This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer File: kYaHyFQkQhcMxR71MW05Y2CXCNw.cer (raw, json) Hash identifier: kuu3UXe+jqfO2Mc8tA5bpTK24cjiOzAYHU56MOQlEnc= Subject key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED43C6DE45DA61F007858539588561 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199363 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:43:c6:de:45:da:61:f0:07:85:85:39:58:85:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=918687c8542442170cc51ef5316d3963609708dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:48:96:16:6f:7b:93:36:d6:a9:e4:d9:bb: 94:c0:ab:11:81:29:30:ba:4e:1e:41:c8:1a:9f:d7: 3c:ec:d1:7f:50:db:7d:57:36:dc:58:87:83:50:4c: 6c:ad:07:81:f5:e2:5c:4e:f6:0e:c0:ca:31:5b:9e: 6e:f7:95:81:ae:40:79:a0:a0:c3:5e:b9:e5:09:c4: 9f:be:91:e8:98:bb:e6:f2:07:74:f7:f7:0c:ca:33: 73:d3:f9:14:82:63:3e:cf:35:61:54:42:2b:25:c8: f1:7e:69:7a:91:94:df:f7:a0:76:7f:f5:63:9a:13: 21:ae:55:69:7f:8d:20:ee:c3:64:6b:2c:8f:45:8c: cc:9a:95:c7:f7:e8:ea:d4:8f:c4:c7:02:74:b0:1d: 25:14:1a:19:11:03:79:8a:2d:43:22:c8:3c:bb:1f: 87:25:8f:4e:39:80:fd:e1:b5:df:72:f0:cf:9d:e3: e8:20:eb:bb:dc:99:b4:39:27:40:ee:a2:07:92:22: e3:1d:5e:eb:0e:9b:f1:46:b6:d6:ac:04:a1:39:37: 90:4a:64:6d:02:b0:a1:5f:31:c6:4d:29:73:2e:6d: 2d:b9:a6:3d:80:4a:43:31:2d:62:64:42:bf:77:2f: bd:f7:d5:59:43:c4:28:d8:e6:f4:4c:bf:a3:e6:ab: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199363 Signature Algorithm: sha256WithRSAEncryption 36:fc:85:d4:6f:5a:f9:b6:3f:0b:24:e9:28:ef:37:93:0a:6b: 58:31:9e:21:da:c8:2b:db:11:1d:a0:9d:50:19:d0:64:69:22: b6:ad:22:ec:26:ec:35:f7:d9:92:f5:bd:9b:84:0b:c5:db:1e: 1a:b5:09:81:73:fb:85:74:00:5f:de:7f:bc:83:54:ea:6f:6a: b6:7d:4c:4d:16:05:27:66:5c:78:8f:3c:2e:42:07:3b:82:06: 6e:31:9c:fa:4a:8a:fb:0c:87:cc:da:58:5e:61:5e:3c:97:1f: 98:9a:d5:6f:15:ca:10:cd:2f:21:d0:9d:91:68:45:46:9e:05: 30:75:1b:31:95:97:ba:aa:69:bf:30:a4:6e:0d:da:46:25:ad: e3:35:60:74:9a:64:05:ab:05:28:39:53:0f:9b:ab:b9:00:e7: b8:8e:16:36:05:f3:8a:93:d5:35:fd:d7:b7:24:dc:17:2e:1c: 9c:84:83:04:84:94:8a:5e:1c:6d:4c:73:68:45:82:d4:ff:33: dc:40:fb:01:d1:d7:ac:00:d4:75:b4:25:94:8c:55:fd:61:6f: 35:55:38:a1:bd:39:6b:ff:1c:7b:0c:1e:a7:f1:9d:08:dd:8e: 3e:5d:a3:a5:11:43:43:30:2b:9f:63:6e:87:c4:12:5d:a1:80: 2e:05:ec:6b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87UPG3kXaYfAHhYU5WIVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTg2ODdjODU0MjQ0MjE3MGNjNTFlZjUzMTZkMzk2MzYwOTcwOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfZIlhZve5M21qnk2buUwKsRgSkw uk4eQcgan9c87NF/UNt9VzbcWIeDUExsrQeB9eJcTvYOwMoxW55u95WBrkB5oKDD XrnlCcSfvpHomLvm8gd09/cMyjNz0/kUgmM+zzVhVEIrJcjxfml6kZTf96B2f/Vj mhMhrlVpf40g7sNkayyPRYzMmpXH9+jq1I/ExwJ0sB0lFBoZEQN5ii1DIsg8ux+H JY9OOYD94bXfcvDPnePoIOu73Jm0OSdA7qIHkiLjHV7rDpvxRrbWrAShOTeQSmRt ArChXzHGTSlzLm0tuaY9gEpDMS1iZEK/dy+999VZQ8Qo2Ob0TL+j5qscrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJGGh8hUJEIXDMUe9TFtOWNglwjcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzgzMjI2 YS00MjkxLTRmMDMtOWJlMy04OWUzOWFjMWVkODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODMyMjZh LTQyOTEtNGYwMy05YmUzLTg5ZTM5YWMxZWQ4MS8xL2tZYUh5RlFrUWhjTXhSNzFN VzA1WTJDWENOdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKwzANBgkqhkiG9w0BAQsFAAOCAQEANvyF1G9a+bY/ CyTpKO83kwprWDGeIdrIK9sRHaCdUBnQZGkitq0i7CbsNffZkvW9m4QLxdseGrUJ gXP7hXQAX95/vINU6m9qtn1MTRYFJ2ZceI88LkIHO4IGbjGc+kqK+wyHzNpYXmFe PJcfmJrVbxXKEM0vIdCdkWhFRp4FMHUbMZWXuqppvzCkbg3aRiWt4zVgdJpkBasF KDlTD5uruQDnuI4WNgXzipPVNf3XtyTcFy4cnISDBISUil4cbUxzaEWC1P8z3ED7 AdHXrADUdbQllIxV/WFvNVU4ob05a/8cewwep/GdCN2OPl2jpRFDQzArn2Nuh8QS XaGALgXsaw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:34:04 2026 by rpki-client