This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer File: ypAPHhHi0l0LIxatbgEmhIOayB4.cer (raw, json) Hash identifier: AqZkPMvCZFqbhtIiBY5p10Cw9RklirObB66+b6xsKxs= Subject key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37183E356C8BCE70367C3FCEF67EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203177 IP: 91.244.117.0/24 IP: 185.135.208.0/22 IP: 2a0a:6600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:71:83:e3:56:c8:bc:e7:03:67:c3:fc:ef:67:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:a6:64:4f:3a:84:6b:06:d2:f3:3e:8a:0d: ba:c3:06:2f:ea:b1:01:56:3b:fd:53:35:47:e5:c6: 5b:5a:8c:9b:f4:07:ba:a6:5b:08:24:f0:12:d4:c7: ee:39:ab:a8:e6:ed:47:d6:21:d8:64:e5:47:58:50: d5:d5:29:18:1f:bb:4d:01:b4:7a:e3:b9:ee:3f:c1: a6:a8:17:3e:36:d2:ff:eb:cf:e3:f2:dd:76:f8:9c: 44:58:52:ef:7b:00:3a:40:c8:7a:0a:7d:50:88:7c: 87:cd:98:94:0d:de:25:eb:49:f1:c5:5c:61:8b:d1: fb:3e:7b:1a:85:a4:6a:49:31:9e:f1:5c:6c:de:0c: 49:c8:94:d9:d1:e0:24:70:7c:28:4f:e9:17:29:20: 83:f8:a5:af:2c:1b:f9:41:5b:6e:1c:59:b0:03:04: 52:91:0d:21:10:3b:63:df:e1:3e:ca:76:84:3f:f9: 4c:c9:b8:62:93:83:ca:66:11:71:68:c6:0f:f6:00: 4e:8b:26:90:67:91:f5:a9:60:db:ed:f5:d5:20:44: 8d:d4:9c:22:94:68:2b:72:40:92:09:c5:94:30:73: aa:17:d2:2f:ae:67:61:66:3f:83:cc:1f:ed:a2:cb: d8:57:57:7e:9b:5c:c0:9d:c4:6a:a7:bf:77:5b:de: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.117.0/24 185.135.208.0/22 IPv6: 2a0a:6600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203177 Signature Algorithm: sha256WithRSAEncryption 69:fe:cb:b6:a1:7c:4b:b2:b3:1a:a5:86:0b:10:01:45:8a:2f: d0:e5:d9:f8:56:26:f9:5d:a5:d7:5b:53:ec:27:60:ec:9c:2d: 9b:9a:82:a3:13:62:63:e7:e1:03:03:46:fc:1c:8b:80:fa:74: f5:8e:fe:53:01:91:7a:72:a3:32:0b:5a:92:b6:65:b3:aa:12: be:e4:c5:70:a5:77:c6:8d:79:fe:e4:b2:4d:0b:e2:e3:dd:cd: 48:8f:8e:cf:b2:8b:89:a4:69:7a:e3:a6:4a:5d:62:ce:c2:49: e6:55:6a:a2:9a:b0:a1:12:54:3f:bd:65:75:7c:17:a1:8d:d4: 33:a1:df:fc:c2:2d:b9:a4:2a:17:61:96:c6:f5:39:bd:94:f1: ca:60:ea:7c:66:5f:7f:a9:9c:b3:18:89:74:9c:b9:10:a4:c2: d7:d6:59:cc:c8:59:b9:f5:04:f1:6a:c7:a2:94:c8:ca:c5:54: fb:ed:6e:55:df:6b:b8:10:f1:3f:6d:04:09:7b:e9:69:f0:b0: f8:c6:a3:a5:b5:4f:f9:1f:89:e7:e3:70:6f:61:22:cb:84:cc: c0:80:9f:c7:e3:25:40:56:d3:43:31:cc:99:49:b2:39:ea:5a: 46:e6:85:88:ab:26:6b:d9:f1:25:fe:bc:0e:f7:7f:bd:95:19: cc:af:1f:ad -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4o3GD41bIvOcDZ8P872fuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTkwMGYxZTExZTJkMjVkMGIyMzE2YWQ2ZTAxMjY4NDgzOWFjODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7amZE86hGsG0vM+ig26wwYv6rEB Vjv9UzVH5cZbWoyb9Ae6plsIJPAS1MfuOauo5u1H1iHYZOVHWFDV1SkYH7tNAbR6 47nuP8GmqBc+NtL/68/j8t12+JxEWFLvewA6QMh6Cn1QiHyHzZiUDd4l60nxxVxh i9H7PnsahaRqSTGe8Vxs3gxJyJTZ0eAkcHwoT+kXKSCD+KWvLBv5QVtuHFmwAwRS kQ0hEDtj3+E+ynaEP/lMybhik4PKZhFxaMYP9gBOiyaQZ5H1qWDb7fXVIESN1Jwi lGgrckCSCcWUMHOqF9IvrmdhZj+DzB/tosvYV1d+m1zAncRqp793W94AYQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMqQDx4R4tJdCyMWrW4BJoSDmsgeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2Y2OTY5 Yy0zYTZlLTRiZWMtOTc0Mi1lY2U4N2M2YTAzMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvZjY5Njlj LTNhNmUtNGJlYy05NzQyLWVjZTg3YzZhMDMxOC8xL3lwQVBIaEhpMGwwTEl4YXRi Z0VtaElPYXlCNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW/R1AwQCuYfQMA0EAgACMAcDBQMqCmYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZqTANBgkqhkiG9w0BAQsFAAOCAQEAaf7L tqF8S7KzGqWGCxABRYov0OXZ+FYm+V2l11tT7Cdg7Jwtm5qCoxNiY+fhAwNG/ByL gPp09Y7+UwGRenKjMgtakrZls6oSvuTFcKV3xo15/uSyTQvi493NSI+Oz7KLiaRp euOmSl1izsJJ5lVqopqwoRJUP71ldXwXoY3UM6Hf/MItuaQqF2GWxvU5vZTxymDq fGZff6mcsxiJdJy5EKTC19ZZzMhZufUE8WrHopTIysVU++1uVd9ruBDxP20ECXvp afCw+MajpbVP+R+J5+Nwb2Eiy4TMwICfx+MlQFbTQzHMmUmyOepaRuaFiKsma9nx Jf68Dvd/vZUZzK8frQ== -----END CERTIFICATE-----Generated at Thu Jan 1 15:55:59 2026 by rpki-client