This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer File: YoVOil7h3sifJbKnhZAj_7Ejufg.cer (raw, json) Hash identifier: MoraVuXdTlbKoDTF2w3ASi6fG9Gi9MwVAYUiXaehwuo= Subject key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103E137082FEE93247148D7F7F8A5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.65.168.0/22 IP: 194.33.98.0/23 IP: 195.12.40.0/22 IP: 195.43.56.0/22 IP: 195.90.112.0/23 IP: 2a05:80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3e:13:70:82:fe:e9:32:47:14:8d:7f:7f:8a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:4a:56:d2:03:93:39:23:69:cf:17:37:ed: fe:8a:96:3e:f3:fe:db:52:ac:2a:2b:93:04:eb:1c: 0c:ba:a3:0c:e8:7b:d2:00:57:69:46:df:24:5e:ab: 3b:8e:24:5b:83:82:3a:e5:8f:04:ea:82:ea:2c:9e: f2:02:61:3f:59:3c:bb:15:2e:6c:9b:e3:e5:03:c7: ed:ad:f2:d3:ca:07:1e:ec:25:5c:7e:bc:ab:c1:44: c6:39:e2:ec:93:00:38:f6:33:20:d3:c3:13:79:06: 4e:03:d9:2d:d4:dc:99:2c:12:ef:f7:87:85:6b:68: 6b:8b:92:2d:0a:5f:c4:63:94:93:8d:3e:45:3e:06: 86:ae:f2:cb:92:86:90:52:86:03:56:f9:60:2d:ad: 98:b3:88:27:40:6f:77:03:e1:80:fd:61:17:cc:6f: 08:49:79:2c:e9:55:02:61:a0:d4:d2:08:40:92:62: 61:03:a6:81:0c:0c:59:01:a0:31:f1:4b:90:67:60: f1:ad:35:b2:7c:c8:a5:60:58:01:46:de:15:77:8e: d1:b4:8d:26:6c:5a:4a:19:da:84:5e:cd:08:5c:4e: de:25:14:45:ba:6a:86:2e:74:fb:7d:c6:57:c3:cf: b1:ff:5b:17:f5:fd:fd:ce:11:5a:9b:17:00:06:5e: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.168.0/22 194.33.98.0/23 195.12.40.0/22 195.43.56.0/22 195.90.112.0/23 IPv6: 2a05:80::/29 Signature Algorithm: sha256WithRSAEncryption b1:ec:c7:c6:ed:bf:b2:21:4c:51:24:2c:cc:61:25:11:92:10: 8b:af:37:65:dd:ac:c8:0c:57:db:02:ea:10:64:1f:ad:b8:db: d9:50:71:d2:4c:6f:87:9f:05:70:f5:2e:ca:99:fa:d9:65:16: 98:a9:ca:e7:50:67:21:84:28:b4:08:c7:74:6c:23:de:02:5b: 27:85:48:d4:d7:aa:ed:04:28:31:66:8d:b5:9a:c5:81:c7:cb: df:ab:03:e4:c2:64:0c:fe:df:5f:3c:18:0a:33:c4:48:81:ab: 0e:20:c0:7c:47:1c:14:74:df:0c:71:cc:8d:40:6c:35:63:09: b1:c2:7d:5d:2f:80:3b:d8:82:d7:8f:c3:d2:90:7e:a0:05:0e: 42:26:85:b7:a0:b0:22:ee:9f:27:c0:bc:0a:6b:cd:b1:ae:0f: fa:3e:7d:da:60:d3:54:3a:fb:63:62:d8:77:fd:24:2e:8e:07: 20:2e:93:f0:9c:37:bf:23:ff:cd:6d:ef:0e:1c:7f:f0:19:99: 54:52:a4:d2:25:f7:a5:90:01:a2:61:01:14:72:69:56:af:08: 75:dd:af:26:03:55:67:ec:4d:42:2f:62:a7:42:22:8a:5e:dd: 71:65:4c:57:88:80:e5:c9:21:31:dc:d4:ab:30:c5:c8:b5:dc: 4c:3a:3b:76 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5ED4TcIL+6TJHFI1/f4pcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjg1NGU4YTVlZTFkZWM4OWYyNWIyYTc4NTkwMjNmZmIxMjNiOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApepKVtIDkzkjac8XN+3+ipY+8/7b UqwqK5ME6xwMuqMM6HvSAFdpRt8kXqs7jiRbg4I65Y8E6oLqLJ7yAmE/WTy7FS5s m+PlA8ftrfLTygce7CVcfryrwUTGOeLskwA49jMg08MTeQZOA9kt1NyZLBLv94eF a2hri5ItCl/EY5STjT5FPgaGrvLLkoaQUoYDVvlgLa2Ys4gnQG93A+GA/WEXzG8I SXks6VUCYaDU0ghAkmJhA6aBDAxZAaAx8UuQZ2DxrTWyfMilYFgBRt4Vd47RtI0m bFpKGdqEXs0IXE7eJRRFumqGLnT7fcZXw8+x/1sX9f39zhFamxcABl7oUQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFGKFTope4d7InyWyp4WQI/+xI7n4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2Y2MWQz ZC04OTBkLTQ5MjYtOGYzOC0zNWIxYzViOGFkMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvZjYxZDNk LTg5MGQtNDkyNi04ZjM4LTM1YjFjNWI4YWQzNC8xL1lvVk9pbDdoM3NpZkpiS25o WkFqXzdFanVmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCuUGoAwQBwiFiAwQCwwwoAwQCwys4AwQBw1pw MA0EAgACMAcDBQMqBQCAMA0GCSqGSIb3DQEBCwUAA4IBAQCx7MfG7b+yIUxRJCzM YSURkhCLrzdl3azIDFfbAuoQZB+tuNvZUHHSTG+HnwVw9S7KmfrZZRaYqcrnUGch hCi0CMd0bCPeAlsnhUjU16rtBCgxZo21msWBx8vfqwPkwmQM/t9fPBgKM8RIgasO IMB8RxwUdN8MccyNQGw1Ywmxwn1dL4A72ILXj8PSkH6gBQ5CJoW3oLAi7p8nwLwK a82xrg/6Pn3aYNNUOvtjYth3/SQujgcgLpPwnDe/I//Nbe8OHH/wGZlUUqTSJfel kAGiYQEUcmlWrwh13a8mA1Vn7E1CL2KnQiKKXt1xZUxXiIDlySEx3NSrMMXItdxM Ojt2 -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:19 2026 by rpki-client