This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer File: Yz51LKDcQjx09QhAW6UiiowuUVc.cer (raw, json) Hash identifier: /qroBq0j5QL+D2QLIfnNYyzecOG7vVbrbs+H6YWyFR4= Subject key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911183307C3CCAEA740A941F12295DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198696 IP: 193.218.127.0/24 IP: 194.9.16.0/23 IP: 194.49.124.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:18:33:07:c3:cc:ae:a7:40:a9:41:f1:22:95:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:af:a5:66:26:04:b4:21:e2:3e:69:ef:6b: cf:ad:68:07:8a:45:de:ae:d4:b8:d9:33:ed:07:0f: bc:da:1c:b2:f8:ff:85:3b:c7:cd:70:3a:3e:1e:72: 7e:6d:91:de:52:67:71:5b:f5:e2:6f:63:e4:0b:a5: 0f:03:ec:d4:b9:f2:41:ff:19:8a:bb:09:22:52:3e: 26:0b:bc:61:52:b2:23:64:17:d8:d7:36:f7:54:61: e0:49:f2:57:72:57:49:06:59:0c:d5:44:bb:fa:ee: 43:29:08:2c:12:38:c7:c2:8f:06:84:7e:2a:21:ab: 73:4f:ed:51:dc:d3:29:86:bb:6e:8d:27:8a:2c:ea: b4:42:64:ed:27:7e:23:ba:ba:fd:27:f3:e7:0a:34: a0:3e:87:99:24:93:89:a3:f2:ad:21:26:44:c1:e3: 8c:04:a4:23:31:f2:7d:78:ba:ca:8b:39:e1:23:a3: 1e:92:5f:3c:f6:f6:dc:4a:7b:46:76:c2:52:d7:d8: bb:4b:df:07:ec:b2:c0:66:db:8f:3e:8e:74:6f:e2: 13:60:84:38:cd:20:da:13:3b:7c:6b:04:d1:89:a8: a4:af:3d:b7:3e:4a:f7:c3:f7:79:1c:f9:e7:ab:bf: 06:fd:d4:c6:27:d7:22:99:81:91:49:e3:67:80:28: 85:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.127.0/24 194.9.16.0/23 194.49.124.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198696 Signature Algorithm: sha256WithRSAEncryption 5b:64:02:4e:e4:ac:13:f3:b1:aa:86:71:19:66:ea:cf:2e:ec: 8f:f0:6a:95:29:d6:5b:b8:27:d2:8e:52:2f:04:db:2d:6d:00: 55:5e:39:4b:48:2d:9f:eb:42:de:38:fa:30:c9:75:3a:d8:f1: 60:c5:14:88:91:26:26:3e:d5:d5:e1:b2:d8:cf:f2:75:05:16: d8:34:4f:c2:9c:c3:da:64:e4:dd:a4:4d:37:0a:5d:d7:ec:ef: dd:98:aa:d2:7b:96:5f:0e:27:47:4f:d3:1f:ee:e9:3f:50:5d: b6:8d:4e:d2:a4:60:17:41:3c:36:36:3d:68:a5:d4:70:22:5d: 7e:f1:02:88:b0:47:de:43:fa:cf:24:bb:aa:a5:c1:29:03:73: b4:a2:99:4e:b7:66:32:40:4b:33:66:c6:45:eb:b1:fc:03:dc: ff:b4:dd:f9:f8:b5:45:ba:99:5d:e7:3c:11:19:f1:79:37:38: 66:29:6e:85:ca:3b:36:b9:0f:c1:29:ce:c3:80:4f:46:9e:a9: 6c:3a:69:8b:92:8f:11:77:db:e5:3f:3a:44:6a:5e:8f:1e:d5: 10:40:4e:15:71:5e:b5:b6:66:b1:64:14:05:2f:3f:36:0b:f3: e7:a0:fe:ba:77:90:81:a6:d1:21:2b:3e:68:34:be:0e:95:7b: 98:5c:84:96 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt5ERgzB8PMrqdAqUHxIpXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzNlNzUyY2EwZGM0MjNjNzRmNTA4NDA1YmE1MjI4YThjMmU1MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsivpWYmBLQh4j5p72vPrWgHikXe rtS42TPtBw+82hyy+P+FO8fNcDo+HnJ+bZHeUmdxW/Xib2PkC6UPA+zUufJB/xmK uwkiUj4mC7xhUrIjZBfY1zb3VGHgSfJXcldJBlkM1US7+u5DKQgsEjjHwo8GhH4q IatzT+1R3NMphrtujSeKLOq0QmTtJ34jurr9J/PnCjSgPoeZJJOJo/KtISZEweOM BKQjMfJ9eLrKiznhI6Mekl889vbcSntGdsJS19i7S98H7LLAZtuPPo50b+ITYIQ4 zSDaEzt8awTRiaikrz23Pkr3w/d5HPnnq78G/dTGJ9cimYGRSeNngCiFiQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFGM+dSyg3EI8dPUIQFulIoqMLlFXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2M4ZTIx NC04ZTQ1LTRjOTYtOGE3OS1kZTYxODdiNzI5OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvYzhlMjE0 LThlNDUtNGM5Ni04YTc5LWRlNjE4N2I3Mjk4YS8xL1l6NTFMS0RjUWp4MDlRaEFX NlVpaW93dVVWYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwdp/AwQBwgkQAwQAwjF8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMIKDANBgkqhkiG9w0BAQsFAAOCAQEAW2QCTuSsE/OxqoZx GWbqzy7sj/BqlSnWW7gn0o5SLwTbLW0AVV45S0gtn+tC3jj6MMl1OtjxYMUUiJEm Jj7V1eGy2M/ydQUW2DRPwpzD2mTk3aRNNwpd1+zv3Ziq0nuWXw4nR0/TH+7pP1Bd to1O0qRgF0E8NjY9aKXUcCJdfvECiLBH3kP6zyS7qqXBKQNztKKZTrdmMkBLM2bG Reux/APc/7Td+fi1RbqZXec8ERnxeTc4Ziluhco7NrkPwSnOw4BPRp6pbDppi5KP EXfb5T86RGpejx7VEEBOFXFetbZmsWQUBS8/Ngvz56D+uneQgabRISs+aDS+DpV7 mFyElg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:20 2026 by rpki-client