This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer File: yjevCVET2t1bxRveu_CtNNbu22Q.cer (raw, json) Hash identifier: XLHw05EhBkD5/JW9RfuXCshqMGr4qzkWdXBye+vX3+0= Subject key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2B3B884897CE4D2CA0FCCC2A19778 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.114.10.0/23 IP: 2001:67c:6fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b3:b8:84:89:7c:e4:d2:ca:0f:cc:c2:a1:97:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:03:6b:2a:9e:81:6b:94:3c:50:d9:ec:a3: e1:bb:80:a3:96:db:f5:12:67:35:00:35:f0:5c:55: 61:9f:b7:f2:13:cf:65:e9:55:31:b0:d0:6d:f4:91: 3b:0e:85:fb:4a:6d:1c:f0:67:e9:db:df:58:87:77: 4e:07:e8:9b:90:01:33:c1:01:25:b7:99:62:e3:26: c8:12:db:0c:dc:f1:90:0b:8d:08:78:96:7e:cf:62: aa:6d:69:58:69:31:e4:c0:af:97:8a:39:55:a3:95: cd:04:0a:7b:41:c1:84:44:01:d9:99:a1:a2:27:3d: 99:58:24:7a:b4:bf:7e:ed:d9:2e:98:ba:fa:b1:3c: fa:4e:20:f6:32:a7:74:02:be:cb:11:b6:66:0d:ad: 20:1e:c5:63:55:84:02:c7:10:3f:cc:6a:15:a0:61: 76:96:5d:dd:b2:95:fc:7f:e8:38:e1:cf:59:ec:a6: 9e:9c:b0:a4:63:24:60:4f:ce:43:b7:3d:2d:6a:b4: d6:be:22:9e:35:d3:83:7e:c4:cc:1d:2a:d1:4b:c3: f7:36:e0:28:12:4e:b3:a9:58:9f:4b:6c:8f:98:0b: 8f:34:ba:b3:ed:fe:71:16:f9:b3:3b:c2:68:bd:d7: f9:43:57:b8:d4:09:f7:e5:f8:46:6f:66:be:12:c2: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.10.0/23 IPv6: 2001:67c:6fc::/48 Signature Algorithm: sha256WithRSAEncryption a0:d6:18:c6:17:b0:ce:8d:4d:aa:ea:c9:4d:9d:b4:de:12:c4: 6a:e9:65:66:4f:1b:1c:5c:4e:f2:25:9b:bb:3d:80:62:f1:bd: 2e:c3:e8:2a:e9:9b:3a:fe:6c:9b:82:ca:b1:28:1d:35:21:a8: ce:da:e7:6a:ea:c6:c7:93:e4:d5:75:2d:a9:03:9f:68:00:26: 80:32:cc:87:26:b3:e8:05:04:72:04:09:b1:b4:28:45:b7:40: e8:d3:bb:00:5f:b2:d2:bc:ab:62:db:23:67:00:65:9e:d5:17: ed:08:19:82:b8:eb:91:92:4b:f4:dc:40:67:57:62:73:48:6a: 14:5e:ed:8b:5b:56:0f:66:3f:a7:b1:2e:a7:eb:bc:19:8a:60: 0e:ab:6c:84:93:64:49:62:21:a0:8d:63:0b:35:c8:06:0f:2d: 88:92:50:e3:32:08:55:69:18:1b:36:d4:48:70:a5:62:f0:be: 45:f8:4c:d0:80:91:4a:a7:b0:c9:8a:97:c1:d5:a7:84:4c:7a: 0c:11:00:04:97:2f:50:1e:88:85:de:4e:2e:aa:02:95:d8:66: 98:97:08:eb:59:62:7e:70:35:f2:bb:a7:02:cd:d0:51:a3:e7: 3c:7d:7e:d7:48:09:ae:5b:92:bc:09:45:74:69:1f:92:04:1f: 42:7b:12:0a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt4orO4hIl85NLKD8zCoZd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTM3YWYwOTUxMTNkYWRkNWJjNTFiZGViYmYwYWQzNGQ2ZWVkYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtckDayqegWuUPFDZ7KPhu4Cjltv1 Emc1ADXwXFVhn7fyE89l6VUxsNBt9JE7DoX7Sm0c8Gfp299Yh3dOB+ibkAEzwQEl t5li4ybIEtsM3PGQC40IeJZ+z2KqbWlYaTHkwK+XijlVo5XNBAp7QcGERAHZmaGi Jz2ZWCR6tL9+7dkumLr6sTz6TiD2Mqd0Ar7LEbZmDa0gHsVjVYQCxxA/zGoVoGF2 ll3dspX8f+g44c9Z7KaenLCkYyRgT85Dtz0tarTWviKeNdODfsTMHSrRS8P3NuAo Ek6zqVifS2yPmAuPNLqz7f5xFvmzO8Jovdf5Q1e41An35fhGb2a+EsLNHQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2FkNmM4 My1lNWZkLTQ0MTctYmZmOS1lYjY4ZWZjNDc0OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYWQ2Yzgz LWU1ZmQtNDQxNy1iZmY5LWViNjhlZmM0NzQ4Yi8xL3lqZXZDVkVUMnQxYnhSdmV1 X0N0Tk5idTIyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw3IKMA8EAgACMAkDBwAgAQZ8BvwwDQYJKoZI hvcNAQELBQADggEBAKDWGMYXsM6NTarqyU2dtN4SxGrpZWZPGxxcTvIlm7s9gGLx vS7D6Crpmzr+bJuCyrEoHTUhqM7a52rqxseT5NV1LakDn2gAJoAyzIcms+gFBHIE CbG0KEW3QOjTuwBfstK8q2LbI2cAZZ7VF+0IGYK465GSS/TcQGdXYnNIahRe7Ytb Vg9mP6exLqfrvBmKYA6rbISTZEliIaCNYws1yAYPLYiSUOMyCFVpGBs21EhwpWLw vkX4TNCAkUqnsMmKl8HVp4RMegwRAASXL1AeiIXeTi6qApXYZpiXCOtZYn5wNfK7 pwLN0FGj5zx9ftdICa5bkrwJRXRpH5IEH0J7Ego= -----END CERTIFICATE-----Generated at Mon Jan 12 08:18:10 2026 by rpki-client