This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer File: y9QcwSHgy2CjqY2_crpNvWPuvp8.cer (raw, json) Hash identifier: bkf053RIqnjuw32dmikwA4mQUymrlkJZVHTKBhLPbz8= Subject key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E380C579A3A32C0DAB504BA3E4D0650 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208506 IP: 213.178.136.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0c:57:9a:3a:32:c0:da:b5:04:ba:3e:4d:06:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:90:c2:1a:78:8d:23:d6:6b:2f:65:0f:49: b2:ec:5a:dd:94:55:5f:67:e9:51:46:18:4b:dc:85: f5:a6:24:d6:09:d6:8b:29:58:50:c4:74:c1:48:d2: 2d:79:6f:57:c3:06:db:35:31:1c:37:5c:6b:4e:9c: f1:cf:3b:a4:b9:0d:dc:05:59:4e:e4:b0:5f:6c:60: 29:bf:86:c5:b1:8c:8f:48:74:27:de:13:cf:a3:15: 08:28:96:b0:aa:f3:5c:6e:e3:f6:2d:ee:44:37:95: 20:0f:07:75:72:db:86:e3:66:72:a5:c2:a8:32:39: ff:0b:c3:4a:0d:18:ac:8b:c3:df:80:73:95:61:3b: e7:50:db:fb:04:97:a1:a9:2e:d1:de:85:ec:6b:2f: fd:8b:ce:36:17:a3:ad:43:8d:41:79:58:ec:bb:e3: 26:9c:12:ef:ac:99:b2:56:dd:7f:45:03:7e:b7:4f: 05:89:bb:5c:c6:21:42:0b:34:61:4d:f7:ad:ae:e7: d2:e1:80:08:fb:a4:72:9e:4a:2e:04:3c:86:66:66: 9b:e7:5d:ce:ed:fa:b3:fe:6c:3c:4a:94:c6:5f:c4: 50:d4:2a:bd:ad:af:ab:84:b7:a0:15:04:30:e2:cc: 50:75:75:ae:a4:12:aa:96:fb:ef:04:66:49:2e:35: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208506 Signature Algorithm: sha256WithRSAEncryption 2d:40:79:53:24:09:2e:cd:5b:14:86:15:09:91:50:85:24:4c: c2:22:b0:a7:c5:7e:00:b6:cd:57:21:5f:d5:b6:e9:48:5d:81: 51:27:a0:b7:66:44:0f:43:18:6f:97:97:8b:15:02:74:86:00: b0:84:90:a1:95:54:df:60:86:43:1c:a0:2d:93:1c:56:eb:27: 45:ec:d0:c2:d5:b0:e3:90:43:cc:58:70:6d:1c:b4:a1:66:8e: 60:21:f7:22:53:c3:8b:41:b5:b1:3d:bb:66:ac:84:fc:d4:52: 82:30:8d:1e:d7:4f:62:87:73:1d:2b:b0:ba:14:3a:47:56:98: 09:41:fe:96:1a:11:03:82:40:13:ab:e1:92:36:24:8e:44:bc: f5:47:4d:f9:71:97:1d:1c:52:81:b7:8c:85:69:f0:07:95:64: 3e:77:73:94:be:b4:84:ac:1a:43:27:6c:65:a4:72:6d:b3:67: 4a:85:cd:cd:64:ee:3e:bb:b7:f2:11:b6:83:f0:fe:8f:78:52: e2:99:8e:db:f4:32:5c:c7:98:88:47:46:c8:19:84:55:20:ae: ce:9d:07:2c:e4:5a:ef:c5:46:9f:b6:0e:71:7c:1b:a5:c2:57: c5:62:51:5a:14:6c:00:90:a7:6f:66:28:0f:25:20:ea:ad:2b: 6b:ba:fb:48 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OAxXmjoywNq1BLo+TQZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ0MWNjMTIxZTBjYjYwYTNhOThkYmY3MmJhNGRiZDYzZWViZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt+Qwhp4jSPWay9lD0my7FrdlFVf Z+lRRhhL3IX1piTWCdaLKVhQxHTBSNIteW9XwwbbNTEcN1xrTpzxzzukuQ3cBVlO 5LBfbGApv4bFsYyPSHQn3hPPoxUIKJawqvNcbuP2Le5EN5UgDwd1ctuG42ZypcKo Mjn/C8NKDRisi8PfgHOVYTvnUNv7BJehqS7R3oXsay/9i842F6OtQ41BeVjsu+Mm nBLvrJmyVt1/RQN+t08FibtcxiFCCzRhTfetrufS4YAI+6RynkouBDyGZmab513O 7fqz/mw8SpTGX8RQ1Cq9ra+rhLegFQQw4sxQdXWupBKqlvvvBGZJLjW/VwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzdlYjRl OC1iY2IxLTQ5ZWYtYjk0NC01M2E1YWY3NjUzNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvN2ViNGU4 LWJjYjEtNDllZi1iOTQ0LTUzYTVhZjc2NTM0My8xL3k5UWN3U0hneTJDanFZMl9j cnBOdldQdXZwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQC1bKIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMuejANBgkqhkiG9w0BAQsFAAOCAQEALUB5UyQJLs1bFIYVCZFQhSRMwiKwp8V+ ALbNVyFf1bbpSF2BUSegt2ZED0MYb5eXixUCdIYAsISQoZVU32CGQxygLZMcVusn RezQwtWw45BDzFhwbRy0oWaOYCH3IlPDi0G1sT27ZqyE/NRSgjCNHtdPYodzHSuw uhQ6R1aYCUH+lhoRA4JAE6vhkjYkjkS89UdN+XGXHRxSgbeMhWnwB5VkPndzlL60 hKwaQydsZaRybbNnSoXNzWTuPru38hG2g/D+j3hS4pmO2/QyXMeYiEdGyBmEVSCu zp0HLORa78VGn7YOcXwbpcJXxWJRWhRsAJCnb2YoDyUg6q0ra7r7SA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:51 2026 by rpki-client