This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer File: Y7gncq89YRuZsbpuPrbL_RaWU2M.cer (raw, json) Hash identifier: No9ua2CZ3YkqBaZtkguXZTUKLP5rqLblIfqsYvtNOdI= Subject key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D050F4793613C90F8EE7D52A5DE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209716 IP: 88.218.232.0/22 IP: 2a0c:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d0:50:f4:79:36:13:c9:0f:8e:e7:d5:2a:5d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:6f:24:f1:ce:a9:20:67:c6:31:3f:4b:4a: 0a:72:ae:26:5e:16:53:f1:22:69:32:d5:6a:22:88: 90:e3:ab:6c:0c:99:6c:4a:3c:70:e5:e0:55:72:b9: 1a:af:59:5e:c5:36:74:ce:db:02:e9:b4:16:22:cf: 51:77:02:a8:0e:2b:ca:d6:99:56:d4:ea:fc:96:ec: f1:38:39:31:5e:03:d8:de:19:fc:35:ec:bf:55:58: a5:89:5c:e1:13:cc:42:9e:8a:3c:40:41:5c:e8:0f: 87:12:37:26:bf:47:c1:be:f2:a3:c4:4e:bd:c2:8b: ec:23:78:a1:bd:11:bf:b7:6e:06:c1:c3:71:6b:f8: 61:af:77:24:8c:8f:8a:2c:5b:e5:1d:9f:bb:62:f1: 3a:74:c7:10:6d:6f:25:f7:88:26:84:2d:65:97:d3: 83:d8:1a:72:e9:b0:0d:e7:02:2d:a0:f7:e9:dd:f1: ce:45:87:0e:09:e8:d0:21:05:b1:0e:2a:79:e7:92: db:9e:e6:6d:a9:da:66:a2:be:40:2c:68:ed:59:77: 6a:c1:4a:88:93:aa:3d:79:53:7f:fa:17:2a:30:29: 38:8c:84:a3:19:8b:4c:d3:cc:04:8c:20:87:c8:bf: 98:b4:48:21:50:e2:f8:71:97:a9:86:40:1e:68:77: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.232.0/22 IPv6: 2a0c:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209716 Signature Algorithm: sha256WithRSAEncryption 04:6c:88:e8:fc:89:ee:44:e4:08:bc:e0:59:3e:b8:64:0e:21: cc:14:53:60:e3:ed:78:a6:28:d1:97:bd:0e:17:a4:6f:a3:3b: 7c:45:86:69:41:00:47:5c:63:49:96:3a:31:25:22:df:3d:2d: 98:d2:e3:89:c5:47:f5:3e:2b:b4:a0:ed:f9:bb:8a:b8:30:50: b7:ca:ef:40:2d:a5:6f:99:50:e6:9f:42:f2:c1:96:37:0a:db: 06:8b:a7:c4:1b:5c:f9:ca:27:9e:6d:05:82:36:30:14:96:1e: a1:31:8a:b4:31:84:2f:6e:15:f9:e5:9d:2c:c3:6c:b9:c3:bf: f5:22:aa:5d:2c:49:d3:da:5c:5f:0a:8d:2a:59:7a:de:2e:c8: 0d:71:0c:1a:95:f8:c6:4e:a2:58:e8:ac:03:e3:51:d2:cd:99: f7:ca:47:c5:ce:91:b9:ef:fa:e0:fb:bd:d7:d4:7a:fd:63:02: d6:d5:26:b7:2a:8b:a9:9e:ee:a4:72:e0:5f:8d:8e:57:8e:dc: 15:1f:00:67:04:b2:2e:8c:a5:0b:1e:30:57:3e:88:c6:d5:a0: 21:c4:3e:8a:98:3c:c9:a6:22:6e:29:15:35:32:3c:f5:ae:d7: b1:77:a5:97:c4:9d:c0:ee:dc:ac:e9:da:5e:80:bf:75:05:0b: f6:a7:99:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ENBQ9Hk2E8kPjufVKl3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2I4Mjc3MmFmM2Q2MTFiOTliMWJhNmUzZWI2Y2JmZDE2OTY1MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQtvJPHOqSBnxjE/S0oKcq4mXhZT 8SJpMtVqIoiQ46tsDJlsSjxw5eBVcrkar1lexTZ0ztsC6bQWIs9RdwKoDivK1plW 1Or8luzxODkxXgPY3hn8Ney/VViliVzhE8xCnoo8QEFc6A+HEjcmv0fBvvKjxE69 wovsI3ihvRG/t24GwcNxa/hhr3ckjI+KLFvlHZ+7YvE6dMcQbW8l94gmhC1ll9OD 2Bpy6bAN5wItoPfp3fHORYcOCejQIQWxDip555LbnuZtqdpmor5ALGjtWXdqwUqI k6o9eVN/+hcqMCk4jISjGYtM08wEjCCHyL+YtEghUOL4cZephkAeaHc9rwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGO4J3KvPWEbmbG6bj62y/0WllNjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2NiMGQ5 MS04MjcwLTQ1NTAtOGZhYy0wY2UyMDM4YWFhN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvY2IwZDkx LTgyNzAtNDU1MC04ZmFjLTBjZTIwMzhhYWE3Yi8xL1k3Z25jcTg5WVJ1WnNicHVQ cmJMX1JhV1UyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCWNroMA0EAgACMAcDBQMqDK2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMzNDANBgkqhkiG9w0BAQsFAAOCAQEABGyI6PyJ7kTk CLzgWT64ZA4hzBRTYOPteKYo0Ze9Dhekb6M7fEWGaUEAR1xjSZY6MSUi3z0tmNLj icVH9T4rtKDt+buKuDBQt8rvQC2lb5lQ5p9C8sGWNwrbBounxBtc+connm0FgjYw FJYeoTGKtDGEL24V+eWdLMNsucO/9SKqXSxJ09pcXwqNKll63i7IDXEMGpX4xk6i WOisA+NR0s2Z98pHxc6Rue/64Pu919R6/WMC1tUmtyqLqZ7upHLgX42OV47cFR8A ZwSyLoylCx4wVz6IxtWgIcQ+ipg8yaYibikVNTI89a7XsXell8SdwO7crOnaXoC/ dQUL9qeZPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:43:03 2026 by rpki-client