This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer File: YWeZlkXhW2Umig2TuxTE9RckRRs.cer (raw, json) Hash identifier: zoqk4FFpIJn/ZFwB/YAdM7ZEjuX6BQmHFmYtxxK6mcE= Subject key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21BBFC34B2C28E486EA0F92C2419E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6750 IP: 194.145.140.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1b:bf:c3:4b:2c:28:e4:86:ea:0f:92:c2:41:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6167999645e15b65268a0d93bb14c4f51724451b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:df:70:70:83:b2:4d:71:53:f7:f0:ff:24: b7:4e:84:56:e9:49:fe:09:d7:68:92:22:91:06:f9: 8d:17:2e:75:55:d6:12:9a:6e:94:30:42:9a:10:00: e0:83:9a:6a:6e:21:48:d8:ba:89:aa:70:8e:b6:0a: 86:16:5d:51:e1:0b:7e:72:2d:2b:4d:46:13:8a:e3: 65:67:63:29:02:c7:19:29:2a:92:f3:c5:5b:bb:c5: 68:14:c0:07:ec:66:bc:2b:6c:a3:83:6a:c3:3f:0c: 16:5a:11:b5:12:9a:df:28:9b:53:19:7b:1e:0c:ed: b8:44:25:de:b1:a1:cd:13:44:e3:a5:1b:9d:96:4a: db:e9:72:96:9b:08:99:eb:88:e8:57:ce:f1:b2:82: f6:03:86:79:ba:5b:0a:ff:cc:8c:27:98:06:94:d2: 04:33:85:51:9c:7c:ec:17:bc:c3:10:00:87:8b:56: 5c:db:44:68:c1:0e:2b:67:41:c6:0c:84:c7:d7:e9: 5b:a7:58:81:88:ec:25:70:48:58:f1:cf:e0:1e:4c: 4b:b2:f3:38:f6:cc:cc:dc:7b:59:dc:81:ea:8b:ea: d2:45:8b:05:8b:67:6f:eb:ce:16:a1:c8:f2:24:df: c2:a4:9b:12:07:12:a5:05:d1:ab:41:65:7b:49:85: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.140.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6750 Signature Algorithm: sha256WithRSAEncryption 29:2b:91:84:cd:e8:31:03:17:71:16:2b:1f:79:19:c7:e8:10: ae:fc:06:5c:df:b9:e2:8c:3e:58:58:cd:dc:d6:68:ca:c9:3d: 51:27:0e:cb:f8:9d:f1:80:2b:e2:56:21:4f:a1:ef:e2:bc:a6: 3e:66:79:4b:a7:92:2b:f8:17:c3:5a:e1:9e:ab:30:fd:e4:cc: ca:74:bc:a4:09:6e:7c:4b:5e:75:97:e1:78:74:46:ab:f9:c9: b0:0c:34:4a:e9:95:18:cf:fd:17:ae:77:4f:40:c5:38:88:53: c7:71:15:52:d7:fe:39:19:53:fb:d6:cd:39:90:50:7f:74:84: dd:dc:f8:40:4a:93:32:12:fe:b8:98:c2:34:42:62:3b:00:74: 30:ea:40:d7:ca:50:eb:e9:d7:37:f3:8e:3b:4d:52:48:99:45: db:fe:26:a6:40:41:c3:23:52:3d:8b:0e:2c:e2:d4:ad:0a:65: a0:4f:67:ac:78:aa:5a:4e:96:bf:dd:1d:db:47:a0:d3:dd:6f: d3:7e:45:01:0f:54:c1:7e:0e:43:00:7d:60:16:f3:c4:d8:d3: f6:9d:17:0c:9f:bf:68:37:7c:69:a2:6b:2d:11:c3:8e:ef:94: 1d:ea:29:2e:e5:21:fb:b8:0b:b6:eb:4f:86:98:f5:38:55:a7: 6d:c4:f9:76 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/8hu/w0ssKOSG6g+SwkGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTY3OTk5NjQ1ZTE1YjY1MjY4YTBkOTNiYjE0YzRmNTE3MjQ0NTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDfcHCDsk1xU/fw/yS3ToRW6Un+ CddokiKRBvmNFy51VdYSmm6UMEKaEADgg5pqbiFI2LqJqnCOtgqGFl1R4Qt+ci0r TUYTiuNlZ2MpAscZKSqS88Vbu8VoFMAH7Ga8K2yjg2rDPwwWWhG1EprfKJtTGXse DO24RCXesaHNE0TjpRudlkrb6XKWmwiZ64joV87xsoL2A4Z5ulsK/8yMJ5gGlNIE M4VRnHzsF7zDEACHi1Zc20RowQ4rZ0HGDITH1+lbp1iBiOwlcEhY8c/gHkxLsvM4 9szM3HtZ3IHqi+rSRYsFi2dv684WocjyJN/CpJsSBxKlBdGrQWV7SYUtLQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGFnmZZF4VtlJooNk7sUxPUXJEUbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2QzMWEy NS0yNTA3LTQ3MWQtYWRjNy04ODA3Zjk1YWU3NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZDMxYTI1 LTI1MDctNDcxZC1hZGM3LTg4MDdmOTVhZTc1ZC8xL1lXZVpsa1hoVzJVbWlnMlR1 eFRFOVJja1JScy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwpGMMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AhpeMA0GCSqGSIb3DQEBCwUAA4IBAQApK5GEzegxAxdxFisfeRnH6BCu/AZc37ni jD5YWM3c1mjKyT1RJw7L+J3xgCviViFPoe/ivKY+ZnlLp5Ir+BfDWuGeqzD95MzK dLykCW58S151l+F4dEar+cmwDDRK6ZUYz/0XrndPQMU4iFPHcRVS1/45GVP71s05 kFB/dITd3PhASpMyEv64mMI0QmI7AHQw6kDXylDr6dc38447TVJImUXb/iamQEHD I1I9iw4s4tStCmWgT2eseKpaTpa/3R3bR6DT3W/TfkUBD1TBfg5DAH1gFvPE2NP2 nRcMn79oN3xpomstEcOO75Qd6iku5SH7uAu260+GmPU4VadtxPl2 -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:02 2026 by rpki-client