithm: sha256WithRSAEncryption 13:01:65:1b:e2:41:8e:56:91:27:3c:60:4c:c1:39:f9:2d:7b: f1:4f:1d:9f:f5:c1:dd:d1:f8:aa:bb:1d:04:b2:88:05:bc:94: f8:04:b2:2b:62:ea:ee:15:c2:7d:ab:ae:99:86:16:0e:ba:ef: 41:fb:25:65:c2:95:a4:54:8b:18:71:59:ae:8e:66:71:04:10: 22:f5:e2:3a:7d:eb:56:08:7a:35:43:63:13:dd:47:91:7f:e0: ab:a7:3c:84:a4:13:fe:44:10:b8:ae:49:48:fc:ad:2f:f9:10: 8f:9f:a8:61:e4:bc:ef:7e:48:79:5d:42:21:ea:2d:9f:70:92: fb:e2:ed:6b:50:81:ed:89:7d:7d:69:7d:0d:ec:d4:3a:e7:e6: a3:e5:83:05:f1:0e:c3:c5:a9:73:7c:92:d5:bb:cb:a1:3a:7e: 8e:b9:e6:e9:41:2b:b1:d0:a5:0c:41:48:bd:34:fa:15:e6:b0: 1a:e6:5b:32:64:13:b1:86:4f:03:ae:30:c8:03:aa:8f:29:f6: ad:ba:64:c7:23:15:47:fd:da:23:fd:38:40:cd:08:86:ed:c5: 79:67:52:ad:6e:ed:85:e2:cb:5e:7e:58:04:e3:17:4b:1a:9c: f4:85:06:e5:75:21:42:2f:6a:43:60:90:6a:c5:a1:da:6f:ad: 6e:15:da:38 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt4NDG1yg9lHrtJjk54dx6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWFlZTU3OWUwMTMyMThmNTcxMzg2NDEzZTJjNWIyYmMyNDVhODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMntmxCmTw2sh+MCzk1p2xNZrUis H5/9Qor/CyrZzool+dhb4l7niIfH5QotnRL5Ru8W+8lvIO2AwZNC0lhRHVPjaf3x 1axa5HhSsAhQJqEesIeCn5v8+5OlRk2zTAd3MG5HJELHk4HZlTFd4bnz/pH6ktY1 wlneF0OCPF535+Ifr/86fqTVRQvT3BZQ2IOm3xyhhSet4rGgEe6Yv7Mgxy1Mouwx 8OTfMkH+mK/NIGdUFevP6rgJmVYKk0vbAX6Upleh/36B/Zs2blU40iLgVvNZp46o 06Z+5ptS5vHpIYp1NMcORHSG5dVHEvoA4TlVoKInmae7nIIQqCjNEYoqUwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFMqu5XngEyGPVxOGQT4sWyvCRag2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4Lzc1OTg3 NC1lN2YyLTQ1ZmQtODE5ZC1hNWQxMTQ4ZjI1YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNzU5ODc0 LWU3ZjItNDVmZC04MTlkLWE1ZDExNDhmMjViZC8xL3lxN2xlZUFUSVk5WEU0WkJQ aXhiSzhKRnFEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCBSN4AwQBHwoGAwQCLYZ8AwQCTWmcAwQAuR+F MA0EAgACMAcDBQMqDn5AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMt3QIDAzvd MA0GCSqGSIb3DQEBCwUAA4IBAQATAWUb4kGOVpEnPGBMwTn5LXvxTx2f9cHd0fiq ux0EsogFvJT4BLIrYuruFcJ9q66ZhhYOuu9B+yVlwpWkVIsYcVmujmZxBBAi9eI6 fetWCHo1Q2MT3UeRf+CrpzyEpBP+RBC4rklI/K0v+RCPn6hh5Lzvfkh5XUIh6i2f cJL74u1rUIHtiX19aX0N7NQ65+aj5YMF8Q7DxalzfJLVu8uhOn6OuebpQSux0KUM QUi9NPoV5rAa5lsyZBOxhk8DrjDIA6qPKfatumTHIxVH/doj/ThAzQiG7cV5Z1Kt bu2F4steflgE4xdLGpz0hQbldSFCL2pDYJBqxaHab61uFdo4 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:46 2026 by rpki-client