This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer File: ygb_JG30EWQ9neNmmBgRLzNiKDs.cer (raw, json) Hash identifier: Jl2cMeWuqG/onlyvVKtJhCLEetC3t4ofiIHyxgUAiOI= Subject key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B361E3AF07CF45AD1C6DAED351194A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208907 IP: 2001:678:994::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1e:3a:f0:7c:f4:5a:d1:c6:da:ed:35:11:94:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca06ff246df411643d9de3669818112f3362283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:99:c2:88:a2:a2:85:61:59:06:6d:1f:1b: 0c:e9:e8:d4:b4:b5:84:4c:07:18:6d:f6:25:b6:5f: 28:d9:d0:73:c3:5b:81:8b:03:cf:5f:7e:fd:b5:41: e5:98:69:13:7b:5e:f8:50:68:b6:7a:b7:1b:23:15: 60:45:c8:45:c6:66:bc:ea:b3:ba:01:14:72:dc:d8: b4:62:65:ad:3f:62:a9:ee:a2:d0:29:19:f8:0b:b9: 41:3e:6f:11:a5:99:ea:c6:1e:87:2c:fe:31:f1:f8: 0b:6e:39:04:90:9c:45:37:18:ef:9c:99:c5:39:de: 55:2d:7f:59:df:1a:d5:ec:cf:bb:b4:c6:14:a2:4f: d2:30:0e:e2:18:af:61:47:2e:fc:16:8a:de:18:cb: 2d:97:32:da:99:b3:d8:28:c8:80:be:a9:06:2e:85: 92:7f:28:e2:da:0b:ca:e0:dd:e4:9e:97:71:5c:ff: 70:fa:58:ff:0b:dc:5c:d5:2d:56:1f:11:03:6e:b9: 85:f1:d1:a6:6e:4f:3b:52:30:9b:86:57:43:e8:b8: 0f:f3:d6:f8:90:0a:57:ab:63:a7:66:95:d2:5b:0a: 17:79:81:e9:3d:59:c8:01:77:86:14:46:ec:6b:3a: e5:cd:98:d1:b0:ac:f0:20:de:70:5c:23:d1:77:d1: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:994::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208907 Signature Algorithm: sha256WithRSAEncryption 7b:75:31:7a:35:c2:c0:3d:65:91:08:42:2e:0d:4a:4f:bd:a4: 4e:4f:82:1e:8e:15:91:ab:73:13:1a:7a:e9:56:a2:d9:cf:47: b1:cf:eb:f1:ee:23:52:b9:69:a7:97:a6:0b:ae:bb:9e:04:fd: c2:8f:93:08:54:44:ac:2d:2e:1d:9d:dc:b1:06:02:d2:bc:79: 5f:76:4a:f1:44:12:0f:c5:10:bc:ca:7e:53:08:f2:bc:76:3d: de:70:c9:1e:c0:d8:5e:d0:24:b6:43:83:ee:e5:cd:d9:d1:ec: f1:bc:7a:52:a5:e5:fd:b1:4e:0d:6f:3a:37:cc:f3:fc:5e:28: 0c:29:d1:19:f3:4b:63:43:3e:42:88:38:06:6e:f5:36:ae:cb: 30:dd:1a:76:1b:c6:75:40:4f:1a:53:21:da:5f:34:c8:fb:c2: 9d:78:33:a0:1b:e7:f8:57:26:f9:8f:13:99:59:08:d9:96:bd: 1b:a9:62:b3:02:93:56:a8:2a:cb:a3:33:ca:be:d2:dc:59:fc: c0:ab:da:da:2b:7b:0c:d3:cf:e8:1e:9f:73:49:e2:2b:a7:b8: 85:26:8b:5e:3b:dd:fe:f7:65:88:79:a7:c5:d2:83:3c:e9:a5: 4c:cf:34:a5:04:27:3d:32:e0:13:3d:e3:69:b4:39:21:4e:57: 46:f5:09:2d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7Nh468Hz0WtHG2u01EZSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTA2ZmYyNDZkZjQxMTY0M2Q5ZGUzNjY5ODE4MTEyZjMzNjIyODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13KZwoiiooVhWQZtHxsM6ejUtLWE TAcYbfYltl8o2dBzw1uBiwPPX379tUHlmGkTe174UGi2ercbIxVgRchFxma86rO6 ARRy3Ni0YmWtP2Kp7qLQKRn4C7lBPm8RpZnqxh6HLP4x8fgLbjkEkJxFNxjvnJnF Od5VLX9Z3xrV7M+7tMYUok/SMA7iGK9hRy78ForeGMstlzLambPYKMiAvqkGLoWS fyji2gvK4N3knpdxXP9w+lj/C9xc1S1WHxEDbrmF8dGmbk87UjCbhldD6LgP89b4 kApXq2OnZpXSWwoXeYHpPVnIAXeGFEbsazrlzZjRsKzwIN5wXCPRd9GjnwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMoG/yRt9BFkPZ3jZpgYES8zYig7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzgwYTgw Ni0wOTcwLTQ5YWMtODI3Ny0xYzQzZDRjMjdkNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvODBhODA2 LTA5NzAtNDlhYy04Mjc3LTFjNDNkNGMyN2Q2Yy8xL3lnYl9KRzMwRVdROW5lTm1t QmdSTHpOaUtEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAmUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMwCzANBgkqhkiG9w0BAQsFAAOCAQEAe3UxejXCwD1lkQhCLg1KT72kTk+C Ho4VkatzExp66Vai2c9Hsc/r8e4jUrlpp5emC667ngT9wo+TCFRErC0uHZ3csQYC 0rx5X3ZK8UQSD8UQvMp+UwjyvHY93nDJHsDYXtAktkOD7uXN2dHs8bx6UqXl/bFO DW86N8zz/F4oDCnRGfNLY0M+Qog4Bm71Nq7LMN0adhvGdUBPGlMh2l80yPvCnXgz oBvn+Fcm+Y8TmVkI2Za9G6liswKTVqgqy6Mzyr7S3Fn8wKva2it7DNPP6B6fc0ni K6e4hSaLXjvd/vdliHmnxdKDPOmlTM80pQQnPTLgEz3jabQ5IU5XRvUJLQ== -----END CERTIFICATE-----Generated at Fri Jan 9 07:46:01 2026 by rpki-client