This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer File: 1-yqlrPybsP5rkR8eytPrVNRcs28.cer (raw, json) Hash identifier: bJyAThpxuBhB8VT+pksNAvlGUdjVBFMza7VzLiywjGc= Subject key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B363BAA480F7124AE09D2AAA113A52B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203466 IP: 188.208.196.0/23 IP: 188.214.194.0/24 IP: 213.134.13.0/24 IP: 2a06:f940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3b:aa:48:0f:71:24:ae:09:d2:aa:a1:13:a5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:61:5b:eb:80:46:86:bb:7b:06:90:1d:5e: 86:74:e2:4b:83:a0:07:ee:7a:2f:e3:8d:e9:b2:b2: 12:99:a6:68:bb:ed:22:c2:11:e2:49:33:97:1c:be: c0:70:f9:e1:31:76:0b:4a:2e:81:2a:86:a5:6a:4f: 1f:26:45:f3:6f:a5:5e:bc:ff:4a:3c:f8:c1:56:7a: 9b:42:b0:59:a1:b2:ac:6a:83:da:71:8a:b4:f9:3c: 5b:62:af:f4:77:9e:ff:30:c7:05:8a:3c:58:17:36: 65:40:4f:c7:b5:25:14:05:20:bb:34:0c:15:c3:cc: 4d:9b:1a:b5:d7:19:b6:f4:97:66:b4:dd:d5:a4:ce: 99:a1:41:b7:18:c1:98:59:41:5e:dc:65:cc:0b:92: ce:36:e2:51:a0:fa:f4:3a:83:40:a2:d1:90:0e:7b: 13:b8:62:c0:3d:f6:03:85:70:d5:52:3f:b3:74:09: 0d:e4:47:fd:5d:54:bd:fa:37:db:83:88:2b:b2:cb: 0f:5c:f2:21:b6:84:08:ef:e9:a6:86:7f:ec:d4:1b: 53:ef:1b:8d:7e:f5:22:9c:d7:eb:de:c8:af:ef:a2: 15:51:71:13:fe:b9:21:48:ca:3b:58:9f:28:10:4c: 38:b2:38:25:a6:1e:46:f6:8a:d3:21:c6:53:d7:22: 44:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.208.196.0/23 188.214.194.0/24 213.134.13.0/24 IPv6: 2a06:f940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203466 Signature Algorithm: sha256WithRSAEncryption a6:b2:d7:e3:94:72:96:c3:39:8c:0f:52:e7:54:92:99:df:25: 7d:e1:52:d8:81:f9:71:be:45:64:2b:7c:60:90:17:ef:8e:84: 8f:44:f5:17:5c:cd:fb:bd:cf:ca:9b:c4:fb:6b:1c:3e:6e:69: 34:5b:e6:4a:09:14:ef:e2:02:2c:5a:1c:97:25:b3:62:f5:cf: 5f:84:78:75:75:4e:27:ad:53:d5:a2:5a:7c:ab:af:ed:72:3e: 9c:16:1b:3c:21:01:86:06:84:70:80:e0:e8:ca:63:b4:ed:cf: 5c:2e:36:2b:dd:2e:d1:8d:5d:4a:cf:96:83:16:31:88:2b:0a: 93:0b:a9:dc:8b:f8:8a:bb:36:b0:1d:1d:47:f6:67:c7:d6:ca: 3f:c1:2c:f5:99:f4:86:2b:92:0d:e4:aa:3a:04:56:4d:6a:87: b6:bc:be:15:32:38:80:f0:e0:81:86:00:67:f8:d4:2c:5e:2f: b3:be:67:53:a8:fb:8a:d3:db:5b:c6:f4:51:a9:01:2b:c4:04: a5:9e:a2:71:a6:66:69:fb:ed:bd:9e:fa:79:70:75:34:99:e5: a8:62:ae:80:39:20:f5:78:60:db:9d:fe:a1:65:31:eb:fc:c2: 7c:02:5b:c4:e4:69:ec:59:41:11:f0:42:37:dd:13:27:9d:a7: fe:14:eb:fa -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt7NjuqSA9xJK4J0qqhE6UrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjJhYTVhY2ZjOWJiMGZlNmI5MTFmMWVjYWQzZWI1NGQ0NWNiMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6phW+uARoa7ewaQHV6GdOJLg6AH 7nov443psrISmaZou+0iwhHiSTOXHL7AcPnhMXYLSi6BKoalak8fJkXzb6VevP9K PPjBVnqbQrBZobKsaoPacYq0+TxbYq/0d57/MMcFijxYFzZlQE/HtSUUBSC7NAwV w8xNmxq11xm29JdmtN3VpM6ZoUG3GMGYWUFe3GXMC5LONuJRoPr0OoNAotGQDnsT uGLAPfYDhXDVUj+zdAkN5Ef9XVS9+jfbg4grsssPXPIhtoQI7+mmhn/s1BtT7xuN fvUinNfr3siv76IVUXET/rkhSMo7WJ8oEEw4sjglph5G9orTIcZT1yJEAQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFPsqpaz8m7D+a5EfHsrT61TUXLNvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2Q5ZTdl ZC0zYzBmLTRhOTItODcxNi1lZTA1N2NmOWMxNjEvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2Vk LTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2MS8xLzEteXFsclB5YnNQNXJrUjhl eXRQclZOUmNzMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEAbzQxAMEALzWwgMEANWGDTANBAIAAjAHAwUD Kgb5QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGsowDQYJKoZIhvcNAQELBQAD ggEBAKay1+OUcpbDOYwPUudUkpnfJX3hUtiB+XG+RWQrfGCQF++OhI9E9Rdczfu9 z8qbxPtrHD5uaTRb5koJFO/iAixaHJcls2L1z1+EeHV1TietU9WiWnyrr+1yPpwW GzwhAYYGhHCA4OjKY7Ttz1wuNivdLtGNXUrPloMWMYgrCpMLqdyL+Iq7NrAdHUf2 Z8fWyj/BLPWZ9IYrkg3kqjoEVk1qh7a8vhUyOIDw4IGGAGf41CxeL7O+Z1Oo+4rT 21vG9FGpASvEBKWeonGmZmn77b2e+nlwdTSZ5ahiroA5IPV4YNud/qFlMev8wnwC W8TkaexZQRHwQjfdEyedp/4U6/o= -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:27 2026 by rpki-client