This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer (raw, json) Hash identifier: 2m1NYioLjI2arBOs7Ya+nxp8gLtss87Ivsprxv3+P4w= Subject key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12C940193143B725A0C4A7058A46C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214404 IP: 2a0d:5480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c9:40:19:31:43:b7:25:a0:c4:a7:05:8a:46:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:88:f6:18:ce:d2:c1:0d:a7:5b:c4:a4:b4:d6: e5:e9:d0:2f:b2:af:c2:35:84:3c:e2:a3:4d:b2:72: 9a:55:5b:06:87:3c:55:54:3c:b9:2a:13:7b:bc:a0: a7:17:56:13:49:c2:67:fc:2c:ed:d0:6f:ce:36:21: 75:21:22:b9:fa:68:ab:d9:6f:e9:e2:66:a6:a5:b5: 41:96:30:2a:2f:ba:49:2c:9f:d5:52:05:f8:b5:26: ec:a9:37:55:1b:7e:82:74:fb:fe:6c:7a:cc:c8:d6: 25:e3:da:b3:e0:0d:92:5c:47:82:a4:ba:7e:61:6a: 3f:05:15:29:1f:86:dd:6c:6f:83:4e:08:11:77:1a: db:11:e8:6c:cd:18:dd:6c:67:4d:aa:d1:6c:db:72: e5:d9:04:2f:a7:ed:26:e2:87:0a:e0:64:03:2d:37: 19:c8:6d:33:47:17:d4:9b:48:9b:34:e9:82:f3:2d: f9:54:3a:dc:3e:45:cd:fa:67:7b:9a:7c:8a:d0:a7: 8b:7f:71:bf:7b:ae:1d:fd:56:48:7c:94:29:af:2a: ba:d9:05:61:f1:a7:66:dd:4f:96:9f:a1:b7:51:6f: a7:fa:97:54:1a:4e:60:f8:84:39:c8:4b:94:b8:f0: d3:66:9b:49:cc:5c:d2:93:91:6d:c8:21:8d:9a:3c: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:5480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214404 Signature Algorithm: sha256WithRSAEncryption 56:11:23:e7:11:90:9b:79:f3:57:b9:b6:fb:2b:54:38:31:7e: 0e:72:4f:e5:e9:70:9d:32:c4:68:7f:ae:ae:92:3f:84:ea:58: 83:5d:4a:c8:e8:3b:33:96:1c:29:65:dc:33:14:20:b4:be:4c: 3b:0b:c6:94:4f:a5:e1:06:f5:f8:42:8f:a0:2c:00:20:82:08: 8d:8f:f2:ef:95:ef:4c:bd:7f:ec:69:95:1e:bc:61:9c:f9:d3: a6:71:b3:98:c7:a6:42:76:3d:57:55:b8:59:a5:82:d1:16:4e: 80:2c:57:4b:75:6d:d7:12:b1:b4:54:e8:ce:a7:bf:76:13:13: 06:2e:f1:34:ec:a5:ce:18:2d:47:42:b5:8f:6d:4e:a0:0a:fe: d2:27:dd:2e:a0:49:65:53:36:40:30:26:9a:1a:de:29:05:90: 39:3f:e9:3f:b4:fa:0c:dc:92:94:71:08:9d:3c:b6:0e:db:34: 28:f2:30:ff:1d:3f:10:ff:2b:98:20:dd:a3:02:43:eb:c8:72: d6:79:76:e3:49:47:64:ef:77:4c:92:05:a4:b6:03:a0:a3:c5: 9d:a9:3a:53:8a:69:8e:68:67:17:c6:fc:93:8b:bd:c8:6b:ba: ba:0a:dd:a4:3b:c4:cd:66:b7:fc:cc:8c:91:a7:01:bf:23:66: e7:a5:23:3c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8EslAGTFDtyWgxKcFikbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGYzNzQ2ZTBjNmIwNTMxNDdiNTJhNGVmNDBjNDhjNzBhN2YxY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oj2GM7SwQ2nW8SktNbl6dAvsq/C NYQ84qNNsnKaVVsGhzxVVDy5KhN7vKCnF1YTScJn/Czt0G/ONiF1ISK5+mir2W/p 4mampbVBljAqL7pJLJ/VUgX4tSbsqTdVG36CdPv+bHrMyNYl49qz4A2SXEeCpLp+ YWo/BRUpH4bdbG+DTggRdxrbEehszRjdbGdNqtFs23Ll2QQvp+0m4ocK4GQDLTcZ yG0zRxfUm0ibNOmC8y35VDrcPkXN+md7mnyK0KeLf3G/e64d/VZIfJQpryq62QVh 8adm3U+Wn6G3UW+n+pdUGk5g+IQ5yEuUuPDTZptJzFzSk5FtyCGNmjzn+wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFMjzdG4MawUxR7UqTvQMSMcKfxzYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzY3OGE5 Ni02OTVjLTQxODctOTA5My0xMGM1NDZkNzliYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNjc4YTk2 LTY5NWMtNDE4Ny05MDkzLTEwYzU0NmQ3OWJhNS8xL3lQTjBiZ3hyQlRGSHRTcE85 QXhJeHdwX0hOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg1UgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDRYQwDQYJKoZIhvcNAQELBQADggEBAFYRI+cRkJt581e5tvsrVDgxfg5yT+Xp cJ0yxGh/rq6SP4TqWINdSsjoOzOWHCll3DMUILS+TDsLxpRPpeEG9fhCj6AsACCC CI2P8u+V70y9f+xplR68YZz506Zxs5jHpkJ2PVdVuFmlgtEWToAsV0t1bdcSsbRU 6M6nv3YTEwYu8TTspc4YLUdCtY9tTqAK/tIn3S6gSWVTNkAwJpoa3ikFkDk/6T+0 +gzckpRxCJ08tg7bNCjyMP8dPxD/K5gg3aMCQ+vIctZ5duNJR2Tvd0ySBaS2A6Cj xZ2pOlOKaY5oZxfG/JOLvchruroK3aQ7xM1mt/zMjJGnAb8jZuelIzw= -----END CERTIFICATE-----Generated at Mon Jan 26 09:44:39 2026 by rpki-client