This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer File: yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer (raw, json) Hash identifier: OKQtf6IRubrI+Q4byL+B3DR3jAC2LhUPwZPuBfOS8P0= Subject key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A6F842292BDE671003239D2DA24FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35546 IP: 80.241.144.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6f:84:22:92:bd:e6:71:00:32:39:d2:da:24:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caacc4febb487996d4ee01d53b11f84203ca8367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:4d:4f:89:80:3a:ad:92:01:7c:9d:d9:94: 91:de:34:f3:c1:da:a4:ec:ac:c1:ff:29:de:fe:c7: b6:d4:84:35:77:e6:c1:9a:3c:7c:b7:e2:38:e3:ac: 3f:18:1e:54:19:08:c7:ea:0c:7d:17:3c:79:8c:b0: df:7a:07:36:91:8b:46:d1:09:43:67:f0:30:57:34: be:21:4c:4d:41:e6:7c:ae:0e:2d:04:aa:aa:4a:f6: 5c:e2:13:cb:74:20:39:aa:20:1e:bf:bc:73:28:d6: db:b7:70:f8:fb:63:73:7b:02:75:e4:ef:1d:0f:65: 95:68:11:b5:f2:ca:ba:de:a3:48:8a:c7:b4:21:5a: b0:8e:49:42:5d:25:7e:a2:87:4f:72:19:f8:8b:0d: 33:47:17:56:d5:1b:46:06:f0:a2:15:6b:87:8a:56: 90:eb:b7:84:b2:92:08:55:76:46:c0:ca:02:a5:b8: d6:30:48:22:87:5f:12:84:15:7d:9e:88:9f:db:f7: c0:f9:26:1b:ef:5a:e2:00:06:02:b1:08:80:9d:fd: 5c:98:08:62:7e:cf:58:9f:93:61:1d:fa:cd:ed:be: 15:16:68:be:15:52:a0:9d:c2:9c:8a:90:d0:bb:fb: c0:07:2d:ec:d8:26:5e:46:00:91:aa:c7:35:84:7c: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.241.144.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35546 Signature Algorithm: sha256WithRSAEncryption 33:f6:b2:b1:ec:e5:40:d2:37:98:a6:8e:fb:99:b4:69:1e:37: 20:8f:06:78:8b:5c:d4:ae:f8:26:76:ac:8d:ad:a0:ba:7b:b2: a8:19:f3:df:ba:27:96:94:42:5f:72:e7:7a:b8:72:64:64:cf: 32:16:91:c1:44:17:b9:22:3d:80:b5:29:e3:73:d9:06:50:f7: b4:2c:d2:a8:f2:91:77:1c:11:5c:93:2a:51:6f:8e:bf:d4:0a: ae:85:c8:3f:6e:aa:ef:f7:1c:4c:c4:a2:98:81:86:5a:da:af: 52:f7:0e:8f:69:8c:34:45:66:9f:d7:94:83:f4:2c:5c:06:72: fa:72:77:5e:c2:67:be:54:ee:f5:8c:5f:ec:c0:d7:82:fe:2a: 6f:7e:0b:26:be:60:ab:67:e7:37:7a:29:f2:ed:95:c9:2b:e0: 81:61:bb:83:a4:c9:f4:c4:b9:5a:01:fb:f1:83:2b:29:f3:65: 67:52:c7:5a:a0:18:7d:dd:c4:a6:3f:05:e0:02:52:8e:6a:25: d8:15:5a:83:9a:08:01:28:a8:60:05:03:0d:48:bf:04:28:a8: ac:17:f1:2e:5b:b6:65:2c:1d:c9:86:c5:6e:dd:26:54:da:05: 24:c3:6a:36:35:94:7b:43:b8:da:23:65:93:2e:23:b9:10:f2: 19:cd:7a:7a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6Wm+EIpK95nEAMjnS2iT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWFjYzRmZWJiNDg3OTk2ZDRlZTAxZDUzYjExZjg0MjAzY2E4MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27ZNT4mAOq2SAXyd2ZSR3jTzwdqk 7KzB/yne/se21IQ1d+bBmjx8t+I446w/GB5UGQjH6gx9Fzx5jLDfegc2kYtG0QlD Z/AwVzS+IUxNQeZ8rg4tBKqqSvZc4hPLdCA5qiAev7xzKNbbt3D4+2NzewJ15O8d D2WVaBG18sq63qNIise0IVqwjklCXSV+oodPchn4iw0zRxdW1RtGBvCiFWuHilaQ 67eEspIIVXZGwMoCpbjWMEgih18ShBV9noif2/fA+SYb71riAAYCsQiAnf1cmAhi fs9Yn5NhHfrN7b4VFmi+FVKgncKcipDQu/vABy3s2CZeRgCRqsc1hHw6swIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMqsxP67SHmW1O4B1TsR+EIDyoNnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzcxYjJh Yi0xNTdlLTQ4MjAtYTU4Yi1hN2VkYzRjOTk5NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNzFiMmFi LTE1N2UtNDgyMC1hNThiLWE3ZWRjNGM5OTk0Ny8xL3lxekVfcnRJZVpiVTdnSFZP eEg0UWdQS2cyYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEUPGQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCK2jANBgkqhkiG9w0BAQsFAAOCAQEAM/aysezlQNI3mKaO+5m0aR43II8GeItc 1K74Jnasja2gunuyqBnz37onlpRCX3LnerhyZGTPMhaRwUQXuSI9gLUp43PZBlD3 tCzSqPKRdxwRXJMqUW+Ov9QKroXIP26q7/ccTMSimIGGWtqvUvcOj2mMNEVmn9eU g/QsXAZy+nJ3XsJnvlTu9Yxf7MDXgv4qb34LJr5gq2fnN3op8u2VySvggWG7g6TJ 9MS5WgH78YMrKfNlZ1LHWqAYfd3Epj8F4AJSjmol2BVag5oIASioYAUDDUi/BCio rBfxLlu2ZSwdyYbFbt0mVNoFJMNqNjWUe0O42iNlky4juRDyGc16eg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:39 2026 by rpki-client