This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer File: Ym0k1r81OWP-WvolsKWWZxUqhtA.cer (raw, json) Hash identifier: MrRLhYdTcDYHalE9W1sGUP2ECss1v0Nf6TrPBdGMkJw= Subject key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB70B97493A54B519A95D4A570350D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35809 IP: 195.10.216.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:70:b9:74:93:a5:4b:51:9a:95:d4:a5:70:35:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:5d:23:d6:74:e4:fa:24:77:97:12:ec:0c: 1b:3f:59:11:b2:fd:cf:bf:d9:f0:21:49:f6:57:12: c8:cd:ca:8c:1a:0e:36:d0:20:47:1b:12:10:f2:70: dd:2a:41:4e:f8:91:60:57:f2:f9:8f:36:f5:a3:68: 26:7b:bb:4b:a9:61:ba:51:30:d4:92:0f:77:0b:fd: 25:f1:73:66:5c:0c:cb:08:78:b5:e4:80:bc:30:a7: 52:9a:40:e6:5d:23:20:31:75:83:ff:65:f1:a5:d7: 7b:12:07:a4:b8:89:98:c3:09:55:5d:13:db:06:20: 51:00:e4:3d:ae:0b:f1:53:62:36:19:8a:b1:bc:21: ea:45:f7:70:11:1c:87:9c:a3:95:fe:20:ba:54:bb: 06:0e:98:97:81:78:57:aa:40:ad:7c:2f:5f:d8:7e: bb:99:80:6a:5b:09:f0:b2:e4:a5:e1:ce:82:e1:54: a9:0e:a1:83:c0:01:95:41:06:b5:bc:c7:34:ef:55: a3:4c:65:be:e7:95:3b:b1:2c:4f:a7:35:77:83:cf: 6f:db:39:04:56:91:a5:9f:2f:39:c0:ba:5e:68:65: 3d:93:73:8d:05:db:8c:32:b5:f1:36:6d:3b:2f:c6: 9a:ba:d5:61:b3:c8:b2:b8:ff:1b:b9:10:bd:a0:e4: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.216.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35809 Signature Algorithm: sha256WithRSAEncryption 6b:19:ec:fc:1d:cd:da:42:e7:b8:b6:a5:aa:b7:ec:44:1c:fb: 0f:e8:e6:48:41:22:be:b4:ed:4b:47:dc:f7:ff:d9:ec:82:c4: a8:81:3a:a1:54:da:80:f8:6d:c6:55:ed:ea:bb:df:3c:6c:c4: ec:8f:cc:02:6c:38:bf:04:dc:95:23:f7:88:c0:84:b1:ad:bd: c6:6d:27:99:bc:79:15:3b:1e:ff:a2:2b:bf:3e:a5:7b:31:d3: c2:ad:28:ce:6d:57:2f:d4:be:32:71:f1:f8:64:9b:30:c9:c6: 1e:cc:9f:ab:32:e9:0a:39:c6:bc:5f:88:74:b6:72:b1:10:e4: f5:03:20:cc:83:b8:65:f9:6e:bc:7b:30:49:93:9b:85:d3:78: a3:f3:b4:b8:99:99:95:0a:80:fe:35:ca:3f:16:5e:14:11:1e: 26:dd:3f:f6:31:c9:3f:b3:55:a7:cf:30:e8:4a:5d:1c:46:d5: 2a:60:36:56:0c:ab:6d:c9:01:e6:b4:ac:8d:81:90:38:8d:03: 21:28:35:d8:b5:a2:15:69:d5:01:1c:84:a7:8f:5c:89:2e:b8: 73:6b:db:b4:ef:88:fe:58:b9:3a:d6:13:79:91:d5:48:d8:f3: 38:1b:f9:9e:6d:d9:cd:de:5c:b0:bb:35:44:f8:3a:e7:6c:31: 0d:fa:14:c7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt263C5dJOlS1GaldSlcDUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjZkMjRkNmJmMzUzOTYzZmU1YWZhMjViMGE1OTY2NzE1MmE4NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48VdI9Z05Pokd5cS7AwbP1kRsv3P v9nwIUn2VxLIzcqMGg420CBHGxIQ8nDdKkFO+JFgV/L5jzb1o2gme7tLqWG6UTDU kg93C/0l8XNmXAzLCHi15IC8MKdSmkDmXSMgMXWD/2Xxpdd7EgekuImYwwlVXRPb BiBRAOQ9rgvxU2I2GYqxvCHqRfdwERyHnKOV/iC6VLsGDpiXgXhXqkCtfC9f2H67 mYBqWwnwsuSl4c6C4VSpDqGDwAGVQQa1vMc071WjTGW+55U7sSxPpzV3g89v2zkE VpGlny85wLpeaGU9k3ONBduMMrXxNm07L8aautVhs8iyuP8buRC9oOQTDQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGJtJNa/NTlj/lr6JbCllmcVKobQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzYzNDMy YS1lNWQ5LTQ2ZTItOWMwMS1hYzgwOWJiYWU3MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNjM0MzJh LWU1ZDktNDZlMi05YzAxLWFjODA5YmJhZTczNy8xL1ltMGsxcjgxT1dQLVd2b2xz S1dXWnhVcWh0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwwrYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCL4TANBgkqhkiG9w0BAQsFAAOCAQEAaxns/B3N2kLnuLalqrfsRBz7D+jmSEEi vrTtS0fc9//Z7ILEqIE6oVTagPhtxlXt6rvfPGzE7I/MAmw4vwTclSP3iMCEsa29 xm0nmbx5FTse/6Irvz6lezHTwq0ozm1XL9S+MnHx+GSbMMnGHsyfqzLpCjnGvF+I dLZysRDk9QMgzIO4ZfluvHswSZObhdN4o/O0uJmZlQqA/jXKPxZeFBEeJt0/9jHJ P7NVp88w6EpdHEbVKmA2VgyrbckB5rSsjYGQOI0DISg12LWiFWnVARyEp49ciS64 c2vbtO+I/li5OtYTeZHVSNjzOBv5nm3Zzd5csLs1RPg652wxDfoUxw== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:34 2026 by rpki-client