This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer File: YPa89uKxCboqFKc7l1rZVEhLS6U.cer (raw, json) Hash identifier: gOF4uzk8o3ByxnwOhcDlAh5OSdPAOUVkGbLxkHBVWiw= Subject key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783502BFC0E8C423F0A5685E1AFD5970 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51337 IP: 178.212.40.0/21 IP: 178.215.192.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:02:bf:c0:e8:c4:23:f0:a5:68:5e:1a:fd:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:fe:94:57:ab:ad:eb:ba:2a:cf:4a:c0:b1: 7f:32:66:d4:2d:7e:db:b6:e2:d0:15:76:b6:0a:b6: 45:73:c0:0a:28:47:bf:fb:fc:d0:cb:82:5e:c9:06: e6:d0:ca:4b:18:86:50:d6:4d:ee:41:b7:0d:e7:bc: c6:13:82:cb:c8:39:ea:eb:7d:cf:c3:9c:73:85:34: b1:3a:bf:b4:de:73:c2:13:95:d8:6b:2e:ef:f3:64: 6f:57:0d:97:a4:4c:64:c5:5f:85:4f:7f:47:ec:53: aa:75:8c:b6:aa:b5:6c:de:e8:b5:55:76:7a:39:c5: cc:65:4d:c0:87:82:4e:73:22:e2:af:53:6f:ad:47: d3:d4:0c:9b:17:2f:00:35:92:51:ad:53:a0:4d:a1: 69:f2:c0:54:83:73:99:52:c8:a3:28:fa:7a:1d:70: b0:15:5a:9e:93:ea:5c:b7:a0:ce:78:e8:56:75:cb: d4:d0:c8:c4:82:1f:9f:2d:0c:62:31:24:62:57:b3: 34:d4:eb:b5:48:e1:b1:05:a2:ef:16:da:54:ca:a4: 90:dc:74:07:11:00:3a:8d:4c:7a:65:c0:9b:73:41: 8d:6b:20:94:46:4d:3e:80:bb:31:3e:8c:ed:ce:f6: 03:d1:60:84:03:83:31:d0:96:d2:15:bf:3c:b4:ea: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.40.0/21 178.215.192.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51337 Signature Algorithm: sha256WithRSAEncryption 2a:c2:3b:fb:74:a5:14:7d:55:3e:0f:68:9e:88:64:21:01:3c: f3:76:6d:b3:86:9b:af:d2:07:d4:ed:5f:4b:64:f7:4f:d1:b9: d5:80:22:59:61:eb:57:12:e8:79:35:9a:a0:95:12:07:e9:09: 4b:08:81:47:9e:1c:13:7d:d6:43:64:90:5a:df:8c:86:36:ee: bb:15:b9:30:18:10:d4:d0:69:11:64:e6:98:aa:fb:c6:03:13: fa:b0:27:e5:3e:8e:d2:52:f6:22:fe:18:fe:87:1e:36:0c:2f: 4f:2e:64:7a:91:6a:e8:4f:e7:f5:28:b5:dc:32:5d:64:f5:44: b1:5d:c9:d0:7c:3e:99:00:25:30:1d:c8:34:f1:19:d6:98:0b: 05:ec:e0:0b:f9:d6:0f:ca:b4:2d:74:e7:bd:8f:7a:a3:08:a1: 5f:6a:05:a7:1b:8b:2b:8a:1e:ca:77:76:4f:00:ef:31:c6:3a: 0b:fd:c8:12:30:73:01:5e:c2:0f:78:10:be:07:29:fa:7b:84: 52:66:d1:f1:1d:66:ee:82:24:3e:2a:0b:c1:ce:71:ed:c5:b3: 97:4b:54:94:ec:99:fb:6d:4a:91:f6:95:8b:4e:99:ef:54:5c: 8c:e9:6e:99:67:40:d4:3e:8f:30:5c:0f:04:e4:1a:9f:47:dd: 4b:96:88:d2 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4NQK/wOjEI/ClaF4a/VlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGY2YmNmNmUyYjEwOWJhMmExNGE3M2I5NzVhZDk1NDQ4NGI0YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUr+lFerreu6Ks9KwLF/MmbULX7b tuLQFXa2CrZFc8AKKEe/+/zQy4JeyQbm0MpLGIZQ1k3uQbcN57zGE4LLyDnq633P w5xzhTSxOr+03nPCE5XYay7v82RvVw2XpExkxV+FT39H7FOqdYy2qrVs3ui1VXZ6 OcXMZU3Ah4JOcyLir1NvrUfT1AybFy8ANZJRrVOgTaFp8sBUg3OZUsijKPp6HXCw FVqek+pct6DOeOhWdcvU0MjEgh+fLQxiMSRiV7M01Ou1SOGxBaLvFtpUyqSQ3HQH EQA6jUx6ZcCbc0GNayCURk0+gLsxPoztzvYD0WCEA4Mx0JbSFb88tOrSsQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGD2vPbisQm6KhSnO5da2VRIS0ulMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzgzYWRi Yi0zNjI3LTRiODctOWY3ZC1hYjQwMjUzYjVlMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvODNhZGJi LTM2MjctNGI4Ny05ZjdkLWFiNDAyNTNiNWUyYi8xL1lQYTg5dUt4Q2JvcUZLYzds MXJaVkVoTFM2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDstQoAwQEstfAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDIiTANBgkqhkiG9w0BAQsFAAOCAQEAKsI7+3SlFH1VPg9onohkIQE8 83Zts4abr9IH1O1fS2T3T9G51YAiWWHrVxLoeTWaoJUSB+kJSwiBR54cE33WQ2SQ Wt+MhjbuuxW5MBgQ1NBpEWTmmKr7xgMT+rAn5T6O0lL2Iv4Y/oceNgwvTy5kepFq 6E/n9Si13DJdZPVEsV3J0Hw+mQAlMB3INPEZ1pgLBezgC/nWD8q0LXTnvY96owih X2oFpxuLK4oeynd2TwDvMcY6C/3IEjBzAV7CD3gQvgcp+nuEUmbR8R1m7oIkPioL wc5x7cWzl0tUlOyZ+21KkfaVi06Z71RcjOlumWdA1D6PMFwPBOQan0fdS5aI0g== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:25 2026 by rpki-client