This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer (raw, json) Hash identifier: PMwEobwz03qV2T6dcznf60MLZ4C52nnUxvneqPGRDFE= Subject key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA714F16DE18CB45BE551F59F9D7BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200596 AS: 211316 IP: 62.146.248.0/21 IP: 85.184.228.0/22 IP: 91.212.42.0/24 IP: 135.84.148.0/22 IP: 145.63.64.0/18 IP: 147.12.16.0/20 IP: 185.101.196.0/22 IP: 2a00:5ea0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:71:4f:16:de:18:cb:45:be:55:1f:59:f9:d7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:a9:7f:2d:d2:06:8a:c2:2f:9d:13:7e:c1: 2e:65:bd:1b:93:5f:f5:b7:4b:c2:f7:48:1c:cf:85: 0c:61:f5:46:6d:fd:64:eb:bd:c8:67:e3:57:1f:28: 15:db:de:b0:e5:dc:f9:fd:b2:7f:b7:4b:c7:da:57: 29:ad:a7:bf:a4:d6:af:ba:bc:53:0d:cf:44:5b:7b: 0b:a5:f2:36:e6:dd:10:a5:72:91:22:54:d8:9b:46: 30:13:75:b1:18:50:12:83:56:3e:64:0e:26:5d:50: 30:a4:16:b3:cd:a1:4e:11:91:38:3e:fc:d4:a3:39: 54:45:1b:32:f1:da:27:f2:32:ff:dd:30:49:a7:04: bc:14:a4:e7:30:b4:3a:03:32:cf:17:ab:44:b3:be: 53:a8:44:f8:b1:d3:d2:b5:70:30:ad:49:28:2a:fa: 41:c7:e1:c8:a5:ba:09:3f:10:0d:ca:35:ad:43:ce: fe:23:2c:dc:0c:38:54:68:29:c4:8d:06:32:86:4b: 7c:6e:8f:04:56:1f:94:82:a0:ba:02:9c:1d:53:12: 75:b9:c8:25:f3:5a:50:36:78:0c:92:f0:b8:bf:13: f3:46:d6:5e:09:de:7d:f1:69:69:69:08:05:2e:b5: 75:91:f2:c6:18:60:a5:46:1e:74:5b:56:61:45:86: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.248.0/21 85.184.228.0/22 91.212.42.0/24 135.84.148.0/22 145.63.64.0/18 147.12.16.0/20 185.101.196.0/22 IPv6: 2a00:5ea0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200596 211316 Signature Algorithm: sha256WithRSAEncryption 5a:ee:cf:7c:3a:70:54:61:de:76:48:7f:60:95:9b:49:94:14: 18:1d:97:8b:d8:08:80:95:25:c6:5b:72:56:2a:37:e5:f2:f0: 59:da:8b:e6:77:23:dc:4d:1e:19:81:7d:da:37:1b:95:d0:a9: b5:aa:30:df:60:c8:6a:7c:ea:fe:ff:5c:89:74:ea:0a:6e:8a: d8:ed:a1:6c:7f:3c:51:4c:a7:90:43:2c:a5:2d:41:9d:78:53: c4:d9:79:be:18:3f:2b:1b:05:4e:ec:22:9f:ca:b7:a3:93:99: e0:64:c2:47:d6:7b:a9:df:da:ec:da:2a:f7:d0:c2:4c:c1:36: b0:ac:cd:88:2c:36:2e:3b:37:18:d9:f2:52:54:7d:12:5b:91: 69:4b:8b:88:cb:77:00:57:26:dc:09:ed:eb:25:b2:01:c1:43: 16:f1:79:d2:e0:49:bb:70:6d:61:45:ec:ad:13:0e:93:9e:c9: ca:a8:15:e8:ad:6d:cc:06:59:0a:a3:1d:81:67:7a:b8:08:78: 46:c4:97:4a:8d:e0:f5:90:ed:46:ce:42:3b:b3:bc:04:70:6b: ff:b4:a2:38:fc:48:57:81:53:99:f2:d4:30:f0:ec:d6:8a:4a: 6e:fd:be:88:b1:ba:72:09:11:7a:a7:76:34:7f:f8:c0:d1:ba: 6a:20:ac:fe -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt9ynFPFt4Yy0W+VR9Z+de/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTdjZDhkNDhiNWQxNTY2N2JmMTMxMzk2ZDRhNmM1OWQ3ZDE2N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3epfy3SBorCL50TfsEuZb0bk1/1 t0vC90gcz4UMYfVGbf1k673IZ+NXHygV296w5dz5/bJ/t0vH2lcprae/pNavurxT Dc9EW3sLpfI25t0QpXKRIlTYm0YwE3WxGFASg1Y+ZA4mXVAwpBazzaFOEZE4PvzU ozlURRsy8don8jL/3TBJpwS8FKTnMLQ6AzLPF6tEs75TqET4sdPStXAwrUkoKvpB x+HIpboJPxANyjWtQ87+IyzcDDhUaCnEjQYyhkt8bo8EVh+UgqC6ApwdUxJ1ucgl 81pQNngMkvC4vxPzRtZeCd598WlpaQgFLrV1kfLGGGClRh50W1ZhRYYXQwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFGF82NSLXRVme/ExOW1KbFnX0WfAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzEwNWUy My02Y2U2LTRjZTAtOTNmYS1iZjZlOTdkZGQwNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMTA1ZTIz LTZjZTYtNGNlMC05M2ZhLWJmNmU5N2RkZDA3OS8xL1lYelkxSXRkRldaNzhURTVi VXBzV2RmUlo4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDPpL4AwQCVbjkAwQAW9QqAwQCh1SUAwQGkT9A AwQEkwwQAwQCuWXEMA0EAgACMAcDBQMqAF6gMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwMPlAIDAzl0MA0GCSqGSIb3DQEBCwUAA4IBAQBa7s98OnBUYd52SH9glZtJ lBQYHZeL2AiAlSXGW3JWKjfl8vBZ2ovmdyPcTR4ZgX3aNxuV0Km1qjDfYMhqfOr+ /1yJdOoKborY7aFsfzxRTKeQQyylLUGdeFPE2Xm+GD8rGwVO7CKfyrejk5ngZMJH 1nup39rs2ir30MJMwTawrM2ILDYuOzcY2fJSVH0SW5FpS4uIy3cAVybcCe3rJbIB wUMW8XnS4Em7cG1hReytEw6TnsnKqBXorW3MBlkKox2BZ3q4CHhGxJdKjeD1kO1G zkI7s7wEcGv/tKI4/EhXgVOZ8tQw8OzWikpu/b6IsbpyCRF6p3Y0f/jA0bpqIKz+ -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:46 2026 by rpki-client