This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer File: bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer (raw, json) Hash identifier: Gs4qdrCSs1Uc9QUcVwe89takJHD5f0QkdsnPVeEUvnc= Subject key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37D559D3B6EB936343DE1C67EF0E18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200595 AS: 202513 IP: 43.230.184.0/22 IP: 103.68.32.0/22 IP: 185.98.16.0/22 IP: 185.249.148.0/22 IP: 2a0c:97c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d5:59:d3:b6:eb:93:63:43:de:1c:67:ef:0e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:b5:2b:cf:3d:4a:0e:bb:5d:04:b6:ed:68: ee:a6:b0:2e:e5:10:b5:f0:84:82:95:7b:b9:86:7e: 6f:b8:be:d3:37:0a:c0:3f:26:4a:d7:85:14:32:e1: e7:dd:47:20:70:a2:f8:47:c6:91:d8:38:10:13:35: af:30:ab:0e:29:ee:67:b1:b0:4a:26:20:d7:1a:d9: e7:05:fa:2f:54:19:48:55:b4:7b:10:90:0a:92:42: 5e:56:6b:5e:b6:71:55:ef:c9:30:ad:c9:fc:31:2d: 6b:6b:1d:e4:5c:0d:c0:7f:5c:84:ec:3a:3f:8a:d2: e6:ea:eb:34:82:59:c4:54:32:ec:ed:a4:c1:12:05: d3:59:54:47:14:fb:33:a0:28:5c:ca:bb:3a:66:31: e1:b7:72:90:34:2f:aa:62:cf:14:35:6d:10:97:01: ca:c0:7f:a2:57:49:b1:40:eb:85:0f:ee:7b:36:36: 7c:b3:3c:6e:63:09:ce:09:fb:20:5e:25:e1:17:d8: 6c:01:c2:e5:d6:56:09:98:7d:0b:12:3e:c8:0c:62: 87:d5:4a:61:fc:11:d1:53:47:1f:c2:69:93:45:1a: 06:13:45:2d:fb:30:2a:18:6a:85:01:88:7d:75:8f: d8:87:98:77:55:ef:e1:06:da:69:6c:5a:94:9c:e2: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.184.0/22 103.68.32.0/22 185.98.16.0/22 185.249.148.0/22 IPv6: 2a0c:97c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200595 202513 Signature Algorithm: sha256WithRSAEncryption 7b:27:f6:cd:fa:ff:65:5a:77:9f:99:2a:21:44:e7:a4:48:b1: 30:ee:5e:a7:34:33:0b:87:ab:02:83:d2:6d:a7:19:db:2f:96: d2:62:8d:ff:26:98:b0:95:84:f5:4e:dc:cf:bb:88:19:04:a5: e3:ab:28:ee:97:d4:5b:52:56:84:00:50:72:d6:7a:f2:80:c0: dc:96:e5:d0:c7:4d:6c:09:b8:41:88:f6:4a:09:19:a6:14:f2: 61:42:8d:42:d3:be:90:9c:4e:08:5e:e6:19:b9:8a:dd:f6:be: cd:2e:3b:75:ab:41:44:6f:14:e1:4e:71:01:fe:f7:0d:8e:0d: 2e:ee:07:fe:07:d7:a8:0c:96:44:a9:06:67:e2:e5:f5:6f:1a: ad:da:2f:6e:55:1e:17:92:90:cb:51:b0:d7:ad:65:a0:e6:86: 35:83:c4:0e:56:34:cd:47:90:8b:54:44:a9:36:13:b5:54:46: b3:06:83:4e:19:3f:85:76:1e:03:a0:85:92:f9:78:43:99:66: f6:d2:ba:8e:9a:87:8e:af:a0:39:3a:1d:75:9b:ab:71:2c:5f: 4d:43:0b:f5:68:e5:11:90:59:e5:eb:5b:2d:82:23:f6:c2:47: e2:29:a7:7e:8a:1b:30:58:e0:85:a1:2c:f2:3a:ff:76:cd:78: ac:93:39:63 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+N9VZ07brk2ND3hxn7w4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDg1MDYxMzYxYjE5ZjIxMmVmZTkwYzJkOGNmM2VlZTYxN2YyMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxi1K889Sg67XQS27WjuprAu5RC1 8ISClXu5hn5vuL7TNwrAPyZK14UUMuHn3UcgcKL4R8aR2DgQEzWvMKsOKe5nsbBK JiDXGtnnBfovVBlIVbR7EJAKkkJeVmtetnFV78kwrcn8MS1rax3kXA3Af1yE7Do/ itLm6us0glnEVDLs7aTBEgXTWVRHFPszoChcyrs6ZjHht3KQNC+qYs8UNW0QlwHK wH+iV0mxQOuFD+57NjZ8szxuYwnOCfsgXiXhF9hsAcLl1lYJmH0LEj7IDGKH1Uph /BHRU0cfwmmTRRoGE0Ut+zAqGGqFAYh9dY/Yh5h3Ve/hBtppbFqUnOJcTQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzdlN2I4 Yi03OWUwLTRmNTEtYjg2Ni02N2FkNjBkMzg2ZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvN2U3Yjhi LTc5ZTAtNGY1MS1iODY2LTY3YWQ2MGQzODZkZC8xL2JZVUdFMkd4bnlFdV9wREMy TTgtN21GX0lPVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCK+a4AwQCZ0QgAwQCuWIQAwQCufmUMA0EAgAC MAcDBQMqDJfAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMPkwIDAxcRMA0GCSqG SIb3DQEBCwUAA4IBAQB7J/bN+v9lWnefmSohROekSLEw7l6nNDMLh6sCg9Jtpxnb L5bSYo3/JpiwlYT1TtzPu4gZBKXjqyjul9RbUlaEAFBy1nrygMDcluXQx01sCbhB iPZKCRmmFPJhQo1C076QnE4IXuYZuYrd9r7NLjt1q0FEbxThTnEB/vcNjg0u7gf+ B9eoDJZEqQZn4uX1bxqt2i9uVR4XkpDLUbDXrWWg5oY1g8QOVjTNR5CLVESpNhO1 VEazBoNOGT+Fdh4DoIWS+XhDmWb20rqOmoeOr6A5Oh11m6txLF9NQwv1aOURkFnl 61stgiP2wkfiKad+ihswWOCFoSzyOv92zXiskzlj -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:13 2026 by rpki-client