This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer File: cYZUy47T9V1cYJctMQ9e1iBLT-U.cer (raw, json) Hash identifier: 6Wipz3lx6bFA7rQ9Z8dMFVOxRhahx5BZFh/4fzsvDlA= Subject key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CCE0DCD24618A16EF8E7362BF6BD3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13099 IP: 213.172.64.0/19 IP: 2001:3c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ce:0d:cd:24:61:8a:16:ef:8e:73:62:bf:6b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:04:5f:ff:95:2b:b1:61:f0:96:41:d3:52: 19:b7:63:c7:e7:9c:46:22:b6:6a:7d:5a:cd:29:62: 91:72:14:5b:a2:67:37:4a:cd:63:05:4d:91:fb:ac: 74:c2:17:ac:0f:8a:90:58:3d:08:b3:c5:e9:4d:e4: be:77:52:88:fa:e4:3a:60:52:29:22:1b:45:1d:1d: 5f:e7:cd:c7:56:27:f1:bd:60:78:be:ae:33:76:80: 99:16:d4:e2:80:00:dc:1c:b1:39:42:07:f5:5d:63: 93:73:25:a5:97:6f:ed:51:e3:bc:e7:bd:4f:66:23: 02:e2:d9:5d:5d:c3:ed:48:6d:ef:e0:79:99:9f:ed: 70:a7:3d:8b:9b:bb:c1:40:f5:bf:ce:37:00:4f:b4: a4:3f:c0:7c:a2:77:78:3e:e5:31:9d:8b:fc:8d:70: 7b:44:24:99:89:64:cf:3f:27:bd:52:b3:b2:97:dd: 57:aa:70:76:74:2e:bf:fd:30:7c:17:ec:58:84:99: 64:d5:e5:5f:87:c6:61:93:f8:83:b8:29:e2:a0:f4: 35:62:d7:ef:15:a6:05:41:be:2b:f8:58:3c:ef:d6: 7d:a6:8b:cf:28:f7:aa:16:43:45:ad:07:8a:9f:07: 75:fd:fa:3e:de:bf:5c:8c:43:c2:bc:66:c9:3c:8c: d2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.172.64.0/19 IPv6: 2001:3c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13099 Signature Algorithm: sha256WithRSAEncryption 39:71:41:60:c8:ac:5e:20:27:12:9f:d5:b8:5c:5c:32:7d:df: d6:66:f3:9b:08:70:f5:82:54:1e:3e:82:cb:ff:a5:5d:ce:e7: 99:56:3f:b1:95:88:d3:06:c3:4a:84:f0:a4:ea:27:e4:dd:05: 46:c9:61:f5:6e:6e:48:ef:e7:29:47:4b:bc:20:7d:db:95:7b: 23:d8:88:80:31:03:71:c6:7c:b0:58:c6:1f:87:46:1e:c0:56: e7:3e:4c:ff:e5:d1:55:bf:30:c4:64:e1:08:04:86:8d:92:17: d4:c8:76:c0:32:d9:a1:82:df:17:5d:f6:89:66:49:f9:37:81: 36:e2:ab:1d:50:02:43:4c:05:a7:0e:ff:13:d5:c0:74:0b:c7: af:b9:7e:15:4c:16:e1:fe:a3:6c:8e:69:4b:4f:66:4a:e9:e6: de:7f:ce:fc:bc:a0:e1:1f:91:63:65:23:ed:0f:86:75:80:24: 77:38:21:a4:9d:73:f2:47:05:6a:42:d2:d7:8a:ae:7d:1d:44: 4b:ce:0e:53:7e:11:e3:4c:5a:07:ee:95:91:ca:d6:80:f9:ca: 92:0d:a4:22:36:27:ba:a1:f8:fe:36:81:07:39:4d:dc:f1:de: f5:b9:85:0e:53:19:75:cf:7c:fe:ed:b7:ba:1b:dd:e6:ef:fa: 5c:9f:57:33 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9XM4NzSRhihbvjnNiv2vTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTg2NTRjYjhlZDNmNTVkNWM2MDk3MmQzMTBmNWVkNjIwNGI0ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmQEX/+VK7Fh8JZB01IZt2PH55xG IrZqfVrNKWKRchRbomc3Ss1jBU2R+6x0whesD4qQWD0Is8XpTeS+d1KI+uQ6YFIp IhtFHR1f583HVifxvWB4vq4zdoCZFtTigADcHLE5Qgf1XWOTcyWll2/tUeO8571P ZiMC4tldXcPtSG3v4HmZn+1wpz2Lm7vBQPW/zjcAT7SkP8B8ond4PuUxnYv8jXB7 RCSZiWTPPye9UrOyl91XqnB2dC6//TB8F+xYhJlk1eVfh8Zhk/iDuCnioPQ1Ytfv FaYFQb4r+Fg879Z9povPKPeqFkNFrQeKnwd1/fo+3r9cjEPCvGbJPIzSrQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFHGGVMuO0/VdXGCXLTEPXtYgS0/lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2ZmZTU2 Ny0yN2U2LTRhNjQtYmFmNC1hMjhiY2U1ZDVkYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZmZlNTY3 LTI3ZTYtNGE2NC1iYWY0LWEyOGJjZTVkNWRhNS8xL2NZWlV5NDdUOVYxY1lKY3RN UTllMWlCTFQtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1axAMA0EAgACMAcDBQMgATwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjMrMA0GCSqGSIb3DQEBCwUAA4IBAQA5cUFgyKxeICcS n9W4XFwyfd/WZvObCHD1glQePoLL/6VdzueZVj+xlYjTBsNKhPCk6ifk3QVGyWH1 bm5I7+cpR0u8IH3blXsj2IiAMQNxxnywWMYfh0YewFbnPkz/5dFVvzDEZOEIBIaN khfUyHbAMtmhgt8XXfaJZkn5N4E24qsdUAJDTAWnDv8T1cB0C8evuX4VTBbh/qNs jmlLT2ZK6ebef878vKDhH5FjZSPtD4Z1gCR3OCGknXPyRwVqQtLXiq59HURLzg5T fhHjTFoH7pWRytaA+cqSDaQiNie6ofj+NoEHOU3c8d71uYUOUxl1z3z+7be6G93m 7/pcn1cz -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:33 2026 by rpki-client