This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer (raw, json) Hash identifier: KQSQnya3FhbpOdKu/Sy3PAqeyLbI5umA8Z9P7clTeaM= Subject key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83DC8380B7F02B5F0BB97D49F9E489 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56616 IP: 31.7.88.0/22 IP: 185.116.20.0/22 IP: 2a0a:d340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:dc:83:80:b7:f0:2b:5f:0b:b9:7d:49:f9:e4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6264318c1aaa7ca0603155a883d43926ef97e87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:48:c7:42:df:77:d9:5c:f4:70:e2:0e:7f: 5a:ff:d8:44:76:46:b6:ae:f6:8b:d3:57:64:b5:a1: 57:51:7f:fc:da:af:40:62:c1:92:9f:bb:af:b2:f7: 8c:c7:6a:70:9b:12:65:a7:40:d7:46:cd:e0:b2:bf: dc:f0:7b:c2:8a:4b:7d:8a:77:28:79:a7:06:b9:c2: 30:d8:a3:79:04:de:ba:6c:6b:ee:e1:2c:58:99:a3: d7:71:8d:d6:04:5f:cc:47:b8:15:99:8f:c4:69:21: eb:75:97:ea:f0:64:16:12:18:68:11:84:2e:b8:fa: 26:52:cc:9b:09:d3:08:42:56:af:2f:3c:88:a8:ae: 5b:ad:25:de:c1:41:04:6d:b2:ee:c0:55:53:66:89: dc:23:9a:d5:bf:66:00:ff:dd:0c:20:90:2d:de:fc: cc:ef:f5:95:74:9f:35:d9:9e:f7:da:24:d6:3c:cd: 9f:0e:5a:b4:78:0b:eb:a8:d0:19:ec:e1:fb:e7:7e: 77:06:2b:47:bb:31:c2:6b:b1:35:4a:c5:73:59:fa: 0b:ce:9a:f4:d9:57:92:38:56:8f:ce:31:58:14:b5: ae:25:b7:29:0f:05:75:fc:82:7b:66:91:ac:c1:86: b7:9b:cb:9c:c8:eb:4c:97:91:53:e9:ac:99:1b:6b: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.88.0/22 185.116.20.0/22 IPv6: 2a0a:d340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56616 Signature Algorithm: sha256WithRSAEncryption 0c:27:cf:4b:82:fc:bd:4c:fd:37:ff:2b:ec:99:08:0f:96:8a: a0:fc:fa:cb:04:ba:ee:15:ad:cf:2f:be:da:1d:6e:07:a4:6a: 62:04:78:14:ab:af:b2:4f:e2:71:03:77:6f:34:0d:e1:30:e2: 72:50:f5:cf:55:39:72:1c:3b:ce:db:5d:87:d2:71:ca:05:da: 00:c0:0c:4d:91:36:4a:3b:5d:d2:c6:b0:d8:b9:75:47:04:c6: fd:b8:12:da:2a:9b:98:70:b7:65:88:44:6d:11:e9:73:6a:43: 2c:94:e8:ca:74:8f:a7:ad:61:ba:d7:1d:59:46:6f:9c:af:85: e8:81:5b:3e:84:2f:0c:12:ed:c5:3e:2e:7b:2d:ff:31:80:f7: f9:f0:7e:72:f5:1b:51:05:0c:42:ca:74:1b:2b:15:9a:fc:77: 6f:58:b1:dc:bb:c8:10:47:fa:09:ad:b7:80:54:bc:7e:e0:49: cd:7e:c0:f5:cb:a6:c3:84:de:40:e7:a2:ec:a6:1d:96:9b:fe: c8:02:f7:53:53:b8:d1:9b:d2:51:75:d3:e6:b0:5d:a6:9e:c7: b1:3e:b3:49:a5:b0:97:b2:d2:9a:3c:e4:b7:03:12:4f:d4:aa: df:9a:fa:09:29:c2:c3:13:2e:45:19:a9:0d:f9:52:8a:e7:79: 55:cf:b7:8c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/g9yDgLfwK18LuX1J+eSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjY0MzE4YzFhYWE3Y2EwNjAzMTU1YTg4M2Q0MzkyNmVmOTdlODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC9Ix0Lfd9lc9HDiDn9a/9hEdka2 rvaL01dktaFXUX/82q9AYsGSn7uvsveMx2pwmxJlp0DXRs3gsr/c8HvCikt9inco eacGucIw2KN5BN66bGvu4SxYmaPXcY3WBF/MR7gVmY/EaSHrdZfq8GQWEhhoEYQu uPomUsybCdMIQlavLzyIqK5brSXewUEEbbLuwFVTZoncI5rVv2YA/90MIJAt3vzM 7/WVdJ812Z732iTWPM2fDlq0eAvrqNAZ7OH75353BitHuzHCa7E1SsVzWfoLzpr0 2VeSOFaPzjFYFLWuJbcpDwV1/IJ7ZpGswYa3m8ucyOtMl5FT6ayZG2vO7QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGJkMYwaqnygYDFVqIPUOSbvl+h8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2Y2YjY0 Mi04NzJiLTRiN2QtYmQ2YS1iOTFhMjcwNTUyMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZjZiNjQy LTg3MmItNGI3ZC1iZDZhLWI5MWEyNzA1NTIwNC8xL1ltUXhqQnFxZktCZ01WV29n OVE1SnUtWDZIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCHwdYAwQCuXQUMA0EAgACMAcDBQMqCtNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDdKDANBgkqhkiG9w0BAQsFAAOCAQEADCfP S4L8vUz9N/8r7JkID5aKoPz6ywS67hWtzy++2h1uB6RqYgR4FKuvsk/icQN3bzQN 4TDiclD1z1U5chw7zttdh9JxygXaAMAMTZE2Sjtd0saw2Ll1RwTG/bgS2iqbmHC3 ZYhEbRHpc2pDLJToynSPp61hutcdWUZvnK+F6IFbPoQvDBLtxT4uey3/MYD3+fB+ cvUbUQUMQsp0GysVmvx3b1ix3LvIEEf6Ca23gFS8fuBJzX7A9cumw4TeQOei7KYd lpv+yAL3U1O40ZvSUXXT5rBdpp7HsT6zSaWwl7LSmjzktwMST9Sq35r6CSnCwxMu RRmpDflSiud5Vc+3jA== -----END CERTIFICATE-----Generated at Sun Jan 11 19:19:11 2026 by rpki-client