This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer File: y9lC2W7pSnpaZS73rIVdyUAUFd8.cer (raw, json) Hash identifier: 3zjgXPLvMlyN4V/uL24BGrBAIrrXvdBlEULm90c1f7M= Subject key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E17A7C0E3D560119704827E231CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64404 IP: 2001:678:814::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e1:7a:7c:0e:3d:56:01:19:70:48:27:e2:31:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:49:1b:02:0d:d5:5d:4b:7d:2f:dc:85:1d: 87:6e:b5:22:9f:cd:82:a8:0c:3d:72:6b:dc:f7:a2: a3:01:5f:fe:43:00:b5:5f:43:87:40:64:3f:dc:f3: 07:74:6c:5e:35:57:86:d1:84:d2:84:da:40:12:77: 3b:73:08:8c:44:3a:2d:c6:b2:6d:d0:43:48:df:70: c9:c6:ea:ea:1e:69:04:c3:8a:72:4b:fe:cc:9b:bd: 5e:3e:d1:3f:9e:29:f1:13:1a:a8:4f:ee:36:0c:23: 62:58:48:28:a3:2a:a0:72:4a:54:a3:ca:7d:21:2d: 2a:97:8a:49:dc:a9:07:a9:fd:ca:5c:43:86:d4:41: 92:27:6c:e2:fd:e6:9f:96:b5:15:b3:38:b4:ff:30: 29:b3:d0:9d:b2:07:65:75:ed:c2:78:05:04:ae:b2: 9c:98:29:ae:4c:7f:fa:c3:15:d1:29:73:8b:d1:c6: a0:f0:8b:2f:93:a5:51:d5:65:6d:5c:c8:fb:19:bc: 0c:29:76:3a:de:d1:a0:55:06:b7:09:dd:b3:bf:6f: 12:22:82:c9:0f:8e:cb:e5:9b:fa:e8:f5:dd:1e:24: fe:f1:94:2c:dc:e1:3c:bb:df:eb:39:27:18:6d:f6: dd:9c:be:34:88:76:f0:43:7a:91:37:62:4e:22:4d: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:814::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64404 Signature Algorithm: sha256WithRSAEncryption 59:fb:4f:14:05:9b:5d:34:91:88:44:6c:a4:20:b4:78:96:b2: 45:77:38:3e:7c:dd:f7:e0:3f:c5:5d:a7:f8:35:80:37:6e:b9: 1c:61:ae:f6:8d:0a:7d:4e:a4:d5:c4:17:16:74:51:02:f9:80: c2:2c:01:97:cf:bb:47:9a:75:d6:47:a6:ac:dc:d6:02:13:62: 44:2c:67:05:c1:25:71:61:d9:42:fb:01:1c:65:d7:a0:a7:9a: bd:29:34:f4:35:30:a3:3f:78:f8:94:ed:09:70:9c:48:c4:9d: 9a:51:36:2a:ef:bf:db:14:02:1e:b1:de:8e:c5:bb:ec:88:46: b9:a8:21:1c:43:d8:b3:05:14:ed:9e:6b:cd:8d:80:3d:95:5b: 11:98:21:89:22:e4:5f:b7:dc:07:0d:69:07:03:ad:8e:80:e6: 80:89:58:87:9b:55:6e:04:07:60:ef:44:fb:e5:c9:e5:82:e2: d2:2a:2b:41:8c:b6:3b:fe:d7:8c:14:82:6d:2b:ce:1d:58:f7: ba:6c:25:6e:8a:10:63:37:9d:51:70:3b:81:e0:ec:ba:b8:0f: 36:51:d7:45:e2:e5:d3:ce:e2:2b:e1:4a:d0:b1:6a:75:cd:47: c8:93:c3:69:d3:f5:c4:26:96:92:d9:68:a0:7a:f1:83:6d:9e: 0f:30:53:50 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5EOF6fA49VgEZcEgn4jHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ5NDJkOTZlZTk0YTdhNWE2NTJlZjdhYzg1NWRjOTQwMTQxNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1JJGwIN1V1LfS/chR2HbrUin82C qAw9cmvc96KjAV/+QwC1X0OHQGQ/3PMHdGxeNVeG0YTShNpAEnc7cwiMRDotxrJt 0ENI33DJxurqHmkEw4pyS/7Mm71ePtE/ninxExqoT+42DCNiWEgooyqgckpUo8p9 IS0ql4pJ3KkHqf3KXEOG1EGSJ2zi/eaflrUVszi0/zAps9Cdsgdlde3CeAUErrKc mCmuTH/6wxXRKXOL0cag8Isvk6VR1WVtXMj7GbwMKXY63tGgVQa3Cd2zv28SIoLJ D47L5Zv66PXdHiT+8ZQs3OE8u9/rOScYbfbdnL40iHbwQ3qRN2JOIk1/GQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMvZQtlu6Up6WmUu96yFXclAFBXfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzA4MmYx Mi01MTNiLTRlYjktYTE3MS1jNmY2ZDQ0NDkxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMDgyZjEy LTUxM2ItNGViOS1hMTcxLWM2ZjZkNDQ0OTE1Zi8xL3k5bEMyVzdwU25wYVpTNzNy SVZkeVVBVUZkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAgUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwD7lDANBgkqhkiG9w0BAQsFAAOCAQEAWftPFAWbXTSRiERspCC0eJayRXc4 Pnzd9+A/xV2n+DWAN265HGGu9o0KfU6k1cQXFnRRAvmAwiwBl8+7R5p11kemrNzW AhNiRCxnBcElcWHZQvsBHGXXoKeavSk09DUwoz94+JTtCXCcSMSdmlE2Ku+/2xQC HrHejsW77IhGuaghHEPYswUU7Z5rzY2APZVbEZghiSLkX7fcBw1pBwOtjoDmgIlY h5tVbgQHYO9E++XJ5YLi0iorQYy2O/7XjBSCbSvOHVj3umwlbooQYzedUXA7geDs urgPNlHXReLl087iK+FK0LFqdc1HyJPDadP1xCaWktlooHrxg22eDzBTUA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:57 2026 by rpki-client