This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer (raw, json) Hash identifier: 2Mjqy3MkT2EeaLp2puOnikUEbBHaFuowWoaNicSx9g0= Subject key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38CC6EC217D4F2A293490899BF0420 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34996 IP: 193.202.18.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cc:6e:c2:17:d4:f2:a2:93:49:08:99:bf:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9cdeb328e3187dbff23729a48b47054c1d519da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:41:11:3f:01:df:0b:ff:30:c9:54:51:ef: 59:2d:f1:2f:7d:bc:45:72:c3:b7:14:6f:74:ea:40: 8a:0e:ab:6a:49:44:38:cb:0f:bc:3b:e0:56:bf:a0: 89:87:87:46:3b:17:41:6a:b6:70:09:61:68:ee:30: f7:77:a7:61:63:2b:f9:aa:5c:bb:e0:27:63:e3:4a: 9b:dd:54:2f:23:41:92:8c:41:15:4e:0b:2a:4c:d1: a9:f9:f0:3f:8b:13:81:db:b1:48:72:82:44:11:99: 89:06:4c:bd:34:d9:1d:93:67:54:09:a3:83:8f:c0: 79:7a:62:18:27:f3:7a:10:9b:13:88:9f:28:2e:a6: e8:77:6e:29:45:76:5a:b0:d8:59:cf:14:11:34:2b: 63:d8:9c:e7:50:a8:ea:e2:01:24:d1:c5:3f:32:c3: 8d:d6:d6:6d:73:28:ca:ab:00:1d:49:ae:9a:72:db: af:3f:2e:bb:03:df:2e:90:eb:ea:46:9a:8d:ba:8b: ef:7b:8a:16:99:76:01:43:4c:2d:09:bb:27:62:9d: 12:07:e0:dc:91:29:94:91:32:be:d8:2b:0d:36:b4: 18:bd:fc:74:38:2b:aa:05:4a:56:40:6d:db:44:65: d3:7d:0b:05:17:da:b4:52:cb:d5:f0:36:b3:cb:9d: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.18.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34996 Signature Algorithm: sha256WithRSAEncryption 94:e8:ad:e9:fa:d8:07:46:59:f7:8d:40:34:f4:00:8e:3a:8f: 55:ec:60:f2:8c:8b:d6:57:11:9b:0d:ea:20:f9:73:73:ed:1d: a5:8a:b6:4c:40:1a:b1:80:64:d3:03:a8:e5:65:fc:cb:9c:41: 93:69:20:98:cf:98:08:82:1c:86:dd:c8:09:44:7b:76:d8:ea: bb:6b:dd:5d:82:a6:78:ce:04:d7:08:4e:6c:f6:59:23:ad:5e: 1d:3a:ac:8b:e3:74:1b:65:c0:9a:55:58:f5:e5:e6:5e:af:72: 90:fa:77:a0:4a:29:21:da:2a:b1:c7:21:ad:83:13:dd:da:c2: e4:62:2c:a4:97:fa:13:16:9f:df:24:aa:c0:38:89:ca:34:57: c3:c4:d9:0c:3c:98:ca:d0:2b:b9:94:00:8c:e1:46:ad:45:bf: bd:f8:f4:24:aa:53:69:ce:80:9f:40:00:52:3f:74:7a:08:aa: f6:5e:7a:83:14:93:2a:4e:82:29:68:0c:46:a9:0c:4d:55:26: 3c:10:a0:4a:6a:b7:ad:93:1b:d6:59:e2:d8:0a:11:b8:4a:65: 9e:c7:c4:fb:20:a0:8f:c7:b2:0a:bd:c9:b5:a5:d4:a9:dc:42: 75:8b:59:71:cd:76:78:02:ba:a8:4e:fa:c5:5c:b9:c5:77:29: 9f:84:d2:61 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OMxuwhfU8qKTSQiZvwQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWNkZWIzMjhlMzE4N2RiZmYyMzcyOWE0OGI0NzA1NGMxZDUxOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZBET8B3wv/MMlUUe9ZLfEvfbxF csO3FG906kCKDqtqSUQ4yw+8O+BWv6CJh4dGOxdBarZwCWFo7jD3d6dhYyv5qly7 4Cdj40qb3VQvI0GSjEEVTgsqTNGp+fA/ixOB27FIcoJEEZmJBky9NNkdk2dUCaOD j8B5emIYJ/N6EJsTiJ8oLqbod24pRXZasNhZzxQRNCtj2JznUKjq4gEk0cU/MsON 1tZtcyjKqwAdSa6actuvPy67A98ukOvqRpqNuovve4oWmXYBQ0wtCbsnYp0SB+Dc kSmUkTK+2CsNNrQYvfx0OCuqBUpWQG3bRGXTfQsFF9q0UsvV8Dazy51TvwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMnN6zKOMYfb/yNymki0cFTB1RnaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzRlODY0 Mi04ODg5LTQ3YWQtOTBjMC1iODlhYTAxZWRjODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNGU4NjQy LTg4ODktNDdhZC05MGMwLWI4OWFhMDFlZGM4MC8xL3ljM3JNbzR4aDl2X0kzS2FT TFJ3Vk1IVkdkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcoSMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCItDANBgkqhkiG9w0BAQsFAAOCAQEAlOit6frYB0ZZ941ANPQAjjqPVexg8oyL 1lcRmw3qIPlzc+0dpYq2TEAasYBk0wOo5WX8y5xBk2kgmM+YCIIcht3ICUR7dtjq u2vdXYKmeM4E1whObPZZI61eHTqsi+N0G2XAmlVY9eXmXq9ykPp3oEopIdoqscch rYMT3drC5GIspJf6Exaf3ySqwDiJyjRXw8TZDDyYytAruZQAjOFGrUW/vfj0JKpT ac6An0AAUj90egiq9l56gxSTKk6CKWgMRqkMTVUmPBCgSmq3rZMb1lni2AoRuEpl nsfE+yCgj8eyCr3JtaXUqdxCdYtZcc12eAK6qE76xVy5xXcpn4TSYQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:07 2026 by rpki-client