This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer (raw, json) Hash identifier: 6takEyKszzW1cEue9nNhvYpB1gGV3kK7O/Dz/K59d14= Subject key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C71FC01EFD368EB77E747D70C96A27 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44882 IP: 109.230.128.0/18 IP: 2a01:98c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1f:c0:1e:fd:36:8e:b7:7e:74:7d:70:c9:6a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:73:71:0a:af:0d:b4:df:82:9c:04:01:53: 8e:ff:a3:81:46:5e:5f:ef:54:47:63:c6:4a:dc:30: 72:2b:1c:10:45:06:64:e0:8f:0d:5c:7f:c0:32:25: a7:89:aa:59:14:f6:bb:76:31:82:6a:b1:ea:5d:1c: 2e:d2:b0:b9:eb:a3:05:b2:8d:de:fa:48:5a:d2:d4: b7:77:68:1b:d7:15:1c:01:6f:47:e4:ef:23:64:2f: 09:d0:da:2b:50:60:1b:0c:7a:e8:c1:00:e4:39:ea: cb:8b:31:a6:cb:c1:8b:4d:d3:ea:f3:00:07:d3:66: 6a:5e:fb:1e:00:8c:01:f2:ab:7c:cf:97:d3:6f:8f: c4:e3:89:a7:34:54:c6:c6:b8:d8:e9:5f:ba:92:f2: 22:74:f2:58:f1:72:3b:7c:27:bf:65:c7:39:d3:36: b0:11:6d:4c:42:d4:4e:35:f2:49:6b:96:b0:15:98: f1:4e:8c:2f:36:e0:ee:7d:20:11:b3:08:10:f5:83: de:b7:b9:f1:3e:af:31:dd:10:79:b2:0e:8a:7e:6e: 64:a8:8f:dd:73:3b:15:a5:90:c4:6b:c0:d1:aa:d2: b3:98:29:87:b6:e7:bb:cd:31:c2:ac:ec:05:57:c4: 67:6b:d4:55:56:b9:b9:73:4a:74:c1:c0:b8:2e:e9: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.230.128.0/18 IPv6: 2a01:98c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44882 Signature Algorithm: sha256WithRSAEncryption 2b:1d:57:de:96:cf:98:44:8d:f8:bd:7d:d0:dd:27:16:0b:65: 07:08:3d:73:86:1e:8c:15:08:13:9e:3f:63:f9:cd:f9:d6:02: 58:a2:5b:8c:30:7d:69:0e:6d:5b:5a:f3:75:bc:bd:ce:11:3c: 85:81:41:f1:49:6a:7a:95:a1:d4:8c:40:74:e8:6f:95:f7:34: 44:7c:80:24:57:6d:80:20:1e:af:86:4b:65:6f:41:19:3b:16: 21:ef:0d:a6:b6:c4:c5:6d:08:cf:54:30:5a:28:44:ec:92:ab: 69:0e:cf:b9:c7:c9:bc:d7:07:33:de:3d:ac:ff:b8:76:17:dc: 93:d6:50:32:3c:55:0b:eb:8a:f5:1b:12:8f:b8:e6:b7:99:6d: 1f:52:29:fc:0d:52:d4:b5:19:a9:5e:be:63:55:e4:06:40:ee: ed:3e:e8:1f:05:7d:92:5d:33:99:69:57:af:5b:74:48:eb:48: 0c:9e:3d:85:c4:7f:89:97:af:41:d1:44:0d:e2:09:7e:7d:45: 2f:5c:ab:27:9b:7d:e3:c6:3a:8d:21:18:c2:c2:49:4f:5f:9b: 24:9a:b6:bb:17:7c:5f:ba:67:d7:39:cc:85:ec:5e:24:2a:e0: 48:b0:e8:58:f9:9d:8f:6f:53:6c:c6:35:73:94:fd:97:36:12: f3:7a:e3:88 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xx/AHv02jrd+dH1wyWonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2UyY2FhN2UxOGFmMmRmYmRiM2E2MjY5ZGEyZTA2ZGVkY2I2Y2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+FzcQqvDbTfgpwEAVOO/6OBRl5f 71RHY8ZK3DByKxwQRQZk4I8NXH/AMiWniapZFPa7djGCarHqXRwu0rC566MFso3e +kha0tS3d2gb1xUcAW9H5O8jZC8J0NorUGAbDHrowQDkOerLizGmy8GLTdPq8wAH 02ZqXvseAIwB8qt8z5fTb4/E44mnNFTGxrjY6V+6kvIidPJY8XI7fCe/Zcc50zaw EW1MQtRONfJJa5awFZjxTowvNuDufSARswgQ9YPet7nxPq8x3RB5sg6Kfm5kqI/d czsVpZDEa8DRqtKzmCmHtue7zTHCrOwFV8Rna9RVVrm5c0p0wcC4LulW7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGPiyqfhivLfvbOmJp2i4G3ty2zwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzA5OTcw NS00YTNiLTRhNjgtYjZiZC01MzhhZjEwMTc1MDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMDk5NzA1 LTRhM2ItNGE2OC1iNmJkLTUzOGFmMTAxNzUwOS8xL1ktTEtwLUdLOHQtOXM2WW1u YUxnYmUzTGJQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQGbeaAMA0EAgACMAcDBQAqAZjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCvUjANBgkqhkiG9w0BAQsFAAOCAQEAKx1X3pbPmESN +L190N0nFgtlBwg9c4YejBUIE54/Y/nN+dYCWKJbjDB9aQ5tW1rzdby9zhE8hYFB 8UlqepWh1IxAdOhvlfc0RHyAJFdtgCAer4ZLZW9BGTsWIe8NprbExW0Iz1QwWihE 7JKraQ7PucfJvNcHM949rP+4dhfck9ZQMjxVC+uK9RsSj7jmt5ltH1Ip/A1S1LUZ qV6+Y1XkBkDu7T7oHwV9kl0zmWlXr1t0SOtIDJ49hcR/iZevQdFEDeIJfn1FL1yr J5t948Y6jSEYwsJJT1+bJJq2uxd8X7pn1znMhexeJCrgSLDoWPmdj29TbMY1c5T9 lzYS83rjiA== -----END CERTIFICATE-----Generated at Thu Jan 1 09:05:29 2026 by rpki-client