This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer File: yqgF26w2R0m5sRVZCrbvD5cM29g.cer (raw, json) Hash identifier: pdFv/AizbeSwV6pu2jGu3w+WBCwcLVt2AFIY4O0rlhs= Subject key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5415BDB4AE26ECE66FFF1F2D7EC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft caRepository: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ Notify URL: https://chloe.sobornost.net/rpki/news.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15562 IP: 45.138.228.0/22 IP: 2001:67c:208c::/48 IP: 2a0e:b240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:15:bd:b4:ae:26:ec:e6:6f:ff:1f:2d:7e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:37:54:f1:00:1f:36:76:21:08:7a:39:6b: 82:18:34:33:3c:c1:0f:2b:f4:5a:9c:96:e5:de:b1: b4:82:a7:7b:40:19:ef:bc:91:c5:64:77:db:b7:33: 3d:df:2e:84:cf:c9:33:d3:75:3e:84:53:9b:ed:a7: 04:32:26:e9:a9:3d:96:61:dd:ad:86:c2:de:a4:3a: d7:4c:f5:95:82:48:d5:0e:91:c5:7b:6a:04:74:cb: 2e:9a:1a:1f:e1:74:af:c0:6d:16:de:ab:a2:17:b6: a1:93:e3:8a:65:d1:e2:b3:93:a2:b7:24:e8:f6:92: cd:82:0d:bf:ca:1c:a7:cb:a7:36:39:b3:a0:dd:21: a1:6f:a6:85:c7:7a:be:19:af:b4:d8:f7:cd:e1:71: 07:c2:03:45:dd:5b:b7:52:dc:b6:75:3f:e5:36:70: b0:a6:2b:73:15:dc:15:77:12:a4:71:33:93:6e:e0: 48:3c:36:0b:b2:dc:4e:45:a5:27:a5:06:9b:e2:64: 26:6c:08:11:ff:a2:c4:25:00:83:bf:13:f0:94:0a: 22:c2:46:75:34:0b:51:f1:f0:8f:39:35:73:ef:2f: f1:56:7a:eb:56:53:64:4c:a1:e4:1d:1d:f1:d8:35: 6c:81:ff:6d:c8:9f:bd:22:91:ed:4d:67:22:bb:c4: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.228.0/22 IPv6: 2001:67c:208c::/48 2a0e:b240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15562 Signature Algorithm: sha256WithRSAEncryption a6:a7:3d:8a:fb:7d:81:be:d8:eb:ff:e9:a2:6e:a2:76:d3:38: bd:96:de:3b:3e:71:74:37:db:66:a6:37:0b:9b:14:32:22:e0: db:64:ae:e8:6a:1f:f3:27:16:ae:79:91:64:0d:45:8d:88:87: 31:fb:f9:7b:2e:80:ba:80:c8:e1:85:ba:39:ae:6e:21:34:2a: 05:cd:af:a2:4b:38:4d:4d:5a:42:14:a5:e1:21:7a:71:13:dc: f6:3d:00:49:7c:3d:52:8e:88:40:94:b9:c8:1e:9a:89:30:75: 9a:d3:c8:cf:92:07:88:25:65:ab:39:73:57:ff:a4:ed:e6:50: 94:99:88:77:c4:9d:8c:20:25:ab:74:e0:59:21:71:d8:23:d9: 12:b3:9b:44:50:88:e7:30:2f:2e:17:d4:d9:20:7e:91:5d:bd: 05:97:c9:03:ee:b7:11:61:bd:a9:6d:46:24:f0:81:3c:b3:c6: 73:ea:cc:fe:d8:7e:93:bf:f8:b7:5b:75:d6:7c:f5:8d:d6:65: 03:ac:10:d8:4a:07:91:ff:83:ec:2b:14:6d:7a:c4:cf:f3:3f: 4a:52:45:ce:65:e2:56:9f:4a:14:37:0c:ec:e1:6b:4f:9f:5e: 17:2d:25:63:4f:83:e0:de:7e:32:1a:7a:30:6a:b7:8c:a7:0e: fa:9a:68:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgISAZt261QVvbSuJuzmb/8fLX7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWE4MDVkYmFjMzY0NzQ5YjliMTE1NTkwYWI2ZWYwZjk3MGNkYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0s3VPEAHzZ2IQh6OWuCGDQzPMEP K/RanJbl3rG0gqd7QBnvvJHFZHfbtzM93y6Ez8kz03U+hFOb7acEMibpqT2WYd2t hsLepDrXTPWVgkjVDpHFe2oEdMsumhof4XSvwG0W3quiF7ahk+OKZdHis5OityTo 9pLNgg2/yhyny6c2ObOg3SGhb6aFx3q+Ga+02PfN4XEHwgNF3Vu3Uty2dT/lNnCw pitzFdwVdxKkcTOTbuBIPDYLstxORaUnpQab4mQmbAgR/6LEJQCDvxPwlAoiwkZ1 NAtR8fCPOTVz7y/xVnrrVlNkTKHkHR3x2DVsgf9tyJ+9IpHtTWciu8RSzQIDAQAB o4ICfTCCAnkwHQYDVR0OBBYEFMqoBdusNkdJubEVWQq27w+XDNvYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgeoGCCsGAQUFBwELBIHdMIHaMEAGCCsGAQUFBzAFhjRyc3lu YzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9SSVBFLW5sam9ic25pamRlcnMv MF8GCCsGAQUFBzAKhlNyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9S SVBFLW5sam9ic25pamRlcnMveXFnRjI2dzJSMG01c1JWWkNyYnZENWNNMjlnLm1m dDA1BggrBgEFBQcwDYYpaHR0cHM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kv bmV3cy54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsu Y3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAm MAwEAgABMAYDBAItiuQwFgQCAAIwEAMHACABBnwgjAMFAyoOskAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICPMowDQYJKoZIhvcNAQELBQADggEBAKanPYr7fYG+2Ov/ 6aJuonbTOL2W3js+cXQ322amNwubFDIi4NtkruhqH/MnFq55kWQNRY2IhzH7+Xsu gLqAyOGFujmubiE0KgXNr6JLOE1NWkIUpeEhenET3PY9AEl8PVKOiECUucgemokw dZrTyM+SB4glZas5c1f/pO3mUJSZiHfEnYwgJat04Fkhcdgj2RKzm0RQiOcwLy4X 1NkgfpFdvQWXyQPutxFhvaltRiTwgTyzxnPqzP7YfpO/+LdbddZ89Y3WZQOsENhK B5H/g+wrFG16xM/zP0pSRc5l4lafShQ3DOzha0+fXhctJWNPg+DefjIaejBqt4yn DvqaaDo= -----END CERTIFICATE-----Generated at Sun Jan 11 19:19:11 2026 by rpki-client