This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer File: y-PaNYKiKDDsTmdUfnX6O52iCyM.cer (raw, json) Hash identifier: jrosAD5WHhZTMBxALkn488RowHKw2dBh7kMNFYeGp3Q= Subject key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB14A70D2028EFB213AC070314C087 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51658 IP: 185.202.133.0/24 IP: 2a11:b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:14:a7:0d:20:28:ef:b2:13:ac:07:03:14:c0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:8f:ac:d5:6f:6b:20:3d:b2:57:72:a7:aa: fd:1d:30:ea:d7:7d:51:da:da:44:f3:64:85:6d:54: dd:bf:80:3b:d2:99:37:95:98:2d:b2:8f:30:e1:57: 01:b6:16:8f:5d:bf:20:01:99:5f:b1:9a:d9:96:33: 34:f5:c4:61:b5:6a:12:b4:ec:17:51:a5:82:63:63: b2:b2:2a:3a:9e:44:b4:61:35:b0:ec:81:c7:1f:77: 09:2b:db:8c:e2:e6:a2:ef:b7:ff:5a:d3:35:d4:f5: e6:5e:ad:f9:39:c9:a8:b7:e7:cc:7f:b6:29:b2:3f: 13:5d:5b:c2:db:9c:f9:35:34:9a:cd:48:9f:82:e6: 83:64:0d:1a:57:36:ac:b9:5a:7f:fe:1a:d1:ab:a9: a0:4e:93:c7:85:af:c1:cc:b1:75:11:d5:db:e0:b7: a8:1d:ec:fe:69:92:8b:d1:62:7b:b7:be:ae:a3:f9: 3e:63:cb:28:44:e4:e1:2e:67:95:c2:9e:43:81:06: 00:04:94:4d:35:e2:af:8e:ef:29:18:f3:e4:f7:00: 56:57:fc:bc:49:97:f1:03:d4:df:05:79:82:13:84: 9e:48:c3:a2:c7:e7:90:bd:dc:3d:ef:88:81:74:84: bf:ac:59:71:3f:db:92:67:d8:b9:f9:23:d5:7a:7f: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.133.0/24 IPv6: 2a11:b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51658 Signature Algorithm: sha256WithRSAEncryption 7c:f9:20:05:e6:f7:27:42:03:63:d9:d1:f6:c4:ac:2c:f1:5a: bf:81:86:e1:36:e3:26:97:80:44:d3:94:9d:f9:fb:e0:83:b1: b0:55:35:36:7a:72:82:d8:25:16:fe:35:6d:a4:97:79:2b:01: ae:5d:d8:9a:8a:06:3f:57:97:e3:45:a9:0b:b0:6f:dc:15:fd: 43:68:40:06:cf:cd:e2:01:42:25:3d:3f:99:ac:62:13:63:84: 08:72:8d:2a:89:fc:8c:57:32:24:5d:cb:09:48:cc:d4:1e:a2: 23:3e:4c:37:d5:df:a9:4b:60:d1:a7:bc:e4:2c:59:10:46:d8: 63:3f:ef:9f:62:f6:3e:37:19:96:c8:95:72:3f:9a:c1:5e:1e: c8:79:d9:60:5e:72:bc:f9:c4:73:72:bb:c8:0e:11:5b:08:18: 3e:cd:8d:65:a6:2a:fe:14:ea:53:a7:84:30:a6:b1:2e:01:df: 6b:9a:dd:e5:77:5a:71:35:2b:4f:43:37:73:cd:ba:65:85:52: 41:30:59:91:78:1d:e0:12:60:07:cf:04:a5:e1:6a:f3:58:a8: b6:2d:cc:b3:92:ea:54:66:b7:aa:be:1e:81:45:fe:30:80:7d: 02:c8:c6:e1:75:72:e6:e4:cf:82:10:e2:98:9b:12:88:d3:fd: 85:34:30:cd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26xSnDSAo77ITrAcDFMCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmUzZGEzNTgyYTIyODMwZWM0ZTY3NTQ3ZTc1ZmEzYjlkYTIwYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDaPrNVvayA9sldyp6r9HTDq131R 2tpE82SFbVTdv4A70pk3lZgtso8w4VcBthaPXb8gAZlfsZrZljM09cRhtWoStOwX UaWCY2Oysio6nkS0YTWw7IHHH3cJK9uM4uai77f/WtM11PXmXq35Ocmot+fMf7Yp sj8TXVvC25z5NTSazUifguaDZA0aVzasuVp//hrRq6mgTpPHha/BzLF1EdXb4Leo Hez+aZKL0WJ7t76uo/k+Y8soROThLmeVwp5DgQYABJRNNeKvju8pGPPk9wBWV/y8 SZfxA9TfBXmCE4SeSMOix+eQvdw974iBdIS/rFlxP9uSZ9i5+SPVen+B3QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMvj2jWCoigw7E5nVH51+judogsjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzY4Y2Zj NS0yZWM2LTRiNTktYjEyZS02ZTM2YjJmMTcwNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvNjhjZmM1 LTJlYzYtNGI1OS1iMTJlLTZlMzZiMmYxNzA2Yi8xL3ktUGFOWUtpS0REc1RtZFVm blg2TzUyaUN5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAucqFMA0EAgACMAcDBQMqEQtAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJyjANBgkqhkiG9w0BAQsFAAOCAQEAfPkgBeb3J0ID Y9nR9sSsLPFav4GG4TbjJpeARNOUnfn74IOxsFU1NnpygtglFv41baSXeSsBrl3Y mooGP1eX40WpC7Bv3BX9Q2hABs/N4gFCJT0/maxiE2OECHKNKon8jFcyJF3LCUjM 1B6iIz5MN9XfqUtg0ae85CxZEEbYYz/vn2L2PjcZlsiVcj+awV4eyHnZYF5yvPnE c3K7yA4RWwgYPs2NZaYq/hTqU6eEMKaxLgHfa5rd5XdacTUrT0M3c826ZYVSQTBZ kXgd4BJgB88EpeFq81ioti3Ms5LqVGa3qr4egUX+MIB9AsjG4XVy5uTPghDimJsS iNP9hTQwzQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:54 2026 by rpki-client