This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer (raw, json) Hash identifier: RgZUHut52NTlDckb7uuJIbp9SGq6wcko95nqevQS3Ic= Subject key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F10EDFF3E3871F19B0EBBA95ECB56 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56547 IP: 31.24.232.0/21 IP: 185.69.108.0/22 IP: 185.76.248.0/22 IP: 2a03:2f20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:10:ed:ff:3e:38:71:f1:9b:0e:bb:a9:5e:cb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:96:b5:4b:3b:2c:4d:5f:a8:95:7e:34:ee: e2:b0:7c:2e:f0:d3:e2:a0:5d:57:fd:3d:21:8f:59: 60:2f:11:28:27:29:60:ba:3f:a6:37:48:14:5c:ab: 08:bf:8a:12:dd:31:79:02:e8:bc:ad:5c:f6:56:e1: 26:ca:ae:08:09:79:fe:cc:eb:84:4e:76:9e:4d:d6: 71:97:14:5f:4a:05:b1:c6:33:57:27:d0:26:2a:3f: 8b:b9:76:8a:15:88:fa:94:61:cf:23:5c:dc:17:fc: 1e:95:ea:74:a6:5a:30:a0:fd:dd:7f:8f:b9:a8:49: 79:0a:21:d2:01:c6:c7:0a:67:04:b2:ce:cf:67:c6: 95:4f:91:4b:f1:8c:3b:76:cb:0e:9b:b1:40:e1:d2: 9c:7d:bf:fc:5e:bc:7f:04:8a:c2:8e:8d:a9:21:65: ac:0a:5b:04:87:0c:9f:d2:5a:66:df:dc:73:e2:17: fc:d5:66:10:46:b5:6d:9b:b5:93:a5:b0:23:19:04: 31:86:fa:4d:14:9d:67:d3:9d:37:21:06:f1:8b:24: 6f:e5:78:31:80:1d:a1:a6:30:96:2a:da:8a:8e:4a: 4d:af:1e:cf:ef:e2:0c:94:a6:b7:d6:b4:83:39:55: ad:23:ba:0f:b8:e0:b0:dc:85:7b:60:5c:3b:b9:9b: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.232.0/21 185.69.108.0/22 185.76.248.0/22 IPv6: 2a03:2f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56547 Signature Algorithm: sha256WithRSAEncryption 8d:13:80:48:b8:b1:f2:01:a3:38:fc:9f:4f:bd:36:d5:9c:e5: 34:00:3d:59:ff:cd:e6:17:e2:a7:b7:5b:ec:7d:e9:2a:79:14: b4:84:1a:ea:d6:46:98:92:6b:5b:04:8e:cd:55:74:92:46:71: a6:84:27:92:29:1e:8d:ee:d6:d5:b9:bf:c1:e5:d8:2e:10:25: ff:0e:fb:8d:83:dd:d7:59:91:07:10:f3:24:95:12:69:de:bc: e1:63:89:4e:ae:87:5a:7d:34:5c:64:15:d6:01:04:1a:1b:ee: 8f:79:74:01:08:9c:f7:6c:85:67:29:fa:7f:68:6a:3b:fe:bd: 9b:88:0f:4e:0a:98:83:5f:74:50:54:fe:62:42:96:52:8d:82: ee:f8:a1:52:18:48:3d:88:94:ab:72:5e:5d:11:74:16:1d:12: 42:fc:1e:be:22:8e:c1:50:e0:6f:1f:9c:ed:d0:38:5c:e9:f8: 76:9c:01:0d:1e:5c:64:30:b8:f7:29:30:98:42:f8:cf:ee:48: 19:ef:50:23:98:14:67:ee:f9:85:1c:d0:d2:da:99:8b:9e:cf: 25:77:ec:3c:27:c4:23:d0:5c:ec:53:b8:2b:e5:d7:34:71:4a: 5d:72:5b:0a:ab:03:ee:89:5f:14:c2:5a:b6:85:1a:6b:e3:bf: 93:8e:15:63 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8fxDt/z44cfGbDrupXstWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjMwZWI0MzUzZWQ3NTBmYWYyM2YyZjFlMTQwMThjNmNmYzYyNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9huWtUs7LE1fqJV+NO7isHwu8NPi oF1X/T0hj1lgLxEoJylguj+mN0gUXKsIv4oS3TF5Aui8rVz2VuEmyq4ICXn+zOuE TnaeTdZxlxRfSgWxxjNXJ9AmKj+LuXaKFYj6lGHPI1zcF/welep0plowoP3df4+5 qEl5CiHSAcbHCmcEss7PZ8aVT5FL8Yw7dssOm7FA4dKcfb/8Xrx/BIrCjo2pIWWs ClsEhwyf0lpm39xz4hf81WYQRrVtm7WTpbAjGQQxhvpNFJ1n0503IQbxiyRv5Xgx gB2hpjCWKtqKjkpNrx7P7+IMlKa31rSDOVWtI7oPuOCw3IV7YFw7uZsnvQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMsw60NT7XUPryPy8eFAGMbPxicVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2YwOTc0 NC04ZjViLTQ1YWQtOTVhOC0xYjlhMzIzYzU3MGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvZjA5NzQ0 LThmNWItNDVhZC05NWE4LTFiOWEzMjNjNTcwYi8xL3l6RHJRMVB0ZFEtdklfTHg0 VUFZeHNfR0p4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDHxjoAwQCuUVsAwQCuUz4MA0EAgACMAcDBQAq Ay8gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDc4zANBgkqhkiG9w0BAQsFAAOC AQEAjROASLix8gGjOPyfT7021ZzlNAA9Wf/N5hfip7db7H3pKnkUtIQa6tZGmJJr WwSOzVV0kkZxpoQnkikeje7W1bm/weXYLhAl/w77jYPd11mRBxDzJJUSad684WOJ Tq6HWn00XGQV1gEEGhvuj3l0AQic92yFZyn6f2hqO/69m4gPTgqYg190UFT+YkKW Uo2C7vihUhhIPYiUq3JeXRF0Fh0SQvweviKOwVDgbx+c7dA4XOn4dpwBDR5cZDC4 9ykwmEL4z+5IGe9QI5gUZ+75hRzQ0tqZi57PJXfsPCfEI9Bc7FO4K+XXNHFKXXJb CqsD7olfFMJatoUaa+O/k44VYw== -----END CERTIFICATE-----Generated at Tue Jan 13 23:13:33 2026 by rpki-client