This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer (raw, json) Hash identifier: sVI4evOYTNnwi2oHMK90zbndn3mCfXGqIKqSPrSkBZc= Subject key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA40B815ADB2C31F7F66D98B990CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21496 AS: 34757 AS: 35018 AS: 40995 AS: 41794 AS: 44206 AS: 47433 AS: 202871 IP: 77.240.160.0/20 IP: 79.99.216.0/21 IP: 80.89.192.0/20 IP: 80.253.224.0/20 IP: 85.118.224.0/21 IP: 89.31.112.0/21 IP: 93.92.216.0/21 IP: 94.127.248.0/21 IP: 185.103.160.0/22 IP: 185.106.196.0/22 IP: 185.159.148.0/22 IP: 193.34.160.0/23 IP: 2a00:bfc0::/32 IP: 2a04:2240::/29 IP: 2a06:2880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:0b:81:5a:db:2c:31:f7:f6:6d:98:b9:90:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60024324c31a2817923e0f6c53790426e142c24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:d5:6f:0b:75:9e:d7:27:15:82:55:5b:d0: 4f:09:cb:8c:9d:b5:0f:28:cf:28:e4:8e:32:75:f6: ce:fc:c1:a6:a6:0b:1c:53:2c:45:d4:4b:85:b2:e4: 53:02:7c:03:7d:9d:ad:c9:ab:5d:11:4b:50:d4:32: 9f:bf:a8:13:69:d9:46:da:74:05:35:f0:cb:b6:e0: cb:0c:ad:b4:4f:55:f4:14:fb:32:de:79:ff:45:19: 42:99:ae:b4:30:ab:ec:7a:a5:6b:28:d0:62:40:16: d3:a6:45:3e:6b:0f:ed:80:e2:75:10:59:bd:20:c2: 24:aa:10:7e:3c:f4:25:6c:b1:db:34:78:8f:70:50: af:c7:3f:4c:ea:b7:8f:43:47:03:6e:55:bd:eb:85: 39:60:49:4a:5e:42:d9:bf:22:de:19:bd:46:de:8b: 72:29:f8:76:3f:65:59:be:60:24:06:4b:92:d5:b7: 7d:98:0b:92:4f:1e:ae:f8:8c:e4:71:04:90:dd:64: 66:91:8a:5c:7d:df:72:bd:98:0e:1b:fd:51:9e:f3: e6:a8:7d:60:f0:af:ae:8c:bb:6e:57:44:03:25:18: db:67:07:8f:bc:c1:52:50:33:62:97:a4:10:88:f7: fc:79:53:55:47:1b:5b:80:a5:af:7e:1e:fd:51:b2: 8d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.160.0/20 79.99.216.0/21 80.89.192.0/20 80.253.224.0/20 85.118.224.0/21 89.31.112.0/21 93.92.216.0/21 94.127.248.0/21 185.103.160.0/22 185.106.196.0/22 185.159.148.0/22 193.34.160.0/23 IPv6: 2a00:bfc0::/32 2a04:2240::/29 2a06:2880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21496 34757 35018 40995 41794 44206 47433 202871 Signature Algorithm: sha256WithRSAEncryption 1f:11:06:61:89:ae:63:1c:02:c5:c7:2c:93:76:51:d6:50:95: 4b:ed:9c:da:78:6c:ae:5d:8e:ce:7a:ed:1b:1e:40:61:f5:17: 97:08:40:c8:e4:6d:5d:8e:c7:73:8e:0b:8a:a4:a8:c9:87:40: 