This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer (raw, json) Hash identifier: 7vGNu/3RcxkfjFv2H9WqxUZJyCBqtNxZ62aHjKOU+kg= Subject key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8432E9BB6B5E574B68D5A177873601 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25420 IP: 77.244.48.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:32:e9:bb:6b:5e:57:4b:68:d5:a1:77:87:36:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6050099e335409db03ac1133d164f02a0d5dc66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:a7:5a:73:5c:9d:c3:c0:d0:a6:4a:0f:ce: 66:96:c5:eb:89:e5:97:e2:93:74:75:33:d5:ca:8d: 0c:02:0d:4f:0b:b0:bf:b5:51:1b:c9:43:0f:d4:ca: 8b:b4:39:83:91:8c:be:e7:d9:cb:79:b1:91:ef:ab: f1:c8:75:91:d7:04:66:0a:ff:c3:42:92:74:dd:18: 89:4c:cb:8b:24:49:c4:0b:51:67:e5:9e:a8:ab:4c: 55:97:3d:2c:f0:ac:a4:f2:53:23:70:8f:5a:35:85: bf:7e:b9:75:c9:6c:9a:94:2c:7c:db:1e:25:bf:46: 19:b3:4e:66:51:65:2a:1d:f9:6f:91:a0:8f:10:a8: 31:1c:94:2c:fc:2e:27:ba:f9:87:cb:10:62:00:a0: ef:1b:3c:e1:e0:b8:5c:69:7c:a2:7c:d9:45:f4:d1: e1:86:4e:93:ff:0b:ce:f6:b7:6b:f8:6c:95:f8:3e: 8b:a4:cf:8b:79:b3:0f:bf:59:9e:8e:fa:c0:f3:37: 4b:d4:86:b0:9f:bf:77:cb:0c:c2:20:41:f1:1f:80: 9b:c2:76:df:1a:8c:f0:ad:9e:75:74:74:3c:64:73: a9:7d:2f:38:db:3a:8c:72:36:5b:24:e5:fa:d6:bc: d0:a0:e6:5e:35:04:43:98:a3:9e:22:c2:82:c8:7f: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.244.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25420 Signature Algorithm: sha256WithRSAEncryption 8f:6f:7c:a8:a3:9b:89:f1:8e:86:19:8a:5d:55:aa:c2:60:04: a7:d0:13:89:9a:63:56:20:0d:27:52:b8:a7:66:29:5c:fe:4c: b2:0e:48:2a:6f:ba:99:9a:ae:a7:38:c3:17:33:55:c8:b2:0f: 99:3a:79:50:01:e2:a8:cb:dd:b7:2b:63:b7:bc:58:93:e0:c2: 54:ce:cd:54:16:d3:43:d0:0d:eb:5c:fb:59:48:30:93:6a:ba: c9:0b:5c:47:9b:e2:c7:46:1a:c4:b4:ac:b6:f3:68:04:17:26: 9b:86:24:69:a2:f3:2f:bc:aa:f9:39:41:95:dc:c5:c0:43:88: 42:39:fd:43:62:e8:6a:34:27:2b:6a:98:e7:f3:75:b7:39:4a: f9:04:20:d0:65:a7:77:f5:2f:79:0d:b7:38:8e:b2:72:92:eb: d3:70:f6:3e:8f:4a:30:e5:ba:4e:1a:28:ff:64:c3:8d:27:35: 2c:9e:7d:c2:2f:7d:f1:80:72:3f:0f:06:1f:8e:e4:ec:63:9a: ec:34:0e:fd:4d:02:ac:7f:6b:35:12:95:7a:19:81:c8:85:b2: 18:a4:4b:85:14:97:75:4e:1a:6b:f8:9e:77:69:95:14:d2:da: 42:1d:99:c1:ff:c0:7b:28:d2:e3:55:63:a3:cd:dc:bc:54:7b: 86:61:77:98 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/hDLpu2teV0to1aF3hzYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDUwMDk5ZTMzNTQwOWRiMDNhYzExMzNkMTY0ZjAyYTBkNWRjNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe6nWnNcncPA0KZKD85mlsXrieWX 4pN0dTPVyo0MAg1PC7C/tVEbyUMP1MqLtDmDkYy+59nLebGR76vxyHWR1wRmCv/D QpJ03RiJTMuLJEnEC1Fn5Z6oq0xVlz0s8Kyk8lMjcI9aNYW/frl1yWyalCx82x4l v0YZs05mUWUqHflvkaCPEKgxHJQs/C4nuvmHyxBiAKDvGzzh4LhcaXyifNlF9NHh hk6T/wvO9rdr+GyV+D6LpM+LebMPv1mejvrA8zdL1Iawn793ywzCIEHxH4Cbwnbf GozwrZ51dHQ8ZHOpfS842zqMcjZbJOX61rzQoOZeNQRDmKOeIsKCyH/a7QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzBjNTVk Mi1jODljLTQ2ZDYtYmEzNS00YzY1YmQzM2Q2ZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMGM1NWQy LWM4OWMtNDZkNi1iYTM1LTRjNjViZDMzZDZmNi8xL1lGQUpuak5VQ2RzRHJCRXow V1R3S2cxZHhtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQETfQwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmNMMA0GCSqGSIb3DQEBCwUAA4IBAQCPb3yoo5uJ8Y6GGYpdVarCYASn0BOJmmNW IA0nUrinZilc/kyyDkgqb7qZmq6nOMMXM1XIsg+ZOnlQAeKoy923K2O3vFiT4MJU zs1UFtND0A3rXPtZSDCTarrJC1xHm+LHRhrEtKy282gEFyabhiRpovMvvKr5OUGV 3MXAQ4hCOf1DYuhqNCcrapjn83W3OUr5BCDQZad39S95Dbc4jrJykuvTcPY+j0ow 5bpOGij/ZMONJzUsnn3CL33xgHI/DwYfjuTsY5rsNA79TQKsf2s1EpV6GYHIhbIY pEuFFJd1Thpr+J53aZUU0tpCHZnB/8B7KNLjVWOjzdy8VHuGYXeY -----END CERTIFICATE-----Generated at Mon Jan 12 14:57:43 2026 by rpki-client