This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yuDyZX221YxEden7gXNW4u3SzA8.cer File: yuDyZX221YxEden7gXNW4u3SzA8.cer (raw, json) Hash identifier: DSCAxvrPUsjhIqfRSuzOfZlpLVOL80LFWGte4sKAStA= Subject key identifier: CA:E0:F2:65:7D:B6:D5:8C:44:75:E9:FB:81:73:56:E2:ED:D2:CC:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ED1FEBCAAECE006CCC0FD65636D36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204467 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:fe:bc:aa:ec:e0:06:cc:c0:fd:65:63:6d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cae0f2657db6d58c4475e9fb817356e2edd2cc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:25:fd:d7:23:0f:03:75:51:23:23:81:a7: 28:b8:27:50:9a:f8:11:f7:d8:a0:ef:f7:00:7d:90: b9:f6:94:72:42:7d:0b:29:ae:50:01:73:8e:cb:62: 71:60:31:2e:f6:85:2c:e2:63:8f:4b:c7:33:1b:f1: 8c:1f:93:60:60:78:77:e4:cb:28:90:48:1b:b7:1c: 23:d7:cc:c0:9e:82:ac:04:0e:34:31:fe:06:5d:43: 8b:14:78:18:f4:c5:96:45:f0:3a:58:06:95:f7:e5: 27:1d:69:c6:bf:b2:67:92:da:e6:ce:cc:7c:d7:10: c4:c6:0b:ad:f4:da:4c:03:7e:9e:5a:5c:9d:a3:24: 41:af:86:c3:be:60:f9:9d:8f:5b:95:a4:3e:07:e1: 7b:9a:ab:bf:8f:be:aa:05:a2:85:92:a6:ab:10:db: 24:04:c7:09:f5:7b:35:9d:8b:d2:f3:1c:62:3c:24: bd:07:f5:d1:59:46:6e:a9:52:6d:7f:8a:44:1b:10: 0a:8e:d8:92:a2:a3:49:7f:22:f1:35:1f:fd:df:75: f7:60:be:6c:1d:e1:ac:64:86:cc:87:e0:8d:a6:2a: 1f:cc:a5:02:85:05:17:e6:fa:eb:ed:9e:ad:41:ac: c1:4d:07:a1:91:1c:d8:36:14:df:97:3a:a1:69:54: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E0:F2:65:7D:B6:D5:8C:44:75:E9:FB:81:73:56:E2:ED:D2:CC:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204467 Signature Algorithm: sha256WithRSAEncryption 21:52:03:f7:f2:e6:d5:a6:7b:29:9c:08:06:7c:b7:e7:7a:88: fd:02:d1:48:ac:d0:26:51:d4:e7:e0:7a:34:4d:e7:d8:8d:79: 14:26:c3:20:b5:51:2d:86:a1:72:40:8d:ad:17:8f:29:49:eb: 61:fe:e0:c9:1b:a4:14:98:e6:63:3f:1c:85:ba:30:08:7e:bc: 2f:da:cd:6d:99:65:c2:6f:1d:89:6d:17:94:d4:c2:d6:d1:aa: d1:e7:a2:e0:74:a5:8b:8a:f2:c4:36:f8:dc:99:a4:bb:e2:b3: ea:3c:a7:de:3e:95:15:71:6e:dc:65:26:20:a3:b8:c1:91:45: b7:08:47:40:a5:6a:c0:9a:fc:92:b8:18:3a:e8:c5:2e:77:51: 16:a7:ac:4e:81:80:fd:8b:cc:ad:60:b2:99:a0:92:66:08:02: 65:35:28:15:45:43:24:6c:f0:0a:8a:b4:46:e5:3b:40:40:fc: d2:e3:54:ba:e7:47:27:be:dc:9b:71:a5:d4:10:56:a4:4d:15: a5:50:b8:a6:d5:bc:d5:6a:7d:e5:aa:ab:1c:77:12:72:e7:ab: fa:b6:e1:aa:ec:63:a9:ba:c3:cd:2e:d0:23:67:32:9d:63:bf: 7b:49:b1:23:fd:e0:27:b9:69:90:ad:91:ca:f9:44:f6:95:17: cd:d0:20:cb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5ftH+vKrs4AbMwP1lY202MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWUwZjI2NTdkYjZkNThjNDQ3NWU5ZmI4MTczNTZlMmVkZDJjYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmUl/dcjDwN1USMjgacouCdQmvgR 99ig7/cAfZC59pRyQn0LKa5QAXOOy2JxYDEu9oUs4mOPS8czG/GMH5NgYHh35Mso kEgbtxwj18zAnoKsBA40Mf4GXUOLFHgY9MWWRfA6WAaV9+UnHWnGv7Jnktrmzsx8 1xDExgut9NpMA36eWlydoyRBr4bDvmD5nY9blaQ+B+F7mqu/j76qBaKFkqarENsk BMcJ9Xs1nYvS8xxiPCS9B/XRWUZuqVJtf4pEGxAKjtiSoqNJfyLxNR/933X3YL5s HeGsZIbMh+CNpiofzKUChQUX5vrr7Z6tQazBTQehkRzYNhTflzqhaVQzuQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMrg8mV9ttWMRHXp+4FzVuLt0swPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzAzN2Zm MS02OWI5LTQ0YjQtOGMwZS1hMTlhM2JlYjE1YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMDM3ZmYx LTY5YjktNDRiNC04YzBlLWExOWEzYmViMTViMi8xL3l1RHlaWDIyMVl4RWRlbjdn WE5XNHUzU3pBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeszANBgkqhkiG9w0BAQsFAAOCAQEAIVID9/Lm1aZ7 KZwIBny353qI/QLRSKzQJlHU5+B6NE3n2I15FCbDILVRLYahckCNrRePKUnrYf7g yRukFJjmYz8chbowCH68L9rNbZllwm8diW0XlNTC1tGq0eei4HSli4ryxDb43Jmk u+Kz6jyn3j6VFXFu3GUmIKO4wZFFtwhHQKVqwJr8krgYOujFLndRFqesToGA/YvM rWCymaCSZggCZTUoFUVDJGzwCoq0RuU7QED80uNUuudHJ77cm3Gl1BBWpE0VpVC4 ptW81Wp95aqrHHcScuer+rbhquxjqbrDzS7QI2cynWO/e0mxI/3gJ7lpkK2RyvlE 9pUXzdAgyw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:10 2026 by rpki-client