This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer File: yzNdxv6zhfaiM0QFahPCxZUCjpE.cer (raw, json) Hash identifier: bvCPia9meiIWCiK448yN8aYLQ2bcCXLpwqg0N1Fbc8E= Subject key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC929CE8B416D2CF6F6038B44B5F60C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61361 IP: 45.80.0.0/22 IP: 91.223.131.0/24 IP: 193.26.14.0/24 IP: 193.26.21.0 -- 193.26.22.255 IP: 2a0e:3780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:29:ce:8b:41:6d:2c:f6:f6:03:8b:44:b5:f6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:c4:ec:d1:1c:01:99:d2:6d:c4:10:6a:3c: 3e:d8:7a:74:db:89:e8:a4:60:3c:06:0f:2d:75:b1: 43:60:89:22:bf:4b:42:88:a1:95:27:4a:b1:27:84: 2b:b4:ae:2b:20:f2:93:69:0d:31:e2:fb:8a:39:50: 38:db:a5:21:ab:86:ac:3c:3f:11:e7:7a:06:07:1d: 5a:7d:bc:68:84:fa:16:3a:cf:3a:4c:c2:9c:0e:2b: 50:df:2c:5d:af:43:fe:91:a8:a3:3e:08:44:c5:36: 7b:fb:4c:6a:29:7b:c7:e1:d9:4b:7a:be:92:4c:81: 0f:32:af:93:bd:5f:9e:24:64:37:6c:cd:9d:57:75: f7:77:a0:03:46:3d:70:69:06:af:5f:d0:a7:24:a0: 78:36:5e:63:e4:5e:64:38:16:c7:a3:ad:21:4b:a5: aa:6e:41:67:9b:53:8f:69:2c:9e:1a:d5:f7:ea:6c: f3:ff:cc:8b:7e:3d:c6:ce:51:1e:08:87:ea:ef:ee: fd:b3:7d:f2:8e:35:ed:35:5a:c0:a6:ed:9b:bb:f8: 56:50:0b:3e:82:8d:04:88:65:db:1f:b7:c9:b3:db: 1f:67:02:3f:1c:71:1a:af:7e:08:02:fc:74:71:dd: 4d:3a:5b:2a:39:a2:c4:19:03:e4:fe:7c:96:cd:e8: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.0.0/22 91.223.131.0/24 193.26.14.0/24 193.26.21.0-193.26.22.255 IPv6: 2a0e:3780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61361 Signature Algorithm: sha256WithRSAEncryption 11:fa:cd:98:0c:4e:f7:15:a5:0f:e6:69:89:f8:29:12:54:ec: 82:36:da:09:5c:3d:c0:d7:3f:ad:c4:80:fa:d0:53:de:2b:be: b3:1d:e9:42:94:ca:43:1a:3d:d5:c1:04:1f:f1:b9:7c:b0:28: 9d:2d:3e:22:cb:91:8f:4d:5c:34:1d:fc:d4:1e:0e:11:59:10: 6b:86:0e:3e:ec:89:97:c1:63:b9:54:ff:d9:a8:4e:bc:28:74: 81:a0:6e:54:e7:a3:5b:db:d6:90:ae:2e:fa:8c:7a:e7:31:0a: 97:0b:eb:49:a3:3a:d6:42:ea:ef:80:bd:32:c8:92:f1:77:87: e1:1a:b8:6d:98:f5:d7:c6:c8:fd:e6:7e:45:6f:fd:f6:1b:04: 08:5a:be:0b:e1:90:b6:4e:d1:9f:0c:e5:83:39:10:fa:da:9c: e7:35:c7:03:a3:7f:8f:d5:01:ac:6d:eb:6b:5e:44:06:49:c7: 79:39:0d:49:fe:f0:97:41:6d:d8:2f:2c:27:ba:5c:dd:24:ce: d2:ff:4f:3f:f1:a4:70:5e:e3:de:64:cc:15:40:a6:e4:b1:37: fd:07:08:58:78:74:35:76:95:ba:6b:34:42:0d:93:8e:24:b7: 3d:0e:1b:c5:b7:79:30:a7:af:94:bf:65:80:8c:3d:4a:24:02: 57:1a:58:e0 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt9ySnOi0FtLPb2A4tEtfYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjMzNWRjNmZlYjM4NWY2YTIzMzQ0MDU2YTEzYzJjNTk1MDI4ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxanE7NEcAZnSbcQQajw+2Hp024no pGA8Bg8tdbFDYIkiv0tCiKGVJ0qxJ4QrtK4rIPKTaQ0x4vuKOVA426Uhq4asPD8R 53oGBx1afbxohPoWOs86TMKcDitQ3yxdr0P+kaijPghExTZ7+0xqKXvH4dlLer6S TIEPMq+TvV+eJGQ3bM2dV3X3d6ADRj1waQavX9CnJKB4Nl5j5F5kOBbHo60hS6Wq bkFnm1OPaSyeGtX36mzz/8yLfj3GzlEeCIfq7+79s33yjjXtNVrApu2bu/hWUAs+ go0EiGXbH7fJs9sfZwI/HHEar34IAvx0cd1NOlsqOaLEGQPk/nyWzehsyQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFMszXcb+s4X2ojNEBWoTwsWVAo6RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2ZhMzQy ZS1iM2JjLTQzNzMtOGM2Yi04ODU0YzgyYjU0NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZmEzNDJl LWIzYmMtNDM3My04YzZiLTg4NTRjODJiNTQ1ZC8xL3l6TmR4djZ6aGZhaU0wUUZh aFBDeFpVQ2pwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCLVAAAwQAW9+DAwQAwRoOMAwDBADBGhUDBADB GhYwDQQCAAIwBwMFAyoON4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAO+xMA0G CSqGSIb3DQEBCwUAA4IBAQAR+s2YDE73FaUP5mmJ+CkSVOyCNtoJXD3A1z+txID6 0FPeK76zHelClMpDGj3VwQQf8bl8sCidLT4iy5GPTVw0HfzUHg4RWRBrhg4+7ImX wWO5VP/ZqE68KHSBoG5U56Nb29aQri76jHrnMQqXC+tJozrWQurvgL0yyJLxd4fh GrhtmPXXxsj95n5Fb/32GwQIWr4L4ZC2TtGfDOWDORD62pznNccDo3+P1QGsbetr XkQGScd5OQ1J/vCXQW3YLywnulzdJM7S/08/8aRwXuPeZMwVQKbksTf9BwhYeHQ1 dpW6azRCDZOOJLc9DhvFt3kwp6+Uv2WAjD1KJAJXGljg -----END CERTIFICATE-----Generated at Mon Jan 5 19:12:35 2026 by rpki-client