This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer File: yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer (raw, json) Hash identifier: cQDQhUDWZ+/vJhowy+hPazyD58l8rVluY622i/aYwU8= Subject key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366CB5B33ADA460D9CFC71CF011883 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208729 IP: 185.75.84.0/22 IP: 2a03:200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6c:b5:b3:3a:da:46:0d:9c:fc:71:cf:01:18:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:02:d0:76:8d:a7:ba:94:20:4b:ea:7b:4f: 4c:8e:84:da:ba:b9:75:41:fc:a6:26:64:6c:cd:57: 8e:41:6a:33:66:02:0d:aa:1e:8a:4b:72:6a:90:50: 77:a0:3d:0b:7d:29:04:53:76:42:df:9b:37:c0:5b: f5:4b:93:dd:71:42:61:3f:4e:95:99:8e:f0:04:ed: c5:61:9b:64:15:40:01:54:8d:11:50:10:f0:93:03: b9:7f:64:21:c0:95:a6:c2:77:9b:45:58:ad:f3:bc: a6:59:8f:b4:af:87:ce:c5:43:5a:80:83:67:4e:40: 2e:18:5f:cb:ab:49:73:7d:d4:42:0d:4a:fb:df:38: 56:bf:e1:82:b8:90:51:a9:ce:b1:5d:1e:52:5c:e8: 1d:fa:ee:1a:a8:d0:38:df:f1:43:8c:61:ec:2f:cc: b3:90:61:7a:9f:8e:40:c0:e1:2d:f2:db:9b:fc:f5: f4:4c:3e:78:39:2e:92:14:a3:de:e8:d9:25:48:bc: e6:d8:b2:ec:d2:18:51:2b:73:76:c6:8d:36:ce:8b: b2:e4:c9:1c:ce:e1:a5:b3:9b:ed:6e:3c:64:94:97: c3:06:12:e5:b1:38:76:15:89:cb:0e:bb:ac:09:b3: d0:85:75:0f:b3:45:23:f1:2f:9c:2c:ba:1e:ca:1b: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.84.0/22 IPv6: 2a03:200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208729 Signature Algorithm: sha256WithRSAEncryption 7a:1f:ed:b7:3c:ad:7d:e3:81:1b:67:44:16:24:f5:0c:5a:40: a7:17:b9:f2:b5:3d:8c:68:26:e5:59:e7:1e:5a:49:98:3d:3f: 6e:8a:d2:fb:5c:b6:83:26:12:33:da:d7:03:4f:1a:9b:85:d9: e3:9e:23:48:1b:28:e7:1d:6d:5b:bc:74:b0:00:9f:f5:00:94: 4d:dd:ce:6b:fd:8b:73:73:54:0a:05:12:fc:a9:f8:fc:d8:90: ff:cd:08:e0:d2:9d:76:e5:c3:05:e0:d3:2d:20:31:cb:f3:6f: 78:f7:2a:39:0f:03:6c:2b:22:f5:82:29:32:92:19:0f:c2:09: d9:e9:4f:62:80:7c:a7:91:ae:c9:72:5d:dd:37:10:dc:29:c7: e2:c3:91:ff:44:39:c3:88:6a:04:33:ec:19:27:da:e9:87:a8: ae:1a:08:46:4b:5b:ef:27:93:2a:98:4e:3b:32:bd:75:24:56: 6e:94:00:fa:3b:a6:f7:c9:a6:44:1e:94:34:8e:65:69:1d:c8: a6:0c:39:7e:86:34:b8:0a:45:17:83:d3:73:3b:70:a9:16:c7: ce:98:ac:3e:38:41:fd:3a:12:72:d1:c7:ec:45:f8:3a:1c:08: 8c:fc:12:79:94:48:54:bb:40:d6:32:ec:fe:73:1e:1e:c7:a0: 31:7f:f6:14 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7Nmy1szraRg2c/HHPARiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjJhNDlmYmExNDllMWExYjEzMTM5YmQwMTYwMWM4NmNkMjk1OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpEC0HaNp7qUIEvqe09MjoTaurl1 QfymJmRszVeOQWozZgINqh6KS3JqkFB3oD0LfSkEU3ZC35s3wFv1S5PdcUJhP06V mY7wBO3FYZtkFUABVI0RUBDwkwO5f2QhwJWmwnebRVit87ymWY+0r4fOxUNagINn TkAuGF/Lq0lzfdRCDUr73zhWv+GCuJBRqc6xXR5SXOgd+u4aqNA43/FDjGHsL8yz kGF6n45AwOEt8tub/PX0TD54OS6SFKPe6NklSLzm2LLs0hhRK3N2xo02zouy5Mkc zuGls5vtbjxklJfDBhLlsTh2FYnLDrusCbPQhXUPs0Uj8S+cLLoeyht/2wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMsqSfuhSeGhsTE5vQFgHIbNKVilMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzkxMDIz Yy0yMTQ3LTQ5YjktYjI2Ny02MmQ0YTFmMWE1MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvOTEwMjNj LTIxNDctNDliOS1iMjY3LTYyZDRhMWYxYTUwYy8xL3l5cEotNkZKNGFHeE1UbTlB V0FjaHMwcFdLVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUtUMA0EAgACMAcDBQAqAwIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvWTANBgkqhkiG9w0BAQsFAAOCAQEAeh/ttzytfeOB G2dEFiT1DFpApxe58rU9jGgm5VnnHlpJmD0/borS+1y2gyYSM9rXA08am4XZ454j SBso5x1tW7x0sACf9QCUTd3Oa/2Lc3NUCgUS/Kn4/NiQ/80I4NKdduXDBeDTLSAx y/NvePcqOQ8DbCsi9YIpMpIZD8IJ2elPYoB8p5GuyXJd3TcQ3CnH4sOR/0Q5w4hq BDPsGSfa6YeorhoIRktb7yeTKphOOzK9dSRWbpQA+jum98mmRB6UNI5laR3Ipgw5 foY0uApFF4PTcztwqRbHzpisPjhB/ToSctHH7EX4OhwIjPwSeZRIVLtA1jLs/nMe HsegMX/2FA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:33 2026 by rpki-client