This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer (raw, json) Hash identifier: Z/9R1rL0IfvXJbfZtgVWJ3Bz4ptpXUduuCezEl/gcl4= Subject key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15665F6D1FF2B6F70931D0CA3AE74D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47872 AS: 201996 IP: 87.246.40.0/22 IP: 185.44.116.0/22 IP: 212.5.40.0 -- 212.5.51.255 IP: 212.5.60.0/22 IP: 2a01:73e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:66:5f:6d:1f:f2:b6:f7:09:31:d0:ca:3a:e7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:09:64:2f:e7:b3:0a:f5:c3:5a:09:b9:45: 64:df:c7:5f:b6:87:bd:59:ed:c1:88:8b:ee:43:10: 25:ac:9d:53:66:85:cd:18:b2:cc:7d:8e:a5:01:5e: 1a:ec:9a:17:5a:14:93:21:42:e4:0a:21:3a:7a:53: ff:64:15:33:c6:49:70:13:59:6f:f6:0a:00:89:99: e9:27:0c:6f:93:2e:47:7d:28:40:58:6d:7d:1c:89: 68:1e:11:bb:7a:82:53:04:ae:65:83:8c:2d:56:50: 64:46:d2:50:ae:de:21:47:5a:eb:ed:a7:e6:75:bb: 8b:32:90:e6:57:c0:57:be:ee:b0:4b:24:b5:27:4b: 41:f2:1c:f2:82:f6:d4:d0:80:43:7c:43:e7:ff:7b: 91:99:94:f0:a4:d0:63:ff:7d:3e:20:09:4d:fe:4d: 84:c1:69:4b:7b:0b:d4:e5:4e:45:68:8c:2f:dc:81: b6:b0:05:2d:bb:cd:cc:1b:54:ee:3a:03:14:f7:80: 3c:15:6b:38:73:2f:84:83:9b:6d:2a:5e:d4:9d:dc: f7:4f:fd:b1:24:b8:e3:2d:ef:be:fe:15:45:98:90: 28:2f:4b:8f:aa:47:bf:0d:9f:85:8f:f9:a3:78:64: 1a:9b:75:97:47:37:44:92:ed:13:46:56:8f:d7:85: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.40.0/22 185.44.116.0/22 212.5.40.0-212.5.51.255 212.5.60.0/22 IPv6: 2a01:73e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47872 201996 Signature Algorithm: sha256WithRSAEncryption 61:ff:46:3b:a6:6c:69:9b:4d:98:a8:d4:49:9a:30:2a:fa:47: ef:06:49:db:b6:26:c0:64:23:ef:45:43:65:b1:54:35:55:94: 77:28:50:38:ae:d4:54:d9:d4:c7:af:62:49:9e:cc:99:c7:6b: 7c:8c:b9:3c:ba:11:73:19:d4:f8:5d:5b:37:8a:53:2b:c5:95: 4a:bc:67:6d:e1:b6:75:ea:0c:4e:0b:f7:18:df:33:6f:53:cb: ec:ef:5a:d5:e1:71:b7:23:72:e6:50:4a:a3:e0:62:b2:ce:06: 51:b9:27:00:f6:8a:dc:91:0f:65:2c:f3:ed:49:41:d2:50:f3: 07:59:40:fc:7d:e8:7f:b1:4c:aa:4b:06:e4:7b:95:c4:71:09: 00:4e:b4:90:3e:0b:65:52:46:68:95:ba:fc:f6:0d:9e:c8:ae: c3:18:81:a3:fe:0b:fa:6b:84:c8:01:24:00:3b:14:37:b5:49: 50:13:20:b9:bb:3d:48:b1:60:b1:0a:a3:87:a1:e3:e7:8c:3f: 02:39:8f:18:48:b0:a0:16:e1:9d:04:8f:9e:c4:26:5a:57:14: ed:56:eb:d5:b6:9a:ec:3a:27:46:7f:fc:27:3c:d2:04:7e:fd: 65:73:e3:d5:0a:2e:28:49:84:30:c8:4a:13:c0:77:41:26:46: 7f:4b:1b:aa -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt/FWZfbR/ytvcJMdDKOudNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjk1MmY5YzMzOWNhYmQxNDIzNGQwMGM4NGEyNTJkN2VjNzFhMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+oJZC/nswr1w1oJuUVk38dftoe9 We3BiIvuQxAlrJ1TZoXNGLLMfY6lAV4a7JoXWhSTIULkCiE6elP/ZBUzxklwE1lv 9goAiZnpJwxvky5HfShAWG19HIloHhG7eoJTBK5lg4wtVlBkRtJQrt4hR1rr7afm dbuLMpDmV8BXvu6wSyS1J0tB8hzygvbU0IBDfEPn/3uRmZTwpNBj/30+IAlN/k2E wWlLewvU5U5FaIwv3IG2sAUtu83MG1TuOgMU94A8FWs4cy+Eg5ttKl7Undz3T/2x JLjjLe++/hVFmJAoL0uPqke/DZ+Fj/mjeGQam3WXRzdEku0TRlaP14XwoQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFMuVL5wznKvRQjTQDISiUtfscaKiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzkwOThm ZC03ZGMzLTRlMTItYjg5My1mZDIyZGYzYjU3ZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvOTA5OGZk LTdkYzMtNGUxMi1iODkzLWZkMjJkZjNiNTdmNi8xL3k1VXZuRE9jcTlGQ05OQU1o S0pTMS14eG9xSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCV/YoAwQCuSx0MAwDBAPUBSgDBALUBTADBALU BTwwDQQCAAIwBwMFACoBc+AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDALsAAgMD FQwwDQYJKoZIhvcNAQELBQADggEBAGH/RjumbGmbTZio1EmaMCr6R+8GSdu2JsBk I+9FQ2WxVDVVlHcoUDiu1FTZ1MevYkmezJnHa3yMuTy6EXMZ1PhdWzeKUyvFlUq8 Z23htnXqDE4L9xjfM29Ty+zvWtXhcbcjcuZQSqPgYrLOBlG5JwD2ityRD2Us8+1J QdJQ8wdZQPx96H+xTKpLBuR7lcRxCQBOtJA+C2VSRmiVuvz2DZ7IrsMYgaP+C/pr hMgBJAA7FDe1SVATILm7PUixYLEKo4eh4+eMPwI5jxhIsKAW4Z0Ej57EJlpXFO1W 69W2muw6J0Z//Cc80gR+/WVz49UKLihJhDDIShPAd0EmRn9LG6o= -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:51 2026 by rpki-client