This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer File: coYn-VAmUUtCZUBY9J7rm3xI8CA.cer (raw, json) Hash identifier: 19e6UOBoj6r3y6dQNnZtw9aFzjYm2LlmLmE2TI8Cz64= Subject key identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1395221FC8CA649E936EE51C1258D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.240.189.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:95:22:1f:c8:ca:64:9e:93:6e:e5:1c:12:58:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=728627f95026514b42654058f49eeb9b7c48f020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:25:1a:f7:f1:84:f9:0a:73:f8:a8:a2:77: 6f:98:0e:24:a8:07:53:fe:93:af:af:fc:75:47:c3: 77:d2:80:33:b6:79:e6:c1:bb:40:23:07:7b:46:90: 22:90:4b:1e:ec:9c:b8:1b:43:45:10:a5:29:d8:67: bb:ff:4b:54:07:fd:af:e4:0a:87:da:e5:17:dd:c4: df:2b:d5:1a:44:9f:83:c9:9c:34:55:3e:3d:56:c3: 46:ae:7a:76:0e:43:ae:8f:56:cc:3b:19:1e:6e:51: e5:f2:4d:84:bd:1f:d1:cb:b6:7a:60:f3:b8:a3:56: 71:c8:42:c7:f5:cd:6a:8f:f2:ae:c4:1a:69:00:54: 8f:47:26:8c:58:20:20:d8:67:2f:50:5c:40:31:73: a6:0e:d8:ec:da:e1:9e:f3:42:f7:94:d6:c5:64:bc: f5:61:e1:19:95:6b:7e:eb:f2:cf:3c:06:3b:4c:09: 5f:0f:98:cf:3f:6a:d0:3d:34:fd:c1:a6:c6:3b:9c: dc:6d:a0:0c:d6:aa:9c:68:40:ca:3f:2b:70:52:ea: 38:04:4a:76:46:b1:53:36:34:4f:7f:b1:2a:f9:c6: ad:8a:39:7e:6a:0c:97:b8:6c:f3:c0:6b:38:b1:a2: 0f:52:09:b5:6a:ab:67:5f:33:52:0f:18:b6:68:5d: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.189.0/24 Signature Algorithm: sha256WithRSAEncryption 58:95:38:59:62:f0:16:dd:13:50:ee:f6:02:f4:37:61:3e:13: 09:2a:c7:08:11:ce:cd:9d:de:c8:07:0e:fa:81:66:37:4f:e0: 1f:c6:74:e7:be:16:5f:72:7d:c1:3c:d8:43:98:7b:f2:02:70: b7:d3:d1:a1:f9:18:c5:78:d6:bc:02:cf:fd:06:4e:30:cc:f1: 44:1d:27:a5:14:76:25:56:2b:af:6d:aa:77:96:f5:2f:64:78: 42:f9:29:3d:f7:e0:2a:2e:a5:03:e3:98:7b:58:f1:ad:f7:00: b0:2c:90:c9:76:e8:44:21:96:20:08:a4:a2:84:b3:a9:2b:89: 58:78:65:f4:19:4e:c9:c6:f2:a8:9a:19:98:7f:fe:e9:57:07: 07:2d:c6:05:3d:ef:fb:dc:51:c5:9a:6d:c7:e3:e2:89:e1:51: 7b:e2:f0:02:44:4e:33:e7:5a:97:8b:0d:8b:8a:59:22:d1:e5: 80:79:a9:9c:c9:1a:b9:b1:2f:b1:35:54:4f:dd:ed:06:e4:46: cd:b3:a0:ef:bf:0d:83:d0:a0:fd:84:1b:0b:99:40:69:6b:ab: 74:27:a0:20:12:a8:54:2e:ed:1e:55:d6:7e:15:e3:27:5f:1b: d9:67:ee:53:5c:23:31:3b:b7:df:07:36:20:87:0f:20:5c:50: 45:08:d4:67 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/E5UiH8jKZJ6TbuUcEljWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjg2MjdmOTUwMjY1MTRiNDI2NTQwNThmNDllZWI5YjdjNDhmMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgclGvfxhPkKc/ioondvmA4kqAdT /pOvr/x1R8N30oAztnnmwbtAIwd7RpAikEse7Jy4G0NFEKUp2Ge7/0tUB/2v5AqH 2uUX3cTfK9UaRJ+DyZw0VT49VsNGrnp2DkOuj1bMOxkeblHl8k2EvR/Ry7Z6YPO4 o1ZxyELH9c1qj/KuxBppAFSPRyaMWCAg2GcvUFxAMXOmDtjs2uGe80L3lNbFZLz1 YeEZlWt+6/LPPAY7TAlfD5jPP2rQPTT9wabGO5zcbaAM1qqcaEDKPytwUuo4BEp2 RrFTNjRPf7Eq+catijl+agyXuGzzwGs4saIPUgm1aqtnXzNSDxi2aF1BqwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHKGJ/lQJlFLQmVAWPSe65t8SPAgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2I5NmNl ZS05MDA5LTQ1OGItYWE2MC1iMzNhNDA5N2JjYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYjk2Y2Vl LTkwMDktNDU4Yi1hYTYwLWIzM2E0MDk3YmNiMC8xL2NvWW4tVkFtVVV0Q1pVQlk5 SjdybTN4SThDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/C9MA0GCSqGSIb3DQEBCwUAA4IBAQBYlThZ YvAW3RNQ7vYC9DdhPhMJKscIEc7Nnd7IBw76gWY3T+AfxnTnvhZfcn3BPNhDmHvy AnC309Gh+RjFeNa8As/9Bk4wzPFEHSelFHYlViuvbap3lvUvZHhC+Sk99+AqLqUD 45h7WPGt9wCwLJDJduhEIZYgCKSihLOpK4lYeGX0GU7JxvKomhmYf/7pVwcHLcYF Pe/73FHFmm3H4+KJ4VF74vACRE4z51qXiw2Lilki0eWAeamcyRq5sS+xNVRP3e0G 5EbNs6Dvvw2D0KD9hBsLmUBpa6t0J6AgEqhULu0eVdZ+FeMnXxvZZ+5TXCMxO7ff BzYghw8gXFBFCNRn -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:47 2026 by rpki-client