This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer File: Y9krglYVmJTSubJfTYWYbBcnI8M.cer (raw, json) Hash identifier: KDYz7ljzb73a/a/tXDI20/Zspuaa+l/CYhBb1IIDFhU= Subject key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E11B069B84B50EFDD42488B0F2D32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29033 IP: 81.20.32.0/20 IP: 185.129.176.0/22 IP: 2a00:1fd0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:11:b0:69:b8:4b:50:ef:dd:42:48:8b:0f:2d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:36:68:73:fb:48:1d:ee:dd:18:38:eb:9c: 82:29:e4:d0:83:99:b7:cb:9f:f8:c5:bb:34:3a:58: cc:87:05:82:72:76:62:02:82:3a:ee:a9:c0:e6:c4: a1:62:cf:03:2d:70:06:22:10:3f:ca:f4:81:41:43: b9:aa:6f:e7:46:8f:0c:36:d5:da:a2:d7:d1:ad:0f: 79:78:b4:e8:a0:a5:d7:0d:af:bb:f4:1a:3d:eb:f8: 91:a1:bf:ba:41:96:f5:2f:ea:f2:73:50:b8:b8:1d: c9:80:b2:88:66:90:1f:be:fc:36:32:ad:57:ac:b8: 25:60:c6:3f:6c:5e:4d:c4:52:08:c0:9e:a2:b9:d2: a7:44:d0:fd:2d:b2:84:03:51:95:f8:40:40:2b:4f: 54:9a:2e:44:82:02:31:32:c6:96:3c:95:dc:57:16: 56:56:73:b4:70:51:89:38:aa:a3:05:9c:ee:c9:c1: 33:3c:fb:71:5f:a5:b1:d4:fa:a0:c9:4a:e6:7a:f9: 45:f3:73:3a:76:b8:03:e2:15:41:69:dd:ca:d8:a3: fa:cf:89:d9:be:da:41:a0:da:ba:43:ad:03:1c:c6: a5:a0:08:0d:57:df:b1:f1:09:45:95:d2:5e:de:50: 6b:aa:cf:12:b3:b7:80:f7:3c:43:5f:26:33:5a:ec: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.32.0/20 185.129.176.0/22 IPv6: 2a00:1fd0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29033 Signature Algorithm: sha256WithRSAEncryption 03:b4:80:51:9a:a0:e7:e1:e9:52:25:de:df:10:3a:6c:50:e2: 13:aa:e5:30:e5:c3:4a:80:03:f7:3b:f0:d8:b0:d4:a2:03:7f: 68:db:c3:78:bf:57:e2:39:a6:eb:5c:ee:6d:ef:f1:14:2e:59: fc:98:b7:4b:d4:ef:dd:6e:1b:ea:95:e8:45:74:cb:52:a0:ce: 8d:11:76:95:9b:93:62:42:55:8d:15:29:6d:ce:31:eb:63:37: 13:53:4e:2c:05:ca:83:cb:98:d2:7b:a3:75:fd:03:40:ea:89: 1d:ed:6c:11:8f:20:bc:d1:d6:42:4c:84:52:d5:3e:a3:84:31: 7a:aa:a7:05:94:84:58:42:76:f8:ef:3e:48:88:df:6d:f2:3b: b0:37:22:b9:f8:b0:b4:3c:c4:21:2a:84:f3:b4:4c:25:e4:6d: 00:dd:cd:b7:aa:71:48:82:0c:33:10:88:06:14:b0:28:32:cf: d9:45:8c:14:8d:24:9f:49:88:cc:f1:51:b9:ca:b0:fd:7e:d2: 57:4b:b1:26:3e:31:ad:fe:7d:fe:30:42:ad:c9:7d:59:1b:b3: 54:77:f0:27:ae:9d:d2:b3:ff:e0:5e:1f:58:d1:dd:4a:14:dc: 35:ce:2b:32:07:11:78:5e:6c:59:28:7a:b2:1b:a3:fc:44:83: 5d:a9:a2:59 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5fhGwabhLUO/dQkiLDy0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2Q5MmI4MjU2MTU5ODk0ZDJiOWIyNWY0ZDg1OTg2YzE3MjcyM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyak2aHP7SB3u3Rg465yCKeTQg5m3 y5/4xbs0OljMhwWCcnZiAoI67qnA5sShYs8DLXAGIhA/yvSBQUO5qm/nRo8MNtXa otfRrQ95eLTooKXXDa+79Bo96/iRob+6QZb1L+ryc1C4uB3JgLKIZpAfvvw2Mq1X rLglYMY/bF5NxFIIwJ6iudKnRND9LbKEA1GV+EBAK09Umi5EggIxMsaWPJXcVxZW VnO0cFGJOKqjBZzuycEzPPtxX6Wx1PqgyUrmevlF83M6drgD4hVBad3K2KP6z4nZ vtpBoNq6Q60DHMaloAgNV9+x8QlFldJe3lBrqs8Ss7eA9zxDXyYzWuwNFwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFGPZK4JWFZiU0rmyX02FmGwXJyPDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzI2ZDkx Ny04YzkxLTQ1YWItODQ0Mi1lNGU1MmFjMGZlZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvMjZkOTE3 LThjOTEtNDVhYi04NDQyLWU0ZTUyYWMwZmVmZS8xL1k5a3JnbFlWbUpUU3ViSmZU WVdZYkJjbkk4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEURQgAwQCuYGwMA0EAgACMAcDBQMqAB/QMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnFpMA0GCSqGSIb3DQEBCwUAA4IBAQADtIBR mqDn4elSJd7fEDpsUOITquUw5cNKgAP3O/DYsNSiA39o28N4v1fiOabrXO5t7/EU Lln8mLdL1O/dbhvqlehFdMtSoM6NEXaVm5NiQlWNFSltzjHrYzcTU04sBcqDy5jS e6N1/QNA6okd7WwRjyC80dZCTIRS1T6jhDF6qqcFlIRYQnb47z5IiN9t8juwNyK5 +LC0PMQhKoTztEwl5G0A3c23qnFIggwzEIgGFLAoMs/ZRYwUjSSfSYjM8VG5yrD9 ftJXS7EmPjGt/n3+MEKtyX1ZG7NUd/Anrp3Ss//gXh9Y0d1KFNw1zisyBxF4XmxZ KHqyG6P8RINdqaJZ -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:13 2026 by rpki-client