This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer (raw, json) Hash identifier: V8NMz/3mo9uVpFdOd1R6yvrH7lsJAVJ/yOQxK0MOfZA= Subject key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE8309D10EFB2E2D9AACC6FD205DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205375 IP: 185.220.84.0/22 IP: 2a0b:ef40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e8:30:9d:10:ef:b2:e2:d9:aa:cc:6f:d2:05:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:87:c7:66:20:98:b5:00:7c:fd:f6:af:70: 57:81:22:60:0e:51:4a:df:13:e6:c9:af:80:9c:af: 5e:aa:2b:7f:02:de:17:89:d9:4f:d3:7f:04:60:d9: df:5a:ae:9e:85:ab:f3:a3:1b:cd:57:77:91:84:3b: b8:57:f9:f0:36:3b:77:5e:36:16:8a:49:5c:a0:8b: 74:4a:1d:c6:0d:9e:ee:03:c2:2a:d0:2b:1b:94:90: da:ac:c4:14:d8:e5:c1:85:6d:f8:7d:10:a2:90:4c: 26:bc:2f:3c:d3:67:16:8a:7b:55:e4:fb:76:11:6c: 98:00:6c:25:c2:8f:22:e6:06:f4:cd:87:32:70:b1: 78:4b:42:97:c0:0b:09:6d:c8:d4:31:0e:69:03:55: 75:0e:1f:19:e4:34:93:ec:cb:2d:6e:5b:e3:69:b0: 48:39:dd:a2:a4:3f:ce:34:63:75:00:d0:bd:72:25: 90:10:84:58:26:d5:fa:e6:c5:c3:29:df:5f:54:22: 65:34:b1:6d:4c:31:5e:39:44:eb:eb:b1:4b:84:51: ca:fe:e0:9b:ba:9b:0b:5d:9d:be:81:8e:24:bf:de: f6:16:d7:dd:2e:bd:db:8d:7a:d2:18:89:ed:83:7f: 21:32:40:cd:97:22:00:d3:82:41:18:dd:9b:da:fc: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.84.0/22 IPv6: 2a0b:ef40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205375 Signature Algorithm: sha256WithRSAEncryption 7b:34:82:d6:e0:9a:a0:87:f3:1c:e6:ea:c1:d6:f6:b0:53:c7: 0c:85:4f:bd:68:02:37:6c:3d:0b:e7:9d:f1:19:19:0d:04:f9: 7a:d1:fd:1d:21:54:05:1e:14:b2:67:1d:61:a9:72:bc:e6:f5: 7f:df:67:b2:98:76:9d:41:07:62:9e:7e:ed:0d:71:de:66:92: cc:4b:24:00:46:0b:8b:42:5f:b8:07:ca:4d:63:d4:41:6a:05: 05:9c:85:06:eb:1a:9c:2d:0b:51:df:9e:a0:1a:89:c9:dc:d8: 09:64:53:2c:29:bd:d8:3c:33:e8:a0:94:2a:58:b1:1b:8a:b2: 7d:35:16:32:dc:e2:9b:c3:7d:74:a4:70:d3:b0:9d:02:88:5e: 42:d1:71:c5:0f:55:ff:13:d4:98:ae:4f:31:5f:bf:e2:74:05: fc:f0:b5:cb:55:af:78:65:5b:81:87:e3:28:89:e4:4b:04:4b: 7e:5e:ec:32:50:2c:ce:15:d7:fa:62:d7:03:ee:ca:ce:2d:9e: 1c:4a:d0:93:ac:9a:ab:18:a2:75:3f:c8:b4:23:3a:50:06:a5: 05:ae:b5:2c:83:cf:3f:82:42:b6:78:01:98:96:49:83:37:46: 68:30:1e:97:13:a1:52:66:13:81:62:78:bc:1c:40:6e:41:66: 08:72:f4:6e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26ugwnRDvsuLZqsxv0gXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWJlNmVhNmVmMzMwODllNTI1OWQyNDljNWIwZGZhYTEzYTk0ZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU+Hx2YgmLUAfP32r3BXgSJgDlFK 3xPmya+AnK9eqit/At4XidlP038EYNnfWq6ehavzoxvNV3eRhDu4V/nwNjt3XjYW iklcoIt0Sh3GDZ7uA8Iq0CsblJDarMQU2OXBhW34fRCikEwmvC8802cWintV5Pt2 EWyYAGwlwo8i5gb0zYcycLF4S0KXwAsJbcjUMQ5pA1V1Dh8Z5DST7MstblvjabBI Od2ipD/ONGN1ANC9ciWQEIRYJtX65sXDKd9fVCJlNLFtTDFeOUTr67FLhFHK/uCb upsLXZ2+gY4kv972FtfdLr3bjXrSGIntg38hMkDNlyIA04JBGN2b2vx1hwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMq+bqbvMwieUlnSScWw36oTqU14MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzA4ZDZi Zi1lZjg2LTRjNzQtYWEyMy1kMzM1YzIwNDI0MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMDhkNmJm LWVmODYtNGM3NC1hYTIzLWQzMzVjMjA0MjQwMy8xL3lyNXVwdTh6Q0o1U1dkSkp4 YkRmcWhPcFRYZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudxUMA0EAgACMAcDBQMqC+9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMiPzANBgkqhkiG9w0BAQsFAAOCAQEAezSC1uCaoIfz HObqwdb2sFPHDIVPvWgCN2w9C+ed8RkZDQT5etH9HSFUBR4UsmcdYalyvOb1f99n sph2nUEHYp5+7Q1x3maSzEskAEYLi0JfuAfKTWPUQWoFBZyFBusanC0LUd+eoBqJ ydzYCWRTLCm92Dwz6KCUKlixG4qyfTUWMtzim8N9dKRw07CdAoheQtFxxQ9V/xPU mK5PMV+/4nQF/PC1y1WveGVbgYfjKInkSwRLfl7sMlAszhXX+mLXA+7Kzi2eHErQ k6yaqxiidT/ItCM6UAalBa61LIPPP4JCtngBmJZJgzdGaDAelxOhUmYTgWJ4vBxA bkFmCHL0bg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:27 2026 by rpki-client