This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer File: YXfFgJJlmeg6tzW6LgT8EId4xEE.cer (raw, json) Hash identifier: w/h7U1EcSAgdyKMV+iARqmaII8Zitf4UlTMDXTzVtbc= Subject key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835526A199A6841442D16B020436529 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207131 IP: 93.95.28.0/24 IP: 2a12:af40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:52:6a:19:9a:68:41:44:2d:16:b0:20:43:65:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6177c580926599e83ab735ba2e04fc108778c441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:52:c9:47:24:62:14:65:68:dc:b4:a3:0e: b3:55:a0:91:fe:53:a6:32:ce:30:2d:c1:bb:8d:a2: df:ad:0a:95:fa:68:c3:66:59:9f:9d:58:53:44:d3: d3:85:9b:c1:d4:9b:94:60:73:2d:59:7c:a8:ac:83: 16:5f:9a:d8:b5:65:e5:1f:d7:5d:69:b5:e1:7f:c3: fe:61:f1:2e:51:e9:eb:12:fc:80:3a:33:a2:16:23: e3:29:fc:7b:56:4a:35:98:78:01:03:18:61:39:5b: 38:d9:e5:e7:fe:90:cd:c6:e6:1e:7b:85:f3:a6:64: 5f:b6:3d:e7:e8:92:64:f4:39:58:5f:3b:fd:78:71: fb:e8:2a:c5:d2:5f:1f:e9:42:99:22:3d:f3:21:ae: 44:02:6e:7a:a1:66:c5:a5:89:8f:56:4f:8f:28:55: c5:e4:80:5f:82:8d:de:49:a1:e5:e5:dd:68:0d:11: 3c:11:ee:3c:75:5a:fc:65:bf:44:7b:e6:5a:47:23: ba:91:79:a7:1a:00:f7:a4:d1:13:ea:09:10:62:49: 9b:33:7d:1e:70:52:01:2c:b6:88:3a:35:52:7e:95: 83:35:68:6a:d7:33:26:92:11:00:9b:2f:c7:29:bf: fc:1a:29:e6:c1:68:0f:af:8e:65:e4:3e:25:e2:14: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.28.0/24 IPv6: 2a12:af40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207131 Signature Algorithm: sha256WithRSAEncryption 5d:1c:0f:7c:71:28:41:d5:e0:04:68:8d:fe:f0:63:57:35:56: e9:7b:d8:55:d7:4d:ba:90:9f:b1:d3:7d:fc:4b:9c:06:8e:64: 6d:82:53:6b:c1:a3:26:07:32:5b:41:1d:12:ef:c2:c3:69:83: 40:2d:c0:1d:6e:55:3b:eb:02:f9:c7:03:99:8e:64:4d:21:02: 4c:9f:05:61:74:40:b8:f5:60:15:a4:8d:19:33:2f:b4:ef:16: 3c:39:be:24:62:f7:fc:a4:6b:cc:ad:52:69:7a:7a:ba:71:24: df:f2:a6:be:bc:a5:1d:74:a8:fe:6e:74:95:41:32:ac:1d:90: 4c:d6:15:9a:80:3b:33:fb:95:cd:76:ed:48:87:8b:75:29:ef: 1f:db:45:3d:8a:c8:6a:96:1f:d7:a6:6c:eb:88:f7:ae:1a:d5: e3:30:e0:db:e5:0b:15:19:81:1d:1f:b6:44:99:c7:0c:c1:d8: 68:3b:d9:19:6f:0c:b7:bf:5b:2d:24:d6:39:43:23:35:53:4b: 9a:6f:07:c5:5b:d1:c5:69:70:89:73:f4:7c:0a:dd:15:06:12: 53:d4:1e:b4:25:b8:25:21:e3:fb:12:8f:2a:df:d6:5d:b1:cc: 1c:ea:5e:93:6b:fa:30:e2:7e:03:34:eb:c5:00:7c:57:2c:dc: e6:d6:d8:4a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NVJqGZpoQUQtFrAgQ2UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTc3YzU4MDkyNjU5OWU4M2FiNzM1YmEyZTA0ZmMxMDg3NzhjNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PFSyUckYhRlaNy0ow6zVaCR/lOm Ms4wLcG7jaLfrQqV+mjDZlmfnVhTRNPThZvB1JuUYHMtWXyorIMWX5rYtWXlH9dd abXhf8P+YfEuUenrEvyAOjOiFiPjKfx7Vko1mHgBAxhhOVs42eXn/pDNxuYee4Xz pmRftj3n6JJk9DlYXzv9eHH76CrF0l8f6UKZIj3zIa5EAm56oWbFpYmPVk+PKFXF 5IBfgo3eSaHl5d1oDRE8Ee48dVr8Zb9Ee+ZaRyO6kXmnGgD3pNET6gkQYkmbM30e cFIBLLaIOjVSfpWDNWhq1zMmkhEAmy/HKb/8GinmwWgPr45l5D4l4hTAsQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGF3xYCSZZnoOrc1ui4E/BCHeMRBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzI5YmY3 Yi00NzQ1LTQ0MjMtYThmYS1hMzJlMmVkMGNmZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMjliZjdi LTQ3NDUtNDQyMy1hOGZhLWEzMmUyZWQwY2ZkMy8xL1lYZkZnSkpsbWVnNnR6VzZM Z1Q4RUlkNHhFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXV8cMA0EAgACMAcDBQMqEq9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpGzANBgkqhkiG9w0BAQsFAAOCAQEAXRwPfHEoQdXg BGiN/vBjVzVW6XvYVddNupCfsdN9/EucBo5kbYJTa8GjJgcyW0EdEu/Cw2mDQC3A HW5VO+sC+ccDmY5kTSECTJ8FYXRAuPVgFaSNGTMvtO8WPDm+JGL3/KRrzK1SaXp6 unEk3/KmvrylHXSo/m50lUEyrB2QTNYVmoA7M/uVzXbtSIeLdSnvH9tFPYrIapYf 16Zs64j3rhrV4zDg2+ULFRmBHR+2RJnHDMHYaDvZGW8Mt79bLSTWOUMjNVNLmm8H xVvRxWlwiXP0fArdFQYSU9QetCW4JSHj+xKPKt/WXbHMHOpek2v6MOJ+AzTrxQB8 Vyzc5tbYSg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:46 2026 by rpki-client