This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer File: ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer (raw, json) Hash identifier: Zvdh2FfDsPWlc2fRB8BN52ourqrJ+iApFJYT0wHff84= Subject key identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CBD379446C5053A51D030244F2D4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201424 IP: 185.61.196.0/22 IP: 2a02:7c20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bd:37:94:46:c5:05:3a:51:d0:30:24:4f:2d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:5e:a8:19:99:0c:e2:36:12:f0:2d:0f:fe: 3b:6b:bf:ed:9a:ad:be:67:79:78:7a:32:ed:92:f5: ee:b2:ea:bf:1d:cc:75:2a:bb:30:ad:70:a9:0b:97: 59:b3:48:24:a7:f4:71:b0:7f:3b:32:83:7b:5a:d6: 08:c0:5a:75:aa:38:c8:18:21:bd:f0:cf:a7:eb:64: 11:24:f2:d6:fe:59:7c:13:ed:90:d8:59:77:94:ce: 8a:24:a2:29:b2:26:39:9b:d3:11:c9:a6:bb:52:c4: 9d:4b:36:33:6d:dc:7b:46:f6:02:ac:fe:fe:ba:fa: e5:ff:7e:ad:26:24:cd:0c:c5:e9:ba:b7:61:c4:20: 92:59:98:52:05:06:79:3a:17:e2:6b:b9:32:ed:c3: 49:4c:13:39:62:69:e0:c3:38:20:97:60:1c:22:6f: c9:ba:20:78:31:ad:b4:c4:c9:d4:1f:fe:bb:55:ac: d5:94:04:02:ed:68:ab:f4:2d:58:54:f5:85:69:aa: 49:8e:8b:bf:55:d5:07:b1:b8:32:db:81:8f:5c:f0: 89:eb:0c:a8:bb:5d:ca:69:3a:ba:be:3a:dd:ad:1b: ed:5c:91:58:31:e9:bc:46:3e:1e:8c:64:78:53:ad: 9d:27:3e:b2:82:43:d1:a6:2e:11:5c:ca:72:b7:1f: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.196.0/22 IPv6: 2a02:7c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201424 Signature Algorithm: sha256WithRSAEncryption 3e:e1:03:ee:31:ad:bc:3b:24:d2:08:fb:f7:3d:c8:34:f8:c6: 46:6f:83:df:e1:93:4c:10:f4:11:b2:e2:50:67:c0:54:98:54: a5:05:3a:02:f0:3f:6b:f0:f4:9e:e2:91:3f:fa:b2:f8:94:5d: 05:92:9b:01:cf:38:3e:80:6b:32:84:d2:d2:7f:fb:4d:07:79: 47:53:9a:1f:06:a4:9d:36:d6:db:ea:97:0b:74:2a:99:81:85: 81:89:01:ff:42:16:f7:ac:36:fb:db:b7:7c:05:7b:ba:ef:3e: f0:02:e2:f1:f0:01:dd:82:18:fb:2d:94:d9:0b:f2:17:b6:9a: 5e:1c:9b:cd:d5:a5:15:8e:a2:16:0c:96:89:9b:7b:59:35:c8: e6:55:74:a0:e3:fc:0f:2d:da:0f:da:ea:5b:61:29:19:67:2e: f5:cf:fa:ae:36:97:4d:a3:96:d7:a5:e3:3b:37:5b:d8:08:fc: a2:e6:db:f4:1c:b6:14:fc:85:c6:d0:63:f0:82:05:0a:6f:fa: 54:91:94:f1:75:52:54:2a:23:1a:fa:d5:da:30:e7:42:7b:37: 08:04:24:85:2e:f9:be:37:1e:6e:b2:89:69:6a:a4:1a:7f:6b: ae:ce:21:5c:fb:4f:bc:00:30:77:95:72:1c:64:a7:d4:58:60: ce:ad:85:4c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XL03lEbFBTpR0DAkTy1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTQxZmRiN2UwMTZkOTYwZWZlMjljMGI0ODk0Yjg3M2FhNGQyMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0heqBmZDOI2EvAtD/47a7/tmq2+ Z3l4ejLtkvXusuq/Hcx1KrswrXCpC5dZs0gkp/RxsH87MoN7WtYIwFp1qjjIGCG9 8M+n62QRJPLW/ll8E+2Q2Fl3lM6KJKIpsiY5m9MRyaa7UsSdSzYzbdx7RvYCrP7+ uvrl/36tJiTNDMXpurdhxCCSWZhSBQZ5Ohfia7ky7cNJTBM5Ymngwzggl2AcIm/J uiB4Ma20xMnUH/67VazVlAQC7Wir9C1YVPWFaapJjou/VdUHsbgy24GPXPCJ6wyo u13KaTq6vjrdrRvtXJFYMem8Rj4ejGR4U62dJz6ygkPRpi4RXMpytx8WMwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMpB/bfgFtlg7+KcC0iUuHOqTSHiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzAzMTA0 Ny04Yzc0LTRhZWUtYjA2NS00ODI4NjJkZTczMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMDMxMDQ3 LThjNzQtNGFlZS1iMDY1LTQ4Mjg2MmRlNzMwZS8xL3lrSDl0LUFXMldEdjRwd0xT SlM0YzZwTkllSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT3EMA0EAgACMAcDBQAqAnwgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMS0DANBgkqhkiG9w0BAQsFAAOCAQEAPuED7jGtvDsk 0gj79z3INPjGRm+D3+GTTBD0EbLiUGfAVJhUpQU6AvA/a/D0nuKRP/qy+JRdBZKb Ac84PoBrMoTS0n/7TQd5R1OaHwaknTbW2+qXC3QqmYGFgYkB/0IW96w2+9u3fAV7 uu8+8ALi8fAB3YIY+y2U2QvyF7aaXhybzdWlFY6iFgyWiZt7WTXI5lV0oOP8Dy3a D9rqW2EpGWcu9c/6rjaXTaOW16XjOzdb2Aj8oubb9By2FPyFxtBj8IIFCm/6VJGU 8XVSVCojGvrV2jDnQns3CAQkhS75vjcebrKJaWqkGn9rrs4hXPtPvAAwd5VyHGSn 1Fhgzq2FTA== -----END CERTIFICATE-----Generated at Mon Jan 12 15:59:33 2026 by rpki-client