This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer File: yHR0zrha8xEi7eWG1NZbD1tNl_A.cer (raw, json) Hash identifier: Ic7Ov06NKVZ8sYAPr9ueZ06Pp/5U211BeSMiBrbReL8= Subject key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C805D40733109F4A0E219DC32045357 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51661 IP: 185.160.20.0/22 IP: 2a02:1d0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5d:40:73:31:09:f4:a0:e2:19:dc:32:04:53:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:1b:11:f5:2e:db:cb:e4:a1:4b:63:c8:8f: 3b:ec:4c:0e:dd:a0:2b:b4:fb:04:e4:c0:11:c7:3b: 04:e3:9d:bb:8a:cf:34:e3:fb:0f:05:71:60:bd:cd: b4:79:02:0f:cb:fb:93:36:5d:f1:ad:06:88:1e:9b: bb:4f:90:ee:2f:67:e2:c3:9e:d3:d3:72:2b:43:6a: 05:94:8a:85:e1:11:c0:cd:ab:65:79:a7:0a:f3:74: 65:b2:66:20:81:3c:cf:ed:93:be:96:0d:62:f9:1a: 0c:ac:bb:e4:ea:ff:be:b6:ef:3e:0e:cb:b4:6d:a5: ed:00:d8:32:33:b8:18:42:ab:f7:93:30:25:f1:d9: b6:64:0a:39:5d:02:93:48:ad:a5:e2:1f:42:ce:46: e6:c6:a3:67:72:48:5e:5b:ee:5a:6c:47:c5:87:89: 6f:0a:15:87:11:f5:2e:a3:08:6b:51:e4:b2:be:d0: 1d:3a:2d:4c:a7:a0:b5:10:73:e0:c7:6a:45:d9:80: 77:7d:fb:3f:a4:d4:e1:52:69:fc:96:ce:51:56:d9: 4f:20:44:cd:f4:00:1c:ae:a8:69:84:40:d6:1c:b9: 57:b1:7d:ae:ff:ea:24:0e:b4:d1:ef:91:19:d1:33: 3b:67:07:be:9e:fc:e0:a1:d4:96:66:f2:59:69:38: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.20.0/22 IPv6: 2a02:1d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51661 Signature Algorithm: sha256WithRSAEncryption 23:ce:2d:3f:e2:6f:5c:90:74:a0:d4:6d:26:e6:31:d2:44:4f: dc:ce:09:27:89:7c:46:d9:9c:4c:03:a4:62:00:62:8a:e3:c9: 31:43:fb:0e:b7:97:39:6e:4c:5b:b6:0a:12:8d:92:78:e7:49: 18:d8:31:df:f5:5d:ab:2e:43:d0:f9:c3:56:fa:60:21:a6:50: 4f:a5:85:25:ab:52:0e:d8:22:34:7e:7f:de:be:56:b6:2e:7b: 49:3e:e6:5b:e0:0b:52:d4:67:34:a3:1b:4d:73:f2:29:9d:33: f1:3f:6d:31:79:1e:2e:4e:aa:4a:5a:17:3c:93:75:bc:2b:64: 0c:81:d1:05:58:5a:a6:00:20:4d:4a:e9:76:88:67:16:49:96: 6a:f4:e7:cc:ef:e3:4e:fa:5d:c7:38:3c:73:f1:9a:29:ad:2d: 88:55:80:1a:38:33:e9:dd:c5:e9:e9:22:8d:2d:48:1c:2e:33: 7a:c6:92:fb:2e:ed:76:4d:93:99:f1:99:0a:8e:a0:1a:9d:c7: d9:b4:a1:70:0c:25:8f:5e:d9:d8:6c:44:f2:62:6c:4a:89:6a: a9:bb:d1:aa:35:06:e6:95:cb:e3:e5:bc:5a:30:10:ed:0d:7e: 2e:ab:db:58:5a:e3:dc:36:92:de:d2:3e:b3:1f:ec:f5:a7:19: da:3c:2d:d4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gF1AczEJ9KDiGdwyBFNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODc0NzRjZWI4NWFmMzExMjJlZGU1ODZkNGQ2NWIwZjViNGQ5N2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVMbEfUu28vkoUtjyI877EwO3aAr tPsE5MARxzsE4527is804/sPBXFgvc20eQIPy/uTNl3xrQaIHpu7T5DuL2fiw57T 03IrQ2oFlIqF4RHAzatleacK83RlsmYggTzP7ZO+lg1i+RoMrLvk6v++tu8+Dsu0 baXtANgyM7gYQqv3kzAl8dm2ZAo5XQKTSK2l4h9CzkbmxqNnckheW+5abEfFh4lv ChWHEfUuowhrUeSyvtAdOi1Mp6C1EHPgx2pF2YB3ffs/pNThUmn8ls5RVtlPIETN 9AAcrqhphEDWHLlXsX2u/+okDrTR75EZ0TM7Zwe+nvzgodSWZvJZaTiShwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMh0dM64WvMRIu3lhtTWWw9bTZfwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzUyZDc1 Yy1lOGEwLTRlYzgtYjAwZi0wMzU4NjUyM2IxMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNTJkNzVj LWU4YTAtNGVjOC1iMDBmLTAzNTg2NTIzYjEzMy8xL3lIUjB6cmhhOHhFaTdlV0cx TlpiRDF0TmxfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaAUMA0EAgACMAcDBQAqAgHQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJzTANBgkqhkiG9w0BAQsFAAOCAQEAI84tP+JvXJB0 oNRtJuYx0kRP3M4JJ4l8RtmcTAOkYgBiiuPJMUP7DreXOW5MW7YKEo2SeOdJGNgx 3/Vdqy5D0PnDVvpgIaZQT6WFJatSDtgiNH5/3r5Wti57ST7mW+ALUtRnNKMbTXPy KZ0z8T9tMXkeLk6qSloXPJN1vCtkDIHRBVhapgAgTUrpdohnFkmWavTnzO/jTvpd xzg8c/GaKa0tiFWAGjgz6d3F6ekijS1IHC4zesaS+y7tdk2TmfGZCo6gGp3H2bSh cAwlj17Z2GxE8mJsSolqqbvRqjUG5pXL4+W8WjAQ7Q1+LqvbWFrj3DaS3tI+sx/s 9acZ2jwt1A== -----END CERTIFICATE-----Generated at Tue Jan 6 02:56:31 2026 by rpki-client