This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer File: yZdYjBhO3XIdCQotqVwm4aKMBRE.cer (raw, json) Hash identifier: B0i2Ry35C9d2UiTCotOZnhZS/o7AXXwbY8JU4PMckXA= Subject key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E37C822693C954A2268A9ABD8C021 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211182 IP: 2001:67c:474::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:37:c8:22:69:3c:95:4a:22:68:a9:ab:d8:c0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c997588c184edd721d090a2da95c26e1a28c0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:9e:15:10:f1:fb:e4:54:34:d1:37:8e:b3: d3:7b:30:0b:71:95:eb:49:c5:9d:6d:de:95:a5:e5: f8:1e:85:6a:97:d1:54:81:3b:05:c8:c3:21:bb:21: 44:86:99:08:86:f6:14:74:10:4e:80:35:90:90:54: 0a:91:f4:d9:ac:e0:2d:8c:af:b0:74:d1:45:5b:b4: b0:bf:9a:44:04:b7:8f:ca:65:0f:66:8d:ca:ec:ac: 38:d3:8e:9c:ad:a5:61:25:8a:98:d2:eb:f8:4d:d7: c8:e8:1a:fd:df:41:b9:3c:71:d8:39:76:4c:6a:52: 8e:1e:aa:10:cb:3b:de:84:ee:a9:b4:70:86:3f:84: 53:43:a7:fb:30:a2:26:05:e7:eb:77:50:d2:00:e5: 65:2a:27:82:42:5e:27:a7:c8:74:ee:20:ed:1a:dc: a3:f1:81:cf:76:50:74:e4:6a:bd:1b:58:b1:2a:e3: 6c:e0:b1:3a:33:60:f9:e7:cd:b5:e4:bf:14:dd:57: 1a:3d:a4:bc:f5:98:61:81:f5:1f:5c:ba:0c:65:47: ad:bc:d0:e4:83:f7:87:e5:78:46:4e:16:79:c2:26: 41:d6:98:db:b3:ed:78:59:34:11:20:a4:96:ee:35: 96:b4:1d:41:65:8d:4d:dd:a0:6e:d0:b5:59:20:9c: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:474::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211182 Signature Algorithm: sha256WithRSAEncryption 68:aa:07:ab:21:79:98:d2:ae:15:a6:66:ce:c6:e5:7e:cc:9c: e8:1d:d2:79:ed:bd:e6:1c:6b:78:37:63:c9:c8:aa:60:e4:5a: 3d:ed:00:48:b7:df:35:aa:47:01:cc:0e:d8:44:98:b7:66:1a: ea:00:0f:90:0e:bd:27:10:c0:06:f4:1d:58:b5:f0:b1:36:f1: 3a:b6:84:a7:bc:94:cb:c0:f4:fb:17:05:33:13:73:14:22:45: 98:37:b0:64:e3:5f:56:ea:df:f8:ad:08:25:8c:4e:ee:f3:98: f9:e9:31:17:32:5d:75:72:d9:28:cf:98:32:bb:4d:bd:0d:b9: 36:0d:83:be:8c:a0:8d:26:0d:52:45:e5:24:82:8f:6a:69:80: 3d:7d:43:42:b5:ee:7c:c3:86:33:41:04:5d:86:d5:7b:73:6d: e3:13:93:56:23:f8:47:36:8f:52:c1:e9:e4:3f:a3:b4:32:c9: e6:95:30:43:33:f4:13:17:a3:45:f3:95:08:d4:4e:29:ad:af: 08:7e:c5:8b:77:dd:37:91:dc:8f:6b:c9:a9:17:f9:92:72:84: 0b:b2:02:ed:3a:10:4e:99:6a:e9:16:75:62:e9:a1:da:b6:45: ac:e3:4e:7e:7b:34:c9:a5:15:96:69:55:18:47:41:cf:43:02: 7f:22:91:0a -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5fjfIImk8lUoiaKmr2MAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTk3NTg4YzE4NGVkZDcyMWQwOTBhMmRhOTVjMjZlMWEyOGMwNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rCeFRDx++RUNNE3jrPTezALcZXr ScWdbd6VpeX4HoVql9FUgTsFyMMhuyFEhpkIhvYUdBBOgDWQkFQKkfTZrOAtjK+w dNFFW7Swv5pEBLePymUPZo3K7Kw4046craVhJYqY0uv4TdfI6Br930G5PHHYOXZM alKOHqoQyzvehO6ptHCGP4RTQ6f7MKImBefrd1DSAOVlKieCQl4np8h07iDtGtyj 8YHPdlB05Gq9G1ixKuNs4LE6M2D558215L8U3VcaPaS89ZhhgfUfXLoMZUetvNDk g/eH5XhGThZ5wiZB1pjbs+14WTQRIKSW7jWWtB1BZY1N3aBu0LVZIJz4mwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMmXWIwYTt1yHQkKLalcJuGijAURMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzYxY2M3 OC0wZDQwLTQwNGEtOWQxZC1hMGU5NDBkMjk5MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNjFjYzc4 LTBkNDAtNDA0YS05ZDFkLWEwZTk0MGQyOTkxZi8xL3laZFlqQmhPM1hJZENRb3Rx VndtNGFLTUJSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAR0MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM47jANBgkqhkiG9w0BAQsFAAOCAQEAaKoHqyF5mNKuFaZmzsblfsyc6B3S ee295hxreDdjyciqYORaPe0ASLffNapHAcwO2ESYt2Ya6gAPkA69JxDABvQdWLXw sTbxOraEp7yUy8D0+xcFMxNzFCJFmDewZONfVurf+K0IJYxO7vOY+ekxFzJddXLZ KM+YMrtNvQ25Ng2DvoygjSYNUkXlJIKPammAPX1DQrXufMOGM0EEXYbVe3Nt4xOT ViP4RzaPUsHp5D+jtDLJ5pUwQzP0ExejRfOVCNROKa2vCH7Fi3fdN5Hcj2vJqRf5 knKEC7IC7ToQTplq6RZ1Yumh2rZFrONOfns0yaUVlmlVGEdBz0MCfyKRCg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:35 2026 by rpki-client