This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer File: _byekQMWvi8EM6qVOSzWc53Ca4Y.cer (raw, json) Hash identifier: DNP7a6PIZwGd7ZxeN3QPp62cTZY9Vo18MudNmB38v1I= Subject key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3785A8E5204CF1AA5F0C47EC85A103 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205596 IP: 185.212.124.0/22 IP: 2a0b:7740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:85:a8:e5:20:4c:f1:aa:5f:0c:47:ec:85:a1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:d4:f7:27:df:c4:16:25:f7:d1:3e:8c:5e: ce:67:6f:1a:c4:72:e6:98:5d:a5:e6:14:37:39:5b: 81:c3:18:ce:7f:0f:29:38:95:2b:52:aa:c2:db:22: 11:29:3d:f0:5c:30:d0:d0:28:56:9b:af:07:45:71: c5:c0:45:04:3e:21:71:f6:00:8c:4c:f1:e3:65:04: fe:ff:82:41:39:ba:62:56:2a:31:45:cb:1f:d3:6b: 72:68:62:3a:14:44:91:f0:25:90:ec:d1:ea:11:43: 43:09:1d:77:ce:f1:90:57:db:1f:86:1e:f0:1f:fd: fd:e3:bf:ce:1d:b9:7d:d4:fd:bd:a2:a6:29:46:96: 33:00:18:e1:50:4d:29:b9:9c:22:37:5c:6d:ab:ce: 4c:c4:8f:a4:41:f2:dc:05:04:36:3e:39:ff:cc:5a: 52:8e:d8:b9:92:d8:ef:a3:4c:6a:35:82:51:68:de: 0d:de:89:f1:8f:48:c6:fb:4e:e5:70:9d:e9:ef:bc: bc:12:95:ca:e9:fd:03:5f:7a:6e:31:b3:32:2d:6d: 40:6c:a8:4e:eb:a3:d1:5e:98:4a:8d:62:74:1e:e4: 37:5e:a3:a1:4b:3b:a2:c4:9c:03:b9:c5:e9:d4:db: 83:af:1b:d7:cf:d6:37:ca:58:a9:91:35:a6:ed:44: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.124.0/22 IPv6: 2a0b:7740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205596 Signature Algorithm: sha256WithRSAEncryption 2b:2b:17:5c:83:44:55:08:b2:26:3f:c0:eb:f2:f2:c8:17:1e: 7e:85:ca:58:8e:c4:25:28:a7:51:86:2e:da:e8:f2:43:8d:c1: 2e:60:1c:24:c0:e5:d8:d1:18:7b:9c:9b:f9:b1:0c:b3:d8:46: 6d:3f:af:64:e1:06:99:f2:40:98:c2:dc:e0:7d:6d:ab:78:42: fe:66:8b:c1:fe:3c:3c:7b:5e:8a:13:ed:db:b9:9e:12:28:b3: ee:d4:4e:2f:81:4d:21:01:d4:a8:76:41:93:d8:26:1a:98:62: 3a:71:cc:b5:54:76:c7:a4:20:78:b8:28:e3:65:78:4d:19:d5: c9:87:e3:37:d3:4c:03:4a:9e:c8:59:ee:55:e2:36:a4:66:16: e1:0e:a0:85:79:b2:04:82:97:90:b1:2b:7a:f7:d4:b8:cf:9f: be:20:af:5f:43:f5:f8:95:08:5f:6a:b1:db:bb:8f:9c:08:c0: c8:17:1a:44:6e:ca:52:1a:3a:77:8f:f3:35:a4:21:77:be:53: b3:45:6c:93:8a:62:26:96:2d:1a:22:5b:0b:00:8e:9a:9b:9b: de:5d:8a:d0:20:d1:69:ef:63:e7:46:23:da:25:84:75:cb:0f: c4:a9:2e:27:da:8b:4a:9c:25:7a:20:3d:76:36:23:fc:d4:fd: 65:1b:27:2a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N4Wo5SBM8apfDEfshaEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGJjOWU5MTAzMTZiZTJmMDQzM2FhOTUzOTJjZDY3MzlkYzI2Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcLU9yffxBYl99E+jF7OZ28axHLm mF2l5hQ3OVuBwxjOfw8pOJUrUqrC2yIRKT3wXDDQ0ChWm68HRXHFwEUEPiFx9gCM TPHjZQT+/4JBObpiVioxRcsf02tyaGI6FESR8CWQ7NHqEUNDCR13zvGQV9sfhh7w H/3947/OHbl91P29oqYpRpYzABjhUE0puZwiN1xtq85MxI+kQfLcBQQ2Pjn/zFpS jti5ktjvo0xqNYJRaN4N3onxj0jG+07lcJ3p77y8EpXK6f0DX3puMbMyLW1AbKhO 66PRXphKjWJ0HuQ3XqOhSzuixJwDucXp1NuDrxvXz9Y3ylipkTWm7UTr3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP28npEDFr4vBDOqlTks1nOdwmuGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2Q4ZTVh YS1iMTE5LTQ1OWUtOTNmNi1hMTQ2ZDYwNDczMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvZDhlNWFh LWIxMTktNDU5ZS05M2Y2LWExNDZkNjA0NzMzNy8xL19ieWVrUU1Xdmk4RU02cVZP U3pXYzUzQ2E0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudR8MA0EAgACMAcDBQMqC3dAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMjHDANBgkqhkiG9w0BAQsFAAOCAQEAKysXXINEVQiy Jj/A6/LyyBcefoXKWI7EJSinUYYu2ujyQ43BLmAcJMDl2NEYe5yb+bEMs9hGbT+v ZOEGmfJAmMLc4H1tq3hC/maLwf48PHteihPt27meEiiz7tROL4FNIQHUqHZBk9gm GphiOnHMtVR2x6QgeLgo42V4TRnVyYfjN9NMA0qeyFnuVeI2pGYW4Q6ghXmyBIKX kLErevfUuM+fviCvX0P1+JUIX2qx27uPnAjAyBcaRG7KUho6d4/zNaQhd75Ts0Vs k4piJpYtGiJbCwCOmpub3l2K0CDRae9j50Yj2iWEdcsPxKkuJ9qLSpwleiA9djYj /NT9ZRsnKg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:54 2026 by rpki-client