This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer File: yNWqcDQlCrGoeJrIbMDu87_J218.cer (raw, json) Hash identifier: KZzKN85fcS3uQdLwHfzV0Zx/IfLmduij38Mksu7Xw0M= Subject key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1570504912C010229DB3B69009FA60 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 85.119.8.0/21 IP: 185.223.16.0/22 IP: 2a0c:6800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:70:50:49:12:c0:10:22:9d:b3:b6:90:09:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:74:3e:5f:b4:37:e1:f6:bc:f3:b0:ac:8c: 4b:d9:8c:45:9e:90:f6:4a:b1:68:5c:07:ca:73:f3: 36:4b:ed:ae:77:b9:a9:fe:64:cc:21:05:fb:20:0e: a2:19:2c:24:53:89:a9:c9:e6:c7:4c:46:72:2a:21: 13:fb:81:26:df:bc:b3:61:6a:65:ed:e3:51:27:98: de:18:41:6a:8f:53:c9:39:24:36:4b:41:23:a5:28: 3f:b5:3c:71:bf:42:ab:f7:48:31:fd:13:de:40:36: fc:1a:34:50:03:9a:e4:e8:85:97:8c:38:a0:5b:dc: f0:f7:23:3b:0f:53:bd:3c:48:ff:4f:01:5b:ca:80: 79:0d:7f:97:bf:95:fc:b7:57:53:63:99:50:91:93: 81:22:ec:7c:17:bc:83:1d:fe:78:ef:9d:67:08:6f: ac:5e:64:58:00:65:ef:97:24:93:f4:ae:cc:c9:4f: 8b:12:4f:f4:a5:d0:f5:a4:73:52:6b:cd:45:1a:6d: 7e:c2:87:68:c6:a8:6f:14:b3:b4:75:3a:d7:c6:38: da:1c:f0:5f:14:c5:85:1c:6a:3b:5e:73:4d:50:ba: bd:c9:43:7e:57:2c:2c:09:29:9c:0e:c5:63:5c:df: be:8f:05:b2:da:5d:e0:b9:80:47:a6:6f:9b:6d:02: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.8.0/21 185.223.16.0/22 IPv6: 2a0c:6800::/32 Signature Algorithm: sha256WithRSAEncryption 7e:5d:b0:e0:6b:9a:f2:fb:a8:25:09:f8:b0:3d:97:c6:b4:73: a8:98:90:29:54:6b:a4:be:d2:36:20:59:ba:47:ae:d6:fe:30: a8:8f:a6:6e:b6:87:50:02:4d:77:9c:99:3f:7e:88:26:c8:5c: 94:43:5f:b5:b7:94:28:8a:41:96:ad:6c:d7:ef:f7:01:d8:b7: 63:a7:04:73:33:65:ce:18:f7:b7:87:67:41:24:b3:c5:cd:78: 77:ca:88:92:20:39:89:47:3f:84:f7:24:39:fa:02:49:98:e5: 28:c0:83:cc:11:eb:d9:58:3c:21:36:e1:a7:6e:c4:ba:d9:75: 54:dd:9c:2d:08:04:df:52:e0:fd:7f:93:e6:4e:12:81:3d:d3: 2a:59:19:b9:ea:81:a5:03:4c:5d:0b:19:71:d4:b0:f0:06:55: 82:d8:69:be:56:d1:5f:db:57:c6:7e:a0:7b:ba:e6:35:e5:6a: 08:b5:10:a2:24:5d:bb:0f:a4:bc:69:5c:43:88:25:33:75:0c: a4:f6:7c:92:7b:f8:39:f1:9c:f9:26:7e:fb:d7:db:2e:4e:ff: 7e:76:04:f4:c4:eb:48:25:bd:7e:74:cf:e7:a2:f5:cc:5e:38: 1a:2c:c9:34:7e:53:53:96:06:a5:0f:02:36:59:05:9a:55:59: f2:de:26:b9 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/FXBQSRLAECKds7aQCfpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQ1YWE3MDM0MjUwYWIxYTg3ODlhYzg2Y2MwZWVmM2JmYzlkYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PR0Pl+0N+H2vPOwrIxL2YxFnpD2 SrFoXAfKc/M2S+2ud7mp/mTMIQX7IA6iGSwkU4mpyebHTEZyKiET+4Em37yzYWpl 7eNRJ5jeGEFqj1PJOSQ2S0EjpSg/tTxxv0Kr90gx/RPeQDb8GjRQA5rk6IWXjDig W9zw9yM7D1O9PEj/TwFbyoB5DX+Xv5X8t1dTY5lQkZOBIux8F7yDHf54751nCG+s XmRYAGXvlyST9K7MyU+LEk/0pdD1pHNSa81FGm1+wodoxqhvFLO0dTrXxjjaHPBf FMWFHGo7XnNNULq9yUN+VywsCSmcDsVjXN++jwWy2l3guYBHpm+bbQLB2wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFMjVqnA0JQqxqHiayGzA7vO/ydtfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzJkNDkw Yy02ZmY4LTQ3MWQtOTdkMi0yZDcyZjIzMTkzZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMmQ0OTBj LTZmZjgtNDcxZC05N2QyLTJkNzJmMjMxOTNkYi8xL3lOV3FjRFFsQ3JHb2VKckli TUR1ODdfSjIxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDVXcIAwQCud8QMA0EAgACMAcDBQAqDGgAMA0G CSqGSIb3DQEBCwUAA4IBAQB+XbDga5ry+6glCfiwPZfGtHOomJApVGukvtI2IFm6 R67W/jCoj6ZutodQAk13nJk/fogmyFyUQ1+1t5QoikGWrWzX7/cB2LdjpwRzM2XO GPe3h2dBJLPFzXh3yoiSIDmJRz+E9yQ5+gJJmOUowIPMEevZWDwhNuGnbsS62XVU 3ZwtCATfUuD9f5PmThKBPdMqWRm56oGlA0xdCxlx1LDwBlWC2Gm+VtFf21fGfqB7 uuY15WoItRCiJF27D6S8aVxDiCUzdQyk9nySe/g58Zz5Jn7719suTv9+dgT0xOtI Jb1+dM/novXMXjgaLMk0flNTlgalDwI2WQWaVVny3ia5 -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:10 2026 by rpki-client