This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer File: YBnBFsiuMYr9S4Iun07uoMNLqso.cer (raw, json) Hash identifier: byTYrttaRICLrbS5gcRwFnTuB9gZGG/Yz+KD6Menxjc= Subject key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B021414F03AA1DD09E3EEAAC6CDF94006 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 07:47:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48700 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:14:14:f0:3a:a1:dd:09:e3:ee:aa:c6:cd:f9:40:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 07:47:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:d2:b5:e1:f0:a6:5a:73:df:45:21:82:db: 80:ed:50:45:64:b0:72:f5:5e:41:8f:5d:8a:6f:64: 37:af:30:65:98:88:5d:e6:2b:dc:c9:b9:5a:89:3a: ad:1b:e8:60:a7:9e:87:41:ca:fc:13:0e:ad:a1:a0: b8:84:5f:06:7e:f7:a6:85:f3:ba:a3:8a:43:15:18: e8:74:7d:31:03:bc:65:6d:6d:89:a0:a4:9e:d3:d5: f8:9d:46:07:45:0c:08:27:09:8c:ce:a2:87:b8:3c: 35:21:55:1f:ad:ff:cf:24:3b:79:59:95:d7:8a:cc: b3:9d:eb:67:2d:c9:45:bf:ac:f3:f1:e7:f6:29:97: 56:b8:19:14:7f:0a:51:54:21:5b:ca:b3:69:69:cf: 49:88:d6:f8:ae:47:f3:7e:55:9b:cb:bb:d3:03:69: 33:87:56:d7:6e:fc:4b:21:a6:af:7f:41:ee:3d:6a: 52:3a:b1:40:0c:5a:90:f8:5e:43:05:eb:47:98:1f: 09:43:9e:89:32:bc:56:f4:7e:a4:f2:14:58:de:be: be:cb:16:42:28:56:6e:29:7d:2c:7a:ee:a3:88:b3: 02:38:9c:64:98:f6:48:1a:43:08:19:fc:c3:24:99: 36:13:80:96:9b:19:63:93:1c:ce:ef:94:b3:1a:b6: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48700 Signature Algorithm: sha256WithRSAEncryption 27:81:a9:56:53:19:9f:13:74:13:e5:3a:fd:6c:9c:59:76:08: e4:9f:9a:f2:a1:d2:2a:ba:a0:a1:33:31:4a:68:64:44:54:69: 7c:6e:78:f9:fb:c6:b1:0b:3d:8f:66:3d:82:d8:bf:77:b8:c0: 1c:d0:8d:39:d3:87:e2:29:3f:b0:f6:55:fe:9f:b9:d1:33:e4: bf:67:64:6c:ac:fb:ef:13:79:9f:31:47:c7:a5:8b:ba:e1:ed: b3:43:fa:ce:58:df:e9:7b:63:24:96:56:1c:cc:92:5f:e6:80: 6b:d9:4c:4e:66:e2:04:2a:b0:fb:24:9c:a4:d1:3a:e3:72:aa: bf:94:79:ac:c0:c2:d2:8d:c7:30:57:18:6f:9a:e8:88:1a:d4: 74:7b:0a:7a:fa:ac:02:3b:70:08:74:d4:88:05:16:b2:80:e0: f8:aa:79:29:ff:66:ff:6d:5a:17:68:cc:39:40:f1:55:e0:d0: 60:38:13:ee:3a:ac:a4:d8:d2:1c:73:e6:f3:73:8e:ef:ad:b5: 20:57:c2:87:c0:45:a1:bc:f4:2d:ee:47:ae:82:2c:8f:88:e7: c9:86:b1:66:4d:15:67:cc:72:d3:01:c9:86:ec:a5:b7:0c:e9: cc:0b:c3:37:a0:b2:2e:3f:0d:ca:45:d4:7a:65:aa:81:54:4e: 81:22:21:3b -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZsCFBTwOqHdCePuqsbN+UAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MDc0NzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDE5YzExNmM4YWUzMThhZmQ0YjgyMmU5ZjRlZWVhMGMzNGJhYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PnSteHwplpz30UhgtuA7VBFZLBy 9V5Bj12Kb2Q3rzBlmIhd5ivcyblaiTqtG+hgp56HQcr8Ew6toaC4hF8GfvemhfO6 o4pDFRjodH0xA7xlbW2JoKSe09X4nUYHRQwIJwmMzqKHuDw1IVUfrf/PJDt5WZXX isyznetnLclFv6zz8ef2KZdWuBkUfwpRVCFbyrNpac9JiNb4rkfzflWby7vTA2kz h1bXbvxLIaavf0HuPWpSOrFADFqQ+F5DBetHmB8JQ56JMrxW9H6k8hRY3r6+yxZC KFZuKX0seu6jiLMCOJxkmPZIGkMIGfzDJJk2E4CWmxljkxzO75SzGrYREQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFGAZwRbIrjGK/UuCLp9O7qDDS6rKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJhZjcz YTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFm NzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzMvNjAxOUMxMTZDOEFF MzE4QUZENEI4MjJFOUY0RUVFQTBDMzRCQUFDQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAvjww DQYJKoZIhvcNAQELBQADggEBACeBqVZTGZ8TdBPlOv1snFl2COSfmvKh0iq6oKEz MUpoZERUaXxuePn7xrELPY9mPYLYv3e4wBzQjTnTh+IpP7D2Vf6fudEz5L9nZGys ++8TeZ8xR8eli7rh7bND+s5Y3+l7YySWVhzMkl/mgGvZTE5m4gQqsPsknKTROuNy qr+UeazAwtKNxzBXGG+a6Iga1HR7Cnr6rAI7cAh01IgFFrKA4PiqeSn/Zv9tWhdo zDlA8VXg0GA4E+46rKTY0hxz5vNzju+ttSBXwofARaG89C3uR66CLI+I58mGsWZN FWfMctMByYbspbcM6cwLwzegsi4/DcpF1HplqoFUToEiITs= -----END CERTIFICATE-----Generated at Sun Dec 21 09:55:40 2025 by rpki-client