This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer File: zybJGvCrJmijYBstlX3EzgAtWYY.cer (raw, json) Hash identifier: oUGaT45NnhfESWo0n0FxvSd86zXDXWauPwP8MlE98Yk= Subject key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB4DED4EB41070757024C783EF836A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208011 IP: 194.156.190.0/23 IP: 194.156.198.0/23 IP: 2a0f:43c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4d:ed:4e:b4:10:70:75:70:24:c7:83:ef:83:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:81:ec:76:2e:30:a7:71:74:65:cb:67:c1: 83:a8:a1:80:c0:c1:6a:a4:6d:90:8b:81:d0:09:41: 1a:4a:a0:36:6c:f0:84:31:cb:1e:54:9b:a4:81:04: df:68:e3:bd:0e:12:eb:e0:a2:8f:e0:fd:2b:7b:13: fe:a2:34:8b:79:d3:a6:75:3e:bb:10:c0:86:60:95: ce:42:8a:57:d8:a3:c0:79:37:46:6f:5c:83:ef:e9: 2b:62:76:d2:d6:2f:d5:9a:09:ba:9c:94:c7:11:ae: 63:9c:6a:3e:d1:9d:a9:e7:71:54:b3:47:31:d2:bd: 4b:dd:c9:89:2a:84:08:b7:c4:13:23:27:88:09:9f: 9f:c2:54:ce:80:ad:cc:44:b0:10:8a:c5:87:41:20: de:f8:a8:42:e2:77:5a:93:94:fa:19:81:d8:ff:9c: 0d:da:e5:d7:aa:3f:0d:cf:19:c0:02:77:6f:96:dc: 07:31:1a:35:86:0a:e7:78:d7:38:68:7f:a4:09:e5: ec:85:32:62:dd:ae:26:04:32:cc:0e:97:66:5d:4a: 6f:b4:6f:87:0a:fb:3e:40:95:9b:4f:60:e4:cd:6a: f2:7f:92:6c:6c:a2:c5:32:02:68:14:25:3f:84:52: 28:91:21:4e:f0:fe:86:28:e2:b8:29:d4:5b:3d:6e: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.190.0/23 194.156.198.0/23 IPv6: 2a0f:43c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208011 Signature Algorithm: sha256WithRSAEncryption a7:5f:97:3a:a0:d9:c3:e0:9e:3f:51:47:59:73:ed:d6:c4:8d: 17:6c:7a:92:0d:57:f6:4e:44:9e:c0:dd:73:56:0b:e8:cc:6c: 2d:9e:f2:70:d9:58:9e:49:78:e4:fd:c9:cc:51:4b:bb:3d:7c: 02:04:ab:92:52:16:81:78:c0:f7:50:12:da:95:87:e6:51:14: f0:a8:76:f6:d1:ae:36:88:66:d9:ed:24:6f:6d:f3:89:14:5f: 51:3b:59:38:21:87:6b:ef:cc:9e:23:3f:0d:b4:f1:44:e4:ee: 81:8e:bb:44:c8:2a:5d:f1:6a:4e:5f:e6:76:eb:de:8c:f5:c3: ea:0e:5c:4d:e0:c4:20:1d:3e:6b:1f:eb:a1:0e:27:37:e0:e5: 86:fb:dd:b6:1f:40:3b:4d:b7:cc:72:47:83:81:8f:e9:73:75: b8:64:e0:06:1a:54:8a:41:33:75:bc:c3:73:57:1b:2e:b8:25: b3:a2:21:37:40:bc:23:78:00:22:1b:94:15:87:90:0b:1a:82: 7f:4c:a2:38:61:a8:30:44:37:62:51:ee:98:7d:32:32:31:be: fe:49:d2:70:42:ce:5d:b8:f1:9e:99:a1:3e:a3:41:94:b7:b8: 0d:75:06:e7:3b:05:75:94:0f:53:23:3e:6b:6a:ad:ff:50:e7: d3:9e:2f:de -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt2603tTrQQcHVwJMeD74NqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjI2YzkxYWYwYWIyNjY4YTM2MDFiMmQ5NTdkYzRjZTAwMmQ1OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWKB7HYuMKdxdGXLZ8GDqKGAwMFq pG2Qi4HQCUEaSqA2bPCEMcseVJukgQTfaOO9DhLr4KKP4P0rexP+ojSLedOmdT67 EMCGYJXOQopX2KPAeTdGb1yD7+krYnbS1i/Vmgm6nJTHEa5jnGo+0Z2p53FUs0cx 0r1L3cmJKoQIt8QTIyeICZ+fwlTOgK3MRLAQisWHQSDe+KhC4ndak5T6GYHY/5wN 2uXXqj8NzxnAAndvltwHMRo1hgrneNc4aH+kCeXshTJi3a4mBDLMDpdmXUpvtG+H Cvs+QJWbT2DkzWryf5JsbKLFMgJoFCU/hFIokSFO8P6GKOK4KdRbPW6ZqQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFM8myRrwqyZoo2AbLZV9xM4ALVmGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzc2ZGRk Ny0wYWYyLTQzY2UtOTg1OS02YmM4Mzk0NjU2YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNzZkZGQ3 LTBhZjItNDNjZS05ODU5LTZiYzgzOTQ2NTZiNy8xL3p5YkpHdkNySm1pallCc3Rs WDNFemdBdFdZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwpy+AwQBwpzGMA0EAgACMAcDBQAqD0PAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsizANBgkqhkiG9w0BAQsFAAOCAQEAp1+X OqDZw+CeP1FHWXPt1sSNF2x6kg1X9k5EnsDdc1YL6MxsLZ7ycNlYnkl45P3JzFFL uz18AgSrklIWgXjA91AS2pWH5lEU8Kh29tGuNohm2e0kb23ziRRfUTtZOCGHa+/M niM/DbTxROTugY67RMgqXfFqTl/mduvejPXD6g5cTeDEIB0+ax/roQ4nN+Dlhvvd th9AO023zHJHg4GP6XN1uGTgBhpUikEzdbzDc1cbLrgls6IhN0C8I3gAIhuUFYeQ CxqCf0yiOGGoMEQ3YlHumH0yMjG+/knScELOXbjxnpmhPqNBlLe4DXUG5zsFdZQP UyM+a2qt/1Dn054v3g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:24 2026 by rpki-client