This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer (raw, json) Hash identifier: agjtGv22WTubfNnT1mq+l76lJVTYcnZGQ1Oj2yET8TI= Subject key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80CF33AA5B58CF071C1B58F3BE0C07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41715 IP: 91.138.64.0/18 IP: 185.206.244.0/22 IP: 2a0a:d1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:cf:33:aa:5b:58:cf:07:1c:1b:58:f3:be:0c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:b7:53:e8:80:e7:fa:4a:b6:14:09:35:98: 97:73:a5:7f:fe:84:3b:27:7e:ff:de:73:df:87:b4: b3:d4:46:51:8d:38:fe:7c:1e:de:ed:54:20:32:22: 5d:17:00:c1:b6:d3:fc:ba:cb:64:9d:b0:ad:a8:92: a4:56:7a:f1:cd:1d:bf:12:ed:c9:b5:5e:56:40:1a: 66:ac:21:be:23:f5:4f:f5:1f:cd:1d:0a:50:84:3c: 1f:3b:48:25:6d:ab:f9:f7:7e:0b:7d:9b:87:52:f1: 34:52:6a:8b:12:bf:45:40:b1:14:f7:2d:c7:44:47: ff:8b:2a:0d:b0:4d:9e:2c:8d:d8:e1:a4:ae:4a:cb: f7:4b:e3:82:fa:aa:04:72:68:48:d0:2c:8e:14:c7: 7a:4c:09:04:8d:46:56:6d:95:e8:15:5a:ee:95:9a: 79:7b:9a:1e:89:e1:9c:27:d1:e8:ba:5e:c7:e9:f5: f5:4b:19:2f:e4:bf:e1:f7:74:df:c9:3d:3d:81:d9: 96:b3:78:15:88:10:45:90:cb:97:ed:07:75:a3:73: 60:84:99:9e:4e:8a:87:17:92:14:32:56:46:ad:a8: e6:c2:8f:27:14:f5:b0:ba:fc:0e:dd:df:be:b2:6b: cb:40:ee:7c:6d:09:16:17:60:b6:91:ac:1f:97:01: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.138.64.0/18 185.206.244.0/22 IPv6: 2a0a:d1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41715 Signature Algorithm: sha256WithRSAEncryption 1c:de:fe:4b:9a:bc:ab:e5:0c:da:62:b6:ac:a0:a4:17:ea:55: fe:a0:90:d6:0a:ed:7e:dc:25:b2:93:00:c5:ff:02:e4:9f:9c: eb:0a:aa:f9:6c:e4:2a:ba:ca:58:42:c0:19:0a:17:a6:91:36: 25:e2:07:e9:7d:24:47:01:2f:6e:3b:1d:cc:8f:1f:38:cc:e8: 49:4a:ec:d2:9b:cc:43:b3:73:85:f1:4a:86:86:1d:35:20:30: 5b:89:92:a2:92:15:43:f8:55:54:cb:79:23:0d:46:04:eb:40: db:5a:cb:0b:e8:f0:a1:d8:65:0c:96:34:b1:2b:ce:04:28:c3: bf:9f:23:b8:41:09:b2:9f:d7:7f:84:16:bd:41:3f:f7:4c:38: c3:bb:4b:f1:1c:09:31:a4:92:10:e8:ce:4a:a4:64:73:ba:17: af:5e:cd:f9:be:59:ec:b7:ca:10:6e:e9:09:52:32:be:15:32: 79:dc:67:3f:f6:4e:f7:75:d7:93:7c:c8:3e:c2:dc:24:63:a4: 0e:16:5e:63:99:f2:64:ed:45:0f:57:ac:cb:ef:89:ff:e3:f9: fd:d3:c4:a7:2d:f8:c7:a6:2c:c4:c6:a8:0f:7c:fe:16:d0:16: b5:a6:64:54:6c:72:9f:f0:11:f6:24:4d:ed:ea:03:85:05:e5: 72:c1:e5:2d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gM8zqltYzwccG1jzvgwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzQyN2M1MzU4NzNlNGM0ZWFkODA0MmQ2N2JiZjNmMWY0N2IyNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmm3U+iA5/pKthQJNZiXc6V//oQ7 J37/3nPfh7Sz1EZRjTj+fB7e7VQgMiJdFwDBttP8ustknbCtqJKkVnrxzR2/Eu3J tV5WQBpmrCG+I/VP9R/NHQpQhDwfO0glbav5934LfZuHUvE0UmqLEr9FQLEU9y3H REf/iyoNsE2eLI3Y4aSuSsv3S+OC+qoEcmhI0CyOFMd6TAkEjUZWbZXoFVrulZp5 e5oeieGcJ9Houl7H6fX1Sxkv5L/h93TfyT09gdmWs3gViBBFkMuX7Qd1o3NghJme ToqHF5IUMlZGrajmwo8nFPWwuvwO3d++smvLQO58bQkWF2C2kawflwF0lwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGNCfFNYc+TE6tgELWe78/H0eyaxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzYxMDgz Yy00YjNkLTQ2ZDgtODJhYS1iMjk5N2JjNjE0NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNjEwODNj LTRiM2QtNDZkOC04MmFhLWIyOTk3YmM2MTQ3NC8xL1kwSjhVMWh6NU1UcTJBUXRa N3Z6OGZSN0pyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGW4pAAwQCuc70MA0EAgACMAcDBQMqCtHAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCi8zANBgkqhkiG9w0BAQsFAAOCAQEAHN7+ S5q8q+UM2mK2rKCkF+pV/qCQ1grtftwlspMAxf8C5J+c6wqq+WzkKrrKWELAGQoX ppE2JeIH6X0kRwEvbjsdzI8fOMzoSUrs0pvMQ7NzhfFKhoYdNSAwW4mSopIVQ/hV VMt5Iw1GBOtA21rLC+jwodhlDJY0sSvOBCjDv58juEEJsp/Xf4QWvUE/90w4w7tL 8RwJMaSSEOjOSqRkc7oXr17N+b5Z7LfKEG7pCVIyvhUyedxnP/ZO93XXk3zIPsLc JGOkDhZeY5nyZO1FD1esy++J/+P5/dPEpy34x6YsxMaoD3z+FtAWtaZkVGxyn/AR 9iRN7eoDhQXlcsHlLQ== -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:35 2026 by rpki-client