This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer (raw, json) Hash identifier: 6C90Ja8NQtikOOT51jJNP9PzJnSu6KDAGpchzQWeKdQ= Subject key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D15A3976B8D0D071884A60255C207 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202351 IP: 2001:67c:ae0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:15:a3:97:6b:8d:0d:07:18:84:a6:02:55:c2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:79:52:6a:e2:ae:11:0c:a0:43:3d:f6:fb: ba:e3:2e:0a:75:90:2b:bd:7c:17:15:fd:07:eb:50: cc:0d:58:c0:4c:16:97:d4:ce:6c:00:66:e9:ac:c9: 93:4b:29:a2:ae:b8:be:d5:a8:7d:da:2f:df:20:bd: 35:ab:8b:8d:b2:ae:a7:d0:b0:59:bd:87:ce:53:3b: 3d:d6:c5:1b:a5:93:ff:e9:db:ac:14:25:f8:bd:4c: 7f:04:1a:e2:d9:d3:d9:a1:6e:6e:d3:cf:d7:98:dc: 00:5c:88:37:96:5e:f9:25:9f:96:c4:de:ad:84:2e: 7c:0b:e9:74:ea:7d:d7:79:6a:61:d2:fd:6c:77:cd: 28:53:4d:6f:e6:cc:bd:26:04:08:22:fc:7b:23:23: 22:b4:d7:38:af:e5:8c:2d:ad:be:8a:63:6a:01:f7: ce:78:b7:f4:85:ba:83:c1:fb:6c:72:e3:8f:3c:92: 55:0c:a5:01:06:72:eb:52:59:4c:3f:7e:f3:0f:b5: 29:2c:a0:ce:51:00:ef:46:83:43:29:45:cf:5a:af: 93:7a:3e:b1:26:89:6b:2b:7f:ff:39:8d:f7:bf:e0: 4e:67:17:c9:09:23:e4:11:25:54:a4:f5:d6:9a:23: 9a:3a:0c:01:8b:da:08:cb:9d:4a:67:0d:03:02:df: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ae0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202351 Signature Algorithm: sha256WithRSAEncryption 39:6b:2b:66:ec:05:eb:7d:ab:fd:ff:ea:14:9a:18:a8:95:72: 3c:96:1d:22:b4:96:42:42:3c:91:c0:29:b5:89:de:3f:3d:f9: b5:f5:73:2d:4b:e9:d3:ec:18:96:71:a7:90:32:51:95:87:ef: 7d:45:a2:8d:ce:21:0a:97:db:cd:08:d7:51:c9:ee:87:79:a5: f0:18:d7:cb:16:ab:7b:30:7a:9e:32:88:00:22:61:8a:f2:4c: 77:b8:f4:e8:80:ac:d1:4f:58:91:2d:6b:63:d5:01:5b:08:35: 96:78:55:f7:67:d5:1a:5e:b6:8f:3b:af:92:c3:08:75:56:c1: e3:ed:fc:c6:ff:f1:cd:6e:68:e1:d9:d1:ef:6a:50:73:46:3d: c6:00:72:c0:1a:5c:ae:5e:32:c1:dc:9b:27:62:11:20:18:c1: ac:7b:36:e0:23:da:c5:1d:50:27:f2:32:a9:5f:4d:88:1c:ac: b7:f4:dc:b0:d7:e8:bc:67:92:3b:54:d0:c3:ee:b9:a1:9e:1b: 45:04:9e:62:d7:a6:85:46:96:61:a5:68:05:d8:52:e0:49:7f: 35:90:6b:fe:b5:83:3f:db:50:58:bb:d3:85:76:24:02:e4:fa: eb:ab:52:98:50:0e:a5:43:31:cc:8f:89:13:e1:36:e2:13:9b: a9:e9:d1:00 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9XRWjl2uNDQcYhKYCVcIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmI5OTZmZjA1NWQ2NTc1ZTAxZjJlNjRkOWEzYjM4MjgzNDcwMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr95UmrirhEMoEM99vu64y4KdZAr vXwXFf0H61DMDVjATBaX1M5sAGbprMmTSymirri+1ah92i/fIL01q4uNsq6n0LBZ vYfOUzs91sUbpZP/6dusFCX4vUx/BBri2dPZoW5u08/XmNwAXIg3ll75JZ+WxN6t hC58C+l06n3XeWph0v1sd80oU01v5sy9JgQIIvx7IyMitNc4r+WMLa2+imNqAffO eLf0hbqDwftscuOPPJJVDKUBBnLrUllMP37zD7UpLKDOUQDvRoNDKUXPWq+Tej6x JolrK3//OY33v+BOZxfJCSPkESVUpPXWmiOaOgwBi9oIy51KZw0DAt8xUwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMu5lv8FXWV14B8uZNmjs4KDRwLRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzU1NzFm OS1kOWJiLTRlNzgtYmFkNi0wOWQ0MjMxYzFjOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNTU3MWY5 LWQ5YmItNGU3OC1iYWQ2LTA5ZDQyMzFjMWM5OS8xL3k3bVdfd1ZkWlhYZ0h5NWsy YU96Z29OSEF0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfArgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMWbzANBgkqhkiG9w0BAQsFAAOCAQEAOWsrZuwF632r/f/qFJoYqJVyPJYd IrSWQkI8kcAptYnePz35tfVzLUvp0+wYlnGnkDJRlYfvfUWijc4hCpfbzQjXUcnu h3ml8BjXyxarezB6njKIACJhivJMd7j06ICs0U9YkS1rY9UBWwg1lnhV92fVGl62 jzuvksMIdVbB4+38xv/xzW5o4dnR72pQc0Y9xgBywBpcrl4ywdybJ2IRIBjBrHs2 4CPaxR1QJ/IyqV9NiByst/TcsNfovGeSO1TQw+65oZ4bRQSeYtemhUaWYaVoBdhS 4El/NZBr/rWDP9tQWLvThXYkAuT666tSmFAOpUMxzI+JE+E24hObqenRAA== -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:39 2026 by rpki-client