This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YcaCaHQ-gj4OHIcAYMChQiPxUes.cer File: YcaCaHQ-gj4OHIcAYMChQiPxUes.cer (raw, json) Hash identifier: 3hi0zsLgZhl4HitZVdyN5/Y74kMcrQ9TKXf/qek0UiA= Subject key identifier: 61:C6:82:68:74:3E:82:3E:0E:1C:87:00:60:C0:A1:42:23:F1:51:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2B917E6AECD9C44688E708B84927 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34749 IP: 93.94.160.0/21 IP: 193.168.50.0/24 IP: 2a00:ea80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2b:91:7e:6a:ec:d9:c4:46:88:e7:08:b8:49:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61c68268743e823e0e1c870060c0a14223f151eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:b3:d1:9a:84:34:42:72:d0:29:0d:3d:40: 27:72:f3:5d:e9:85:d0:de:1d:9a:a4:ae:5c:13:1e: e8:d8:c2:c0:14:76:35:1a:67:67:d8:e5:7c:3d:01: 81:c9:0b:23:b3:b7:49:35:19:39:6a:55:a0:72:f6: 6f:a1:ac:cb:14:ee:5e:16:2d:4e:17:93:c7:5b:ef: 1c:1a:cf:ad:f0:cd:ff:24:a9:2a:50:e1:23:b7:3e: ca:ee:03:81:6a:4d:ec:73:ea:58:84:2e:2b:85:b5: 26:7a:72:56:81:1c:17:63:9d:26:40:d4:68:b9:e1: ef:9c:b0:67:03:c6:04:ba:c2:9d:71:78:ad:20:a5: 55:f3:b7:f1:1d:b3:07:8a:41:af:26:e4:9f:b2:0c: 3e:54:9e:bf:9e:5c:8b:40:d2:34:7a:8b:6d:70:13: da:a3:f7:b9:6b:c8:85:91:36:b1:ce:bc:0a:14:c8: 07:f2:99:1d:70:d7:ce:e0:04:f0:0a:65:27:e9:7c: a1:e9:2c:43:9a:6c:8e:0c:5c:b7:4e:83:12:dc:9d: c2:ee:b1:eb:32:18:61:f5:ab:98:17:8d:c5:7c:63: c1:4e:58:83:d0:9f:bb:eb:0b:d1:9c:0e:11:ed:33: 1e:2d:41:b4:d5:a0:20:25:f0:d9:66:8f:91:24:99: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:82:68:74:3E:82:3E:0E:1C:87:00:60:C0:A1:42:23:F1:51:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.160.0/21 193.168.50.0/24 IPv6: 2a00:ea80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34749 Signature Algorithm: sha256WithRSAEncryption 95:98:ac:a9:d1:55:51:78:01:37:bf:08:d8:10:e9:78:a5:67: d8:2e:ac:03:37:f6:80:dd:57:56:be:b9:9a:dd:60:3c:f8:94: c2:8e:01:69:20:6f:db:35:03:5a:ff:79:3d:cc:3d:aa:39:f2: 07:a7:f8:69:49:c0:05:07:b9:5d:d9:58:71:a8:c2:01:f8:ac: a8:5f:4f:bd:57:dd:2e:e6:91:3a:0b:e0:9c:b4:54:26:1c:e7: 59:ce:eb:e4:eb:35:33:d5:d8:e1:61:1b:ab:fe:3b:d1:41:55: d2:a4:28:53:ea:d8:71:6b:a2:1c:b1:d4:33:39:e4:f7:3d:da: 63:82:6b:60:c6:b5:25:1a:de:34:f8:1c:fc:00:14:c4:43:56: c1:f7:c8:e4:87:22:45:87:82:29:68:98:6b:99:8d:6e:e3:ff: 4a:46:74:9b:c9:60:58:21:4d:13:18:ba:1c:90:fa:05:c9:a2: c6:65:71:03:dc:1a:c6:b6:18:f1:6a:34:60:51:ff:26:b3:ca: 47:ad:89:68:bf:af:0b:34:e4:08:ed:3c:07:20:35:a2:2e:65: f0:a7:ea:12:b7:4c:66:8b:33:71:cd:d2:7e:39:55:10:cf:ad: 6b:02:f7:e5:3e:06:5f:0a:7b:d0:3e:4c:0a:76:d3:15:28:5b: f6:73:fd:f8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt26yuRfmrs2cRGiOcIuEknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWM2ODI2ODc0M2U4MjNlMGUxYzg3MDA2MGMwYTE0MjIzZjE1MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7mz0ZqENEJy0CkNPUAncvNd6YXQ 3h2apK5cEx7o2MLAFHY1Gmdn2OV8PQGByQsjs7dJNRk5alWgcvZvoazLFO5eFi1O F5PHW+8cGs+t8M3/JKkqUOEjtz7K7gOBak3sc+pYhC4rhbUmenJWgRwXY50mQNRo ueHvnLBnA8YEusKdcXitIKVV87fxHbMHikGvJuSfsgw+VJ6/nlyLQNI0eottcBPa o/e5a8iFkTaxzrwKFMgH8pkdcNfO4ATwCmUn6Xyh6SxDmmyODFy3ToMS3J3C7rHr Mhhh9auYF43FfGPBTliD0J+76wvRnA4R7TMeLUG01aAgJfDZZo+RJJlkjwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGHGgmh0PoI+DhyHAGDAoUIj8VHrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzYyNjQx Yy0zNDQ0LTQ0MjUtYmY1MS02ZDA1YzBkMGRhNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvNjI2NDFj LTM0NDQtNDQyNS1iZjUxLTZkMDVjMGQwZGE2Zi8xL1ljYUNhSFEtZ2o0T0hJY0FZ TUNoUWlQeFVlcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXV6gAwQAwagyMA0EAgACMAcDBQAqAOqAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCHvTANBgkqhkiG9w0BAQsFAAOCAQEAlZis qdFVUXgBN78I2BDpeKVn2C6sAzf2gN1XVr65mt1gPPiUwo4BaSBv2zUDWv95Pcw9 qjnyB6f4aUnABQe5XdlYcajCAfisqF9PvVfdLuaROgvgnLRUJhznWc7r5Os1M9XY 4WEbq/470UFV0qQoU+rYcWuiHLHUMznk9z3aY4JrYMa1JRreNPgc/AAUxENWwffI 5IciRYeCKWiYa5mNbuP/SkZ0m8lgWCFNExi6HJD6BcmixmVxA9waxrYY8Wo0YFH/ JrPKR62JaL+vCzTkCO08ByA1oi5l8KfqErdMZoszcc3SfjlVEM+tawL35T4GXwp7 0D5MCnbTFShb9nP9+A== -----END CERTIFICATE-----Generated at Sun Jan 11 20:53:41 2026 by rpki-client