This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer (raw, json) Hash identifier: QfO4wdZsgNN3hqsl/uz+iiNCe4JOVd5pRqkN6yqhW3o= Subject key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1AA142A515062CA49C7A0C72154C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.255.0/24 IP: 193.36.34.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1a:a1:42:a5:15:06:2c:a4:9c:7a:0c:72:15:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:27:40:81:9d:20:60:85:0e:2e:a0:df:12: 7c:84:80:41:f4:43:7a:51:1f:7b:dd:e8:1d:ee:75: 62:07:f3:e0:d5:00:2a:58:1a:ed:a9:23:f8:5f:25: 16:f0:c4:c1:f5:ae:19:f6:72:4e:b7:2b:ae:5c:9a: 8a:7a:6a:de:9f:4b:a8:2e:fd:38:68:a3:a1:56:d1: 2a:cb:c4:88:17:24:db:b1:d6:b2:2c:33:0a:89:d0: 32:ac:55:3d:b9:22:ca:2f:cb:cf:e8:e9:da:5e:83: 25:83:f4:a5:50:7a:10:d3:f8:31:fd:77:fc:40:4f: e1:15:c6:68:64:ac:79:df:8c:af:7e:12:81:7d:70: c5:37:22:9d:bc:b8:fc:09:6b:89:fd:3b:3f:c0:a8: be:86:10:7b:55:4f:17:9a:e0:ec:b1:f5:99:39:a2: e3:5c:34:d4:fd:17:b3:ed:ac:ee:01:25:0a:cf:5a: fa:19:b1:33:b4:c7:61:d8:20:ca:a6:fd:93:69:d6: 95:b2:72:1f:3e:0d:e3:9f:db:a5:f3:5e:ff:40:02: f2:0b:d7:ef:64:5f:cb:de:a1:b1:6e:86:71:91:f0: c1:03:21:3a:c3:34:ea:b6:49:34:3e:f1:e0:ad:1f: 86:61:d7:5c:34:32:fa:d4:c8:18:4e:30:a6:fe:05: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.255.0/24 193.36.34.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d1:e1:0b:a9:70:20:b0:32:03:23:1e:d1:52:3b:3f:9c:a3: df:72:ad:e5:13:83:81:e2:b4:85:30:4a:7a:fd:c0:9f:a0:43: 73:d7:29:3f:b0:6b:f8:c9:77:f8:4e:89:96:51:ea:94:a1:80: b0:9c:1c:89:86:8a:ab:bf:0b:64:4a:ba:f2:04:cc:c4:a3:da: e7:60:8d:3c:c3:65:a0:25:f5:2c:7f:1c:cd:fc:ec:42:ca:5f: 5a:9b:e8:80:d2:f2:3b:d8:bc:c2:44:f0:69:c1:80:33:08:af: 1c:61:08:a1:8a:75:d1:a8:b4:1f:2f:85:d6:6b:2e:87:ec:0f: 36:c8:77:b9:04:65:27:56:65:1f:5b:8c:a8:3b:60:10:3e:eb: c2:97:d8:c2:89:71:b7:8a:7b:1f:eb:7d:64:59:ae:f0:35:fb: 0f:58:e2:99:8a:6e:e0:34:03:86:ab:09:e1:ef:b0:c5:7d:0a: 4e:2a:cd:2b:61:e4:f5:ff:bd:dc:3a:64:76:a4:25:60:dd:1c: 5c:5b:d5:ac:1e:77:fa:f1:71:68:df:ce:a5:b1:8d:85:11:e2: db:52:54:d9:e8:c0:e6:58:07:b4:4e:54:95:e8:49:11:e4:d5: 75:ad:22:61:25:2d:3c:8e:0a:67:72:ef:10:42:e9:2c:0f:a8: 1b:84:4e:e1 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6WxqhQqUVBiyknHoMchVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjZjOThkNTk3Yjc4MWI3YTEwYzdlMGVkYjFjNDhmNmI4MWE1ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZUnQIGdIGCFDi6g3xJ8hIBB9EN6 UR973egd7nViB/Pg1QAqWBrtqSP4XyUW8MTB9a4Z9nJOtyuuXJqKemren0uoLv04 aKOhVtEqy8SIFyTbsdayLDMKidAyrFU9uSLKL8vP6OnaXoMlg/SlUHoQ0/gx/Xf8 QE/hFcZoZKx534yvfhKBfXDFNyKdvLj8CWuJ/Ts/wKi+hhB7VU8XmuDssfWZOaLj XDTU/Rez7azuASUKz1r6GbEztMdh2CDKpv2TadaVsnIfPg3jn9ul817/QALyC9fv ZF/L3qGxboZxkfDBAyE6wzTqtkk0PvHgrR+GYddcNDL61MgYTjCm/gVgxQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFJ9smNWXt4G3oQx+DtscSPa4Gl+LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2Y1ZWQx Yy0zNzk3LTQwMGQtYjcyZi04MDRjZGE1MjQzYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvZjVlZDFj LTM3OTctNDAwZC1iNzJmLTgwNGNkYTUyNDNiMy8xL24yeVkxWmUzZ2JlaERINE8y eHhJOXJnYVg0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW8b/AwQAwSQiMA0GCSqGSIb3DQEBCwUAA4IB AQBB0eELqXAgsDIDIx7RUjs/nKPfcq3lE4OB4rSFMEp6/cCfoENz1yk/sGv4yXf4 TomWUeqUoYCwnByJhoqrvwtkSrryBMzEo9rnYI08w2WgJfUsfxzN/OxCyl9am+iA 0vI72LzCRPBpwYAzCK8cYQihinXRqLQfL4XWay6H7A82yHe5BGUnVmUfW4yoO2AQ PuvCl9jCiXG3insf631kWa7wNfsPWOKZim7gNAOGqwnh77DFfQpOKs0rYeT1/73c OmR2pCVg3RxcW9WsHnf68XFo386lsY2FEeLbUlTZ6MDmWAe0TlSV6EkR5NV1rSJh JS08jgpncu8QQuksD6gbhE7h -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:11 2026 by rpki-client