This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer (raw, json) Hash identifier: GKjrWbB8pyZFkmYgaRnzq52k9d0eD2sNPO/fEauiHbc= Subject key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED16D86F5F4EC9F37529D303A9CD37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34123 IP: 89.222.128.0/17 IP: 185.193.20.0/22 IP: 188.35.0.0/16 IP: 2a00:12a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:16:d8:6f:5f:4e:c9:f3:75:29:d3:03:a9:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0d:c6:39:8f:82:a5:e4:29:17:75:21:a0:2c: e4:03:dd:04:46:6f:1d:17:2d:5b:9a:68:00:92:79: 39:5a:ef:a0:fe:b3:14:1e:31:7c:86:e7:8d:19:df: 43:5f:90:bc:45:47:b1:7e:2e:04:c3:94:b0:f0:e7: 88:fe:15:5a:30:b2:66:28:f7:9f:d6:7b:69:a0:d9: 9c:08:f6:99:b9:27:81:48:c6:44:11:f1:d0:ea:31: 8e:92:db:f9:c1:c1:64:8f:23:89:79:55:52:4d:68: 7f:67:cd:78:a6:a8:f6:6e:d1:b7:05:0f:91:17:3e: 0a:c1:ca:61:23:0d:df:51:19:f9:ec:d4:e9:9f:6a: 00:7e:1c:7b:da:c7:4b:7d:02:87:8f:35:e2:9c:0e: 72:42:f8:7f:e2:b7:8b:75:57:b1:69:d1:aa:38:7e: b6:87:65:88:17:14:7c:af:8e:df:db:9c:3d:41:38: 7e:70:c2:51:02:d5:b9:fe:e4:63:5c:d5:42:8d:3c: 63:09:c9:94:9e:e2:94:80:0c:ab:6d:81:d9:30:7b: 34:fc:f1:5f:37:43:35:42:e9:39:4f:40:06:a7:d7: 20:b4:70:07:71:bb:a4:d0:5f:72:c6:3b:6a:f1:06: 6c:cd:41:c4:68:4b:58:17:ae:5c:8d:d6:fd:a3:40: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.128.0/17 185.193.20.0/22 188.35.0.0/16 IPv6: 2a00:12a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34123 Signature Algorithm: sha256WithRSAEncryption 4d:ee:7a:d5:cc:e1:d4:46:e0:40:59:e2:4a:14:d9:07:32:d2: 5b:89:53:98:aa:83:3b:fc:f0:1a:de:d9:99:92:3c:ff:3c:8e: 23:e5:53:58:c9:00:24:99:3a:5b:17:36:93:d0:fa:00:65:9e: b9:c3:9d:2e:dd:a0:e9:72:43:28:51:21:c5:5f:63:35:48:0c: 79:64:c0:91:90:35:b5:72:98:07:4f:9c:88:dd:4c:2a:16:d9: d5:8d:5f:d1:be:1a:f9:98:d9:c0:06:7e:82:05:a4:3c:25:a4: ca:34:5a:63:53:b9:0f:e2:7d:1f:f1:79:2d:26:c9:ac:4b:ce: 2e:b3:95:87:80:0c:a0:95:cf:3a:55:74:46:b4:78:d7:88:e9: 16:69:0b:65:5b:9d:94:51:0e:5f:32:1b:3d:f4:f9:c3:97:ab: eb:e4:d0:cd:e2:74:f0:c2:29:47:81:99:ed:3b:8d:23:6a:42: 8b:93:6d:70:f1:b5:1d:f0:a7:ca:46:bb:78:2a:a9:10:01:06: 32:22:34:a3:e3:2e:ba:51:f6:53:e3:4f:80:a9:9a:76:c4:00: 6f:7d:19:88:2e:9d:b8:b5:e7:2b:81:ff:d1:eb:c9:39:f5:ad: 6e:ea:e1:5b:c8:63:8a:0e:09:00:96:be:55:d9:09:96:69:c0: 22:9b:94:6e -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt87RbYb19OyfN1KdMDqc03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ3ZmMxM2UxODM2YzM5NmNjYTIxNzg5NzA0YWIzOWZkOWU1YjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w3GOY+CpeQpF3UhoCzkA90ERm8d Fy1bmmgAknk5Wu+g/rMUHjF8hueNGd9DX5C8RUexfi4Ew5Sw8OeI/hVaMLJmKPef 1ntpoNmcCPaZuSeBSMZEEfHQ6jGOktv5wcFkjyOJeVVSTWh/Z814pqj2btG3BQ+R Fz4KwcphIw3fURn57NTpn2oAfhx72sdLfQKHjzXinA5yQvh/4reLdVexadGqOH62 h2WIFxR8r47f25w9QTh+cMJRAtW5/uRjXNVCjTxjCcmUnuKUgAyrbYHZMHs0/PFf N0M1Quk5T0AGp9cgtHAHcbuk0F9yxjtq8QZszUHEaEtYF65cjdb9o0AtkQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFMvX/BPhg2w5bMoheJcEqzn9nltkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzIxNGM5 YS0wOTUwLTQwZDktYTU4Ni1lMzVkYjUyNTY3ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMjE0Yzlh LTA5NTAtNDBkOS1hNTg2LWUzNWRiNTI1NjdmMC8xL3k5ZjhFLUdEYkRsc3lpRjRs d1NyT2YyZVcyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwQHWd6AAwQCucEUAwMAvCMwDQQCAAIwBwMFACoA EqAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIVLMA0GCSqGSIb3DQEBCwUAA4IB AQBN7nrVzOHURuBAWeJKFNkHMtJbiVOYqoM7/PAa3tmZkjz/PI4j5VNYyQAkmTpb FzaT0PoAZZ65w50u3aDpckMoUSHFX2M1SAx5ZMCRkDW1cpgHT5yI3UwqFtnVjV/R vhr5mNnABn6CBaQ8JaTKNFpjU7kP4n0f8XktJsmsS84us5WHgAyglc86VXRGtHjX iOkWaQtlW52UUQ5fMhs99PnDl6vr5NDN4nTwwilHgZntO40jakKLk21w8bUd8KfK Rrt4KqkQAQYyIjSj4y66UfZT40+AqZp2xABvfRmILp24tecrgf/R68k59a1u6uFb yGOKDgkAlr5V2QmWacAim5Ru -----END CERTIFICATE-----Generated at Sun Jan 25 21:00:10 2026 by rpki-client