71:c3:ec:f4:3b:47:bd:24:a2:2d:a3:43:ba:73:8d:3a:fb:48: 63:75:86:2a:ad:92:08:fe:d4:b5:92:33:ca:1d:41:94:c5:ef: 90:8f:e1:7f:d6:32:a4:15:b6:64:61:54:a5:54:34:d5:48:5e: 1c:34:f6:8e:0a:ed:e5:6f:e2:8d:6f:b3:7f:ba:68:14:b2:03: 4c:cb:c0:f3:68:cd:0b:61:0b:8f:27:66:1b:5e:55:05:6d:ca: da:58:32:b4:fa:25:5c:bd:56:1c:9b:4b:6c:8d:a7:dd:2f:ae: f3:0a:2f:9b:1a:23:12:a2:fb:3b:f9:af:53:0b:c2:c1:21:95: d6:0f:91:08:30:02:bf:dc:fa:32:df:c9:66:2b:81:28:e7:c7: 73:56:97:90:27:30:cb:95:aa:95:55:40:70:13:84:25:07:52: d9:d3:36:fc:0a:43:ff:b3:27:5a:74:b7:a6:51:21:c0:83:36: eb:9d:6d:c3:82:29:28:f6:d3:0e:f9:ae:91:83:31:ec:c2:2e: fb:64:5e:f2 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISAZt266QLgVrbLDH39m2YuZDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDAyNDMyNGMzMWEyODE3OTIzZTBmNmM1Mzc5MDQyNmUxNDJjMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+fVbwt1ntcnFYJVW9BPCcuMnbUP KM8o5I4ydfbO/MGmpgscUyxF1EuFsuRTAnwDfZ2tyatdEUtQ1DKfv6gTadlG2nQF NfDLtuDLDK20T1X0FPsy3nn/RRlCma60MKvseqVrKNBiQBbTpkU+aw/tgOJ1EFm9 IMIkqhB+PPQlbLHbNHiPcFCvxz9M6rePQ0cDblW964U5YElKXkLZvyLeGb1G3oty Kfh2P2VZvmAkBkuS1bd9mAuSTx6u+IzkcQSQ3WRmkYpcfd9yvZgOG/1RnvPmqH1g 8K+ujLtuV0QDJRjbZwePvMFSUDNil6QQiPf8eVNVRxtbgKWvfh79UbKN0QIDAQAB o4IDITCCAx0wHQYDVR0OBBYEFGACQyTDGigXkj4PbFN5BCbhQsJMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2M0OTcw OS1lNGYwLTRkMGUtYjNkZC02NWVhNWQzYTgwODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvYzQ5NzA5 LWU0ZjAtNGQwZS1iM2RkLTY1ZWE1ZDNhODA4OC8xL1lBSkRKTU1hS0JlU1BnOXNV M2tFSnVGQ3drdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBOBAIAATBIAwQETfCgAwQDT2PYAwQEUFnAAwQEUP3gAwQDVXbg AwQDWR9wAwQDXVzYAwQDXn/4AwQCuWegAwQCuWrEAwQCuZ+UAwQBwSKgMBsEAgAC MBUDBQAqAL/AAwUDKgQiQAMFAyoGKIAwPAYIKwYBBQUHAQgBAf8ELTAroCkwJwIC U/gCAwCHxQIDAIjKAgMAoCMCAwCjQgIDAKyuAgMAuUkCAwMYdzANBgkqhkiG9w0B AQsFAAOCAQEAHxEGYYmuYxwCxccsk3ZR1lCVS+2c2nhsrl2OznrtGx5AYfUXlwhA yORtXY7Hc44LiqSoyYdAccPs9DtHvSSiLaNDunONOvtIY3WGKq2SCP7UtZIzyh1B lMXvkI/hf9YypBW2ZGFUpVQ01UheHDT2jgrt5W/ijW+zf7poFLIDTMvA82jNC2EL jydmG15VBW3K2lgytPolXL1WHJtLbI2n3S+u8wovmxojEqL7O/mvUwvCwSGV1g+R CDACv9z6Mt/JZiuBKOfHc1aXkCcwy5WqlVVAcBOEJQdS2dM2/ApD/7MnWnS3plEh wIM2651tw4IpKPbTDvmukYMx7MIu+2Re8g== -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:39 2026 by rpki-client