This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer File: yuBptmPuJf0TVZEB2sHVAyuf1m4.cer (raw, json) Hash identifier: JqQ66lQQW5NKpV3AnI0vol/F38trwtGOcWMG9ODhVJs= Subject key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78343D849AD1EFEE78A64A63A4E27471 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56346 IP: 185.131.252.0/22 IP: 2a03:a260::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3d:84:9a:d1:ef:ee:78:a6:4a:63:a4:e2:74:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cae069b663ee25fd13559101dac1d5032b9fd66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:7a:d8:04:62:22:7c:ad:7d:a6:54:96:4d: 74:08:00:e5:4f:ef:34:61:07:52:f0:95:fe:09:7e: 85:5a:54:8f:35:48:b6:bf:dc:eb:91:fe:e4:f8:d5: 52:f6:55:42:92:93:10:e7:7b:bb:5a:82:32:af:a2: 23:d8:f0:dc:7b:ac:f3:7a:49:b1:5e:44:5b:18:2c: 9d:24:e9:07:93:fe:8b:92:25:63:69:6b:3b:e1:97: 54:14:7f:71:2d:c4:07:27:56:e0:8c:ec:d0:2d:75: 97:bb:a8:2e:f9:aa:1a:7c:2d:34:b6:1a:b5:5a:40: c2:1a:ae:5e:4b:83:38:c6:82:3e:0a:43:da:fe:b1: 26:30:05:8e:a6:98:a1:46:1d:12:85:7c:cc:a7:56: 16:97:25:48:63:6f:78:f5:fb:bf:a0:a5:5f:2e:52: c8:c0:eb:3b:fc:85:83:61:df:1c:12:e5:7a:3d:b1: a5:eb:b1:11:53:d7:07:f7:a0:35:60:c3:f5:e0:25: a0:b5:df:e5:ba:d0:a1:1b:56:17:e2:61:54:e0:0a: 00:74:2e:56:cf:8d:53:dd:d8:eb:19:de:76:66:b5: c3:94:fc:09:83:87:43:cf:9c:10:88:b7:cf:3d:7a: f9:a9:59:f5:15:d7:66:67:93:5b:0a:74:c6:78:f5: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.252.0/22 IPv6: 2a03:a260::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56346 Signature Algorithm: sha256WithRSAEncryption 8a:32:19:e5:25:f7:03:6a:a8:63:70:91:46:61:f6:db:b5:0c: 09:e0:f7:5c:23:98:0d:10:dd:d5:6f:c4:9b:c5:4b:76:50:05: 0e:6b:88:ac:6e:25:93:87:19:0c:8c:5d:ef:38:e1:63:27:43: 9c:a6:68:8d:50:fe:5a:62:a1:54:71:a0:4e:f8:ce:39:d9:65: 42:ed:ad:44:17:ae:47:ba:53:b6:c9:a3:9e:53:26:3a:2b:f7: 0b:49:92:a4:ad:da:5e:40:a3:21:46:24:20:bc:0d:b7:82:d9: 9f:e4:a0:1c:eb:dd:48:6b:b0:0c:cf:3c:a6:47:86:d7:d7:99: ad:a6:26:d0:50:c6:62:6b:8b:a1:b8:3d:45:4e:09:ee:8a:da: dd:04:d1:c5:16:06:40:8e:11:6f:cd:25:4f:7a:e7:26:ef:85: 47:d3:00:63:13:e5:88:16:d3:db:9d:20:0b:c4:cf:b5:8e:b1: 06:bd:84:7f:c4:94:95:a3:f7:04:ad:96:8c:cf:c7:0e:a3:bb: 70:fe:02:d8:61:52:8c:0d:39:e4:a5:fc:8f:31:e4:f1:8c:eb: 62:6b:1b:20:77:31:27:bc:f4:35:f7:56:05:42:6f:58:0d:c1: 2d:17:9a:70:e2:36:63:d6:84:9e:fe:90:ef:38:2d:69:97:c4: 04:51:e5:9d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ND2EmtHv7nimSmOk4nRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWUwNjliNjYzZWUyNWZkMTM1NTkxMDFkYWMxZDUwMzJiOWZkNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gd62ARiInytfaZUlk10CADlT+80 YQdS8JX+CX6FWlSPNUi2v9zrkf7k+NVS9lVCkpMQ53u7WoIyr6Ij2PDce6zzekmx XkRbGCydJOkHk/6LkiVjaWs74ZdUFH9xLcQHJ1bgjOzQLXWXu6gu+aoafC00thq1 WkDCGq5eS4M4xoI+CkPa/rEmMAWOppihRh0ShXzMp1YWlyVIY2949fu/oKVfLlLI wOs7/IWDYd8cEuV6PbGl67ERU9cH96A1YMP14CWgtd/lutChG1YX4mFU4AoAdC5W z41T3djrGd52ZrXDlPwJg4dDz5wQiLfPPXr5qVn1FddmZ5NbCnTGePWdOwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMrgabZj7iX9E1WRAdrB1QMrn9ZuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2U1ZjVm OC0xY2ExLTQyMzQtOWEzYy1lY2NlZWVlMTEwYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZTVmNWY4 LTFjYTEtNDIzNC05YTNjLWVjY2VlZWUxMTBhNC8xL3l1QnB0bVB1SmYwVFZaRUIy c0hWQXl1ZjFtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYP8MA0EAgACMAcDBQAqA6JgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDcGjANBgkqhkiG9w0BAQsFAAOCAQEAijIZ5SX3A2qo Y3CRRmH227UMCeD3XCOYDRDd1W/Em8VLdlAFDmuIrG4lk4cZDIxd7zjhYydDnKZo jVD+WmKhVHGgTvjOOdllQu2tRBeuR7pTtsmjnlMmOiv3C0mSpK3aXkCjIUYkILwN t4LZn+SgHOvdSGuwDM88pkeG19eZraYm0FDGYmuLobg9RU4J7ora3QTRxRYGQI4R b80lT3rnJu+FR9MAYxPliBbT250gC8TPtY6xBr2Ef8SUlaP3BK2WjM/HDqO7cP4C 2GFSjA055KX8jzHk8YzrYmsbIHcxJ7z0NfdWBUJvWA3BLReacOI2Y9aEnv6Q7zgt aZfEBFHlnQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:33 2026 by rpki-client