This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer (raw, json) Hash identifier: xkjNUWpPIBz9it+QnMnOc3g1yxim1yQxcqnyQaWcwYM= Subject key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1550D2C290BEEFE56540A898198B53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48534 IP: 194.165.48.0/24 IP: 2001:678:5c4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:50:d2:c2:90:be:ef:e5:65:40:a8:98:19:8b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=626752d870c6696f012b2f465d549f4000fe1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:3b:b2:4c:e7:97:bd:5c:5b:ef:87:d6:76: bb:30:d6:d6:0f:5c:23:c8:1c:6a:69:3e:a9:cc:6b: 33:a4:60:71:7e:ce:e1:60:07:e4:29:c6:32:d7:98: e3:fe:1b:de:3c:20:23:bc:51:94:f3:d9:df:b0:8d: d9:2e:36:0d:de:25:71:41:e2:1b:43:ac:e0:c4:0c: 37:14:22:07:e6:f9:55:49:d4:cc:83:bb:a0:6b:9b: 23:9d:ad:a7:c0:b3:25:24:da:65:5d:ef:75:3c:20: bd:e6:bf:bb:24:b5:ed:47:06:26:f3:24:b7:07:29: 92:eb:d2:f2:12:a7:89:9a:20:e6:9f:14:e8:45:99: bb:76:92:25:cf:b1:57:81:fc:d7:49:7d:2b:35:b5: 4e:89:e0:fa:c1:89:92:b4:a4:a5:dd:30:c6:df:ff: 86:0d:1a:da:a5:0f:02:72:3b:50:e3:75:1c:b5:f7: 42:dc:ca:c1:43:db:aa:37:c3:03:9d:06:7b:6d:d6: 11:f4:d0:8f:c3:75:c1:b4:fc:cc:0f:e9:83:8f:81: d4:e3:84:b2:a2:f9:f5:bd:4c:d2:fb:2c:82:0b:eb: fc:2c:a3:83:38:6d:27:0a:9a:89:5f:5a:1c:8a:cf: c6:23:1c:13:c8:a6:d4:3f:81:93:90:e7:90:08:2d: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.165.48.0/24 IPv6: 2001:678:5c4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48534 Signature Algorithm: sha256WithRSAEncryption 12:11:65:ee:41:c3:a2:aa:3d:e2:11:66:c1:3e:c0:7c:a3:d4: be:18:28:fc:cf:b5:84:e3:70:c1:18:94:79:a4:bd:2b:13:f2: e1:7f:23:3c:2c:b2:ea:66:ae:75:08:f1:2b:18:a7:c5:a5:04: cc:16:01:ab:0a:b8:ae:f9:c6:99:22:39:d9:f3:60:7e:1e:58: d4:e4:1c:9b:4c:d1:78:96:0f:eb:77:2b:b6:86:7a:8a:ce:c7: d1:4f:ba:a7:90:0b:24:c5:9b:12:3b:e9:86:1e:cc:da:25:35: 60:22:a9:9e:40:e6:2f:cc:7f:60:fe:8c:25:f4:df:ca:2c:74: ab:72:3d:40:7e:0d:0f:94:a7:5e:c2:12:1b:58:ba:44:15:f8: 33:91:0d:01:6a:6f:8a:a4:53:32:78:fb:f2:b3:9d:44:1f:c6: 9f:01:8c:48:e0:20:b3:25:bd:07:ca:b1:bd:b0:9d:34:fc:83: 97:84:32:d9:d1:44:23:c7:35:52:e9:1a:e4:1f:86:de:e4:6e: bc:09:5e:91:20:82:6d:61:8f:b8:d9:4d:62:2c:5f:76:2d:a2: 9d:f5:68:65:29:d9:64:5e:06:c4:48:0b:44:cd:b6:05:0d:91: 05:b7:02:94:43:1a:f8:99:b2:30:e9:f7:5f:4f:37:40:cb:bf: c7:0d:b5:fd -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/FVDSwpC+7+VlQKiYGYtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjY3NTJkODcwYzY2OTZmMDEyYjJmNDY1ZDU0OWY0MDAwZmUxODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cs7skznl71cW++H1na7MNbWD1wj yBxqaT6pzGszpGBxfs7hYAfkKcYy15jj/hvePCAjvFGU89nfsI3ZLjYN3iVxQeIb Q6zgxAw3FCIH5vlVSdTMg7uga5sjna2nwLMlJNplXe91PCC95r+7JLXtRwYm8yS3 BymS69LyEqeJmiDmnxToRZm7dpIlz7FXgfzXSX0rNbVOieD6wYmStKSl3TDG3/+G DRrapQ8CcjtQ43UctfdC3MrBQ9uqN8MDnQZ7bdYR9NCPw3XBtPzMD+mDj4HU44Sy ovn1vUzS+yyCC+v8LKODOG0nCpqJX1ocis/GIxwTyKbUP4GTkOeQCC3OzQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFGJnUthwxmlvASsvRl1Un0AA/hhYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2JmYmIy Zi1iNjcxLTQ4MTQtODYyNy1iYTI2NDhmMTUxZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvYmZiYjJm LWI2NzEtNDgxNC04NjI3LWJhMjY0OGYxNTFkMy8xL1ltZFMySERHYVc4Qkt5OUdY VlNmUUFELUdGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwqUwMA8EAgACMAkDBwAgAQZ4BcQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAL2WMA0GCSqGSIb3DQEBCwUAA4IBAQASEWXuQcOi qj3iEWbBPsB8o9S+GCj8z7WE43DBGJR5pL0rE/LhfyM8LLLqZq51CPErGKfFpQTM FgGrCriu+caZIjnZ82B+HljU5BybTNF4lg/rdyu2hnqKzsfRT7qnkAskxZsSO+mG HszaJTVgIqmeQOYvzH9g/owl9N/KLHSrcj1Afg0PlKdewhIbWLpEFfgzkQ0Bam+K pFMyePvys51EH8afAYxI4CCzJb0HyrG9sJ00/IOXhDLZ0UQjxzVS6RrkH4be5G68 CV6RIIJtYY+42U1iLF92LaKd9WhlKdlkXgbESAtEzbYFDZEFtwKUQxr4mbIw6fdf TzdAy7/HDbX9 -----END CERTIFICATE-----Generated at Sat Jan 3 02:32:00 2026 by rpki-client