This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer File: py0XjI5T9SExwftkdDyWDPiX_Qw.cer (raw, json) Hash identifier: /6rqS1x8R6zISIc1JHzxbRWWfQr/RLOQ/uI63VHsRa4= Subject key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C5EF3B2AAA30893EB0B2D7342F553 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203965 IP: 185.118.172.0/22 IP: 2a06:9380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5e:f3:b2:aa:a3:08:93:eb:0b:2d:73:42:f5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:b3:d0:7d:a2:c6:a0:40:f3:bb:65:6b:ce: 89:b8:6e:31:aa:74:1f:e0:90:66:1c:86:3a:a7:d4: de:73:c5:fc:74:1a:f6:fc:18:d9:04:75:30:69:d0: 4a:f3:f6:9e:c1:d3:4c:9b:de:84:7d:98:a2:02:ec: 1a:e0:52:94:78:c4:e7:c4:45:9f:da:1a:00:a6:dd: 1a:a7:93:f2:7a:34:1d:67:64:a3:d9:09:1f:c5:d5: ef:b6:de:7a:ba:53:83:16:db:2b:17:84:60:1f:3b: 30:fc:47:1b:2a:7e:6f:1b:53:52:6b:c2:92:94:11: ff:be:74:99:c6:9b:6e:72:bf:78:84:f2:50:17:76: 2a:d8:37:c4:dc:d4:8c:10:5f:1d:7b:ee:1a:6d:e3: d8:ff:af:8e:56:24:9e:64:35:84:2f:b8:dc:4c:cc: 3b:96:96:19:08:36:34:c5:86:12:67:4f:5d:17:2a: 09:8f:52:bd:8b:f0:49:05:4f:1f:32:48:8b:01:35: 62:f1:41:da:3b:35:f0:35:21:08:20:00:2e:ac:f9: 99:2a:82:f6:36:92:f2:fc:54:de:69:2d:75:ed:96: 49:62:68:f7:88:8e:60:ab:a7:50:2c:46:ba:8d:84: 08:fd:46:87:81:30:f5:48:e7:65:7b:21:f3:25:99: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.172.0/22 IPv6: 2a06:9380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203965 Signature Algorithm: sha256WithRSAEncryption 6c:65:ac:55:57:6b:56:cd:e7:e2:75:d1:4a:aa:e1:36:6e:35: 11:13:7c:78:3d:e1:f4:d7:b7:fa:04:e9:81:9d:46:3b:57:6c: e2:8a:ef:65:d0:82:ea:43:cf:d1:eb:9b:e6:45:62:bb:fe:e7: 0a:e2:87:22:85:7d:86:04:f4:e8:a0:b7:5a:4f:46:33:b5:dd: cc:01:e7:2e:92:9c:97:3d:0a:20:61:68:bb:10:d8:3d:54:da: 38:54:41:8e:cc:f6:89:b8:eb:6c:cb:d2:d2:18:be:75:b9:7c: c3:39:82:69:30:b8:a5:94:d1:00:db:2b:5d:2c:0f:ac:e9:fb: 41:16:33:ea:17:59:45:87:25:a8:a0:47:f3:2e:6c:31:28:55: df:70:d6:ef:e5:94:86:1e:39:1f:c9:8e:a6:64:04:ba:50:6d: 2d:4e:79:6c:e8:2c:4c:a1:e0:48:44:c9:c6:9d:f3:3d:8c:5c: 41:f1:2f:91:55:fb:fd:82:e4:d2:00:b1:6a:ef:04:be:51:52: ab:9a:9b:84:ca:bf:1e:2c:b0:b2:4e:e2:43:6e:b0:da:dc:08: ed:0a:63:6f:bc:09:62:a2:a9:90:25:f3:df:6d:2c:67:ef:77: 07:0a:37:4d:ea:83:3d:3e:a5:c2:ed:18:77:fd:34:42:b5:29: 3e:95:91:b7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XF7zsqqjCJPrCy1zQvVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJkMTc4YzhlNTNmNTIxMzFjMWZiNjQ3NDNjOTYwY2Y4OTdmZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9iz0H2ixqBA87tla86JuG4xqnQf 4JBmHIY6p9Tec8X8dBr2/BjZBHUwadBK8/aewdNMm96EfZiiAuwa4FKUeMTnxEWf 2hoApt0ap5PyejQdZ2Sj2QkfxdXvtt56ulODFtsrF4RgHzsw/EcbKn5vG1NSa8KS lBH/vnSZxptucr94hPJQF3Yq2DfE3NSMEF8de+4abePY/6+OViSeZDWEL7jcTMw7 lpYZCDY0xYYSZ09dFyoJj1K9i/BJBU8fMkiLATVi8UHaOzXwNSEIIAAurPmZKoL2 NpLy/FTeaS117ZZJYmj3iI5gq6dQLEa6jYQI/UaHgTD1SOdleyHzJZlofwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzFiODEz YS01ZTg2LTQ1YjAtOTljZC0yOGI5ZDI2MWVjYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMWI4MTNh LTVlODYtNDViMC05OWNkLTI4YjlkMjYxZWNiMS8xL3B5MFhqSTVUOVNFeHdmdGtk RHlXRFBpWF9Rdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXasMA0EAgACMAcDBQMqBpOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcvTANBgkqhkiG9w0BAQsFAAOCAQEAbGWsVVdrVs3n 4nXRSqrhNm41ERN8eD3h9Ne3+gTpgZ1GO1ds4orvZdCC6kPP0eub5kViu/7nCuKH IoV9hgT06KC3Wk9GM7XdzAHnLpKclz0KIGFouxDYPVTaOFRBjsz2ibjrbMvS0hi+ dbl8wzmCaTC4pZTRANsrXSwPrOn7QRYz6hdZRYclqKBH8y5sMShV33DW7+WUhh45 H8mOpmQEulBtLU55bOgsTKHgSETJxp3zPYxcQfEvkVX7/YLk0gCxau8EvlFSq5qb hMq/Hiywsk7iQ26w2twI7Qpjb7wJYqKpkCXz320sZ+93Bwo3TeqDPT6lwu0Yd/00 QrUpPpWRtw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:13 2026 by rpki-client