This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer (raw, json) Hash identifier: OY9yf+fFg2sAUyEjNHIK0wEIwKhXXD3mpfUzn6rlNUY= Subject key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911140CC246683C91F23ABB20F4CB4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202767 IP: 185.135.116.0/22 IP: 185.155.60.0/22 IP: 2a14:ff80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:14:0c:c2:46:68:3c:91:f2:3a:bb:20:f4:cb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:23:85:a1:cd:ad:8f:f3:ee:1b:97:1b:d8:fa: e6:5f:b8:d1:e8:17:13:44:12:c1:2a:6e:a0:5b:05: 77:cb:fa:2b:f6:e4:76:fb:88:5b:f2:63:1c:f8:2a: 9d:ed:3b:7e:f1:f5:25:4e:f9:61:fc:0e:5b:68:14: e6:cc:23:6c:ea:55:9c:69:ad:92:84:3c:77:88:d3: 6f:87:8a:b1:0f:a5:b7:cc:79:16:36:7d:f2:71:ae: 96:03:b1:4b:a2:33:7c:5a:91:53:8a:31:b8:07:cd: c3:c4:3e:40:c2:8c:5a:4c:da:08:2d:65:a2:99:7b: e3:d9:0e:81:01:81:87:bc:28:a3:93:a4:ae:db:fd: 65:e7:fc:c4:26:d4:9a:a5:ea:f2:93:f8:4e:26:ae: bc:b2:5c:14:77:f4:fa:e1:1d:63:c2:5d:f5:d8:af: 37:39:b1:60:a2:0d:d2:c2:95:d8:36:4d:db:88:55: b1:81:fa:38:6f:53:43:45:eb:67:e7:f6:00:9e:14: 37:3a:e3:ca:29:b9:2c:da:3f:94:5b:34:da:21:39: 63:98:f4:29:4d:4a:ef:1b:77:1b:07:51:3b:55:b8: 5a:ef:b0:9c:e8:f2:1d:64:e3:c2:e3:79:fb:7f:50: b3:3b:3c:93:63:59:1e:5e:bc:1a:0d:a4:be:5f:2c: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.116.0/22 185.155.60.0/22 IPv6: 2a14:ff80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202767 Signature Algorithm: sha256WithRSAEncryption 89:20:49:2b:c8:b6:a5:a1:14:f3:fd:d9:59:d3:80:ab:49:6f: 70:b3:86:25:ce:08:b4:b4:a8:5d:47:e0:dc:5a:de:99:ee:1c: 71:3b:78:c6:55:ec:95:4c:0a:e9:8b:4e:d5:5f:11:b5:68:39: e7:fd:2e:90:c8:18:3d:16:66:ec:7a:c4:0b:b2:8b:8a:4c:03: cb:91:d8:7b:b7:87:ac:9f:c9:e5:ba:1d:65:9a:94:75:ec:2a: 87:22:4d:c7:7e:ce:d3:dd:4e:60:66:0a:3d:fe:d4:c3:52:da: c7:0e:00:03:3d:80:bb:1b:94:bd:8a:61:a8:43:4a:89:12:4b: 7e:5e:c4:a1:eb:e0:34:7b:2c:e3:a0:13:7f:c1:36:c1:45:85: ea:66:04:7b:8a:25:82:f2:64:d4:a6:c9:2e:e9:47:3a:0f:bd: 27:c7:9c:6c:93:a4:1a:e3:4b:c5:e8:18:7a:d5:8b:30:8b:5b: 9d:f3:0e:f2:2a:70:19:11:89:91:5d:fa:b3:4a:35:ca:8e:b8: 9a:32:1e:a4:c7:6c:f9:ce:b8:7a:f5:e8:cc:26:90:e3:60:ff: e5:37:6c:cd:bf:55:d9:ad:f3:f8:2c:c6:99:c9:f8:9e:a6:3a: de:0f:1f:d6:53:e2:6f:e7:aa:f4:cb:42:06:56:bd:0a:08:47: 9b:6a:fa:c3 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5ERQMwkZoPJHyOrsg9MtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDZiOWJhMjE5ZTM2MmIyYTgyNzcyMGEwNWM0M2M3ZDFjMWZhOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/iOFoc2tj/PuG5cb2PrmX7jR6BcT RBLBKm6gWwV3y/or9uR2+4hb8mMc+Cqd7Tt+8fUlTvlh/A5baBTmzCNs6lWcaa2S hDx3iNNvh4qxD6W3zHkWNn3yca6WA7FLojN8WpFTijG4B83DxD5AwoxaTNoILWWi mXvj2Q6BAYGHvCijk6Su2/1l5/zEJtSaperyk/hOJq68slwUd/T64R1jwl312K83 ObFgog3SwpXYNk3biFWxgfo4b1NDRetn5/YAnhQ3OuPKKbks2j+UWzTaITljmPQp TUrvG3cbB1E7Vbha77Cc6PIdZOPC43n7f1CzOzyTY1keXrwaDaS+XyzhZQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGBrm6IZ42KyqCdyCgXEPH0cH6jvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzVhMGFm OC0yNGIyLTQxNTQtYTQxMi1iNGZiNTcwOGRiMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNWEwYWY4 LTI0YjItNDE1NC1hNDEyLWI0ZmI1NzA4ZGIxNS8xL1lHdWJvaG5qWXJLb0ozSUtC Y1E4ZlJ3ZnFPOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuYd0AwQCuZs8MA0EAgACMAcDBQMqFP+AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMYDzANBgkqhkiG9w0BAQsFAAOCAQEAiSBJ K8i2paEU8/3ZWdOAq0lvcLOGJc4ItLSoXUfg3Freme4ccTt4xlXslUwK6YtO1V8R tWg55/0ukMgYPRZm7HrEC7KLikwDy5HYe7eHrJ/J5bodZZqUdewqhyJNx37O091O YGYKPf7Uw1Laxw4AAz2AuxuUvYphqENKiRJLfl7EoevgNHss46ATf8E2wUWF6mYE e4olgvJk1KbJLulHOg+9J8ecbJOkGuNLxegYetWLMItbnfMO8ipwGRGJkV36s0o1 yo64mjIepMds+c64evXozCaQ42D/5Tdszb9V2a3z+CzGmcn4nqY63g8f1lPib+eq 9MtCBla9CghHm2r6ww== -----END CERTIFICATE-----Generated at Mon Jan 12 09:12:03 2026 by rpki-client