This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer (raw, json) Hash identifier: bSTr61wjMBzIVotewBp7Xq7vOTLh9qZR1kk+PcppdMs= Subject key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA126469F9A8DF1883A3D9C574DC7A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214296 IP: 194.9.66.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:12:64:69:f9:a8:df:18:83:a3:d9:c5:74:dc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:60:52:b3:0a:af:b5:4d:46:70:51:f6:ad: 81:b2:d0:53:76:5b:94:23:be:a7:da:39:cc:d4:84: d1:2f:09:61:61:2d:e9:b9:66:14:d8:96:c1:85:f1: 4f:d6:d1:ac:3c:47:af:28:a5:e1:e3:a0:7e:e4:e2: aa:10:74:8c:15:54:bd:63:da:67:47:e6:25:0e:3c: b8:c0:4f:bd:96:17:9d:40:42:14:a9:6b:f6:61:82: b5:2d:78:ac:0a:89:89:61:9b:e9:f3:c5:26:88:4a: 47:e5:ad:8c:b4:f5:a1:91:b3:9c:68:43:b1:c8:91: 8a:04:ee:6b:03:80:37:ee:a9:08:e7:89:54:27:50: 9e:eb:5f:0c:8d:dd:0f:bb:30:5c:c7:89:c4:e8:ed: 68:15:a7:a3:80:de:63:71:3e:c0:88:26:57:2e:24: 50:0a:ac:1e:75:1b:93:19:45:af:17:c7:af:04:01: 9a:86:49:04:a4:9e:72:c8:4e:42:50:d0:37:69:41: bb:f9:e9:46:55:ad:32:b5:73:06:6a:e2:79:ab:5e: 44:c9:3f:e3:5f:57:0a:7b:60:13:51:e0:bd:26:33: b4:1a:7f:62:52:9f:ab:81:ff:bf:48:f8:ea:4f:95: 3f:c2:b3:7a:b6:ae:00:59:37:15:fd:40:6e:5b:44: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.66.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214296 Signature Algorithm: sha256WithRSAEncryption 8c:dc:c7:85:92:44:ba:70:41:08:06:55:99:eb:e0:29:5e:da: 6a:34:73:e7:48:56:35:83:68:03:36:71:03:44:7a:c3:8a:b8: b4:ee:a2:a6:f0:7c:e2:72:67:32:d4:0a:ef:b7:fb:4a:a3:fe: cd:42:ad:1a:65:ba:e0:e5:08:f6:f8:67:16:34:6f:7c:99:ab: f7:70:01:aa:f5:06:1b:6d:36:f1:c5:40:7f:4c:d8:49:22:67: 6f:96:a2:45:e7:1c:a2:be:35:5f:61:1d:fe:91:13:5b:b5:5b: d4:a8:a3:4c:a1:12:53:a7:67:70:95:6b:ae:ce:a7:c1:28:b9: 85:38:76:8d:dc:90:b2:a8:61:2e:e4:aa:e2:c8:25:98:bc:11: 56:7e:c3:c3:53:67:f6:e1:17:e0:da:83:80:f4:d5:b2:cf:a2: 2b:44:cf:10:22:cd:0e:c5:b9:98:23:6c:51:9c:36:bd:2d:1d: 86:9f:3b:30:4e:e4:80:cb:d4:c1:2e:48:83:b7:2d:e2:6f:d3: 8b:c8:25:7f:12:e5:99:e8:28:9c:41:6d:da:ca:f3:49:90:c5: 9c:65:26:e9:b3:f0:18:8b:ca:a4:cf:a2:33:56:a2:c4:3f:55: 53:41:3b:f2:dc:4f:44:3d:14:d8:30:5e:66:20:71:b3:9e:af: da:9b:c9:e5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yhJkafmo3xiDo9nFdNx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWMyNDExNWEyMmM4ZDQxMjFhNGEwNjc1OGFhODY5YmQxYzkzYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8pgUrMKr7VNRnBR9q2BstBTdluU I76n2jnM1ITRLwlhYS3puWYU2JbBhfFP1tGsPEevKKXh46B+5OKqEHSMFVS9Y9pn R+YlDjy4wE+9lhedQEIUqWv2YYK1LXisComJYZvp88UmiEpH5a2MtPWhkbOcaEOx yJGKBO5rA4A37qkI54lUJ1Ce618Mjd0PuzBcx4nE6O1oFaejgN5jcT7AiCZXLiRQ CqwedRuTGUWvF8evBAGahkkEpJ5yyE5CUNA3aUG7+elGVa0ytXMGauJ5q15EyT/j X1cKe2ATUeC9JjO0Gn9iUp+rgf+/SPjqT5U/wrN6tq4AWTcV/UBuW0T+jwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMrCQRWiLI1BIaSgZ1iqhpvRyToeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzNlOWQ5 OS02MTBlLTQ1YjktYjc0OS01OGNhNDVmMmViYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvM2U5ZDk5 LTYxMGUtNDViOS1iNzQ5LTU4Y2E0NWYyZWJhOC8xL3lzSkJGYUlzalVFaHBLQm5X S3FHbTlISk9oNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwglCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNFGDANBgkqhkiG9w0BAQsFAAOCAQEAjNzHhZJEunBBCAZVmevgKV7aajRz50hW NYNoAzZxA0R6w4q4tO6ipvB84nJnMtQK77f7SqP+zUKtGmW64OUI9vhnFjRvfJmr 93ABqvUGG2028cVAf0zYSSJnb5aiReccor41X2Ed/pETW7Vb1KijTKESU6dncJVr rs6nwSi5hTh2jdyQsqhhLuSq4sglmLwRVn7Dw1Nn9uEX4NqDgPTVss+iK0TPECLN DsW5mCNsUZw2vS0dhp87ME7kgMvUwS5Ig7ct4m/Ti8glfxLlmegonEFt2srzSZDF nGUm6bPwGIvKpM+iM1aixD9VU0E78txPRD0U2DBeZiBxs56v2pvJ5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:59 2026 by rpki-client